This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json) Hash identifier: w7WioGSp692V8VT8g8nDyfqU45h4ufr390/+S1TJQwE= Subject key identifier: 18:7D:C4:71:B0:12:CE:00:E4:58:93:98:0E:22:4A:A6:F0:B2:C1:87 Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019B0C37BD962B483BB8F83B31A1E12DC7FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft Manifest number: 0676 Signing time: Thu 11 Dec 2025 07:02:18 +0000 Manifest this update: Thu 11 Dec 2025 07:02:18 +0000 Manifest next update: Fri 12 Dec 2025 07:02:18 +0000 Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: w8TZWWWnThtYySV/2P4yP2+Ql9ZSx+fAYapzzg5SSUs=) 2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=) 3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:37:bd:96:2b:48:3b:b8:f8:3b:31:a1:e1:2d:c7:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Dec 11 07:02:18 2025 GMT Not After : Dec 12 07:02:18 2025 GMT Subject: CN=187dc471b012ce00e45893980e224aa6f0b2c187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:73:dc:cb:c4:95:6c:9c:2b:f6:f6:ce:f3: 60:b0:bd:0e:eb:f3:1c:3e:a2:7d:30:5d:26:e6:48: 5b:ef:ca:38:c1:36:30:95:71:24:d5:34:2a:58:3c: 2e:91:35:93:aa:73:75:d4:a5:d5:ef:60:5c:96:d6: 11:98:d4:79:c4:4a:87:40:e9:64:fd:c8:56:3d:98: dc:02:14:f6:90:92:35:e3:7a:4b:6e:f8:08:ff:a2: 3d:b7:0e:a8:3f:d5:0b:d0:7f:02:89:74:0d:2d:57: c1:2a:fe:e2:36:b0:cb:3a:e5:ca:ce:5c:87:02:56: 7a:1e:89:04:13:73:fc:82:ca:96:ca:91:d3:b1:3d: 48:50:9a:c0:09:56:01:44:33:f5:e3:86:52:27:34: 26:c2:59:3b:d8:29:ae:96:29:32:6e:62:3a:b7:c7: d1:96:39:35:8d:88:78:8d:54:5f:d9:e7:cd:5c:93: 18:5c:7e:83:48:98:f7:7b:b2:22:bf:55:8e:b0:86: 7c:82:78:d1:20:bd:53:50:ce:e1:1d:83:01:10:55: 83:4a:90:d7:56:2b:ad:39:29:8e:88:f9:88:33:ed: 0a:0d:41:e3:5d:7a:cd:ae:3c:b4:c7:c0:15:66:bc: d2:90:74:f0:21:21:b5:17:59:a4:76:d7:2c:79:ec: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:C4:71:B0:12:CE:00:E4:58:93:98:0E:22:4A:A6:F0:B2:C1:87 X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:25:66:58:42:6c:58:3b:85:6f:f6:21:42:d6:94:10:6a:61: 8d:2d:15:c4:38:ee:9d:42:b0:ec:24:32:f8:cb:b3:9c:a1:ea: e2:b1:35:76:29:a5:fd:f7:00:ec:59:71:1f:c5:4a:e8:90:e3: 7a:42:92:3e:e5:a2:d1:7c:7e:5e:8e:86:12:7e:ff:1f:11:38: c4:07:cc:c1:72:09:8c:98:7e:9f:e6:be:36:cc:33:06:f0:6a: ca:c0:00:6b:ab:5f:fa:f9:8a:e3:85:75:52:ea:d0:88:de:d0: 5e:9e:c5:56:a5:3a:b2:20:d8:8f:d9:b1:fe:8b:0f:71:ab:85: 0e:47:9a:df:b9:a0:3b:71:d8:62:9a:2f:f2:32:77:6c:db:01: 99:0d:7d:ac:41:ca:10:6a:e9:bc:89:83:7d:9f:19:e1:39:4a: a0:d0:67:19:58:81:72:5a:81:c4:29:cf:c7:f6:d5:9f:3a:0c: ca:6f:db:c4:5f:6e:48:d7:04:68:27:fc:82:20:1a:e8:51:88: 81:a0:49:b8:67:8a:74:f5:62:16:90:8a:27:5c:9e:f7:82:4b: dc:ab:8a:4b:84:7c:fc:c1:c5:91:ec:fa:83:1d:1a:9b:af:58: 16:93:5a:b8:c1:02:cf:f7:03:42:6b:ad:08:2c:4a:54:a2:9f: 42:ef:0a:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMN72WK0g7uPg7MaHhLcf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjUxMjExMDcwMjE4WhcNMjUxMjEyMDcwMjE4WjAzMTEwLwYDVQQD EygxODdkYzQ3MWIwMTJjZTAwZTQ1ODkzOTgwZTIyNGFhNmYwYjJjMTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1z3MvElWycK/b2zvNgsL0O6/Mc PqJ9MF0m5khb78o4wTYwlXEk1TQqWDwukTWTqnN11KXV72BcltYRmNR5xEqHQOlk /chWPZjcAhT2kJI143pLbvgI/6I9tw6oP9UL0H8CiXQNLVfBKv7iNrDLOuXKzlyH AlZ6HokEE3P8gsqWypHTsT1IUJrACVYBRDP144ZSJzQmwlk72CmulikybmI6t8fR ljk1jYh4jVRf2efNXJMYXH6DSJj3e7Iiv1WOsIZ8gnjRIL1TUM7hHYMBEFWDSpDX ViutOSmOiPmIM+0KDUHjXXrNrjy0x8AVZrzSkHTwISG1F1mkdtcseexYSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh9xHGwEs4A5FiTmA4iSqbwssGHMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSVmWEJs WDuFb/YhQtaUEGphjS0VxDjunUKw7CQy+MuznKHq4rE1diml/fcA7FlxH8VK6JDj ekKSPuWi0Xx+Xo6GEn7/HxE4xAfMwXIJjJh+n+a+NswzBvBqysAAa6tf+vmK44V1 UurQiN7QXp7FVqU6siDYj9mx/osPcauFDkea37mgO3HYYpov8jJ3bNsBmQ19rEHK EGrpvImDfZ8Z4TlKoNBnGViBclqBxCnPx/bVnzoMym/bxF9uSNcEaCf8giAa6FGI gaBJuGeKdPViFpCKJ1ye94JL3KuKS4R8/MHFkez6gx0am69YFpNauMECz/cDQmut CCxKVKKfQu8K7A== -----END CERTIFICATE-----Generated at Thu Dec 11 10:29:02 2025 by rpki-client