This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json) Hash identifier: wgZBuhC1QEIb6cFkcxt8H//tilymHXVFHSw8M6Y0Rv8= Subject key identifier: 2F:62:A7:57:FA:6C:0E:54:AF:86:2E:CB:C8:E5:0F:AF:1C:26:A8:6A Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Certificate serial: 019B55CFF8E13449563C56954554931EDA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft Manifest number: 14D7 Signing time: Thu 25 Dec 2025 14:00:51 +0000 Manifest this update: Thu 25 Dec 2025 14:00:51 +0000 Manifest next update: Fri 26 Dec 2025 14:00:51 +0000 Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: AUvoAHAd9nZE24JPGYZj7FSb12DlzBs3QXYZornpPw0=) 2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:cf:f8:e1:34:49:56:3c:56:95:45:54:93:1e:da:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Validity Not Before: Dec 25 14:00:51 2025 GMT Not After : Dec 26 14:00:51 2025 GMT Subject: CN=2f62a757fa6c0e54af862ecbc8e50faf1c26a86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d2:20:c6:a5:90:8b:7e:36:44:4b:5b:54:0f: 1d:31:5d:69:07:1d:73:5f:8f:e6:e8:92:36:7b:77: 41:9a:89:a8:9f:f4:3b:6b:e0:fc:99:a5:80:fb:d2: a4:9c:20:98:96:f7:9d:5b:27:84:3b:dc:2e:46:59: 6c:73:f0:bf:a8:d6:64:6a:b9:54:61:d9:f6:78:10: dd:3b:1e:6f:fd:ba:4f:97:bb:bb:df:94:0c:5b:ef: b0:f9:c2:5c:4e:d8:fe:fd:d8:2e:e4:da:5c:10:32: b5:fb:0a:fb:6e:a8:68:b3:04:d6:01:8c:b0:9c:87: ee:44:12:a6:0b:08:09:98:15:5c:38:7a:21:c5:d1: 66:50:7e:25:87:15:2e:31:70:4b:54:b6:19:10:91: 69:97:23:19:62:c1:ea:98:7e:f8:20:a0:0c:8b:93: 85:28:e6:fd:65:bc:02:77:45:35:bd:a9:a2:3e:5c: 13:af:ca:6a:1a:e7:93:4a:e5:0f:a5:26:0a:db:6c: 4e:80:4d:06:ce:56:09:76:c8:15:18:99:8f:6a:88: fb:08:7f:ff:71:e1:69:17:93:18:03:ec:8a:e9:75: 8e:f0:68:6a:6d:d2:87:58:40:b7:ea:be:f3:e0:3b: fd:e0:68:04:38:05:47:88:07:48:12:2f:24:ff:dc: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:62:A7:57:FA:6C:0E:54:AF:86:2E:CB:C8:E5:0F:AF:1C:26:A8:6A X509v3 Authority Key Identifier: keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5e:d8:80:da:05:44:67:7f:8a:7e:6a:b3:37:af:4c:f1:2e: 79:98:2a:61:65:fc:99:0d:d2:d0:66:a5:60:b8:1d:1f:5e:5c: 75:aa:65:df:10:a3:a5:c0:3b:ff:27:09:45:be:32:fa:ef:a2: 46:79:ed:ba:df:4b:b9:50:a4:9e:90:aa:05:3c:d1:3c:07:79: f6:99:55:40:51:ac:0c:dc:23:53:af:30:89:ba:e7:ff:46:b2: 9a:fc:00:86:a1:fb:7a:33:79:ff:99:fe:cc:27:93:43:c2:65: 96:9a:7c:e9:65:37:03:f6:42:a0:66:ce:11:d4:49:a7:0f:ae: 7e:33:04:f3:0a:0e:e8:f1:95:85:52:ac:f6:5f:a6:76:5b:07: 3b:35:70:5e:4d:d1:98:9e:fc:75:e8:af:1a:ba:16:12:73:38: f6:01:e8:05:e6:f9:0f:f3:8b:64:0f:73:f6:72:c4:88:d9:02: 67:66:02:ae:dd:85:d0:ce:0d:86:21:56:59:a7:09:dd:2e:0b: d4:3c:06:5a:91:03:96:32:78:93:57:9b:e1:5b:7b:de:de:ad: 0e:12:99:3f:08:3a:41:93:69:60:d8:f3:a6:41:fd:d2:cd:78: 3e:06:f5:f0:90:aa:24:c7:9e:4f:03:0b:37:77:9d:bb:4d:49: 74:33:ad:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVz/jhNElWPFaVRVSTHtoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz ZmZmOTYwHhcNMjUxMjI1MTQwMDUxWhcNMjUxMjI2MTQwMDUxWjAzMTEwLwYDVQQD EygyZjYyYTc1N2ZhNmMwZTU0YWY4NjJlY2JjOGU1MGZhZjFjMjZhODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNIgxqWQi342REtbVA8dMV1pBx1z X4/m6JI2e3dBmomon/Q7a+D8maWA+9KknCCYlvedWyeEO9wuRllsc/C/qNZkarlU Ydn2eBDdOx5v/bpPl7u735QMW++w+cJcTtj+/dgu5NpcEDK1+wr7bqhoswTWAYyw nIfuRBKmCwgJmBVcOHohxdFmUH4lhxUuMXBLVLYZEJFplyMZYsHqmH74IKAMi5OF KOb9ZbwCd0U1vamiPlwTr8pqGueTSuUPpSYK22xOgE0GzlYJdsgVGJmPaoj7CH// ceFpF5MYA+yK6XWO8GhqbdKHWEC36r7z4Dv94GgEOAVHiAdIEi8k/9wIUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9ip1f6bA5Ur4Yuy8jlD68cJqhqMB8GA1UdIwQY MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe17YgNoF RGd/in5qszevTPEueZgqYWX8mQ3S0GalYLgdH15cdapl3xCjpcA7/ycJRb4y+u+i Rnntut9LuVCknpCqBTzRPAd59plVQFGsDNwjU68wibrn/0aymvwAhqH7ejN5/5n+ zCeTQ8Jllpp86WU3A/ZCoGbOEdRJpw+ufjME8woO6PGVhVKs9l+mdlsHOzVwXk3R mJ78deivGroWEnM49gHoBeb5D/OLZA9z9nLEiNkCZ2YCrt2F0M4NhiFWWacJ3S4L 1DwGWpEDljJ4k1eb4Vt73t6tDhKZPwg6QZNpYNjzpkH90s14Pgb18JCqJMeeTwML N3edu01JdDOtpw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:25:04 2025 by rpki-client