This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json) Hash identifier: jaa9O4qgsvRlrYs9+murGY8cPx9JJnJ1xxa9klQtjW8= Subject key identifier: C4:D6:E9:AE:74:C5:F9:CC:0D:13:30:E2:9E:15:63:AD:AB:C6:07:99 Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019B38A1E79B9FCCE37576324478AAB25945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft Manifest number: 068D Signing time: Fri 19 Dec 2025 22:01:33 +0000 Manifest this update: Fri 19 Dec 2025 22:01:33 +0000 Manifest next update: Sat 20 Dec 2025 22:01:33 +0000 Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: AThBMoPmqA79HF+ANjbvohf84tQVDHzrHaRHXgnyi+A=) 2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=) 3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:e7:9b:9f:cc:e3:75:76:32:44:78:aa:b2:59:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Dec 19 22:01:33 2025 GMT Not After : Dec 20 22:01:33 2025 GMT Subject: CN=c4d6e9ae74c5f9cc0d1330e29e1563adabc60799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:ec:a9:7c:f0:94:9b:f0:8b:50:c2:0c:c1: 53:ae:7c:35:3b:3d:89:60:22:d4:7c:8e:81:bd:30: 60:be:6c:e5:1b:bd:81:fe:7c:85:10:06:ef:30:e0: 29:00:ca:fa:f9:a6:22:05:a0:bc:b1:74:d3:b4:8b: 5f:29:9a:19:3e:9a:b3:1b:fe:34:ef:10:a9:16:0f: 31:69:7f:5e:93:99:ec:b0:d6:c3:23:d5:e8:51:9b: 24:7b:a9:c4:57:d1:c5:1a:0f:d0:8c:24:66:9d:22: 94:43:58:7c:39:c4:1a:ff:b5:15:64:51:8d:3e:6a: bf:9d:04:e3:b7:3f:bf:be:fc:0b:e5:cf:82:58:18: 51:36:30:89:c3:5e:ee:b1:56:39:45:cd:f2:13:49: 33:9e:05:a9:7d:b6:e6:b6:f4:8f:b2:07:d4:55:a2: 17:63:96:ba:12:b1:1e:19:47:17:9d:4d:6c:8d:da: e6:9f:f8:8c:18:81:58:ad:47:e1:d4:9e:05:69:b9: 8b:6b:4c:d8:be:53:a9:25:00:12:77:cf:ea:8b:6c: e5:fa:9c:5f:e0:0d:e3:42:b0:16:30:32:e2:93:e8: db:04:2f:97:54:7c:41:65:bb:48:d3:14:0d:79:11: 6d:4c:d1:cf:24:4c:e0:cb:f9:aa:bd:56:82:28:b1: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D6:E9:AE:74:C5:F9:CC:0D:13:30:E2:9E:15:63:AD:AB:C6:07:99 X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:71:f5:0f:cd:55:14:6a:2a:30:30:e3:00:87:52:58:d1:74: f8:a8:d8:dd:c7:26:72:31:a2:0a:2e:2a:4f:42:08:b3:32:5f: ea:0c:29:a1:3c:14:28:0d:20:52:44:9e:9a:66:9d:27:0a:fc: 1e:15:96:1c:25:72:1d:29:d0:bb:41:5d:eb:e8:67:8a:d2:89: d3:90:3c:57:82:ae:42:d3:09:f5:d8:de:26:85:c9:5c:ec:4a: 88:1e:2a:81:cf:5d:f1:7e:31:3f:2c:b4:35:b7:e1:78:40:0a: 1e:eb:d8:7d:e6:65:df:02:b7:73:ab:d1:cd:9c:ac:6c:57:66: c6:b1:65:ad:78:f1:00:bd:6f:4d:c4:af:7d:e3:1c:52:07:cf: 7f:39:2a:b5:88:11:c9:49:fc:9e:5c:19:f3:49:52:c6:e8:d0: 43:6d:b7:ad:a9:42:0c:49:18:c9:cc:41:52:31:ee:38:ce:6d: d3:00:07:5c:f1:3a:1c:8e:56:59:84:74:15:79:dd:94:6c:2d: 3c:3e:87:69:a2:14:f1:c4:41:36:86:b3:25:bb:53:ac:70:67: a5:05:d0:f7:7c:bd:03:a9:13:07:03:38:38:51:f0:48:f9:e5: e6:ae:aa:f5:64:0e:2e:fa:09:4b:65:c7:5b:3d:f3:36:c5:83: d3:35:86:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oeebn8zjdXYyRHiqsllFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjUxMjE5MjIwMTMzWhcNMjUxMjIwMjIwMTMzWjAzMTEwLwYDVQQD EyhjNGQ2ZTlhZTc0YzVmOWNjMGQxMzMwZTI5ZTE1NjNhZGFiYzYwNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonnsqXzwlJvwi1DCDMFTrnw1Oz2J YCLUfI6BvTBgvmzlG72B/nyFEAbvMOApAMr6+aYiBaC8sXTTtItfKZoZPpqzG/40 7xCpFg8xaX9ek5nssNbDI9XoUZske6nEV9HFGg/QjCRmnSKUQ1h8OcQa/7UVZFGN Pmq/nQTjtz+/vvwL5c+CWBhRNjCJw17usVY5Rc3yE0kzngWpfbbmtvSPsgfUVaIX Y5a6ErEeGUcXnU1sjdrmn/iMGIFYrUfh1J4FabmLa0zYvlOpJQASd8/qi2zl+pxf 4A3jQrAWMDLik+jbBC+XVHxBZbtI0xQNeRFtTNHPJEzgy/mqvVaCKLEBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTW6a50xfnMDRMw4p4VY62rxgeZMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXH1D81V FGoqMDDjAIdSWNF0+KjY3ccmcjGiCi4qT0IIszJf6gwpoTwUKA0gUkSemmadJwr8 HhWWHCVyHSnQu0Fd6+hnitKJ05A8V4KuQtMJ9djeJoXJXOxKiB4qgc9d8X4xPyy0 NbfheEAKHuvYfeZl3wK3c6vRzZysbFdmxrFlrXjxAL1vTcSvfeMcUgfPfzkqtYgR yUn8nlwZ80lSxujQQ223ralCDEkYycxBUjHuOM5t0wAHXPE6HI5WWYR0FXndlGwt PD6HaaIU8cRBNoazJbtTrHBnpQXQ93y9A6kTBwM4OFHwSPnl5q6q9WQOLvoJS2XH Wz3zNsWD0zWGWg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:03:50 2025 by rpki-client