This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft File: lywzrtjvsmnTdEgT0oxTYJLnzzg.mft (raw, json) Hash identifier: wWhEpwARRe8Tr999fTlCwIvlzQHmjXW6Uo9w8En9vwY= Subject key identifier: 45:65:F7:CE:C4:75:9D:E6:36:EF:33:21:CF:DA:C2:D6:49:CD:51:A9 Authority key identifier: 97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 Certificate issuer: /CN=972c33aed8efb269d3744813d28c536092e7cf38 Certificate serial: 019B5975EF8CAA4750FA68B2402088F2B9C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft Manifest number: 0D68 Signing time: Fri 26 Dec 2025 07:00:59 +0000 Manifest this update: Fri 26 Dec 2025 07:00:59 +0000 Manifest next update: Sat 27 Dec 2025 07:00:59 +0000 Files and hashes: 1: ABgvtVRWI6brZz3FziMb4rv0_78.roa (hash: xcpeYC06fvzRoHxarxnxi+ZpU9v7tXYglNgTbxJJFa4=) 2: lywzrtjvsmnTdEgT0oxTYJLnzzg.crl (hash: 4/O6UGkwedrD2bekD4FrSsgY26A5/youi75KJNycikI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:ef:8c:aa:47:50:fa:68:b2:40:20:88:f2:b9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=972c33aed8efb269d3744813d28c536092e7cf38 Validity Not Before: Dec 26 07:00:59 2025 GMT Not After : Dec 27 07:00:59 2025 GMT Subject: CN=4565f7cec4759de636ef3321cfdac2d649cd51a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:40:4c:11:f9:d5:e3:ca:ad:0e:5f:04:50: a1:94:e3:32:3a:13:b3:b2:b9:26:ea:aa:0a:c8:48: ef:65:a9:68:4a:54:85:ad:9b:b9:d2:a8:85:97:ac: f6:be:6e:56:b0:4b:ca:60:53:00:8a:45:2b:3d:fe: 02:b8:95:b7:e4:0a:fb:66:93:9c:c5:0d:f5:9d:53: 8d:a4:ae:7b:dc:c1:9b:0c:98:19:24:7a:90:94:a1: c9:86:1c:b5:fb:2c:b0:9f:bb:11:29:16:90:20:9e: 78:8c:07:0a:ee:f6:90:58:95:e0:fe:ee:4a:46:c3: d0:15:a3:ec:cf:2c:40:20:40:5c:fc:98:cc:21:88: 46:45:62:b0:bb:05:13:db:c0:b5:f8:50:f6:85:fa: e3:cd:70:cd:62:a2:b3:d6:b6:a1:11:fd:01:66:73: 6b:7c:ae:41:99:9a:e7:49:b3:b6:46:78:4d:97:ab: 82:1b:66:f8:1d:26:be:cd:85:90:1b:6c:6c:08:02: e2:b2:fb:c0:10:2f:1c:65:5c:00:15:2e:de:4e:12: 90:87:49:7b:0b:e7:03:76:87:53:8d:7c:75:94:ed: 65:7e:da:af:bc:58:76:8a:d0:a0:57:7d:d8:11:cd: 3d:a4:1b:06:ae:e4:73:a8:54:0e:2f:da:d6:eb:16: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:F7:CE:C4:75:9D:E6:36:EF:33:21:CF:DA:C2:D6:49:CD:51:A9 X509v3 Authority Key Identifier: keyid:97:2C:33:AE:D8:EF:B2:69:D3:74:48:13:D2:8C:53:60:92:E7:CF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lywzrtjvsmnTdEgT0oxTYJLnzzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/31fa99-c853-4d02-b53d-d250e45b1620/1/lywzrtjvsmnTdEgT0oxTYJLnzzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0a:5c:41:f1:dd:5a:fb:54:38:d5:4c:36:4a:e9:f7:3f:11: 3d:11:9a:a4:e8:ca:9b:2b:3b:4e:23:2a:30:71:f7:85:cd:9b: 49:a5:e0:41:3a:98:e3:ca:12:de:db:c2:84:99:81:39:2c:a2: 2d:5d:2d:eb:58:b4:75:03:51:6b:3f:46:5d:0f:c7:1e:66:e5: 32:4f:88:e9:47:eb:ab:d4:9e:69:6c:1f:2b:14:2b:d6:dc:9a: 18:1e:3d:5b:59:b1:f2:64:b4:7a:8c:79:1b:5d:b3:cc:9f:3b: 73:6d:1f:52:16:86:b3:f0:d1:53:8d:b9:59:12:6e:cd:45:4c: 43:e8:cf:d4:f9:d5:78:a0:33:58:30:9b:91:b0:ca:7c:cf:6a: 00:93:3a:53:37:ed:bf:c2:fd:01:3e:ce:64:b2:38:32:98:2e: 85:3c:f6:e0:ee:ef:f9:59:f2:e3:39:e9:0d:a5:2f:6d:6b:88: 66:20:ed:26:6a:9f:55:60:20:a0:d7:5f:1c:8b:af:63:87:e8: a5:a7:30:9d:a4:01:c7:9b:ec:e9:c3:6c:a0:90:c4:7e:ba:11: 45:7e:67:da:22:2f:d6:48:46:3b:10:33:db:f5:b6:1a:09:d9: 5a:38:85:5a:01:af:9d:65:b4:7d:76:ee:ec:3f:f9:96:b1:bd: 26:82:88:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZde+MqkdQ+miyQCCI8rnFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MmMzM2FlZDhlZmIyNjlkMzc0NDgxM2QyOGM1MzYwOTJl N2NmMzgwHhcNMjUxMjI2MDcwMDU5WhcNMjUxMjI3MDcwMDU5WjAzMTEwLwYDVQQD Eyg0NTY1ZjdjZWM0NzU5ZGU2MzZlZjMzMjFjZmRhYzJkNjQ5Y2Q1MWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuolATBH51ePKrQ5fBFChlOMyOhOz srkm6qoKyEjvZaloSlSFrZu50qiFl6z2vm5WsEvKYFMAikUrPf4CuJW35Ar7ZpOc xQ31nVONpK573MGbDJgZJHqQlKHJhhy1+yywn7sRKRaQIJ54jAcK7vaQWJXg/u5K RsPQFaPszyxAIEBc/JjMIYhGRWKwuwUT28C1+FD2hfrjzXDNYqKz1rahEf0BZnNr fK5BmZrnSbO2RnhNl6uCG2b4HSa+zYWQG2xsCALisvvAEC8cZVwAFS7eThKQh0l7 C+cDdodTjXx1lO1lftqvvFh2itCgV33YEc09pBsGruRzqFQOL9rW6xbZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVl987EdZ3mNu8zIc/awtZJzVGpMB8GA1UdIwQY MBaAFJcsM67Y77Jp03RIE9KMU2CS5884MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2Qt ZDI1MGU0NWIxNjIwLzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zMWZhOTktYzg1My00ZDAyLWI1M2QtZDI1MGU0NWIxNjIw LzEvbHl3enJ0anZzbW5UZEVnVDBveFRZSkxuenpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVApcQfHd WvtUONVMNkrp9z8RPRGapOjKmys7TiMqMHH3hc2bSaXgQTqY48oS3tvChJmBOSyi LV0t61i0dQNRaz9GXQ/HHmblMk+I6Ufrq9SeaWwfKxQr1tyaGB49W1mx8mS0eox5 G12zzJ87c20fUhaGs/DRU425WRJuzUVMQ+jP1PnVeKAzWDCbkbDKfM9qAJM6Uzft v8L9AT7OZLI4MpguhTz24O7v+Vny4znpDaUvbWuIZiDtJmqfVWAgoNdfHIuvY4fo pacwnaQBx5vs6cNsoJDEfroRRX5n2iIv1khGOxAz2/W2GgnZWjiFWgGvnWW0fXbu 7D/5lrG9JoKIHA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:59 2025 by rpki-client