This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: AIfdY2lw72KvHBVj5SxILnzVv6JJBp2D57sLYCHtjX0= Subject key identifier: 01:0C:3F:76:1E:AE:B1:2B:2F:8D:50:17:6D:5C:7C:F3:52:F3:43:22 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B3BD941EA9928D0559344C4DF0D1FA80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1727 Signing time: Sat 20 Dec 2025 13:00:52 +0000 Manifest this update: Sat 20 Dec 2025 13:00:52 +0000 Manifest next update: Sun 21 Dec 2025 13:00:52 +0000 Files and hashes: 1: 4XbrpnYb9fH0wMvekeYaI_ADm2M.roa (hash: KaRiqzoHzlwolVC6yfXNO0R4xyGemvvXu9DHgMiuTFw=) 2: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=) 3: 6su449BFDL9wbtNiHsGp9uByd5A.roa (hash: FxELoBod2FZxd21/i8JRxUZYOeBpv7ROxRXf1eDfWvI=) 4: 6xMftLCAOKrVwVv6NUAPSenS09M.roa (hash: r6nGwqWYBox/dH/E1KG2dY2U+dcsZh0rlvfvDm7Fpts=) 5: 9c-m-5gDOVRZ8QSpSw6icI8fIs8.roa (hash: C9ky+sPjX4NTJao92KN8OkbLj+lrTOR9umAOukDAF/M=) 6: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=) 7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: FnJywMddok4quSAQH6MFjSzO/2uA1vQZVtlbrn8VUfM=) 8: Sm6GHy1cLVbGh1P4m6U3nGB2lyA.roa (hash: QwO7fMLRMXItWAabX8Un1PgZbpk87z6NXn3kLsvDTxs=) 9: X2D5tJyZ1P0-9nM7gSImJrYDMdA.roa (hash: eq9JqYZzquXG7L3WIvo1VFujull4g/XkQ32/wOKeEio=) 10: aSwm6VbEDOm4EtSTKsoVI0zWNM0.roa (hash: w5AXTWKXwxoGf2SEUYkFD0w/R/Ke+c17ibSsIsafCu8=) 11: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=) 12: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=) 13: kdLnMZaZpikR9zfkaRwi8RuA7Hc.roa (hash: uvw04nFtp6dcycBY/rIeeoKvjUGu8MKp5gghFM3tfSw=) 14: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=) 15: qWyS_CCwZbh9szrTAgVuOstQrBA.roa (hash: gGpns1ELE70H6VW/vlMxGJ6HUYrLGjc+DUj4OdunzZs=) 16: twfqByHh14E1PhLe1eBQEbxkFtc.roa (hash: L/mg/edVn6vLMggD9bZRqZbVoFCL8f6bFstrsmocwZo=) 17: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:41:ea:99:28:d0:55:93:44:c4:df:0d:1f:a8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Dec 20 13:00:52 2025 GMT Not After : Dec 21 13:00:52 2025 GMT Subject: CN=010c3f761eaeb12b2f8d50176d5c7cf352f34322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:6b:46:1c:6b:0d:f0:26:10:d1:6b:80:1c: 1b:58:dc:98:da:20:6c:b0:be:4f:ec:34:39:68:35: 60:0b:1d:ec:4e:70:3e:99:93:90:0e:c7:97:d8:5c: 10:00:40:b9:0e:11:dd:c4:61:91:e6:08:ce:85:4c: 64:31:d6:e7:30:4c:95:de:ab:e3:b3:2e:5a:7a:52: de:34:91:d5:0b:19:ed:44:f4:74:10:ee:15:d6:04: cf:7f:b5:89:0b:14:51:0a:88:a3:07:60:dd:95:24: 8d:a9:20:5c:a9:eb:77:96:05:0b:0c:e8:78:61:1c: a5:d8:8c:c2:0e:0b:94:8d:56:c8:f6:2c:91:99:dd: eb:93:3e:a0:10:f8:ea:d0:dd:c4:ee:65:b8:5c:84: 21:24:12:0d:17:c4:c0:30:77:dd:64:91:24:04:93: 6c:b2:d4:c3:79:89:5a:98:7f:f6:03:eb:9d:98:53: 08:84:17:a6:cc:b3:e7:89:95:12:a6:4f:6f:19:32: f7:59:59:94:30:80:43:e9:17:8d:66:1c:bd:23:37: 86:f0:cc:de:d6:d7:62:fa:cf:6a:4f:f5:c1:5d:f5: 24:24:6d:10:54:2d:f0:c1:da:2e:06:81:20:cb:03: 6b:93:b7:d7:ca:d7:d0:83:55:56:a8:f4:f9:73:54: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0C:3F:76:1E:AE:B1:2B:2F:8D:50:17:6D:5C:7C:F3:52:F3:43:22 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:f3:d4:12:2a:47:34:23:47:1e:56:7f:2e:f3:29:ae:46:fb: 5a:d4:42:83:46:e3:9b:df:39:3e:2f:99:e2:5b:d3:f0:48:88: 22:96:28:92:a1:c2:7f:14:a5:17:1d:75:dd:54:4e:85:47:82: 2f:c3:60:50:d9:d0:b8:ca:4d:fb:fe:74:4d:8b:c8:8b:86:27: 4e:c7:3d:54:79:2f:f9:84:c3:ef:64:fa:4a:4a:70:61:9a:f6: 05:75:84:d5:ec:0b:e8:0e:db:9a:c8:47:54:51:b0:31:ef:b4: 22:83:0c:b6:0b:e7:8f:63:80:84:7c:52:5f:62:a5:93:aa:d6: d0:f8:d0:e1:49:71:cf:13:8e:d0:9a:dd:82:3d:c2:ba:12:f3: 7a:4e:f3:49:ac:a7:a6:00:69:da:44:c9:84:c3:30:f5:ae:90: 72:ab:95:c4:8a:ad:47:70:cd:41:db:10:bd:44:47:e7:2a:8e: bd:4e:92:eb:48:17:87:65:cb:f9:1d:60:35:90:91:7e:68:09: 1b:37:85:0d:03:55:1a:61:92:2b:84:fb:67:c8:1a:03:fd:4f: 61:1d:f8:9b:ff:c9:ca:8f:06:06:5b:68:dd:2f:7c:76:ff:59: 8e:75:b5:01:36:b2:f0:8b:92:0d:de:76:b9:16:55:c6:b0:e6: 7f:18:14:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72UHqmSjQVZNExN8NH6gLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMjIwMTMwMDUyWhcNMjUxMjIxMTMwMDUyWjAzMTEwLwYDVQQD EygwMTBjM2Y3NjFlYWViMTJiMmY4ZDUwMTc2ZDVjN2NmMzUyZjM0MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG9rRhxrDfAmENFrgBwbWNyY2iBs sL5P7DQ5aDVgCx3sTnA+mZOQDseX2FwQAEC5DhHdxGGR5gjOhUxkMdbnMEyV3qvj sy5aelLeNJHVCxntRPR0EO4V1gTPf7WJCxRRCoijB2DdlSSNqSBcqet3lgULDOh4 YRyl2IzCDguUjVbI9iyRmd3rkz6gEPjq0N3E7mW4XIQhJBINF8TAMHfdZJEkBJNs stTDeYlamH/2A+udmFMIhBemzLPniZUSpk9vGTL3WVmUMIBD6ReNZhy9IzeG8Mze 1tdi+s9qT/XBXfUkJG0QVC3wwdouBoEgywNrk7fXytfQg1VWqPT5c1QolQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEMP3YerrErL41QF21cfPNS80MiMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfPUEipH NCNHHlZ/LvMprkb7WtRCg0bjm985Pi+Z4lvT8EiIIpYokqHCfxSlFx113VROhUeC L8NgUNnQuMpN+/50TYvIi4YnTsc9VHkv+YTD72T6SkpwYZr2BXWE1ewL6A7bmshH VFGwMe+0IoMMtgvnj2OAhHxSX2Klk6rW0PjQ4UlxzxOO0Jrdgj3CuhLzek7zSayn pgBp2kTJhMMw9a6QcquVxIqtR3DNQdsQvURH5yqOvU6S60gXh2XL+R1gNZCRfmgJ GzeFDQNVGmGSK4T7Z8gaA/1PYR34m//Jyo8GBlto3S98dv9ZjnW1ATay8IuSDd52 uRZVxrDmfxgUDg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:42:18 2025 by rpki-client