This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json) Hash identifier: Eov4mHh2+01dPob8GPpGrGnAR/lCYuK1S6ZWaPZCQYA= Subject key identifier: 9D:D4:C1:B7:B1:13:19:51:29:96:C1:36:D3:69:23:28:0E:69:4E:17 Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019B30E7AB24415B677742FF1DD67FD92BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft Manifest number: 0689 Signing time: Thu 18 Dec 2025 10:00:47 +0000 Manifest this update: Thu 18 Dec 2025 10:00:47 +0000 Manifest next update: Fri 19 Dec 2025 10:00:47 +0000 Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: 4WGM9B1A71cOQvBGcSFVy/f0s5lb0i/XtJHAZpimeBc=) 2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=) 3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:ab:24:41:5b:67:77:42:ff:1d:d6:7f:d9:2b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Dec 18 10:00:47 2025 GMT Not After : Dec 19 10:00:47 2025 GMT Subject: CN=9dd4c1b7b11319512996c136d36923280e694e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:49:21:e3:14:da:63:11:ee:94:33:47:6b: 16:c6:bb:45:9a:44:62:94:99:dc:34:58:a9:40:c7: f5:30:11:1e:1f:00:d3:69:0f:48:f7:25:b3:b3:44: eb:4f:78:f2:aa:9d:b6:68:23:8b:55:3e:b6:7d:7d: 94:8c:17:96:72:5c:30:94:67:c5:f8:aa:0d:cc:77: a7:54:00:94:a9:32:93:b8:6b:0a:2a:bb:7e:12:58: 0c:65:48:18:00:6c:39:06:49:16:e4:d3:5e:72:a5: 6b:09:64:d3:f4:7a:9f:ab:6b:ff:89:ec:00:ae:48: cd:59:a6:5e:94:26:88:21:a5:4e:0d:be:a3:d2:d3: 16:21:7b:33:5d:51:71:fb:98:15:95:bc:68:43:d1: 55:13:3a:6f:9d:a8:6a:bb:c2:f9:96:05:3e:bf:06: 29:ba:b9:51:60:87:e4:49:34:96:70:ae:7d:cd:af: 12:6d:d5:30:b6:fc:9e:c1:e2:61:f0:65:4f:67:d1: 21:fb:6b:45:62:d3:83:46:7e:01:71:6b:26:6e:66: 66:58:1e:b7:1b:f2:bc:34:4a:d1:43:2a:4b:4a:bb: 62:f6:9d:d3:f8:63:cf:4d:f5:22:2c:46:6c:6e:f0: 18:61:9e:9d:58:5b:58:70:00:ed:3e:c4:12:41:a1: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:C1:B7:B1:13:19:51:29:96:C1:36:D3:69:23:28:0E:69:4E:17 X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:07:a9:15:09:b8:8d:e4:dc:7f:d9:2c:28:fe:ff:fc:4b:db: 14:39:ef:0f:40:2b:fa:5d:3c:27:95:3f:ea:4a:d6:7f:e9:75: 00:53:e7:2f:c6:7e:46:ee:4b:c9:31:72:5f:df:20:64:38:c0: 9e:12:80:63:3c:88:41:44:bf:dd:0f:3c:22:5a:8a:41:d5:bf: ee:17:fc:a9:1f:2d:44:a6:9f:0a:df:7b:33:4e:2f:0d:3d:c6: 18:71:b0:18:2b:5c:cb:d4:4d:2e:86:3a:8a:b6:52:40:86:26: 85:28:a2:93:09:b9:de:c0:7a:d3:50:42:8e:25:0f:f2:a7:8d: 4b:3e:2a:7b:c5:bf:0f:aa:b4:7c:e4:7e:f8:5a:25:9e:d7:d3: c4:34:95:bd:60:ec:b0:c4:c8:97:e2:26:3d:43:35:21:99:ec: 81:51:b0:bb:28:88:71:7a:22:d3:08:bc:c5:22:15:81:55:0d: 37:2b:37:dd:54:28:0e:a0:08:f3:3f:59:8a:18:fa:08:aa:38: 62:1d:ae:69:7c:af:51:c7:88:ac:6a:fc:cd:06:09:e6:05:36: 79:19:3f:d5:1b:26:76:6a:ce:ff:e5:1d:34:59:9c:38:02:21: e4:45:32:40:6d:56:21:fb:e7:21:b2:15:b2:e9:a4:89:b6:e7: 2b:1f:5e:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw56skQVtnd0L/HdZ/2SumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjUxMjE4MTAwMDQ3WhcNMjUxMjE5MTAwMDQ3WjAzMTEwLwYDVQQD Eyg5ZGQ0YzFiN2IxMTMxOTUxMjk5NmMxMzZkMzY5MjMyODBlNjk0ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPFJIeMU2mMR7pQzR2sWxrtFmkRi lJncNFipQMf1MBEeHwDTaQ9I9yWzs0TrT3jyqp22aCOLVT62fX2UjBeWclwwlGfF +KoNzHenVACUqTKTuGsKKrt+ElgMZUgYAGw5BkkW5NNecqVrCWTT9Hqfq2v/iewA rkjNWaZelCaIIaVODb6j0tMWIXszXVFx+5gVlbxoQ9FVEzpvnahqu8L5lgU+vwYp urlRYIfkSTSWcK59za8SbdUwtvyeweJh8GVPZ9Eh+2tFYtODRn4BcWsmbmZmWB63 G/K8NErRQypLSrti9p3T+GPPTfUiLEZsbvAYYZ6dWFtYcADtPsQSQaEP4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3UwbexExlRKZbBNtNpIygOaU4XMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwepFQm4 jeTcf9ksKP7//EvbFDnvD0Ar+l08J5U/6krWf+l1AFPnL8Z+Ru5LyTFyX98gZDjA nhKAYzyIQUS/3Q88IlqKQdW/7hf8qR8tRKafCt97M04vDT3GGHGwGCtcy9RNLoY6 irZSQIYmhSiikwm53sB601BCjiUP8qeNSz4qe8W/D6q0fOR++FolntfTxDSVvWDs sMTIl+ImPUM1IZnsgVGwuyiIcXoi0wi8xSIVgVUNNys33VQoDqAI8z9Zihj6CKo4 Yh2uaXyvUceIrGr8zQYJ5gU2eRk/1RsmdmrO/+UdNFmcOAIh5EUyQG1WIfvnIbIV sumkibbnKx9eDw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:41 2025 by rpki-client