This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json) Hash identifier: 1lEuvCzHg7jokF2jow33IVOeUX0Zcgw2LrkfqO37Ixk= Subject key identifier: 70:41:42:D5:7F:C4:58:0D:A6:68:93:29:AD:FA:76:E9:3D:30:B5:F4 Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d Certificate serial: 019B4DE03F1A241CA19BEE1C5342555E20C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 01:01:40 +0000 Manifest this update: Wed 24 Dec 2025 01:01:40 +0000 Manifest next update: Thu 25 Dec 2025 01:01:40 +0000 Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=) 2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=) 3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: YTiHc3LQZ6OR4AiFNY9PhRBwbGrIupirDuzQqT/O/kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:3f:1a:24:1c:a1:9b:ee:1c:53:42:55:5e:20:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585c19915455835457413ef222a7d375b29901d Validity Not Before: Dec 24 01:01:40 2025 GMT Not After : Dec 25 01:01:40 2025 GMT Subject: CN=704142d57fc4580da6689329adfa76e93d30b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:70:9a:ff:b6:2c:4b:80:30:b7:92:68:ae: e9:2b:4e:64:d7:21:a4:c3:f8:5a:c7:af:35:d4:86: a4:c3:21:d7:5d:28:87:98:18:02:9b:3a:0a:47:34: 95:ee:12:ed:9d:e1:c0:98:86:d1:2e:43:5b:be:ce: 31:c6:02:0d:20:5c:38:e5:bc:49:43:29:f7:ab:71: 17:21:50:81:2b:c6:2e:7b:c4:5c:31:cb:bc:6f:28: 14:ac:74:22:2e:c2:75:85:8f:c9:29:66:2a:4c:5b: d7:66:6b:a7:83:57:cf:de:ed:c1:56:66:b8:11:a4: 9f:80:bc:62:49:96:50:48:cd:5e:61:c4:77:83:5b: 1b:14:9e:47:23:19:a5:ee:41:d7:a7:ff:d5:53:e9: e5:c6:96:fa:01:a8:36:65:35:2b:62:b6:e8:9f:8f: 75:89:c4:20:de:d9:d2:ad:5b:b7:bf:1f:f6:32:5f: 6d:65:5d:f0:37:c2:0a:50:9a:56:6c:df:0c:6c:27: 6f:5d:23:2c:62:73:ec:8d:33:e5:ac:cb:12:bb:a3: 6d:cc:9a:4a:f7:c5:ad:60:b0:4b:a9:f1:0c:00:dd: 27:bb:0e:39:0a:bb:98:75:4e:b7:d9:2d:ca:34:83: 2f:f8:4a:f7:55:f0:62:6f:81:32:5e:a1:1c:9a:16: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:41:42:D5:7F:C4:58:0D:A6:68:93:29:AD:FA:76:E9:3D:30:B5:F4 X509v3 Authority Key Identifier: keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:99:b9:7d:a5:72:c9:2c:59:63:bf:6e:c7:6c:d5:1a:63:2f: 4e:b6:3d:47:bc:7d:44:e8:d1:8c:86:71:19:63:17:fe:12:e5: b8:e2:2a:78:fa:87:93:83:83:32:9b:14:bc:d7:ad:60:13:88: 58:08:2e:7b:b6:90:cc:0a:3e:3d:ed:5d:ee:9b:00:e9:ad:01: 0c:03:69:65:94:78:98:f0:c1:5c:6d:06:75:38:c6:a1:ec:a7: ad:97:f0:93:11:37:42:d8:dc:82:e1:52:86:7a:a1:ad:83:cb: cd:80:63:e3:1a:89:74:d7:1e:7b:af:1b:00:83:31:b8:0e:56: 94:ad:d7:da:61:a1:15:d5:7d:83:f5:54:01:e3:e3:fa:09:39: ba:47:31:9b:2d:14:8c:12:8a:8d:61:bb:0f:3e:93:c7:17:0b: 2a:e5:76:6e:67:c0:17:74:7c:58:6c:15:0b:0c:2f:e3:08:5b: 43:ef:75:5f:88:c5:84:7c:78:50:68:bf:38:cd:5c:3a:d6:4e: b1:49:da:8c:c9:1c:cb:be:d4:e8:64:d5:18:14:37:87:89:09: 85:79:bd:57:51:6e:b5:04:78:0c:a9:dd:a2:c7:6e:d3:3b:72: 9c:84:72:3f:13:3e:6a:2c:e5:a5:9e:7e:7e:a1:09:ad:06:41: 88:3b:31:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4D8aJByhm+4cU0JVXiDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy OTkwMWQwHhcNMjUxMjI0MDEwMTQwWhcNMjUxMjI1MDEwMTQwWjAzMTEwLwYDVQQD Eyg3MDQxNDJkNTdmYzQ1ODBkYTY2ODkzMjlhZGZhNzZlOTNkMzBiNWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArspwmv+2LEuAMLeSaK7pK05k1yGk w/hax6811IakwyHXXSiHmBgCmzoKRzSV7hLtneHAmIbRLkNbvs4xxgINIFw45bxJ Qyn3q3EXIVCBK8Yue8RcMcu8bygUrHQiLsJ1hY/JKWYqTFvXZmung1fP3u3BVma4 EaSfgLxiSZZQSM1eYcR3g1sbFJ5HIxml7kHXp//VU+nlxpb6Aag2ZTUrYrbon491 icQg3tnSrVu3vx/2Ml9tZV3wN8IKUJpWbN8MbCdvXSMsYnPsjTPlrMsSu6NtzJpK 98WtYLBLqfEMAN0nuw45CruYdU632S3KNIMv+Er3VfBib4EyXqEcmhZLAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBBQtV/xFgNpmiTKa36duk9MLX0MB8GA1UdIwQY MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt NzcyOTE4ZmZmNTQ0LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0 LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJm5faVy ySxZY79ux2zVGmMvTrY9R7x9ROjRjIZxGWMX/hLluOIqePqHk4ODMpsUvNetYBOI WAgue7aQzAo+Pe1d7psA6a0BDANpZZR4mPDBXG0GdTjGoeynrZfwkxE3QtjcguFS hnqhrYPLzYBj4xqJdNcee68bAIMxuA5WlK3X2mGhFdV9g/VUAePj+gk5ukcxmy0U jBKKjWG7Dz6TxxcLKuV2bmfAF3R8WGwVCwwv4whbQ+91X4jFhHx4UGi/OM1cOtZO sUnajMkcy77U6GTVGBQ3h4kJhXm9V1FutQR4DKndosdu0ztynIRyPxM+aizlpZ5+ fqEJrQZBiDsxCg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:47:49 2025 by rpki-client