This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft File: LYaVbM1-OrtCkd1U29i0NCv5V8w.mft (raw, json) Hash identifier: +LvjjVcPKO4HWc3eQYjnL+xAqd81/hgjvFp5OVcCZKw= Subject key identifier: 40:36:01:D7:02:EF:05:43:3B:77:DF:B4:71:95:74:59:1C:4A:3A:D7 Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Certificate serial: 019B3D233A68A0E35F5E07DD7F6DE76D7658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 19:01:17 +0000 Manifest this update: Sat 20 Dec 2025 19:01:17 +0000 Manifest next update: Sun 21 Dec 2025 19:01:17 +0000 Files and hashes: 1: ClcfyiciZMtdgpDBHSxNZ8_ZF9c.roa (hash: dOAWbp1/aTClUEGzmi/WNAdZr626HfWjPgvNWe2YweQ=) 2: LYaVbM1-OrtCkd1U29i0NCv5V8w.crl (hash: Yr8X/SVw3rg+RwW/gNJeNyixI/+dan4eELvBCF21Hw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:3a:68:a0:e3:5f:5e:07:dd:7f:6d:e7:6d:76:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Validity Not Before: Dec 20 19:01:17 2025 GMT Not After : Dec 21 19:01:17 2025 GMT Subject: CN=403601d702ef05433b77dfb4719574591c4a3ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:4b:33:5a:ed:f5:3d:9e:26:97:aa:bd:6b: c1:93:f2:ec:fb:81:85:a1:1c:9f:86:62:e8:1f:5f: c7:2d:93:38:ba:1a:ce:cf:38:e6:4d:61:7a:6c:d5: de:89:f5:00:fb:7e:16:b7:42:d3:84:4d:6e:b7:44: e3:53:f5:0a:81:13:f1:ee:c4:5c:11:62:54:de:b0: b0:6a:9c:2d:4e:98:52:f2:36:50:ab:e9:31:9f:c0: a7:26:bc:dc:d9:09:3a:78:13:a5:ba:13:ed:9d:97: 0c:65:50:31:fd:3a:d5:aa:ef:9e:b8:ee:85:1f:12: ab:4c:26:b2:cf:0a:02:d7:c7:7e:b7:9f:ea:72:5f: 44:18:ad:16:62:30:e6:0c:63:d8:41:14:50:94:f8: 84:ff:bd:2e:f9:25:69:d8:a3:21:cd:8c:c7:f5:0f: f0:e6:1d:37:d3:26:2d:ae:25:69:90:30:e8:b3:68: 47:bf:e4:28:60:4e:df:c4:15:db:c4:01:b2:8b:41: f7:13:2d:2f:cb:af:24:f1:ee:c2:17:33:65:95:23: 8d:96:2a:bb:d0:21:f8:4e:d5:7a:29:e4:bf:45:b8: 66:6c:0e:76:8e:dd:03:be:f6:09:4d:10:50:c9:31: ce:5c:80:a4:c7:44:a4:d5:cf:e9:07:b5:e6:ac:12: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:36:01:D7:02:EF:05:43:3B:77:DF:B4:71:95:74:59:1C:4A:3A:D7 X509v3 Authority Key Identifier: keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:29:60:81:0a:c5:99:3f:2f:66:bf:cb:0a:f7:9c:ae:fd:9b: db:57:d1:39:bd:ff:ff:eb:bd:5b:4c:74:fb:93:82:17:36:db: b0:14:a8:1d:d5:ef:3b:da:d0:ec:06:36:9a:1c:41:e5:c7:e7: 3f:da:68:f6:f9:d5:91:cf:bd:cb:ef:71:d6:1b:7c:e8:56:1b: 9b:13:0c:ea:64:f1:d5:56:aa:eb:54:66:a2:91:61:46:75:5c: 58:65:83:5c:8e:61:7c:94:23:62:dd:3d:3c:ff:4e:ca:f3:31: 2f:9e:cb:6d:ec:b5:55:65:03:d6:b9:78:d3:c8:93:11:8f:46: d9:75:b6:3e:92:90:74:6f:2d:d7:b5:64:3e:ef:ff:26:0b:88: 92:cd:35:65:33:ab:f4:1c:78:b8:b7:72:80:b0:33:a0:62:ef: 11:20:dd:88:a9:20:96:92:2f:a7:37:3f:3e:ce:61:df:58:90: d8:3f:d9:e7:e0:06:44:49:e4:d2:e0:9b:44:e3:14:2f:c1:f4: b0:33:6f:f7:c6:0a:0b:2f:2a:4e:28:d6:c0:e3:55:e5:c4:2f: ea:68:35:f7:e8:bd:8a:2c:c8:ef:6e:af:18:24:52:8c:3e:67: 3c:76:cf:12:23:78:15:06:bc:23:e7:a1:34:db:06:c6:b0:b4: 7c:15:fc:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IzpooONfXgfdf23nbXZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm OTU3Y2MwHhcNMjUxMjIwMTkwMTE3WhcNMjUxMjIxMTkwMTE3WjAzMTEwLwYDVQQD Eyg0MDM2MDFkNzAyZWYwNTQzM2I3N2RmYjQ3MTk1NzQ1OTFjNGEzYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFxLM1rt9T2eJpeqvWvBk/Ls+4GF oRyfhmLoH1/HLZM4uhrOzzjmTWF6bNXeifUA+34Wt0LThE1ut0TjU/UKgRPx7sRc EWJU3rCwapwtTphS8jZQq+kxn8CnJrzc2Qk6eBOluhPtnZcMZVAx/TrVqu+euO6F HxKrTCayzwoC18d+t5/qcl9EGK0WYjDmDGPYQRRQlPiE/70u+SVp2KMhzYzH9Q/w 5h030yYtriVpkDDos2hHv+QoYE7fxBXbxAGyi0H3Ey0vy68k8e7CFzNllSONliq7 0CH4TtV6KeS/RbhmbA52jt0DvvYJTRBQyTHOXICkx0Sk1c/pB7XmrBKQVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA2AdcC7wVDO3fftHGVdFkcSjrXMB8GA1UdIwQY MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt YTI2ZGUzMTNiMzRkLzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjilggQrF mT8vZr/LCvecrv2b21fROb3//+u9W0x0+5OCFzbbsBSoHdXvO9rQ7AY2mhxB5cfn P9po9vnVkc+9y+9x1ht86FYbmxMM6mTx1Vaq61RmopFhRnVcWGWDXI5hfJQjYt09 PP9OyvMxL57Lbey1VWUD1rl408iTEY9G2XW2PpKQdG8t17VkPu//JguIks01ZTOr 9Bx4uLdygLAzoGLvESDdiKkglpIvpzc/Ps5h31iQ2D/Z5+AGREnk0uCbROMUL8H0 sDNv98YKCy8qTijWwONV5cQv6mg19+i9iizI726vGCRSjD5nPHbPEiN4FQa8I+eh NNsGxrC0fBX8zQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:17 2025 by rpki-client