This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json) Hash identifier: NDi+TpznMeahXlvDh5cdctN20gpIfdL6670I2oaHHZE= Subject key identifier: 0D:32:6A:08:A5:D5:C2:7F:34:16:59:7B:C4:4C:7E:A2:5A:20:DC:7D Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Certificate serial: 019B4023DF499EC2F5BDB64FAF91ADFFE3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft Manifest number: 0988 Signing time: Sun 21 Dec 2025 09:00:51 +0000 Manifest this update: Sun 21 Dec 2025 09:00:51 +0000 Manifest next update: Mon 22 Dec 2025 09:00:51 +0000 Files and hashes: 1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: g+X1RkWLEk5p70nMTbE9ETBM7egkKc4wKBDhu87zyGk=) 2: PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa (hash: GGgzoj2Mm5Fc4LoEFoe3yEWV5i9Cn3vEUPsbJ0RHjrI=) 3: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:df:49:9e:c2:f5:bd:b6:4f:af:91:ad:ff:e3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Validity Not Before: Dec 21 09:00:51 2025 GMT Not After : Dec 22 09:00:51 2025 GMT Subject: CN=0d326a08a5d5c27f3416597bc44c7ea25a20dc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:4c:77:88:03:2f:6c:b0:3e:d0:de:cc:66: 22:52:74:2f:d1:e5:fc:43:6a:2b:12:24:90:5c:cf: 6e:af:79:46:02:57:a3:cd:9c:95:70:6f:82:12:c2: d7:82:72:f8:ed:09:78:b1:40:f0:92:90:48:c4:c1: 6b:b0:ef:a1:7c:14:65:cc:b6:4f:28:cb:9f:35:ca: c9:45:77:43:ec:ae:6c:3c:5d:7c:9d:4b:09:da:bb: 3d:7b:2e:cf:73:2e:d0:bc:b8:0e:9e:2a:31:6e:74: 6c:e7:2d:f5:c3:59:3f:78:ea:e4:15:92:06:d5:fd: f6:0a:97:20:b3:bf:84:0b:b4:48:d6:a2:31:f5:ae: 9e:48:68:5d:7f:1d:0b:a0:53:87:04:bb:bb:2a:9c: 21:bb:19:f1:5c:10:cf:51:05:14:55:1a:36:4c:d9: 16:fb:4c:8c:a9:a4:79:e7:5d:c9:ab:20:10:8f:9a: bf:dd:5e:a7:43:a5:ac:0a:62:b1:b9:c4:5a:dd:85: 48:0c:af:a5:86:b5:aa:73:b8:eb:23:b9:2b:05:3e: d7:13:0e:88:2b:95:6f:ce:19:ca:32:4d:2e:cb:c2: 48:6c:e4:01:d8:76:16:66:db:d6:0f:34:5c:a8:2e: ca:91:59:92:c4:86:af:be:d4:ab:01:c2:5e:91:02: c1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:32:6A:08:A5:D5:C2:7F:34:16:59:7B:C4:4C:7E:A2:5A:20:DC:7D X509v3 Authority Key Identifier: keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ad:bc:ab:e4:b0:2d:a3:ba:d1:5f:57:4b:9f:9b:c2:07:f5: 34:48:4d:61:67:22:77:cc:f6:41:cb:80:56:9a:0f:3b:10:c3: 7d:64:c4:1d:62:35:0a:f7:78:5e:73:e6:f5:89:cf:79:fd:99: 8a:51:4a:9b:95:7a:83:d7:31:a7:8e:91:59:24:b2:ca:5a:bb: 3a:42:2f:79:bd:27:8f:f9:24:1e:ef:7c:b3:52:c5:30:f5:8d: b7:e9:93:b0:c6:0d:28:fd:1e:ea:f5:ab:d0:cf:c2:4e:f9:0f: 79:a5:a6:e3:ee:b3:b7:df:9b:af:37:fa:6f:b3:84:22:f1:19: 37:14:05:f6:e3:fc:1a:d3:78:d0:26:dd:71:44:b7:47:dc:85: 02:93:6d:1f:01:d8:e9:5d:72:7f:65:0a:21:6f:51:c9:24:a9: 4f:c9:e8:a2:fd:0f:a8:db:1d:8a:44:d7:6e:23:cc:43:4b:9f: c1:60:07:35:13:a9:c2:7d:c8:fa:cf:ea:43:a5:50:c3:fb:24: 53:1f:cb:c0:59:a5:e8:89:cd:f9:bf:c4:8f:98:3e:2f:4d:22: 70:59:4f:20:b7:77:72:01:7a:ee:74:5c:ad:46:3c:e3:a3:3e: cb:19:4f:fd:66:37:18:24:99:fd:e8:8d:09:3f:43:35:4e:9d: a5:89:0f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI99JnsL1vbZPr5Gt/+PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj MTZmNDMwHhcNMjUxMjIxMDkwMDUxWhcNMjUxMjIyMDkwMDUxWjAzMTEwLwYDVQQD EygwZDMyNmEwOGE1ZDVjMjdmMzQxNjU5N2JjNDRjN2VhMjVhMjBkYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ5Md4gDL2ywPtDezGYiUnQv0eX8 Q2orEiSQXM9ur3lGAlejzZyVcG+CEsLXgnL47Ql4sUDwkpBIxMFrsO+hfBRlzLZP KMufNcrJRXdD7K5sPF18nUsJ2rs9ey7Pcy7QvLgOnioxbnRs5y31w1k/eOrkFZIG 1f32Cpcgs7+EC7RI1qIx9a6eSGhdfx0LoFOHBLu7KpwhuxnxXBDPUQUUVRo2TNkW +0yMqaR5513JqyAQj5q/3V6nQ6WsCmKxucRa3YVIDK+lhrWqc7jrI7krBT7XEw6I K5VvzhnKMk0uy8JIbOQB2HYWZtvWDzRcqC7KkVmSxIavvtSrAcJekQLBLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0yagil1cJ/NBZZe8RMfqJaINx9MB8GA1UdIwQY MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD628q+Sw LaO60V9XS5+bwgf1NEhNYWcid8z2QcuAVpoPOxDDfWTEHWI1Cvd4XnPm9YnPef2Z ilFKm5V6g9cxp46RWSSyylq7OkIveb0nj/kkHu98s1LFMPWNt+mTsMYNKP0e6vWr 0M/CTvkPeaWm4+6zt9+brzf6b7OEIvEZNxQF9uP8GtN40CbdcUS3R9yFApNtHwHY 6V1yf2UKIW9RySSpT8noov0PqNsdikTXbiPMQ0ufwWAHNROpwn3I+s/qQ6VQw/sk Ux/LwFml6InN+b/Ej5g+L00icFlPILd3cgF67nRcrUY846M+yxlP/WY3GCSZ/eiN CT9DNU6dpYkP+g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:23:21 2025 by rpki-client