This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft File: LycJyzmcThaMy9oW2xNrW8i5bdY.mft (raw, json) Hash identifier: UbyI5ImozGMAQL2/lk2R/qlyzz8Mu0XhBdqhyMInrRc= Subject key identifier: EA:F4:BB:AB:FF:6B:39:19:76:D4:77:6A:20:5F:8B:36:5E:71:04:A9 Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Certificate serial: 019B446EDE7F29295D748FC8741D7AFE0B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 05:01:15 +0000 Manifest this update: Mon 22 Dec 2025 05:01:15 +0000 Manifest next update: Tue 23 Dec 2025 05:01:15 +0000 Files and hashes: 1: G2yz5IOuIAolOcaG3P6KU7S_ojw.roa (hash: YoDPpfODBV4pY6slsVIzzeOYSsO9aQhlE67f77Baq04=) 2: LycJyzmcThaMy9oW2xNrW8i5bdY.crl (hash: AvTZTTRY7ssFFCa8ZhXHasSTP6mjZW+m3wlksV1KgZg=) 3: U7qdvgQTZuazD7khWQNd3uaoOL0.roa (hash: Fj9WtkU6QlHWuY1U49vHtYwI5RRHEp1X8dmWs3lWyeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:de:7f:29:29:5d:74:8f:c8:74:1d:7a:fe:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6 Validity Not Before: Dec 22 05:01:15 2025 GMT Not After : Dec 23 05:01:15 2025 GMT Subject: CN=eaf4bbabff6b391976d4776a205f8b365e7104a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:f7:e4:46:b0:8a:ff:9e:fd:6f:ca:6c:63: 44:f7:58:66:ae:bf:2e:43:a7:fc:a1:aa:26:fd:fa: 26:d3:a1:51:ca:f5:a9:1c:40:3b:b9:d5:41:49:39: 5b:4c:ed:18:87:07:d8:3d:e6:50:0a:0f:70:2c:d8: b3:8e:4e:29:76:bc:1e:59:06:72:ac:a5:15:52:5d: ec:bd:9d:34:bc:50:b8:e2:9a:b9:b8:9b:8a:14:ef: 39:79:4b:ce:ca:ce:35:e0:15:54:2f:ee:f9:55:e1: d5:68:40:28:35:bc:d6:49:bc:4c:be:3a:9f:f4:d1: de:a5:d2:4f:21:07:ad:85:b8:a5:89:d6:93:7e:69: cd:1a:6e:c8:e2:d3:a7:8a:16:4b:53:64:44:58:07: 89:74:eb:7c:b7:35:75:0f:27:92:cb:cb:15:4a:d4: b4:e2:2a:4a:6e:a3:e8:1d:f4:d9:e0:62:7d:27:4f: 79:f2:56:a6:dd:4b:03:cf:1c:82:8f:af:44:fd:6d: c0:44:c6:6d:4f:4f:83:2f:f9:e8:82:4b:d0:4a:12: eb:60:9b:a6:69:b1:50:da:4b:04:2d:70:5c:82:3e: 76:d0:79:16:cd:4a:82:d4:97:00:a9:10:93:bd:39: 06:73:6f:1b:09:e7:bc:2a:c2:f1:a5:2f:01:8e:ea: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F4:BB:AB:FF:6B:39:19:76:D4:77:6A:20:5F:8B:36:5E:71:04:A9 X509v3 Authority Key Identifier: keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d5:e9:28:a4:55:b6:31:fa:ed:98:c3:8d:ab:9a:a2:a2:54: f0:f7:82:95:cf:e7:37:0b:b8:38:34:28:50:58:dd:99:35:47: c1:1e:18:24:07:22:fc:7f:0c:af:46:48:49:0e:5c:6f:67:51: f8:c3:45:6e:5e:bb:4d:08:9d:4b:d6:76:64:20:9a:bb:55:cf: 00:f4:c6:34:63:93:34:90:1b:3d:62:52:6e:58:52:29:ae:51: 70:07:7f:4d:1d:a1:37:2e:0a:75:92:92:68:b4:7e:67:ff:87: 30:6c:b9:f3:b3:14:2d:e0:80:b7:24:50:7e:48:17:68:2d:cd: f2:9a:39:20:67:3e:96:4d:7f:34:d3:ec:5a:54:74:c3:35:87: 03:0b:c8:30:24:8d:5a:e0:eb:c2:d0:6f:c8:42:71:8f:6d:65: 1e:24:ee:84:49:e4:b6:6a:28:d0:b2:52:92:3d:89:72:90:da: c4:09:64:c5:5e:f0:a3:58:b5:c1:3c:4a:1d:09:c5:b3:74:cd: 76:ca:0d:dd:a9:d9:d0:ec:44:15:3a:dd:ec:ae:41:79:d9:55: a4:47:a3:a6:a0:b3:e0:af:94:b7:35:e0:f8:89:90:0b:ad:0b: 21:59:d0:74:ba:9d:5f:2f:fb:60:89:f2:56:7c:62:39:e3:9a: f0:a9:ef:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbt5/KSlddI/IdB16/gtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi OTZkZDYwHhcNMjUxMjIyMDUwMTE1WhcNMjUxMjIzMDUwMTE1WjAzMTEwLwYDVQQD EyhlYWY0YmJhYmZmNmIzOTE5NzZkNDc3NmEyMDVmOGIzNjVlNzEwNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5L35Eawiv+e/W/KbGNE91hmrr8u Q6f8oaom/fom06FRyvWpHEA7udVBSTlbTO0YhwfYPeZQCg9wLNizjk4pdrweWQZy rKUVUl3svZ00vFC44pq5uJuKFO85eUvOys414BVUL+75VeHVaEAoNbzWSbxMvjqf 9NHepdJPIQethbilidaTfmnNGm7I4tOnihZLU2REWAeJdOt8tzV1DyeSy8sVStS0 4ipKbqPoHfTZ4GJ9J0958lam3UsDzxyCj69E/W3ARMZtT0+DL/nogkvQShLrYJum abFQ2ksELXBcgj520HkWzUqC1JcAqRCTvTkGc28bCee8KsLxpS8BjupLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr0u6v/azkZdtR3aiBfizZecQSpMB8GA1UdIwQY MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt MjAxNjdjZDQyYjgyLzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9XpKKRV tjH67ZjDjauaoqJU8PeClc/nNwu4ODQoUFjdmTVHwR4YJAci/H8Mr0ZISQ5cb2dR +MNFbl67TQidS9Z2ZCCau1XPAPTGNGOTNJAbPWJSblhSKa5RcAd/TR2hNy4KdZKS aLR+Z/+HMGy587MULeCAtyRQfkgXaC3N8po5IGc+lk1/NNPsWlR0wzWHAwvIMCSN WuDrwtBvyEJxj21lHiTuhEnktmoo0LJSkj2JcpDaxAlkxV7wo1i1wTxKHQnFs3TN dsoN3anZ0OxEFTrd7K5BedlVpEejpqCz4K+UtzXg+ImQC60LIVnQdLqdXy/7YIny VnxiOeOa8KnvMg== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:18 2025 by rpki-client