This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft File: LYFCGstXhBVGXs3sRYHoleu_vH8.mft (raw, json) Hash identifier: MKMaj1ZqNrDvqiDebqZlNgTEB8vee4BYUMwCZQlw5no= Subject key identifier: C3:F5:11:9F:48:D5:5F:71:9D:97:CE:E3:AB:B5:50:71:28:0D:11:6A Authority key identifier: 2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F Certificate issuer: /CN=2d81421acb578415465ecdec4581e895ebbfbc7f Certificate serial: 019AF1D1968C3D8C618736D5A1E539BEB353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft Manifest number: 01BF Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: 2RLPKPvDSs3i2HR8_eugi8jwWnc.roa (hash: wcYNpPvYweifi8qy+TpJpPxYZ1uEH1ELvZbmF4K8Vuw=) 2: LYFCGstXhBVGXs3sRYHoleu_vH8.crl (hash: xXuGbPdutzLEnkrg6LfQb6gLkv1BMWZYFn27mQ7BY14=) 3: urOt64IcWjkGwHZxkqOCPUOEjR4.roa (hash: Rkv7UWJXHLiOXNWaX5iz/7GalanqXJANSGjIZFx+Xgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:96:8c:3d:8c:61:87:36:d5:a1:e5:39:be:b3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d81421acb578415465ecdec4581e895ebbfbc7f Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=c3f5119f48d55f719d97cee3abb55071280d116a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:da:18:e2:25:fc:57:82:9b:0b:e6:b8:e7:fb: 7f:e9:1e:a8:96:db:1a:f7:c0:fb:63:04:12:ed:90: 43:6c:e2:eb:06:ae:4a:32:3a:01:8e:0e:87:52:01: 05:99:b7:af:77:80:d3:31:5b:8b:e9:bb:ce:16:aa: 67:10:40:7c:6e:da:0f:cd:e3:4e:c0:a9:87:c6:54: b1:e0:17:8f:96:f3:ad:05:a5:87:22:c7:94:bf:95: 57:07:b0:7a:e5:03:70:27:70:87:68:37:17:2a:07: b7:36:55:73:63:f0:01:13:ea:a0:7e:13:c4:5d:51: 7e:bc:fe:4d:ac:80:99:d0:b6:69:3e:c6:77:8b:13: c7:cd:f6:8d:b9:67:23:f4:9c:73:25:0b:1a:e9:b8: 7e:01:86:3c:19:fd:eb:f3:05:d6:42:91:8b:89:06: 7e:c8:87:1a:c3:82:ee:4a:6f:01:de:26:db:d6:42: 41:5e:6b:c9:aa:b7:e5:a0:97:be:ee:0a:81:ac:a6: ea:47:0c:c8:2e:ce:18:78:5a:c8:c6:a1:1a:16:ed: 25:67:ac:97:90:6f:f8:d0:25:58:a0:9d:ff:1c:70: b0:60:2a:be:6e:17:7f:56:f5:bc:7f:dc:87:6d:85: 5e:48:da:ca:57:d4:12:78:1d:21:9d:1b:86:77:58: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F5:11:9F:48:D5:5F:71:9D:97:CE:E3:AB:B5:50:71:28:0D:11:6A X509v3 Authority Key Identifier: keyid:2D:81:42:1A:CB:57:84:15:46:5E:CD:EC:45:81:E8:95:EB:BF:BC:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYFCGstXhBVGXs3sRYHoleu_vH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3b1d5a-fcc6-4ae3-a2c8-984eec3f7a3e/1/LYFCGstXhBVGXs3sRYHoleu_vH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d1:85:c1:b0:17:e1:00:9f:65:71:72:58:96:d2:a2:ca:f7: 2b:2d:29:50:bc:ac:75:ea:af:16:09:8b:9a:79:a1:2d:95:cc: 80:f3:ac:21:da:96:95:7b:89:d4:3e:99:bb:04:ee:15:73:f2: cd:f8:8f:55:c3:44:38:9b:65:f1:60:0e:54:ca:0b:b2:3f:86: 1a:46:5b:f1:48:a3:da:b0:02:55:b0:e3:7b:36:04:20:80:b7: d0:a5:e5:ea:1c:99:25:09:51:7b:ee:26:2e:45:34:3d:d9:9b: e4:66:1a:00:6e:8c:3d:4e:ae:20:de:d7:42:f6:92:08:e7:ed: 83:a4:db:d4:0b:2f:58:1d:83:74:5b:71:f1:cd:c1:11:20:8b: 15:e9:42:44:62:ea:92:f6:72:a3:f2:2c:32:c5:6b:0f:aa:78: 5b:86:36:4b:5a:59:20:41:6e:d9:36:55:38:0a:2d:64:ef:d0: 5e:5a:02:1d:26:9c:2c:c5:01:ee:07:8c:94:e0:36:38:a4:7b: d7:4d:48:03:b3:07:34:3e:ff:a5:3f:03:a5:2c:8e:02:57:45: 01:80:6c:aa:2a:d4:cd:cf:de:8a:2b:c6:cc:f2:61:e4:7b:03: d5:8d:71:25:90:ef:98:6d:42:4f:7f:41:c0:f2:cf:61:9e:33: 29:0b:73:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZaMPYxhhzbVoeU5vrNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODE0MjFhY2I1Nzg0MTU0NjVlY2RlYzQ1ODFlODk1ZWJi ZmJjN2YwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EyhjM2Y1MTE5ZjQ4ZDU1ZjcxOWQ5N2NlZTNhYmI1NTA3MTI4MGQxMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA89oY4iX8V4KbC+a45/t/6R6oltsa 98D7YwQS7ZBDbOLrBq5KMjoBjg6HUgEFmbevd4DTMVuL6bvOFqpnEEB8btoPzeNO wKmHxlSx4BePlvOtBaWHIseUv5VXB7B65QNwJ3CHaDcXKge3NlVzY/ABE+qgfhPE XVF+vP5NrICZ0LZpPsZ3ixPHzfaNuWcj9JxzJQsa6bh+AYY8Gf3r8wXWQpGLiQZ+ yIcaw4LuSm8B3ibb1kJBXmvJqrfloJe+7gqBrKbqRwzILs4YeFrIxqEaFu0lZ6yX kG/40CVYoJ3/HHCwYCq+bhd/VvW8f9yHbYVeSNrKV9QSeB0hnRuGd1jG3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMP1EZ9I1V9xnZfO46u1UHEoDRFqMB8GA1UdIwQY MBaAFC2BQhrLV4QVRl7N7EWB6JXrv7x/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgt OTg0ZWVjM2Y3YTNlLzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYjFkNWEtZmNjNi00YWUzLWEyYzgtOTg0ZWVjM2Y3YTNl LzEvTFlGQ0dzdFhoQlZHWHMzc1JZSG9sZXVfdkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAstGFwbAX 4QCfZXFyWJbSosr3Ky0pULysdeqvFgmLmnmhLZXMgPOsIdqWlXuJ1D6ZuwTuFXPy zfiPVcNEOJtl8WAOVMoLsj+GGkZb8Uij2rACVbDjezYEIIC30KXl6hyZJQlRe+4m LkU0Pdmb5GYaAG6MPU6uIN7XQvaSCOftg6Tb1AsvWB2DdFtx8c3BESCLFelCRGLq kvZyo/IsMsVrD6p4W4Y2S1pZIEFu2TZVOAotZO/QXloCHSacLMUB7geMlOA2OKR7 101IA7MHND7/pT8DpSyOAldFAYBsqirUzc/eiivGzPJh5HsD1Y1xJZDvmG1CT39B wPLPYZ4zKQtzqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:39 2025 by rpki-client