This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json) Hash identifier: ysTa4oVX6oi6z8yZUY1antDSHym61q1nIkFoAzXwRxs= Subject key identifier: D9:60:C4:62:0F:DA:2F:D5:A6:AF:59:0D:C8:19:8D:A6:DB:D5:46:AD Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019AF2AD52C39B770BA648A6A5DE48E399BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=) 2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=) 3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=) 4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: 6YrXnhCLsEWsiSEsaxyFQls5Hj1YHjai3mQjkl/rFHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:52:c3:9b:77:0b:a6:48:a6:a5:de:48:e3:99:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=d960c4620fda2fd5a6af590dc8198da6dbd546ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:ca:8f:04:6e:42:63:c9:22:e3:7c:77:7d: 7f:3f:cd:19:22:09:68:70:ae:f0:ee:48:38:58:1f: 69:66:64:20:20:77:22:84:97:27:5a:9d:1a:fe:a7: 79:9d:b0:30:58:f7:bd:46:0d:79:4c:ab:a8:b4:f8: af:b7:53:44:30:5b:ca:cb:1a:70:5c:d6:3b:e3:bd: 85:0c:34:27:67:46:97:71:96:cd:cb:dc:54:1d:8c: a7:95:eb:28:82:49:fd:60:2e:bd:79:37:bb:95:96: f1:9c:42:e9:6d:11:d9:cc:d2:26:4c:9c:b4:41:b8: 69:7f:9f:7d:f7:14:27:6d:c4:52:3b:24:a9:11:d1: f2:b8:16:25:6c:56:97:bf:5f:f0:92:cf:d1:7b:87: 88:db:b4:f8:9a:a2:27:d0:db:ec:66:d0:d3:ea:c7: 00:76:66:f6:95:fd:28:c2:06:f0:2e:30:18:95:e9: 28:df:95:40:4a:7f:6d:5f:66:bb:a5:b7:e5:da:d1: 06:bf:d4:32:7e:0f:12:75:0c:9e:3b:d6:9c:26:8b: 49:47:49:70:46:46:bc:e8:5b:2b:4d:70:11:96:f9: f5:b3:17:aa:ec:85:67:93:b6:03:29:1d:e6:63:15: 72:2c:9a:56:95:1e:70:79:db:d8:cd:5f:2b:30:ea: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:60:C4:62:0F:DA:2F:D5:A6:AF:59:0D:C8:19:8D:A6:DB:D5:46:AD X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f6:d8:95:94:63:4b:ca:46:bb:f1:27:ad:e6:b9:9c:68:0e: f3:8e:17:96:d9:10:b7:ea:50:dc:ff:c0:08:4d:ae:f1:ce:2a: 53:44:6f:99:cc:c1:45:7c:5e:8e:cb:e4:14:0d:5b:bd:3d:fd: 32:82:e5:8a:ea:0a:8d:83:61:8c:6d:63:6c:25:12:74:1d:db: f1:f5:a4:12:95:ec:93:78:69:0e:38:92:24:7a:61:b5:e9:2e: 90:13:d6:52:48:a3:38:e4:25:7c:a0:68:99:2a:37:0d:5c:9f: 16:69:24:f1:00:77:aa:5a:0c:c7:25:f0:80:e5:e3:e4:5d:68: af:2f:1b:24:82:73:13:62:6d:a2:51:35:45:c2:bb:a6:30:a8: 4f:40:ed:4b:3d:8e:b5:55:50:21:63:db:d8:5c:02:46:4c:2a: ad:a5:05:da:c2:1c:bf:0a:db:7b:0e:08:02:1c:54:b7:10:f2: c7:ed:db:e2:ef:ad:36:08:60:28:f3:3d:44:06:c2:5a:1d:9e: 8a:e7:b0:12:27:94:ea:b5:57:6a:74:88:ae:5b:26:b8:e6:41: 60:a9:d3:fb:2c:c0:e7:58:07:8c:24:f1:e9:ed:6e:80:6a:7f: db:c6:02:99:15:56:74:ab:87:e2:07:01:84:f7:0f:69:ad:9e: cf:7b:92:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVLDm3cLpkimpd5I45m7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhkOTYwYzQ2MjBmZGEyZmQ1YTZhZjU5MGRjODE5OGRhNmRiZDU0NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6zKjwRuQmPJIuN8d31/P80ZIglo cK7w7kg4WB9pZmQgIHcihJcnWp0a/qd5nbAwWPe9Rg15TKuotPivt1NEMFvKyxpw XNY7472FDDQnZ0aXcZbNy9xUHYynlesogkn9YC69eTe7lZbxnELpbRHZzNImTJy0 Qbhpf5999xQnbcRSOySpEdHyuBYlbFaXv1/wks/Re4eI27T4mqIn0NvsZtDT6scA dmb2lf0owgbwLjAYleko35VASn9tX2a7pbfl2tEGv9Qyfg8SdQyeO9acJotJR0lw Rka86FsrTXARlvn1sxeq7IVnk7YDKR3mYxVyLJpWlR5wedvYzV8rMOpzbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlgxGIP2i/Vpq9ZDcgZjabb1UatMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfbYlZRj S8pGu/Enrea5nGgO844XltkQt+pQ3P/ACE2u8c4qU0RvmczBRXxejsvkFA1bvT39 MoLliuoKjYNhjG1jbCUSdB3b8fWkEpXsk3hpDjiSJHphtekukBPWUkijOOQlfKBo mSo3DVyfFmkk8QB3qloMxyXwgOXj5F1ory8bJIJzE2JtolE1RcK7pjCoT0DtSz2O tVVQIWPb2FwCRkwqraUF2sIcvwrbew4IAhxUtxDyx+3b4u+tNghgKPM9RAbCWh2e iuewEieU6rVXanSIrlsmuOZBYKnT+yzA51gHjCTx6e1ugGp/28YCmRVWdKuH4gcB hPcPaa2ez3uSQg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:08 2025 by rpki-client