This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json) Hash identifier: NqrEOub7gmZSKM2i6bcBuuRX9ytwmSqUj/bc61GW+Mw= Subject key identifier: C0:08:B6:71:B3:DB:0B:72:27:95:AF:2A:F9:53:85:6A:03:68:B3:56 Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Certificate serial: 019B4C28190B234207A19C73E050263A6662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft Manifest number: 14D2 Signing time: Tue 23 Dec 2025 17:00:54 +0000 Manifest this update: Tue 23 Dec 2025 17:00:54 +0000 Manifest next update: Wed 24 Dec 2025 17:00:54 +0000 Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: 5dZBob+dEM8a+SmQYGA2LvRjGYbqp9BfAhQo3aUNRMg=) 2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:19:0b:23:42:07:a1:9c:73:e0:50:26:3a:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96 Validity Not Before: Dec 23 17:00:54 2025 GMT Not After : Dec 24 17:00:54 2025 GMT Subject: CN=c008b671b3db0b722795af2af953856a0368b356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:bd:bb:7a:50:ab:3d:a7:8b:90:4f:77:5e: f3:13:32:1f:3f:57:89:46:c5:13:29:1a:3c:1c:dd: 80:dd:71:9d:d4:02:25:2e:93:3a:ed:74:1b:33:46: 9a:16:0b:95:0e:a6:47:4a:2d:50:75:f6:a6:2f:84: 8e:a8:34:ef:54:4d:cd:c5:e7:8b:1c:c7:77:fc:0f: 19:66:83:28:d0:f3:96:8a:e1:47:aa:f1:d2:ea:13: 09:9e:b5:49:30:bb:f4:75:c4:7d:ab:86:b7:10:09: 4a:95:a4:a9:a2:03:1e:06:8d:d0:06:a2:0f:6e:a4: c9:30:9d:0e:d2:a7:ba:8a:1c:91:0e:e0:e0:e5:60: 11:c7:5f:bc:74:39:c0:aa:2c:76:bc:91:e3:0d:4b: d4:2c:b8:98:d4:c6:1c:02:81:10:85:ba:5d:1a:e3: be:58:e1:77:1a:a1:23:23:ab:58:fb:0e:f2:6b:a8: 71:8b:ac:09:d2:23:03:e6:45:63:92:ac:e8:48:72: f9:99:07:f6:46:7e:26:c0:b3:5f:b2:32:b4:eb:0e: 2e:53:5e:2a:fe:f8:fb:b1:9f:e7:bb:09:d3:40:55: ed:c6:f9:60:08:08:0f:68:2c:de:d0:85:d7:dc:85: 61:17:4a:24:b6:74:6c:7b:ab:8f:ec:d2:4c:83:c1: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:B6:71:B3:DB:0B:72:27:95:AF:2A:F9:53:85:6A:03:68:B3:56 X509v3 Authority Key Identifier: keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:92:55:d0:6b:d4:2d:63:d1:25:06:49:df:0f:f0:82:b6:8f: cd:d1:01:43:06:d1:0b:5b:92:fb:bb:7b:4a:02:4e:ec:ce:39: 1b:2c:8b:f5:2d:95:7d:5b:0e:a2:0e:2c:5a:0c:4c:4f:cf:c9: b7:ca:97:ce:45:1d:2c:09:ed:de:92:b9:d7:26:bd:ae:5f:ca: f6:b9:68:86:64:4d:85:b2:83:ec:8e:8e:25:f6:c3:18:9c:cf: bd:71:e9:ea:35:07:3c:54:25:f3:02:be:37:9d:7c:83:ce:99: 51:fd:11:08:13:0c:3d:25:85:05:ee:a0:16:a4:93:97:81:5f: b0:df:6b:2a:5f:ca:94:17:f8:4a:81:74:66:46:c4:71:62:c9: af:f1:90:da:d4:8d:10:a7:0c:39:ff:48:ab:9e:dd:35:f8:58: 67:8d:b0:91:86:46:2f:a4:46:7c:a6:4c:24:26:71:e1:00:12: a9:4e:e6:56:f9:46:91:26:8b:30:28:65:16:a8:8b:24:0c:b3: aa:91:4f:49:46:06:39:74:37:ae:c6:26:f7:76:84:81:fc:5e: ec:1a:18:c6:81:85:d6:fd:a6:42:bf:71:02:7f:87:c0:52:0c: ff:26:e1:ea:88:0d:f0:f4:f0:58:8a:5e:32:ca:f7:3c:07:37: 52:ab:e0:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKBkLI0IHoZxz4FAmOmZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz ZmZmOTYwHhcNMjUxMjIzMTcwMDU0WhcNMjUxMjI0MTcwMDU0WjAzMTEwLwYDVQQD EyhjMDA4YjY3MWIzZGIwYjcyMjc5NWFmMmFmOTUzODU2YTAzNjhiMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4i9u3pQqz2ni5BPd17zEzIfP1eJ RsUTKRo8HN2A3XGd1AIlLpM67XQbM0aaFguVDqZHSi1QdfamL4SOqDTvVE3NxeeL HMd3/A8ZZoMo0POWiuFHqvHS6hMJnrVJMLv0dcR9q4a3EAlKlaSpogMeBo3QBqIP bqTJMJ0O0qe6ihyRDuDg5WARx1+8dDnAqix2vJHjDUvULLiY1MYcAoEQhbpdGuO+ WOF3GqEjI6tY+w7ya6hxi6wJ0iMD5kVjkqzoSHL5mQf2Rn4mwLNfsjK06w4uU14q /vj7sZ/nuwnTQFXtxvlgCAgPaCze0IXX3IVhF0oktnRse6uP7NJMg8HY6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAItnGz2wtyJ5WvKvlThWoDaLNWMB8GA1UdIwQY MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpJV0GvU LWPRJQZJ3w/wgraPzdEBQwbRC1uS+7t7SgJO7M45GyyL9S2VfVsOog4sWgxMT8/J t8qXzkUdLAnt3pK51ya9rl/K9rlohmRNhbKD7I6OJfbDGJzPvXHp6jUHPFQl8wK+ N518g86ZUf0RCBMMPSWFBe6gFqSTl4FfsN9rKl/KlBf4SoF0ZkbEcWLJr/GQ2tSN EKcMOf9Iq57dNfhYZ42wkYZGL6RGfKZMJCZx4QASqU7mVvlGkSaLMChlFqiLJAyz qpFPSUYGOXQ3rsYm93aEgfxe7BoYxoGF1v2mQr9xAn+HwFIM/ybh6ogN8PTwWIpe Msr3PAc3Uqvgjg== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:07 2025 by rpki-client