This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json) Hash identifier: YszObz9WC/odxF+/LAf+9uqWyD/jHTWoChCNR8c1x2Q= Subject key identifier: 1B:D8:D0:8B:61:81:FB:3E:DB:91:66:45:30:F9:F5:B0:2B:BA:EF:AC Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa Certificate serial: 019B33444E410FD30C88265FDD3EB63A6C00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 21:01:13 +0000 Manifest this update: Thu 18 Dec 2025 21:01:13 +0000 Manifest next update: Fri 19 Dec 2025 21:01:13 +0000 Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: IhaJG9hE9NN4ijXNVV1XWa/TyzT9bmca8w58QrRQs9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:4e:41:0f:d3:0c:88:26:5f:dd:3e:b6:3a:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa Validity Not Before: Dec 18 21:01:13 2025 GMT Not After : Dec 19 21:01:13 2025 GMT Subject: CN=1bd8d08b6181fb3edb91664530f9f5b02bbaefac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:77:40:85:cc:ee:eb:9f:dd:79:a8:77:ec: 4d:34:18:3a:7d:a0:39:55:70:d0:fa:91:14:92:7c: a8:ea:6a:ce:31:f6:a1:79:a6:ac:0d:cb:56:3f:78: 74:80:ea:00:94:28:e9:dd:2a:e7:c4:d4:9d:d8:7e: ba:a9:5a:73:c1:3b:93:bf:33:9a:11:1c:99:74:e4: 3c:67:c0:68:7b:1b:c8:ea:03:9e:41:7f:0a:b0:86: c1:37:34:ad:fe:76:e8:3b:68:c5:2f:62:96:2c:be: 0a:d7:f8:56:2c:7d:27:a7:a1:3d:e9:de:af:b7:58: 25:78:2f:d1:1f:94:71:23:17:06:e4:11:14:a8:7b: 75:74:9f:cb:05:f8:a4:1c:26:4e:8b:37:8d:94:b6: 86:58:e8:fb:98:1b:e6:a8:45:6b:05:58:96:cf:6f: 32:08:6d:9e:1f:6c:7b:48:29:bc:0b:79:77:1d:ff: 0a:17:22:88:ba:16:0e:5f:32:66:87:af:46:96:98: 97:88:8f:fb:23:c8:5b:a8:4d:21:d6:dd:04:24:3e: e8:f3:f2:ad:df:77:a0:db:dc:d5:03:4b:0e:c8:21: 53:1c:e4:68:79:af:c1:01:9c:0c:19:b5:dd:2a:95: 30:f3:59:ca:49:25:12:db:e6:ff:6a:ba:34:d7:e0: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:D0:8B:61:81:FB:3E:DB:91:66:45:30:F9:F5:B0:2B:BA:EF:AC X509v3 Authority Key Identifier: keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:99:bf:e7:c0:bf:7a:81:76:54:61:0c:b9:c7:ed:a3:6a:1f: c1:50:85:f3:e8:41:d5:ff:64:05:ad:7a:c4:a3:0c:b5:84:4f: 23:0e:3a:f8:a0:74:99:d0:2d:a7:1b:f2:9a:53:46:59:17:76: b3:bd:44:0a:e6:e4:6f:1b:dd:72:61:c5:1a:6f:a3:04:6a:fa: 8d:44:ce:b2:07:51:b7:49:b6:ae:59:87:7a:9f:d1:7e:5e:b9: 45:af:66:25:19:4f:be:6c:f0:34:07:99:a9:82:a4:de:7d:81: e5:50:c4:65:fe:11:b6:d5:14:de:ca:7b:65:e3:21:45:f4:ac: e0:17:dc:10:c4:e8:90:a2:02:bb:b8:11:04:b7:a4:4f:27:e3: 61:34:40:68:e7:d2:0c:f3:d8:0b:48:26:33:83:38:b5:6e:1b: cd:63:c5:1d:ae:c6:06:05:ea:8a:02:77:98:40:90:8a:c7:91: 3e:20:dc:5b:38:7e:c7:be:c2:50:74:09:f0:08:77:98:6d:ea: a1:a6:98:13:0c:59:c0:76:de:fb:ac:d6:55:27:83:51:7a:ca: 85:ee:70:c5:31:5a:18:6a:74:e6:03:4f:f0:2e:87:5f:03:81: 61:3f:39:ad:02:34:72:a2:f2:fe:c5:77:f3:5b:04:c7:a8:30: c2:a4:77:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRE5BD9MMiCZf3T62OmwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjA4ZDg5ZDM3NmZjODg4M2I3ZDA3MTMxYmQzNGE3MDU5 YWVmZmEwHhcNMjUxMjE4MjEwMTEzWhcNMjUxMjE5MjEwMTEzWjAzMTEwLwYDVQQD EygxYmQ4ZDA4YjYxODFmYjNlZGI5MTY2NDUzMGY5ZjViMDJiYmFlZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns93QIXM7uuf3Xmod+xNNBg6faA5 VXDQ+pEUknyo6mrOMfaheaasDctWP3h0gOoAlCjp3SrnxNSd2H66qVpzwTuTvzOa ERyZdOQ8Z8BoexvI6gOeQX8KsIbBNzSt/nboO2jFL2KWLL4K1/hWLH0np6E96d6v t1gleC/RH5RxIxcG5BEUqHt1dJ/LBfikHCZOizeNlLaGWOj7mBvmqEVrBViWz28y CG2eH2x7SCm8C3l3Hf8KFyKIuhYOXzJmh69GlpiXiI/7I8hbqE0h1t0EJD7o8/Kt 33eg29zVA0sOyCFTHORoea/BAZwMGbXdKpUw81nKSSUS2+b/aro01+AAZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvY0Ithgfs+25FmRTD59bAruu+sMB8GA1UdIwQY MBaAFC8gjYnTdvyIg7fQcTG9NKcFmu/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMt MjIyNDJiOWFiMmIzLzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMtMjIyNDJiOWFiMmIz LzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJm/58C/ eoF2VGEMucfto2ofwVCF8+hB1f9kBa16xKMMtYRPIw46+KB0mdAtpxvymlNGWRd2 s71ECubkbxvdcmHFGm+jBGr6jUTOsgdRt0m2rlmHep/Rfl65Ra9mJRlPvmzwNAeZ qYKk3n2B5VDEZf4RttUU3sp7ZeMhRfSs4BfcEMTokKICu7gRBLekTyfjYTRAaOfS DPPYC0gmM4M4tW4bzWPFHa7GBgXqigJ3mECQiseRPiDcWzh+x77CUHQJ8Ah3mG3q oaaYEwxZwHbe+6zWVSeDUXrKhe5wxTFaGGp05gNP8C6HXwOBYT85rQI0cqLy/sV3 81sEx6gwwqR3WQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:55 2025 by rpki-client