This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft File: LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft (raw, json) Hash identifier: xuY8GTW8wuU9JkTL7TkwWI7W9DrVcapALEoDTakrWo8= Subject key identifier: 5C:E4:40:4F:82:44:DE:71:0C:E0:E6:0F:1F:B9:E5:BB:F0:BB:61:50 Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61 Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961 Certificate serial: 019AF0514916D73FC7F9FBA6C01F060C66A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft Manifest number: 1506 Signing time: Fri 05 Dec 2025 21:00:50 +0000 Manifest this update: Fri 05 Dec 2025 21:00:50 +0000 Manifest next update: Sat 06 Dec 2025 21:00:50 +0000 Files and hashes: 1: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (hash: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=) 2: LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl (hash: LnKe9+NBIRqxjKJiTWzuRu62vLCHBFv9/fz0wJjgeEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:49:16:d7:3f:c7:f9:fb:a6:c0:1f:06:0c:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961 Validity Not Before: Dec 5 21:00:50 2025 GMT Not After : Dec 6 21:00:50 2025 GMT Subject: CN=5ce4404f8244de710ce0e60f1fb9e5bbf0bb6150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:09:42:55:2a:cc:45:5a:0c:f7:f7:d1:b5: aa:01:47:78:76:7a:14:31:aa:97:db:4d:96:aa:91: 5b:76:dc:7f:05:6e:c5:41:f8:30:fe:4f:38:e3:f1: bf:ca:49:3a:a8:bc:a6:9c:10:15:d2:e5:d0:06:3a: 27:04:ab:34:77:32:66:82:d8:8a:a4:c6:64:c4:90: ff:d5:88:6c:5f:f3:c6:44:76:38:08:66:13:48:bc: 9f:83:5d:a8:b0:ee:34:da:99:e9:72:63:5e:74:74: 34:7e:f6:2e:f7:5d:e6:22:fb:78:a2:d6:44:b4:8e: 93:fd:32:2a:8e:b8:4a:7a:74:19:a9:59:19:16:97: 5c:03:9c:49:58:5f:c5:dc:8e:36:2f:c5:63:1c:b7: db:77:a7:f8:ed:59:df:a4:91:e6:60:3a:2d:d9:d6: 25:c5:e8:4a:63:9b:71:69:93:bc:27:5a:c7:8f:97: 3a:d7:1a:5f:a0:a5:aa:a2:28:d8:e4:75:bc:b6:d0: 58:a3:00:03:f9:13:f9:33:d7:b9:2d:31:79:d3:0a: 97:c2:cd:0f:46:d6:3b:29:b4:38:74:18:85:de:65: 97:eb:fc:d6:40:34:eb:76:73:97:20:8f:ea:0f:4d: e9:9c:9f:85:46:e7:d7:a2:96:0e:9f:42:63:67:64: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E4:40:4F:82:44:DE:71:0C:E0:E6:0F:1F:B9:E5:BB:F0:BB:61:50 X509v3 Authority Key Identifier: keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:43:29:1a:73:61:f2:9e:8f:b0:a7:8b:00:ee:23:f7:8d:11: de:d9:66:56:73:e9:2d:03:49:39:7c:f4:57:f9:00:f7:97:59: 8e:a8:e3:4a:ba:cc:f5:e6:9e:35:3e:68:04:fe:51:62:85:36: 2f:a5:28:26:b3:ae:04:f1:9c:19:22:2e:2b:5a:bd:eb:3f:1e: 72:08:68:0f:3a:e7:cf:07:0c:fa:8b:77:40:0f:5c:5c:1f:84: c1:db:d9:81:12:56:29:39:db:5e:8d:b1:08:45:72:bd:03:77: 1b:ed:ae:68:d2:e5:d1:a3:60:54:fe:8e:8f:4c:52:1c:a4:39: dc:d8:e7:1c:d4:34:12:da:70:1a:76:7c:cd:9d:54:9b:da:f4: da:a9:38:71:07:5e:59:88:1e:6b:ae:5b:0f:58:1c:46:74:6f: b8:63:29:a6:69:29:e9:71:71:0b:8f:34:d3:4b:90:cf:70:f9: 9c:82:d8:33:d6:49:89:f3:b3:2a:e2:66:1b:4f:27:e1:ce:5a: 1e:40:a3:14:93:65:e4:da:ad:54:f6:d4:c2:31:ea:3e:a4:51: 47:99:11:9a:09:6e:0a:52:d1:62:d4:06:43:45:bd:cb:a5:4c: a6:3c:0d:03:f6:08:20:4d:8c:60:40:90:75:97:85:36:8c:e7: 58:b1:9e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUUkW1z/H+fumwB8GDGagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjA4NTQ1Y2E3MWM1NDk3ZjlhNDQ3OTVhMWMwY2E4YzRk YmE5NjEwHhcNMjUxMjA1MjEwMDUwWhcNMjUxMjA2MjEwMDUwWjAzMTEwLwYDVQQD Eyg1Y2U0NDA0ZjgyNDRkZTcxMGNlMGU2MGYxZmI5ZTViYmYwYmI2MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrMJQlUqzEVaDPf30bWqAUd4dnoU MaqX202WqpFbdtx/BW7FQfgw/k844/G/ykk6qLymnBAV0uXQBjonBKs0dzJmgtiK pMZkxJD/1YhsX/PGRHY4CGYTSLyfg12osO402pnpcmNedHQ0fvYu913mIvt4otZE tI6T/TIqjrhKenQZqVkZFpdcA5xJWF/F3I42L8VjHLfbd6f47VnfpJHmYDot2dYl xehKY5txaZO8J1rHj5c61xpfoKWqoijY5HW8ttBYowAD+RP5M9e5LTF50wqXws0P RtY7KbQ4dBiF3mWX6/zWQDTrdnOXII/qD03pnJ+FRufXopYOn0JjZ2RLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzkQE+CRN5xDODmDx+55bvwu2FQMB8GA1UdIwQY MBaAFC8ghUXKccVJf5pEeVocDKjE26lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMt ZGE4NWRlMTY2ODNmLzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMtZGE4NWRlMTY2ODNm LzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkMpGnNh 8p6PsKeLAO4j940R3tlmVnPpLQNJOXz0V/kA95dZjqjjSrrM9eaeNT5oBP5RYoU2 L6UoJrOuBPGcGSIuK1q96z8ecghoDzrnzwcM+ot3QA9cXB+EwdvZgRJWKTnbXo2x CEVyvQN3G+2uaNLl0aNgVP6Oj0xSHKQ53NjnHNQ0EtpwGnZ8zZ1Um9r02qk4cQde WYgea65bD1gcRnRvuGMppmkp6XFxC48000uQz3D5nILYM9ZJifOzKuJmG08n4c5a HkCjFJNl5NqtVPbUwjHqPqRRR5kRmgluClLRYtQGQ0W9y6VMpjwNA/YIIE2MYECQ dZeFNoznWLGe/g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:10 2025 by rpki-client