This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft File: LPYTYxWlLVJHEkt882mq-4MSIn4.mft (raw, json) Hash identifier: J8WmK+PhOxqPzm2V3hEUxEp+c3ZPHxaypM8MyTu6bQE= Subject key identifier: AB:58:67:A9:5A:98:99:7F:C8:DE:D5:59:BE:CA:F4:E0:69:CE:77:05 Authority key identifier: 2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E Certificate issuer: /CN=2cf6136315a52d5247124b7cf369aafb8312227e Certificate serial: 019B2EF9BBF4881C61C72FB8E69F666F569D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft Manifest number: 0D86 Signing time: Thu 18 Dec 2025 01:01:16 +0000 Manifest this update: Thu 18 Dec 2025 01:01:16 +0000 Manifest next update: Fri 19 Dec 2025 01:01:16 +0000 Files and hashes: 1: 1M3AfoR3SjK7DM2DxOYGfWEdfR0.roa (hash: c30cU3XYlBMk54Snq026J8BAqHs32RLWA65xX74RwkQ=) 2: LPYTYxWlLVJHEkt882mq-4MSIn4.crl (hash: boqiOQ7G1GFgPSnyiQuTiFuUaN7Ux9G+xE1CdQ5E8Tg=) 3: LkZhQmX_urnaV3IsKglfn8ZcN3Q.roa (hash: v8mOmwcN05BKABZj3FxE0md/hgvb7wAQAm8sJBSEt0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:bb:f4:88:1c:61:c7:2f:b8:e6:9f:66:6f:56:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cf6136315a52d5247124b7cf369aafb8312227e Validity Not Before: Dec 18 01:01:16 2025 GMT Not After : Dec 19 01:01:16 2025 GMT Subject: CN=ab5867a95a98997fc8ded559becaf4e069ce7705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:0d:53:98:62:96:ed:00:19:de:a3:0b:06: 27:d2:0b:34:e5:00:ca:23:47:63:d5:f9:ba:41:c5: 2d:92:05:9f:c0:fc:26:02:54:45:b4:80:f9:5a:61: 2a:20:fd:6a:54:81:b6:67:53:c6:07:55:bc:af:30: 06:87:c6:32:fc:ac:7a:cc:01:88:73:db:ce:a8:06: 95:2e:b0:e3:3e:a9:d7:9f:71:8a:70:54:46:0b:d6: e2:88:6f:31:cb:10:df:99:e8:be:fa:fe:e6:36:da: 71:fa:7a:cf:f3:d7:60:74:c9:72:4f:8b:ab:e2:76: de:8e:f0:7f:e6:3f:bd:ab:a0:4c:36:49:6f:97:6b: 43:11:5a:2d:e0:e5:49:69:6e:d9:99:b8:13:97:89: cf:e2:9d:2a:d0:81:45:b3:c3:74:84:49:a8:39:4d: e7:1d:eb:5a:63:30:f2:ab:c1:ba:81:92:a6:8b:13: 41:96:79:db:3e:39:c3:7a:bc:4c:1a:48:fe:ff:80: 27:5c:f5:70:90:7b:c6:8a:8e:8b:b7:0e:4e:62:fe: b9:c4:a1:76:cb:73:9f:48:2c:f8:a8:78:e6:31:4e: 8c:9b:63:f7:db:9c:71:c7:84:8d:54:3a:ba:ef:49: a9:1f:c6:84:eb:51:29:9f:6e:86:7a:bb:eb:53:10: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:58:67:A9:5A:98:99:7F:C8:DE:D5:59:BE:CA:F4:E0:69:CE:77:05 X509v3 Authority Key Identifier: keyid:2C:F6:13:63:15:A5:2D:52:47:12:4B:7C:F3:69:AA:FB:83:12:22:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPYTYxWlLVJHEkt882mq-4MSIn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ca2213-e5a1-4ad2-8a22-768d3fb08e70/1/LPYTYxWlLVJHEkt882mq-4MSIn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:50:54:ca:39:99:32:fe:a4:e1:e9:93:a4:16:1b:74:f0:0b: 52:90:1c:0f:f9:f0:79:d9:3b:5f:0a:85:c0:11:dc:e6:8b:db: 1e:e0:d5:f3:b1:02:9d:70:2d:e1:f0:90:cb:db:54:7b:c2:2f: 37:0a:da:24:f1:50:43:4e:a7:7f:30:f1:9d:7f:e6:2a:b6:e2: 38:77:48:28:28:4b:08:ff:5c:69:64:89:d7:88:13:7c:4d:f2: 63:e2:66:02:05:c1:84:69:5b:af:02:71:c3:fb:56:13:ba:ac: d8:55:3c:5c:b3:e8:cc:49:dc:74:ec:f9:f7:13:95:9d:8f:81: 37:0d:9c:17:0d:90:4c:19:35:89:82:e6:58:35:ba:ef:85:66: 01:08:25:73:53:1c:d1:33:76:b6:12:1f:2a:8d:32:42:8e:fd: 1c:d1:ae:e1:c6:97:e9:84:7a:53:2f:5b:df:8f:c1:46:c0:84: dd:88:4d:9d:61:d1:ac:5c:bd:6d:fd:b9:36:a1:d2:40:1a:cc: 33:da:b7:b4:6a:77:42:50:9c:8a:e3:e9:06:d6:88:82:2a:ee: 45:56:39:81:8e:b4:ab:9a:f9:86:b2:b5:26:d2:ec:d1:08:f9: fc:96:dd:d5:0c:0c:a0:0b:3a:55:c1:f9:1b:f8:38:b8:72:25: eb:bf:6d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bv0iBxhxy+45p9mb1adMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZjYxMzYzMTVhNTJkNTI0NzEyNGI3Y2YzNjlhYWZiODMx MjIyN2UwHhcNMjUxMjE4MDEwMTE2WhcNMjUxMjE5MDEwMTE2WjAzMTEwLwYDVQQD EyhhYjU4NjdhOTVhOTg5OTdmYzhkZWQ1NTliZWNhZjRlMDY5Y2U3NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR4NU5hilu0AGd6jCwYn0gs05QDK I0dj1fm6QcUtkgWfwPwmAlRFtID5WmEqIP1qVIG2Z1PGB1W8rzAGh8Yy/Kx6zAGI c9vOqAaVLrDjPqnXn3GKcFRGC9biiG8xyxDfmei++v7mNtpx+nrP89dgdMlyT4ur 4nbejvB/5j+9q6BMNklvl2tDEVot4OVJaW7ZmbgTl4nP4p0q0IFFs8N0hEmoOU3n HetaYzDyq8G6gZKmixNBlnnbPjnDerxMGkj+/4AnXPVwkHvGio6Ltw5OYv65xKF2 y3OfSCz4qHjmMU6Mm2P325xxx4SNVDq670mpH8aE61Epn26GervrUxAJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtYZ6lamJl/yN7VWb7K9OBpzncFMB8GA1UdIwQY MBaAFCz2E2MVpS1SRxJLfPNpqvuDEiJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjIt NzY4ZDNmYjA4ZTcwLzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9jYTIyMTMtZTVhMS00YWQyLThhMjItNzY4ZDNmYjA4ZTcw LzEvTFBZVFl4V2xMVkpIRWt0ODgybXEtNE1TSW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlBUyjmZ Mv6k4emTpBYbdPALUpAcD/nwedk7XwqFwBHc5ovbHuDV87ECnXAt4fCQy9tUe8Iv NwraJPFQQ06nfzDxnX/mKrbiOHdIKChLCP9caWSJ14gTfE3yY+JmAgXBhGlbrwJx w/tWE7qs2FU8XLPozEncdOz59xOVnY+BNw2cFw2QTBk1iYLmWDW674VmAQglc1Mc 0TN2thIfKo0yQo79HNGu4caX6YR6Uy9b34/BRsCE3YhNnWHRrFy9bf25NqHSQBrM M9q3tGp3QlCciuPpBtaIgiruRVY5gY60q5r5hrK1JtLs0Qj5/Jbd1QwMoAs6VcH5 G/g4uHIl679tQw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:47:40 2025 by rpki-client