This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json) Hash identifier: HtXpgA1LvMw+uPbNjloa12K0UC+0ZNeUI1bmD831Erw= Subject key identifier: 32:5C:C7:5F:0D:BA:BF:2F:A2:71:B8:F8:FF:F6:21:EC:42:D1:D9:C0 Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019AF31CEC2884AAC247787415BA5F47B35D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft Manifest number: 0669 Signing time: Sat 06 Dec 2025 10:02:30 +0000 Manifest this update: Sat 06 Dec 2025 10:02:30 +0000 Manifest next update: Sun 07 Dec 2025 10:02:30 +0000 Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: nhUm+XEOb6fG0jZejHVSrBEiwqAkZcdESWgDR9OFVV4=) 2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=) 3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ec:28:84:aa:c2:47:78:74:15:ba:5f:47:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Dec 6 10:02:30 2025 GMT Not After : Dec 7 10:02:30 2025 GMT Subject: CN=325cc75f0dbabf2fa271b8f8fff621ec42d1d9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a3:5c:28:ad:3a:28:22:d1:d0:e2:b9:f5:4c: a5:df:59:35:e4:f3:81:eb:8f:52:d5:cb:7c:27:53: db:d9:55:cd:a3:f6:7a:60:d8:df:2b:fb:f9:11:bf: ef:4f:40:72:2f:1c:80:f2:6c:af:51:30:3f:b4:f7: cb:ca:f5:25:02:d5:07:38:60:66:80:15:50:d3:93: be:1f:39:55:14:61:ca:2c:1d:02:d5:50:1d:92:69: 99:08:70:f0:a1:71:d2:38:84:03:83:9f:a5:d9:d1: 47:aa:82:86:54:d9:32:62:2e:2e:19:c2:cc:db:52: 7b:81:f6:53:e9:7c:32:e1:5e:75:a0:c7:54:39:40: 50:7e:75:27:be:da:3f:69:33:b3:a5:f6:4e:47:6e: d0:89:d4:d8:40:22:e4:cd:15:fe:58:d0:a0:c5:20: 90:45:59:80:8d:0d:7d:27:24:fd:4a:a7:16:d2:50: 6d:08:8e:03:b7:c3:37:86:33:a6:13:51:99:e5:b9: bf:a5:81:79:4f:1e:b2:62:1e:2c:bc:b2:ec:da:8a: 31:b0:d3:12:23:dc:2f:65:f6:fd:46:47:40:b5:bc: 05:ae:28:a4:0e:63:af:bf:6f:42:6d:13:b9:98:5e: bb:8b:12:48:da:26:c3:f5:f8:21:73:45:08:20:26: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5C:C7:5F:0D:BA:BF:2F:A2:71:B8:F8:FF:F6:21:EC:42:D1:D9:C0 X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a7:0d:61:0b:43:28:ff:0c:92:8c:fb:9c:ed:82:15:a7:36: ab:70:56:7a:09:d9:f8:82:40:20:ba:0b:c9:e1:94:c7:cf:ea: d4:c0:61:80:1b:38:de:2c:8a:a3:30:0f:c5:21:6f:ab:84:04: 3d:54:f5:23:cf:5b:07:ba:67:de:b4:52:80:4a:b1:b0:3e:f1: d7:22:f1:c7:a0:db:68:e7:c7:ba:36:06:d5:55:f5:d9:97:cf: e6:14:41:a7:42:6a:f3:a7:65:74:a0:4d:00:28:e2:4f:4f:b0: 57:67:3a:97:e1:5e:7e:1a:a3:08:44:33:b9:bb:4e:cd:fd:87: 3f:93:36:44:4e:a3:18:27:94:d7:ce:26:ad:ff:93:a0:38:bf: 3e:35:22:7e:8a:fe:8e:58:a9:0f:a7:a8:6e:25:88:bb:85:bf: ec:9c:18:83:2f:11:30:03:df:58:78:ef:31:0f:ab:7a:39:42: 86:65:c1:e1:24:87:b8:f4:a4:c3:ee:45:20:23:58:da:7d:2a: 50:d3:46:99:df:e1:7e:09:54:c1:88:52:57:77:09:42:60:e2: 70:fe:84:cb:75:d7:71:1f:1e:64:a3:4f:41:4c:8b:e9:43:a2: e6:10:97:b7:4c:60:20:7b:3b:12:69:21:ea:74:1f:48:be:f7: 86:8e:47:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOwohKrCR3h0FbpfR7NdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjUxMjA2MTAwMjMwWhcNMjUxMjA3MTAwMjMwWjAzMTEwLwYDVQQD EygzMjVjYzc1ZjBkYmFiZjJmYTI3MWI4ZjhmZmY2MjFlYzQyZDFkOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqNcKK06KCLR0OK59Uyl31k15POB 649S1ct8J1Pb2VXNo/Z6YNjfK/v5Eb/vT0ByLxyA8myvUTA/tPfLyvUlAtUHOGBm gBVQ05O+HzlVFGHKLB0C1VAdkmmZCHDwoXHSOIQDg5+l2dFHqoKGVNkyYi4uGcLM 21J7gfZT6Xwy4V51oMdUOUBQfnUnvto/aTOzpfZOR27QidTYQCLkzRX+WNCgxSCQ RVmAjQ19JyT9SqcW0lBtCI4Dt8M3hjOmE1GZ5bm/pYF5Tx6yYh4svLLs2ooxsNMS I9wvZfb9RkdAtbwFriikDmOvv29CbRO5mF67ixJI2ibD9fghc0UIICZ1pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJcx18Nur8vonG4+P/2IexC0dnAMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKacNYQtD KP8Mkoz7nO2CFac2q3BWegnZ+IJAILoLyeGUx8/q1MBhgBs43iyKozAPxSFvq4QE PVT1I89bB7pn3rRSgEqxsD7x1yLxx6DbaOfHujYG1VX12ZfP5hRBp0Jq86dldKBN ACjiT0+wV2c6l+FefhqjCEQzubtOzf2HP5M2RE6jGCeU184mrf+ToDi/PjUifor+ jlipD6eobiWIu4W/7JwYgy8RMAPfWHjvMQ+rejlChmXB4SSHuPSkw+5FICNY2n0q UNNGmd/hfglUwYhSV3cJQmDicP6Ey3XXcR8eZKNPQUyL6UOi5hCXt0xgIHs7Emkh 6nQfSL73ho5HvA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:00:39 2025 by rpki-client