This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft File: LysmxVJWMAYhPP5IFKncKg_Bb0M.mft (raw, json) Hash identifier: TIBJFivcRjfJION69xKOi1W+HaYNpgVE5zAF52YKHdI= Subject key identifier: EA:AE:D3:B8:F3:ED:43:91:D4:1D:CC:6B:3F:A0:70:63:C1:54:9E:B1 Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Certificate serial: 019B4BBA1355F5A46E063BC4A7044452C7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft Manifest number: 098E Signing time: Tue 23 Dec 2025 15:00:44 +0000 Manifest this update: Tue 23 Dec 2025 15:00:44 +0000 Manifest next update: Wed 24 Dec 2025 15:00:44 +0000 Files and hashes: 1: LysmxVJWMAYhPP5IFKncKg_Bb0M.crl (hash: zEBiTkVP/7XuAMm46WV0cfgAXPzQt7KK1RlgNcnujbQ=) 2: PJd5oiJlNNpa6bqcXLHiHXWWgDc.roa (hash: GGgzoj2Mm5Fc4LoEFoe3yEWV5i9Cn3vEUPsbJ0RHjrI=) 3: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (hash: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:ba:13:55:f5:a4:6e:06:3b:c4:a7:04:44:52:c7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Validity Not Before: Dec 23 15:00:44 2025 GMT Not After : Dec 24 15:00:44 2025 GMT Subject: CN=eaaed3b8f3ed4391d41dcc6b3fa07063c1549eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:9f:4e:8a:b4:b9:5b:b6:b3:4c:15:3d:11: f7:a6:57:b8:75:61:19:69:93:33:b8:11:c5:f3:59: 37:fc:cf:b6:3e:e7:f1:35:05:12:1f:18:85:3b:d1: aa:8e:7e:d6:e7:51:73:df:24:34:bc:73:71:a5:71: b8:8e:99:bc:71:b1:58:ee:d9:c5:1d:b0:19:f8:46: 9e:a2:ed:fa:b0:dd:e1:6c:ea:b5:d3:08:9d:0a:53: f2:9f:dd:ae:d5:9f:3b:b3:2e:be:20:91:46:ab:85: f8:f9:9c:b2:65:0c:b4:0b:2d:02:83:e7:28:b1:ca: c6:4d:fc:20:0d:bf:88:26:3d:68:2c:a3:e4:d9:f7: 34:36:9f:6f:bc:df:97:1e:35:a1:af:8b:73:f5:2a: a8:7b:13:06:a5:af:87:f3:3c:06:c1:44:fa:36:7f: b7:1d:36:0f:65:28:06:1b:7a:37:24:af:d8:0b:ec: 2a:99:8e:7e:8c:f7:d7:ff:3a:3e:bc:60:a2:51:22: e2:94:2f:82:5a:75:cb:34:ba:6b:87:7c:f5:48:17: 01:78:a0:e0:1c:71:ab:c6:ef:32:da:7b:78:ff:03: b4:77:96:f3:30:5b:dd:2d:ad:40:1c:f6:64:04:44: ac:fb:75:5d:25:ee:54:77:b0:37:ae:0a:43:f3:5d: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:D3:B8:F3:ED:43:91:D4:1D:CC:6B:3F:A0:70:63:C1:54:9E:B1 X509v3 Authority Key Identifier: keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a8:ce:ae:70:c8:2c:2d:eb:c5:36:59:34:53:c5:23:45:27: 04:ca:be:a5:9c:92:7f:95:7d:2a:97:13:f2:76:24:63:ee:da: 5b:e6:8a:53:14:ea:ce:7b:96:c3:0d:d0:38:1e:ca:b6:0f:a8: 5e:f3:10:45:59:a6:95:aa:c8:0a:06:55:8d:05:f2:9d:f3:b7: c6:11:c2:6e:2c:f5:7b:a4:d7:29:af:f8:1f:cc:de:4b:e9:c0: 42:92:28:97:fe:21:c1:97:10:c1:d1:20:95:99:ca:6e:53:9f: d2:be:e9:d9:33:e6:c6:35:c7:ee:d0:f4:10:66:34:44:c5:4b: 8f:04:8c:65:29:11:0d:55:71:9b:4d:9f:1c:30:06:c8:e6:9c: dd:6f:85:6c:5b:00:11:91:3a:46:72:da:7d:83:02:74:56:46: e0:a7:ee:f4:14:05:1b:dd:4f:c9:a7:ad:49:af:79:41:61:24: 5e:2c:e4:36:5b:5e:f2:72:e3:5a:db:dc:59:c0:8f:91:2b:9c: 8f:2e:1f:c2:9f:63:ba:73:69:88:e3:62:ed:5f:33:46:62:9f: 45:00:aa:86:ec:03:48:d5:ff:08:ee:40:f5:c7:d1:0d:55:30: 82:17:6b:7b:ef:02:49:e6:e1:8d:69:0d:8c:ba:b5:c8:4e:d4: 06:2b:26:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLuhNV9aRuBjvEpwREUsegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj MTZmNDMwHhcNMjUxMjIzMTUwMDQ0WhcNMjUxMjI0MTUwMDQ0WjAzMTEwLwYDVQQD EyhlYWFlZDNiOGYzZWQ0MzkxZDQxZGNjNmIzZmEwNzA2M2MxNTQ5ZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouSfToq0uVu2s0wVPRH3ple4dWEZ aZMzuBHF81k3/M+2PufxNQUSHxiFO9Gqjn7W51Fz3yQ0vHNxpXG4jpm8cbFY7tnF HbAZ+Eaeou36sN3hbOq10widClPyn92u1Z87sy6+IJFGq4X4+ZyyZQy0Cy0Cg+co scrGTfwgDb+IJj1oLKPk2fc0Np9vvN+XHjWhr4tz9SqoexMGpa+H8zwGwUT6Nn+3 HTYPZSgGG3o3JK/YC+wqmY5+jPfX/zo+vGCiUSLilC+CWnXLNLprh3z1SBcBeKDg HHGrxu8y2nt4/wO0d5bzMFvdLa1AHPZkBESs+3VdJe5Ud7A3rgpD813AbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqu07jz7UOR1B3Maz+gcGPBVJ6xMB8GA1UdIwQY MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt MWMzNWI4MzkzNzliLzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKjOrnDI LC3rxTZZNFPFI0UnBMq+pZySf5V9KpcT8nYkY+7aW+aKUxTqznuWww3QOB7Ktg+o XvMQRVmmlarICgZVjQXynfO3xhHCbiz1e6TXKa/4H8zeS+nAQpIol/4hwZcQwdEg lZnKblOf0r7p2TPmxjXH7tD0EGY0RMVLjwSMZSkRDVVxm02fHDAGyOac3W+FbFsA EZE6RnLafYMCdFZG4Kfu9BQFG91PyaetSa95QWEkXizkNlte8nLjWtvcWcCPkSuc jy4fwp9junNpiONi7V8zRmKfRQCqhuwDSNX/CO5A9cfRDVUwghdre+8CSebhjWkN jLq1yE7UBismzA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:17:45 2025 by rpki-client