This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft File: lYj7Sw-weytS4w2SGYmPKM-8mi0.mft (raw, json) Hash identifier: e/D9tovLey7M2nMDhw8hfHh20grLa7nprC32KrZgmTo= Subject key identifier: 7F:86:CF:D4:89:16:7E:0C:CF:8F:9A:BC:01:E0:ED:47:DF:AD:6C:36 Authority key identifier: 95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D Certificate issuer: /CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d Certificate serial: 019B48B98514102BD2A13331A147D31F5105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft Manifest number: 150B Signing time: Tue 23 Dec 2025 01:01:16 +0000 Manifest this update: Tue 23 Dec 2025 01:01:16 +0000 Manifest next update: Wed 24 Dec 2025 01:01:16 +0000 Files and hashes: 1: cpaYv-AQ-t9zhgKKXsvKBzFcSaQ.roa (hash: QH8X2hDISDdQVFPt9W1N705nATkeCHCrQhlKJMRWx8A=) 2: lYj7Sw-weytS4w2SGYmPKM-8mi0.crl (hash: q3xcKg0k4xL1YQfWZQD13ylTug7FOSQC/JaOZ2XXFQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:85:14:10:2b:d2:a1:33:31:a1:47:d3:1f:51:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588fb4b0fb07b2b52e30d9219898f28cfbc9a2d Validity Not Before: Dec 23 01:01:16 2025 GMT Not After : Dec 24 01:01:16 2025 GMT Subject: CN=7f86cfd489167e0ccf8f9abc01e0ed47dfad6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:e4:36:c8:69:08:ab:ba:b5:fb:84:4d:43: 46:26:4f:97:63:91:3d:81:ec:7e:bc:d3:6c:11:18: 2d:63:db:35:0e:11:7d:15:bf:0d:43:27:98:4b:e4: 70:d7:d0:2d:e0:68:2b:51:7b:49:cd:39:cd:67:fe: cb:63:2e:92:fc:2e:d9:8a:e8:89:6d:00:0d:5d:af: de:5a:43:91:fc:e1:70:ba:bc:a7:f7:0d:7e:e1:14: 3b:bf:4b:0c:04:64:7a:2d:ed:ce:50:58:7a:61:a0: f4:ea:52:74:fd:17:e4:60:5e:00:20:2d:6f:5e:08: 04:78:e9:ff:cc:c5:da:7c:10:d6:7b:0d:56:6b:14: bd:9d:a3:a7:09:48:37:21:f1:3f:c4:5f:f5:d9:68: 90:6d:00:9e:56:f3:40:a2:55:45:0d:51:0b:73:58: 5f:b9:09:9c:45:56:ce:ca:f6:c0:d2:a5:92:5e:78: 80:07:8f:c0:e7:a6:99:ce:1e:35:0d:e8:d6:f9:f1: 76:a3:f6:e3:d6:ae:41:db:31:ce:7a:6c:18:6f:a9: 71:e1:b8:f9:e5:d1:cd:3a:00:43:db:82:17:ac:37: d5:e3:a6:61:0b:00:22:22:d1:b7:67:88:89:de:7a: b8:66:12:a0:27:79:06:67:3c:76:2c:5c:53:b1:d2: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:86:CF:D4:89:16:7E:0C:CF:8F:9A:BC:01:E0:ED:47:DF:AD:6C:36 X509v3 Authority Key Identifier: keyid:95:88:FB:4B:0F:B0:7B:2B:52:E3:0D:92:19:89:8F:28:CF:BC:9A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYj7Sw-weytS4w2SGYmPKM-8mi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fb85d3-6660-430e-9ac7-86d2c311db17/1/lYj7Sw-weytS4w2SGYmPKM-8mi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:90:16:83:89:95:71:61:cb:30:9f:7c:90:42:2d:de:1a:96: 3c:e6:81:4c:42:02:61:5b:f1:7d:5d:b1:a6:27:52:97:fb:c2: 72:42:51:90:7f:45:b6:3a:07:28:ab:f3:32:2d:33:da:c6:7b: 4c:4c:b9:d9:b8:68:01:54:a0:fd:f3:b5:19:7f:21:e6:c6:05: ff:b8:17:38:58:d9:a0:2c:c5:a0:e7:05:6a:78:29:f5:4f:73: c4:4d:8f:33:eb:33:d8:08:7d:b7:36:1c:93:fb:3d:cd:95:49: 41:ba:83:a4:47:b2:bd:56:c0:74:12:56:4d:0f:c8:b4:a5:38: df:a3:ba:b1:76:db:90:7c:8d:71:92:c9:4b:e4:86:4b:61:88: 72:23:b8:9b:81:bc:31:03:00:ef:f8:1a:fc:ac:e0:ed:a5:60: 94:56:6e:b5:5e:a6:c7:d9:b5:3b:27:2a:06:01:8e:1c:5e:cd: 30:f3:96:9a:5e:cc:ad:62:e7:7e:db:94:9b:07:e1:27:f1:4c: df:67:5d:18:37:b7:5f:f9:69:e8:d0:df:20:9f:d8:85:34:2f: aa:fb:fb:1e:e1:52:d5:5c:f6:ab:b0:d6:b6:09:0c:35:84:ba: 31:f2:d0:20:28:2a:f5:c1:58:98:a6:57:ea:8c:65:a6:2f:66: 78:56:bb:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuYUUECvSoTMxoUfTH1EFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhmYjRiMGZiMDdiMmI1MmUzMGQ5MjE5ODk4ZjI4Y2Zi YzlhMmQwHhcNMjUxMjIzMDEwMTE2WhcNMjUxMjI0MDEwMTE2WjAzMTEwLwYDVQQD Eyg3Zjg2Y2ZkNDg5MTY3ZTBjY2Y4ZjlhYmMwMWUwZWQ0N2RmYWQ2YzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva3kNshpCKu6tfuETUNGJk+XY5E9 gex+vNNsERgtY9s1DhF9Fb8NQyeYS+Rw19At4GgrUXtJzTnNZ/7LYy6S/C7ZiuiJ bQANXa/eWkOR/OFwuryn9w1+4RQ7v0sMBGR6Le3OUFh6YaD06lJ0/RfkYF4AIC1v XggEeOn/zMXafBDWew1WaxS9naOnCUg3IfE/xF/12WiQbQCeVvNAolVFDVELc1hf uQmcRVbOyvbA0qWSXniAB4/A56aZzh41DejW+fF2o/bj1q5B2zHOemwYb6lx4bj5 5dHNOgBD24IXrDfV46ZhCwAiItG3Z4iJ3nq4ZhKgJ3kGZzx2LFxTsdLuxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Gz9SJFn4Mz4+avAHg7UffrWw2MB8GA1UdIwQY MBaAFJWI+0sPsHsrUuMNkhmJjyjPvJotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzct ODZkMmMzMTFkYjE3LzEvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mYjg1ZDMtNjY2MC00MzBlLTlhYzctODZkMmMzMTFkYjE3 LzEvbFlqN1N3LXdleXRTNHcyU0dZbVBLTS04bWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5AWg4mV cWHLMJ98kEIt3hqWPOaBTEICYVvxfV2xpidSl/vCckJRkH9FtjoHKKvzMi0z2sZ7 TEy52bhoAVSg/fO1GX8h5sYF/7gXOFjZoCzFoOcFangp9U9zxE2PM+sz2Ah9tzYc k/s9zZVJQbqDpEeyvVbAdBJWTQ/ItKU436O6sXbbkHyNcZLJS+SGS2GIciO4m4G8 MQMA7/ga/Kzg7aVglFZutV6mx9m1OycqBgGOHF7NMPOWml7MrWLnftuUmwfhJ/FM 32ddGDe3X/lp6NDfIJ/YhTQvqvv7HuFS1Vz2q7DWtgkMNYS6MfLQICgq9cFYmKZX 6oxlpi9meFa7RQ== -----END CERTIFICATE-----Generated at Tue Dec 23 11:19:23 2025 by rpki-client