This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json) Hash identifier: PNrPKhSt4CfDiKH4uYV98oIskAqMe2g8BIVzTJ8T3oI= Subject key identifier: 95:41:A7:11:3B:0A:F6:20:AA:9D:79:7B:4A:7E:8F:3C:C9:57:19:81 Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Certificate serial: 019B45B8831678F4D460C5D6D04B23F6F45E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft Manifest number: 1048 Signing time: Mon 22 Dec 2025 11:01:18 +0000 Manifest this update: Mon 22 Dec 2025 11:01:18 +0000 Manifest next update: Tue 23 Dec 2025 11:01:18 +0000 Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: tXlF+satx8YKGfYH6NyaS9I43KtpW7gHkTgY3kEZz/U=) 2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:83:16:78:f4:d4:60:c5:d6:d0:4b:23:f6:f4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Validity Not Before: Dec 22 11:01:18 2025 GMT Not After : Dec 23 11:01:18 2025 GMT Subject: CN=9541a7113b0af620aa9d797b4a7e8f3cc9571981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:dd:d4:62:96:9e:f2:29:c6:9a:f5:21:8b: c3:aa:d9:97:eb:4a:12:d1:bc:a9:29:dd:e6:13:93: a1:8a:0d:82:11:e1:07:4d:d1:d1:e8:c2:f9:2c:35: 8b:60:70:b1:b0:3e:26:df:ea:4f:45:d1:e0:cb:6c: 74:de:0b:5f:ad:1c:c1:4c:ef:20:0e:51:78:ec:58: 48:24:22:d9:b2:aa:66:a6:ed:24:5e:49:39:0e:a7: 9f:f6:1c:0b:a7:37:56:4d:c9:50:b2:ba:c6:a1:cb: 3f:4a:89:53:3c:32:f9:dc:58:da:87:e1:f2:20:d4: e8:4c:84:86:2f:bc:3d:57:c4:d2:f2:a5:98:c7:25: f0:9e:c6:fc:0e:93:b8:70:d4:62:19:30:e0:8e:42: b3:a9:12:ed:43:42:3c:33:9f:c1:f7:b4:e2:43:f1: d2:d6:f4:16:e1:cd:c5:f2:2a:b0:7b:35:33:e1:61: 21:98:56:0a:4d:f4:02:a5:96:48:ac:43:55:a1:ee: d3:7a:be:50:15:11:1a:dc:8f:42:87:22:ac:37:bc: 2f:d1:59:fc:09:4b:cc:02:48:57:bc:ed:7c:2c:f8: e5:f3:49:a2:a0:85:81:6b:0f:e8:26:33:20:ac:26: 23:7b:c3:36:13:0d:ef:09:d1:80:1b:e9:20:dd:8f: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:41:A7:11:3B:0A:F6:20:AA:9D:79:7B:4A:7E:8F:3C:C9:57:19:81 X509v3 Authority Key Identifier: keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ca:09:d5:76:d3:8e:50:3c:2a:d8:e1:99:a7:c6:6e:5a:6a: 76:4d:8c:88:f4:c8:00:c7:41:9e:cc:42:76:e4:04:c4:ad:1a: e0:bd:eb:6c:71:0e:1f:7b:ad:b5:26:7c:d2:72:f8:01:b9:93: e2:ac:fb:3c:38:fd:0b:88:69:07:d4:e2:6b:66:cb:44:66:67: 06:06:e1:be:53:0c:a9:29:a2:0a:ce:8e:aa:65:c5:55:43:0e: bc:ac:d8:7a:2e:25:03:5c:f9:95:f9:a4:94:5b:96:69:0a:82: 25:6d:55:c1:5f:b9:c6:6d:e4:e7:0f:ed:c9:2c:51:9d:f9:9c: 98:1d:ac:0e:5c:21:a9:b0:ea:bf:49:03:68:ae:ed:12:ef:61: e5:64:44:09:a9:93:af:3b:1e:9e:95:a6:46:26:cf:c4:32:26: 13:4c:ae:cb:1f:a4:ed:f9:d1:28:e4:b6:ce:c2:7f:9a:50:7b: 88:33:f7:07:54:d4:dd:fa:22:a9:fd:3f:3a:06:d2:b5:b8:61: 9a:0a:db:6d:57:b8:c1:3f:04:ed:5d:0e:44:67:16:ed:46:a2: 44:18:e7:08:ef:a6:f5:a2:9d:44:78:3b:eb:47:8a:71:52:41: 24:f9:a6:e2:f1:c1:6d:cb:e5:5d:72:f3:af:8d:06:df:2a:0d: af:f0:c8:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuIMWePTUYMXW0Esj9vReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1 Y2QwZTQwHhcNMjUxMjIyMTEwMTE4WhcNMjUxMjIzMTEwMTE4WjAzMTEwLwYDVQQD Eyg5NTQxYTcxMTNiMGFmNjIwYWE5ZDc5N2I0YTdlOGYzY2M5NTcxOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQrd1GKWnvIpxpr1IYvDqtmX60oS 0bypKd3mE5Ohig2CEeEHTdHR6ML5LDWLYHCxsD4m3+pPRdHgy2x03gtfrRzBTO8g DlF47FhIJCLZsqpmpu0kXkk5Dqef9hwLpzdWTclQsrrGocs/SolTPDL53Fjah+Hy INToTISGL7w9V8TS8qWYxyXwnsb8DpO4cNRiGTDgjkKzqRLtQ0I8M5/B97TiQ/HS 1vQW4c3F8iqwezUz4WEhmFYKTfQCpZZIrENVoe7Ter5QFREa3I9ChyKsN7wv0Vn8 CUvMAkhXvO18LPjl80mioIWBaw/oJjMgrCYje8M2Ew3vCdGAG+kg3Y8pSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVBpxE7CvYgqp15e0p+jzzJVxmBMB8GA1UdIwQY MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5 LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8oJ1XbT jlA8KtjhmafGblpqdk2MiPTIAMdBnsxCduQExK0a4L3rbHEOH3uttSZ80nL4AbmT 4qz7PDj9C4hpB9Tia2bLRGZnBgbhvlMMqSmiCs6OqmXFVUMOvKzYei4lA1z5lfmk lFuWaQqCJW1VwV+5xm3k5w/tySxRnfmcmB2sDlwhqbDqv0kDaK7tEu9h5WRECamT rzsenpWmRibPxDImE0yuyx+k7fnRKOS2zsJ/mlB7iDP3B1TU3foiqf0/OgbStbhh mgrbbVe4wT8E7V0ORGcW7UaiRBjnCO+m9aKdRHg760eKcVJBJPmm4vHBbcvlXXLz r40G3yoNr/DItg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:34:06 2025 by rpki-client