This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json) Hash identifier: lvMpUdiZaRu6ijGCtySd9eBgMghW/7Sc2yG4M7xkZBc= Subject key identifier: 12:DA:E2:0D:0E:79:43:4F:FC:18:C2:40:96:40:B2:02:17:E3:F5:CA Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Certificate serial: 019B6B0E12184B5D401A80F75697D6755F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft Manifest number: 14E2 Signing time: Mon 29 Dec 2025 17:00:42 +0000 Manifest this update: Mon 29 Dec 2025 17:00:42 +0000 Manifest next update: Tue 30 Dec 2025 17:00:42 +0000 Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 3OCjTGZcv4oT0wgjS4RV1yw7iNy6b+jvOFYaJOgW+x0=) 2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0e:12:18:4b:5d:40:1a:80:f7:56:97:d6:75:5f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Validity Not Before: Dec 29 17:00:42 2025 GMT Not After : Dec 30 17:00:42 2025 GMT Subject: CN=12dae20d0e79434ffc18c2409640b20217e3f5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:06:0b:bd:a5:f0:2e:40:05:24:fe:aa:7e: ad:f8:5e:fe:14:f0:4f:ae:3b:1c:55:94:53:9b:cd: f4:de:96:6f:79:df:73:22:bd:81:d7:63:8d:86:03: 38:9b:d1:b3:ae:43:1b:18:09:73:fd:01:2e:3f:84: 01:d0:80:2c:34:c4:8e:a4:ca:c7:c3:41:d3:f3:cd: 2e:a5:58:53:1b:ea:46:47:e9:7f:b0:9e:d0:e1:c4: 24:5f:48:d2:ff:9b:99:9b:d4:2f:35:40:e3:f0:05: 83:26:c1:54:3c:cb:0d:ae:9f:74:4e:2e:45:14:f5: 3a:03:40:4f:93:d3:94:dd:c7:59:92:f7:8d:b4:5b: 40:bd:df:2a:24:83:b5:f9:ce:a1:77:d1:43:54:18: 34:ec:d2:38:d7:15:8b:61:f2:c1:90:1c:67:ad:c3: 00:3d:a3:62:e8:a6:a9:06:b3:20:20:46:97:67:9f: ca:b1:01:f4:27:76:00:d9:23:28:15:88:23:f1:82: 28:40:44:0e:a2:ed:f2:ae:4a:ee:57:07:06:f8:4a: 85:de:94:f8:6e:ef:38:9e:23:a5:35:8f:3b:87:6d: c3:75:3a:3e:48:60:38:0e:4b:a5:cf:2c:6b:8b:52: f8:29:41:da:8b:8a:04:2c:ba:64:df:29:0d:90:af: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:E2:0D:0E:79:43:4F:FC:18:C2:40:96:40:B2:02:17:E3:F5:CA X509v3 Authority Key Identifier: keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1e:5b:8a:58:94:d1:62:dc:a1:9b:50:9c:8e:03:02:02:9a: 1c:65:d1:a6:47:5f:ae:45:5e:86:3e:64:07:34:b7:b6:40:bd: c3:0f:74:c6:e0:21:49:cf:4d:d4:d0:c5:ae:63:99:d7:23:d6: 30:91:30:3d:c4:fb:09:8f:c4:ae:5d:7b:f9:7c:45:4a:f1:45: 45:73:dd:f9:44:e4:2c:17:24:7b:55:d2:3e:84:27:a4:20:30: f8:67:4f:4a:aa:7e:3c:f0:e6:e7:02:ba:de:34:df:65:19:6a: f0:4c:f7:f6:43:f3:ed:79:f7:81:51:c5:4c:36:04:03:0e:9f: 15:05:98:52:6b:b6:19:a5:b9:ea:5f:19:77:6d:5a:82:44:d2: e2:93:8f:d9:eb:60:d8:b4:cd:f0:5a:e8:0a:33:64:37:19:9d: c4:f5:67:ee:ae:0b:df:94:a3:86:39:75:66:26:ea:ac:6f:f1: 11:dd:21:8b:7d:4e:5a:81:2e:9a:64:e9:f9:f3:8e:be:f6:9e: 62:62:b1:b1:87:73:c9:d1:9f:a6:c8:99:db:7f:07:74:42:2f: f8:76:50:43:1b:d9:85:2d:c9:c6:c8:0c:79:bc:37:de:d7:e3: a3:f2:81:c4:3e:7d:5c:c3:59:4e:32:38:62:0c:48:b6:53:d6: ad:66:17:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDhIYS11AGoD3VpfWdV8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz ZmZmOTYwHhcNMjUxMjI5MTcwMDQyWhcNMjUxMjMwMTcwMDQyWjAzMTEwLwYDVQQD EygxMmRhZTIwZDBlNzk0MzRmZmMxOGMyNDA5NjQwYjIwMjE3ZTNmNWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqsGC72l8C5ABST+qn6t+F7+FPBP rjscVZRTm8303pZved9zIr2B12ONhgM4m9GzrkMbGAlz/QEuP4QB0IAsNMSOpMrH w0HT880upVhTG+pGR+l/sJ7Q4cQkX0jS/5uZm9QvNUDj8AWDJsFUPMsNrp90Ti5F FPU6A0BPk9OU3cdZkveNtFtAvd8qJIO1+c6hd9FDVBg07NI41xWLYfLBkBxnrcMA PaNi6KapBrMgIEaXZ5/KsQH0J3YA2SMoFYgj8YIoQEQOou3yrkruVwcG+EqF3pT4 bu84niOlNY87h23DdTo+SGA4Dkulzyxri1L4KUHai4oELLpk3ykNkK95kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLa4g0OeUNP/BjCQJZAsgIX4/XKMB8GA1UdIwQY MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR5biliU 0WLcoZtQnI4DAgKaHGXRpkdfrkVehj5kBzS3tkC9ww90xuAhSc9N1NDFrmOZ1yPW MJEwPcT7CY/Erl17+XxFSvFFRXPd+UTkLBcke1XSPoQnpCAw+GdPSqp+PPDm5wK6 3jTfZRlq8Ez39kPz7Xn3gVHFTDYEAw6fFQWYUmu2GaW56l8Zd21agkTS4pOP2etg 2LTN8FroCjNkNxmdxPVn7q4L35Sjhjl1ZibqrG/xEd0hi31OWoEummTp+fOOvvae YmKxsYdzydGfpsiZ238HdEIv+HZQQxvZhS3JxsgMebw33tfjo/KBxD59XMNZTjI4 YgxItlPWrWYXLA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:30:21 2025 by rpki-client