This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json) Hash identifier: 4tH6Xy1kng3iXNb11HVqOqO0CddDZM4DQmCVBxzCQLo= Subject key identifier: 18:06:EC:7E:6F:BF:EB:5D:BE:09:67:91:D2:5E:F3:E6:29:89:50:D3 Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019B38338CF46D1A9F8314AFB29B86B66587 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 20:01:01 +0000 Manifest this update: Fri 19 Dec 2025 20:01:01 +0000 Manifest next update: Sat 20 Dec 2025 20:01:01 +0000 Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=) 2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=) 3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=) 4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: n8I2WShXgO8CprctPuLGNaiGX8OjHhlrkdq7UfLpwsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:8c:f4:6d:1a:9f:83:14:af:b2:9b:86:b6:65:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Dec 19 20:01:01 2025 GMT Not After : Dec 20 20:01:01 2025 GMT Subject: CN=1806ec7e6fbfeb5dbe096791d25ef3e6298950d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:b2:6d:37:95:41:81:d0:a2:df:ad:21:1e: 01:c8:81:fb:29:65:85:43:8a:e9:c9:5e:1d:8e:df: 99:59:6c:f3:4f:fa:f6:11:2f:ad:97:a3:0d:3f:66: 50:db:b1:d9:c0:b8:74:2c:5f:e8:e3:cc:47:01:8a: 00:8b:0a:48:c5:5f:e8:c3:4d:8b:96:50:b0:d4:12: e8:56:57:f6:bf:76:43:a6:7d:79:6e:d8:bf:15:2b: bc:b9:7d:54:0d:fc:38:19:39:6b:22:30:07:8b:11: e2:fd:f5:ae:c3:4e:36:61:4f:31:55:1b:8b:02:d8: aa:59:ae:ff:e7:0e:85:4a:b3:fc:c5:83:4e:4f:d2: 68:23:6c:4a:be:5d:97:9d:bb:98:41:69:48:1a:fd: 7e:a1:a6:d1:01:ad:66:ab:2c:76:d1:40:03:5b:b1: 9c:e8:20:8f:e0:4f:ec:1c:2e:da:f2:9e:9d:51:ce: 4c:d7:1a:bd:9b:3d:3e:d8:e6:56:16:7c:78:53:00: 91:2e:26:61:72:79:bf:35:df:61:a4:f0:c2:ad:f7: 3d:cf:33:b6:da:cc:34:9b:98:2b:40:36:ed:a1:af: 3a:db:0f:50:75:11:b3:1f:a9:ef:c2:df:a1:e4:3e: 5a:fb:b8:48:74:18:fc:a1:5b:41:3e:21:0e:b7:ff: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:06:EC:7E:6F:BF:EB:5D:BE:09:67:91:D2:5E:F3:E6:29:89:50:D3 X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:76:16:6b:82:85:23:0e:0f:13:b2:21:e2:dc:ac:b0:c6:76: 7f:e7:40:4c:49:3c:38:b6:54:96:fa:3c:47:1c:c4:b3:93:4c: 09:c6:ea:19:97:3d:22:93:d9:fa:9c:62:6b:56:f3:b7:d1:f5: 18:b6:b2:41:a5:b0:86:cb:76:ee:71:09:8a:ab:6a:45:88:4e: e9:8e:0a:76:1b:e4:24:bf:33:30:45:16:b3:12:a2:8c:f6:00: 29:31:a2:6b:39:c4:22:5d:96:83:58:c5:f7:8c:74:cd:68:11: 4e:98:22:74:f9:4d:6d:f2:e0:b0:18:ac:37:09:c5:7a:69:6c: 3a:0f:fa:0d:b0:e6:4c:88:1e:46:e6:6a:f4:28:57:56:4c:d7: 1a:1e:a3:69:93:69:96:8d:44:90:1c:15:1d:23:65:9d:cb:0c: aa:13:d3:fc:b4:66:5c:48:a9:bb:75:e9:3b:04:64:5f:26:14: 83:73:60:25:c8:7d:7a:9e:82:e7:b2:83:1a:a2:3b:b9:f6:2e: b5:d3:8f:09:aa:cd:60:7e:3c:20:8c:89:1c:b8:65:d1:ff:23: 95:9e:6b:37:77:9c:30:83:22:02:bc:a8:1c:fb:7e:d9:f0:0f: a9:aa:14:58:44:1a:25:d1:5d:9e:f4:58:e0:21:bb:d2:ec:0d: 60:e3:92:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M4z0bRqfgxSvspuGtmWHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjUxMjE5MjAwMTAxWhcNMjUxMjIwMjAwMTAxWjAzMTEwLwYDVQQD EygxODA2ZWM3ZTZmYmZlYjVkYmUwOTY3OTFkMjVlZjNlNjI5ODk1MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRWybTeVQYHQot+tIR4ByIH7KWWF Q4rpyV4djt+ZWWzzT/r2ES+tl6MNP2ZQ27HZwLh0LF/o48xHAYoAiwpIxV/ow02L llCw1BLoVlf2v3ZDpn15bti/FSu8uX1UDfw4GTlrIjAHixHi/fWuw042YU8xVRuL AtiqWa7/5w6FSrP8xYNOT9JoI2xKvl2XnbuYQWlIGv1+oabRAa1mqyx20UADW7Gc 6CCP4E/sHC7a8p6dUc5M1xq9mz0+2OZWFnx4UwCRLiZhcnm/Nd9hpPDCrfc9zzO2 2sw0m5grQDbtoa862w9QdRGzH6nvwt+h5D5a+7hIdBj8oVtBPiEOt/9+/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgG7H5vv+tdvglnkdJe8+YpiVDTMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnYWa4KF Iw4PE7Ih4tyssMZ2f+dATEk8OLZUlvo8RxzEs5NMCcbqGZc9IpPZ+pxia1bzt9H1 GLayQaWwhst27nEJiqtqRYhO6Y4KdhvkJL8zMEUWsxKijPYAKTGiaznEIl2Wg1jF 94x0zWgRTpgidPlNbfLgsBisNwnFemlsOg/6DbDmTIgeRuZq9ChXVkzXGh6jaZNp lo1EkBwVHSNlncsMqhPT/LRmXEipu3XpOwRkXyYUg3NgJch9ep6C57KDGqI7ufYu tdOPCarNYH48IIyJHLhl0f8jlZ5rN3ecMIMiAryoHPt+2fAPqaoUWEQaJdFdnvRY 4CG70uwNYOOSHg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:16:47 2025 by rpki-client