This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json) Hash identifier: HY1rep6dhKtqy43L7zyqWsN7uCC0Aium7wc8lNvqI1I= Subject key identifier: DF:A9:5E:2B:7F:28:60:6A:5A:DE:F7:57:84:42:EB:41:79:56:3C:7C Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38 Certificate serial: 019AF12E0B3B123514C2C554FDD869C2F162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft Manifest number: 0D32 Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=) 2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: Vqa3RRsE3nr9fFLaGu+3wpueG9vOEuY7atxwS5SnU4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0b:3b:12:35:14:c2:c5:54:fd:d8:69:c2:f1:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=dfa95e2b7f28606a5adef7578442eb4179563c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:f5:a7:cd:17:48:a9:eb:a3:7b:0c:0b:0f: 47:ce:c0:68:03:c6:16:dd:94:34:f5:94:6b:08:1f: 4f:77:bf:dd:d2:5e:54:69:19:01:a6:be:87:92:ba: 2c:19:23:f2:af:6d:ef:7c:7a:7e:e0:81:e5:66:04: 7c:a6:6c:00:53:80:30:61:fe:b8:92:70:6a:f6:4a: 28:37:72:08:cb:34:b1:b5:ff:57:97:5c:5f:f0:69: 9b:42:1d:60:5c:87:23:34:9b:f9:67:65:0b:a0:71: c9:7c:11:fa:86:57:ef:81:97:43:84:2d:05:fe:cc: 1a:a3:a0:1f:d9:e0:16:fb:99:7e:fd:34:58:cc:8e: d4:1c:6b:49:f2:a0:f2:6a:75:f8:71:84:d8:d8:19: 15:ae:99:fd:36:92:9c:c9:d4:f8:6f:d4:38:9b:7c: 5d:7a:c8:d5:4f:03:9a:1b:4a:ee:94:0f:7e:db:7e: 1b:90:05:0f:6a:10:e5:a7:9f:91:18:af:e2:52:d7: 56:65:91:de:34:e2:22:4e:09:5e:31:bc:50:3b:fa: 0e:a3:58:3e:fc:9a:21:49:23:f7:1b:ea:9a:5a:3d: 3f:42:c4:82:77:43:88:c9:9c:b4:f6:02:65:06:88: cd:b8:c1:3d:f1:1c:e3:10:fe:4f:cc:85:a4:27:db: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A9:5E:2B:7F:28:60:6A:5A:DE:F7:57:84:42:EB:41:79:56:3C:7C X509v3 Authority Key Identifier: keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:78:ef:55:13:73:cc:54:16:95:ee:7d:64:37:19:c2:08:f4: cc:aa:d5:fe:84:50:b0:0a:02:70:07:70:dd:44:74:57:5f:7b: fa:79:aa:2f:da:a9:78:0b:e4:29:6d:19:b2:f0:44:86:ec:39: 6c:2d:2d:9b:ce:bd:ad:f0:c8:d5:2e:00:c3:e3:3e:3d:1b:b4: 7a:2d:10:0a:94:36:79:6e:34:8e:82:93:e4:bb:c5:53:fa:c0: a1:b7:42:d1:7f:01:a5:89:39:e9:6e:a6:50:f4:14:0b:fc:06: 81:91:9a:4d:b0:5a:39:fa:0d:3f:99:76:3f:5d:af:af:e3:54: 92:ed:eb:ea:16:0c:f1:0a:fb:b7:95:5a:66:47:66:b6:05:6f: 26:9f:aa:02:72:5b:df:08:27:ac:52:36:05:7a:50:ef:ce:c7: 17:e1:8c:69:13:e0:99:c8:2a:21:61:cc:1e:76:7e:a9:eb:74: 27:d6:4e:b8:9e:41:6e:6e:38:7c:1c:84:9c:ba:9a:9f:eb:30: 85:98:b4:44:5f:11:98:f5:4d:74:05:66:c2:83:15:bb:21:eb: 2d:f8:ba:47:3a:4b:4d:40:59:79:40:58:5f:ed:69:3f:fa:57: 46:a2:02:0a:53:9f:dd:3c:5a:b5:7e:98:23:c2:32:0e:62:b3: 30:2c:da:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgs7EjUUwsVU/dhpwvFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MmMzM2FlZDhlZmIyNjlkMzc0NDgxM2QyOGM1MzYwOTJl N2NmMzgwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhkZmE5NWUyYjdmMjg2MDZhNWFkZWY3NTc4NDQyZWI0MTc5NTYzYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DX1p80XSKnro3sMCw9HzsBoA8YW 3ZQ09ZRrCB9Pd7/d0l5UaRkBpr6HkrosGSPyr23vfHp+4IHlZgR8pmwAU4AwYf64 knBq9kooN3IIyzSxtf9Xl1xf8GmbQh1gXIcjNJv5Z2ULoHHJfBH6hlfvgZdDhC0F /swao6Af2eAW+5l+/TRYzI7UHGtJ8qDyanX4cYTY2BkVrpn9NpKcydT4b9Q4m3xd esjVTwOaG0rulA9+234bkAUPahDlp5+RGK/iUtdWZZHeNOIiTgleMbxQO/oOo1g+ /JohSSP3G+qaWj0/QsSCd0OIyZy09gJlBojNuME98RzjEP5PzIWkJ9uwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+pXit/KGBqWt73V4RC60F5Vjx8MB8GA1UdIwQY MBaAFJcsM67Y77Jp03RIE9KMU2CS5884MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2Qt ZDI1MGU0NWIxNjIwLzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2QtZDI1MGU0NWIxNjIw LzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHjvVRNz zFQWle59ZDcZwgj0zKrV/oRQsAoCcAdw3UR0V197+nmqL9qpeAvkKW0ZsvBEhuw5 bC0tm869rfDI1S4Aw+M+PRu0ei0QCpQ2eW40joKT5LvFU/rAobdC0X8BpYk56W6m UPQUC/wGgZGaTbBaOfoNP5l2P12vr+NUku3r6hYM8Qr7t5VaZkdmtgVvJp+qAnJb 3wgnrFI2BXpQ787HF+GMaRPgmcgqIWHMHnZ+qet0J9ZOuJ5Bbm44fByEnLqan+sw hZi0RF8RmPVNdAVmwoMVuyHrLfi6RzpLTUBZeUBYX+1pP/pXRqICClOf3TxatX6Y I8IyDmKzMCzaHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:08 2025 by rpki-client