This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft File: lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json) Hash identifier: LfU6pRcSvL5sN5Wo8U0HFaczZVKJP92QyGSytidqoiw= Subject key identifier: 11:BA:56:AA:24:29:FA:6F:E7:60:E2:68:48:20:F8:12:6A:ED:4A:62 Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D Certificate issuer: /CN=9585c19915455835457413ef222a7d375b29901d Certificate serial: 019B3A8F6AF7447805658ED1E550A617B98A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:00:36 +0000 Manifest this update: Sat 20 Dec 2025 07:00:36 +0000 Manifest next update: Sun 21 Dec 2025 07:00:36 +0000 Files and hashes: 1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=) 2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=) 3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: TRvOdfdsP0wot1opYKYkNYjyAr+ovRlCxFtyM2g80R8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:6a:f7:44:78:05:65:8e:d1:e5:50:a6:17:b9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9585c19915455835457413ef222a7d375b29901d Validity Not Before: Dec 20 07:00:36 2025 GMT Not After : Dec 21 07:00:36 2025 GMT Subject: CN=11ba56aa2429fa6fe760e2684820f8126aed4a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:1e:91:43:f1:b6:bb:06:9a:8f:c7:ac:9c: ce:f0:0e:5e:d9:75:4b:03:d7:a8:77:10:91:e5:cc: 51:ed:76:14:2b:4c:07:c2:64:bc:da:52:5b:8d:c2: bd:fa:60:13:29:7d:f3:ef:c8:cb:35:f6:43:35:58: cd:fa:90:3e:c9:aa:ab:c8:3e:38:13:59:cf:6c:31: da:cb:94:23:54:72:5d:92:12:fb:25:5b:6c:11:79: 24:ff:20:33:d4:b3:6d:98:1a:55:9f:58:4d:1c:bf: cd:00:7a:4c:c5:c6:be:ba:be:a3:eb:09:fd:db:2c: 02:ab:c4:d8:34:85:d8:08:b8:3d:70:93:e6:fb:ff: 02:7a:18:b2:30:85:e0:f4:c8:b7:55:73:d5:21:a5: eb:b5:dd:c3:d0:cd:79:77:0a:bd:13:d4:69:be:ee: bd:9d:14:5c:43:8e:58:b2:f7:2e:27:84:df:f7:4e: 69:b6:e5:36:32:7c:c6:f9:5f:77:54:9f:2c:45:22: 97:eb:30:7a:a5:41:18:c6:8a:eb:71:3d:e0:e3:e6: 65:3c:9c:8e:6e:aa:21:c9:1c:aa:f8:ff:33:09:40: a7:ae:21:2a:67:df:ab:b6:70:4a:c5:0d:94:fd:7f: 5d:68:d3:9d:c7:98:77:74:7e:e9:5d:77:b0:52:05: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BA:56:AA:24:29:FA:6F:E7:60:E2:68:48:20:F8:12:6A:ED:4A:62 X509v3 Authority Key Identifier: keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:28:2c:c7:47:72:49:b4:4b:73:11:33:b7:9a:98:16:9c:65: 63:96:1a:90:af:75:68:7a:89:aa:ae:d2:33:6c:87:32:4a:fe: 72:3f:31:58:6d:e0:05:6f:4d:e7:c3:7c:50:93:27:d8:0b:ed: 7d:57:3f:5a:7e:f9:19:e1:39:83:97:f5:d5:f7:d0:46:a6:fe: 07:9f:46:22:7c:bf:f8:a7:c9:3c:b8:90:21:8a:b7:be:2a:49: 40:81:d9:4c:c5:fd:9c:88:ca:37:c6:66:88:de:9c:45:c2:44: 0a:f2:bd:4c:c3:48:26:46:52:95:d1:a2:6b:73:36:f0:77:99: ae:0c:ae:a1:a6:c0:e8:f3:64:10:57:7c:ea:11:7e:5d:32:b7: fe:0f:89:f1:95:bf:2c:5e:4d:aa:79:23:4a:05:df:eb:f9:bd: 08:eb:54:25:24:fd:b2:8d:28:fb:2f:b6:84:dc:8a:d0:9c:6e: 88:b3:83:ed:fe:04:68:52:67:45:d6:31:e7:57:03:6f:dc:9b: 7f:f2:a5:f8:d8:64:e4:ef:13:d2:e7:b3:84:11:d4:d7:24:d7: 49:f9:4f:1a:a6:9b:6a:ad:0c:bb:01:00:71:b9:e8:18:e2:fd: 85:3b:a9:a9:2a:35:06:ca:2e:d8:7c:3a:7b:08:91:4f:8e:00: 27:00:42:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j2r3RHgFZY7R5VCmF7mKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODVjMTk5MTU0NTU4MzU0NTc0MTNlZjIyMmE3ZDM3NWIy OTkwMWQwHhcNMjUxMjIwMDcwMDM2WhcNMjUxMjIxMDcwMDM2WjAzMTEwLwYDVQQD EygxMWJhNTZhYTI0MjlmYTZmZTc2MGUyNjg0ODIwZjgxMjZhZWQ0YTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3wekUPxtrsGmo/HrJzO8A5e2XVL A9eodxCR5cxR7XYUK0wHwmS82lJbjcK9+mATKX3z78jLNfZDNVjN+pA+yaqryD44 E1nPbDHay5QjVHJdkhL7JVtsEXkk/yAz1LNtmBpVn1hNHL/NAHpMxca+ur6j6wn9 2ywCq8TYNIXYCLg9cJPm+/8CehiyMIXg9Mi3VXPVIaXrtd3D0M15dwq9E9Rpvu69 nRRcQ45YsvcuJ4Tf905ptuU2MnzG+V93VJ8sRSKX6zB6pUEYxorrcT3g4+ZlPJyO bqohyRyq+P8zCUCnriEqZ9+rtnBKxQ2U/X9daNOdx5h3dH7pXXewUgUHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG6VqokKfpv52DiaEgg+BJq7UpiMB8GA1UdIwQY MBaAFJWFwZkVRVg1RXQT7yIqfTdbKZAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMt NzcyOTE4ZmZmNTQ0LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZjU3NTgtYWZmNy00ZDg4LWI3ZGMtNzcyOTE4ZmZmNTQ0 LzEvbFlYQm1SVkZXRFZGZEJQdklpcDlOMXNwa0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbygsx0dy SbRLcxEzt5qYFpxlY5YakK91aHqJqq7SM2yHMkr+cj8xWG3gBW9N58N8UJMn2Avt fVc/Wn75GeE5g5f11ffQRqb+B59GIny/+KfJPLiQIYq3vipJQIHZTMX9nIjKN8Zm iN6cRcJECvK9TMNIJkZSldGia3M28HeZrgyuoabA6PNkEFd86hF+XTK3/g+J8ZW/ LF5NqnkjSgXf6/m9COtUJST9so0o+y+2hNyK0JxuiLOD7f4EaFJnRdYx51cDb9yb f/Kl+Nhk5O8T0uezhBHU1yTXSflPGqabaq0MuwEAcbnoGOL9hTupqSo1Bsou2Hw6 ewiRT44AJwBCug== -----END CERTIFICATE-----Generated at Sat Dec 20 16:19:10 2025 by rpki-client