This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json) Hash identifier: RjEnn7QGd0wWd17xzGyHrGfb/56IqryDhv1RGrIT284= Subject key identifier: 5F:9D:28:90:3E:16:E5:DE:86:05:4D:91:AC:B8:85:97:A3:61:4F:6A Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Certificate serial: 019B04B3F58AEC42181F52D72A1689E6FD29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft Manifest number: 1769 Signing time: Tue 09 Dec 2025 20:01:01 +0000 Manifest this update: Tue 09 Dec 2025 20:01:01 +0000 Manifest next update: Wed 10 Dec 2025 20:01:01 +0000 Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=) 2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: mwicC0kCzODiLQMnbTZOv8kbwvWXTu9cJTftqmWocbQ=) 3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:b3:f5:8a:ec:42:18:1f:52:d7:2a:16:89:e6:fd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Validity Not Before: Dec 9 20:01:01 2025 GMT Not After : Dec 10 20:01:01 2025 GMT Subject: CN=5f9d28903e16e5de86054d91acb88597a3614f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:34:62:ad:9e:cf:74:4c:0a:16:17:ff:c0: 0b:71:f3:ad:00:78:a6:b0:be:b6:b1:40:9a:83:6b: ea:ee:8d:c8:18:ab:42:47:61:33:9b:f9:ba:d6:f6: 8a:5a:84:c6:8e:19:67:16:7b:5a:c4:c4:13:e2:1f: 84:83:ac:34:ee:c2:8b:5c:2a:40:d9:8f:32:0c:0b: 8f:77:4d:2f:54:b9:a8:ce:62:4b:f2:75:c7:2c:24: 6f:65:55:c0:42:e8:c1:47:da:aa:f8:db:7c:eb:6a: f8:72:a1:f5:0a:e3:10:89:84:2b:b2:8d:1d:81:44: d3:08:80:5b:30:dd:a2:77:9e:52:ba:b5:ed:da:d9: 30:16:65:5f:92:63:df:2c:0d:0d:a3:0f:80:d9:e6: 13:88:4e:09:e5:0a:d2:8e:aa:84:b8:78:46:74:31: a8:f9:a5:b2:1d:56:3f:1e:bb:fa:7d:8a:57:37:3a: 59:8e:74:d0:10:5a:81:80:9a:28:5f:61:4c:d2:df: d0:35:62:ec:3b:a5:9c:6f:02:7b:24:fa:4a:c6:d8: 0a:d2:83:e9:ca:ba:75:2f:d6:57:92:60:bd:96:8b: 72:aa:33:55:c7:b7:f0:6c:13:cd:23:e1:13:a5:ad: d1:01:d9:b6:cd:47:77:58:8c:b3:ad:9c:b9:05:f5: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:28:90:3E:16:E5:DE:86:05:4D:91:AC:B8:85:97:A3:61:4F:6A X509v3 Authority Key Identifier: keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4f:d1:ab:ab:16:fd:ef:66:9c:19:78:b3:21:28:46:9b:62: a7:cd:23:d5:21:53:cc:b9:5d:2f:d6:20:fa:12:b2:16:5d:2a: 61:c1:78:14:62:58:70:e5:99:d4:2b:60:81:d1:ed:41:f4:b7: cd:72:bb:b3:9c:5f:87:05:26:35:a1:af:3b:a8:7c:22:e8:00: ec:f6:7d:cf:bc:9a:d8:2f:9c:73:26:a0:98:56:b1:83:59:43: be:59:d4:fa:d8:9d:5e:4f:fc:ce:d9:d5:76:1f:76:e5:13:a6: 18:e1:b0:40:8c:cc:ad:58:4f:33:3f:d2:7a:51:b7:36:90:0c: 88:bf:5e:5a:c6:a5:1d:48:32:f9:59:6d:cc:74:38:15:42:da: 14:d8:5a:10:18:15:41:e6:09:da:69:1a:92:cf:63:96:6f:3a: 7a:34:45:f1:55:8a:30:05:50:1f:53:1f:52:5e:df:47:31:5f: 00:75:05:8f:50:d9:14:e6:26:40:67:43:23:ad:88:13:ae:50: d8:4e:24:8d:9b:58:e2:80:26:b6:a5:6a:dd:96:cb:bd:a3:4a: 60:a1:ab:b3:2a:b2:5f:cf:9e:2a:06:bc:50:a6:68:2a:27:3b: 8e:2b:c6:aa:76:ce:f3:cf:3d:69:3f:a5:a1:0e:77:bb:24:6d: 60:7f:3e:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEs/WK7EIYH1LXKhaJ5v0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi OTZkZDYwHhcNMjUxMjA5MjAwMTAxWhcNMjUxMjEwMjAwMTAxWjAzMTEwLwYDVQQD Eyg1ZjlkMjg5MDNlMTZlNWRlODYwNTRkOTFhY2I4ODU5N2EzNjE0ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK00Yq2ez3RMChYX/8ALcfOtAHim sL62sUCag2vq7o3IGKtCR2Ezm/m61vaKWoTGjhlnFntaxMQT4h+Eg6w07sKLXCpA 2Y8yDAuPd00vVLmozmJL8nXHLCRvZVXAQujBR9qq+Nt862r4cqH1CuMQiYQrso0d gUTTCIBbMN2id55SurXt2tkwFmVfkmPfLA0Now+A2eYTiE4J5QrSjqqEuHhGdDGo +aWyHVY/Hrv6fYpXNzpZjnTQEFqBgJooX2FM0t/QNWLsO6WcbwJ7JPpKxtgK0oPp yrp1L9ZXkmC9lotyqjNVx7fwbBPNI+ETpa3RAdm2zUd3WIyzrZy5BfXVDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+dKJA+FuXehgVNkay4hZejYU9qMB8GA1UdIwQY MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt MjAxNjdjZDQyYjgyLzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE/Rq6sW /e9mnBl4syEoRptip80j1SFTzLldL9Yg+hKyFl0qYcF4FGJYcOWZ1CtggdHtQfS3 zXK7s5xfhwUmNaGvO6h8IugA7PZ9z7ya2C+ccyagmFaxg1lDvlnU+tidXk/8ztnV dh925ROmGOGwQIzMrVhPMz/SelG3NpAMiL9eWsalHUgy+VltzHQ4FULaFNhaEBgV QeYJ2mkaks9jlm86ejRF8VWKMAVQH1MfUl7fRzFfAHUFj1DZFOYmQGdDI62IE65Q 2E4kjZtY4oAmtqVq3ZbLvaNKYKGrsyqyX8+eKga8UKZoKic7jivGqnbO8889aT+l oQ53uyRtYH8+Yw== -----END CERTIFICATE-----Generated at Wed Dec 10 06:16:50 2025 by rpki-client