This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft File: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft (raw, json) Hash identifier: p/sWrodWdCMrQ6+5rXNkT/8MXWOD+eYh2Yhwvt+V444= Subject key identifier: 61:1E:9D:B2:D7:51:6F:DB:4F:0D:A0:14:A6:5A:08:F4:C8:5A:AF:49 Authority key identifier: 2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 Certificate issuer: /CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Certificate serial: 019B1B3BADCA4B5B554EAA5DF953791908DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft Manifest number: 1032 Signing time: Sun 14 Dec 2025 05:00:54 +0000 Manifest this update: Sun 14 Dec 2025 05:00:54 +0000 Manifest next update: Mon 15 Dec 2025 05:00:54 +0000 Files and hashes: 1: LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl (hash: I25r83W8eyk7OssHDRrdwvUR9KvrdiNgrY7hOTTw1Cg=) 2: _6CqBvaGO8l98qKQS4UQ5uuqsF8.roa (hash: FoGvspw+M2CgRLwzfJ/bGgi4xROU+ZoOm3ySFK+vQAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:ad:ca:4b:5b:55:4e:aa:5d:f9:53:79:19:08:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f24d0592ae12e950d88f8c6ae0a92f0b35cd0e4 Validity Not Before: Dec 14 05:00:54 2025 GMT Not After : Dec 15 05:00:54 2025 GMT Subject: CN=611e9db2d7516fdb4f0da014a65a08f4c85aaf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:8d:9e:41:2a:fc:28:48:bf:4e:94:5e:88: 95:dd:36:6b:c1:75:48:51:61:8a:b1:8b:a3:08:24: f4:54:a5:bb:84:b7:05:01:4c:87:e5:ed:c5:7e:cc: 81:16:03:aa:c3:80:5d:4f:b2:c9:7d:8b:a0:b5:29: 71:e1:85:d1:00:c2:2a:b5:f9:92:9e:dc:c9:ed:a9: 63:65:71:9d:c6:a2:03:8e:0c:d3:d0:0a:7c:f6:1d: c8:f5:8d:09:80:06:59:48:65:03:d9:0f:4d:7d:80: 83:ea:de:9a:99:de:49:f5:30:09:3a:a8:6b:06:a9: 5f:28:c2:0b:11:e1:ef:1a:73:ad:e2:0b:a1:0f:16: f4:fc:fd:47:a9:70:75:e6:bc:c2:84:1a:25:29:3c: f2:bd:e1:e3:3b:4b:84:86:69:3d:16:54:75:78:94: b1:a4:ef:42:40:7a:3c:88:cc:04:65:6d:2c:64:0d: e6:31:28:78:5f:8b:ac:71:94:05:0b:ff:8b:76:32: 1b:25:9b:03:16:ef:d3:af:46:34:d6:9b:35:a5:60: 8a:ff:8a:0e:01:f4:b5:ba:12:e2:0b:d9:24:1d:cc: 3c:a1:96:b3:4d:87:3a:1e:06:0b:1c:89:ed:18:fe: ee:39:c1:2f:ae:3e:a8:a4:e3:dd:c4:24:36:81:52: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:9D:B2:D7:51:6F:DB:4F:0D:A0:14:A6:5A:08:F4:C8:5A:AF:49 X509v3 Authority Key Identifier: keyid:2F:24:D0:59:2A:E1:2E:95:0D:88:F8:C6:AE:0A:92:F0:B3:5C:D0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f9c01c-7b7c-4e04-a865-3314d1940bf9/1/LyTQWSrhLpUNiPjGrgqS8LNc0OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:47:2f:1c:6d:6e:53:f5:c5:3a:59:91:5c:35:03:54:71:7d: c9:25:bb:a6:af:c4:5b:88:54:22:28:e0:43:e2:21:53:3e:00: 3b:e9:d2:a0:c9:69:ef:7a:db:73:69:21:bf:28:15:ad:70:4c: 55:3f:5b:58:66:b7:5a:1e:9b:8c:13:86:4f:61:f7:ae:57:15: e2:ca:58:77:df:a7:08:68:aa:fc:79:43:50:d3:6a:02:3b:fe: a2:f8:ca:b3:69:69:12:24:7c:71:d0:be:66:35:e7:b0:ac:eb: 5c:55:e4:60:b1:bf:0e:53:d2:9e:9b:be:13:7d:59:5f:ea:20: 08:05:40:06:ad:12:7a:64:df:02:47:56:d4:4f:91:cd:1b:7c: 2b:de:81:62:ca:05:ca:11:36:c6:72:84:26:d0:f7:41:e3:fe: f4:2e:4d:02:cb:72:ac:fa:9e:d3:e9:7d:d6:2f:ab:e5:8e:3f: 67:c5:d2:c7:a8:2a:2e:08:45:cb:89:1d:1b:78:d8:61:58:30: 16:14:7b:08:01:f5:7e:0a:2b:45:75:9a:0a:e0:cd:fc:29:fb: 0a:0b:d5:f4:8a:47:ed:a2:4a:58:6a:d0:c8:5f:62:2e:ad:3e: e1:a6:6d:57:3e:4c:71:14:58:5f:46:a6:f3:40:37:f0:50:8c: f0:64:ab:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO63KS1tVTqpd+VN5GQjcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjRkMDU5MmFlMTJlOTUwZDg4ZjhjNmFlMGE5MmYwYjM1 Y2QwZTQwHhcNMjUxMjE0MDUwMDU0WhcNMjUxMjE1MDUwMDU0WjAzMTEwLwYDVQQD Eyg2MTFlOWRiMmQ3NTE2ZmRiNGYwZGEwMTRhNjVhMDhmNGM4NWFhZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOONnkEq/ChIv06UXoiV3TZrwXVI UWGKsYujCCT0VKW7hLcFAUyH5e3FfsyBFgOqw4BdT7LJfYugtSlx4YXRAMIqtfmS ntzJ7aljZXGdxqIDjgzT0Ap89h3I9Y0JgAZZSGUD2Q9NfYCD6t6amd5J9TAJOqhr BqlfKMILEeHvGnOt4guhDxb0/P1HqXB15rzChBolKTzyveHjO0uEhmk9FlR1eJSx pO9CQHo8iMwEZW0sZA3mMSh4X4uscZQFC/+LdjIbJZsDFu/Tr0Y01ps1pWCK/4oO AfS1uhLiC9kkHcw8oZazTYc6HgYLHIntGP7uOcEvrj6opOPdxCQ2gVKiGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEenbLXUW/bTw2gFKZaCPTIWq9JMB8GA1UdIwQY MBaAFC8k0Fkq4S6VDYj4xq4KkvCzXNDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUt MzMxNGQxOTQwYmY5LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mOWMwMWMtN2I3Yy00ZTA0LWE4NjUtMzMxNGQxOTQwYmY5 LzEvTHlUUVdTcmhMcFVOaVBqR3JncVM4TE5jME9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUcvHG1u U/XFOlmRXDUDVHF9ySW7pq/EW4hUIijgQ+IhUz4AO+nSoMlp73rbc2khvygVrXBM VT9bWGa3Wh6bjBOGT2H3rlcV4spYd9+nCGiq/HlDUNNqAjv+ovjKs2lpEiR8cdC+ ZjXnsKzrXFXkYLG/DlPSnpu+E31ZX+ogCAVABq0SemTfAkdW1E+RzRt8K96BYsoF yhE2xnKEJtD3QeP+9C5NAstyrPqe0+l91i+r5Y4/Z8XSx6gqLghFy4kdG3jYYVgw FhR7CAH1fgorRXWaCuDN/Cn7CgvV9IpH7aJKWGrQyF9iLq0+4aZtVz5McRRYX0am 80A38FCM8GSrrQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:16 2025 by rpki-client