This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft File: L_YYK-t7gshXPfi21RBE1sZyToI.mft (raw, json) Hash identifier: dPdAJOiAV+M8VjnYmdno1/7K2pn9+9SjL4bFb+tXI0w= Subject key identifier: B0:D0:AD:E4:AF:6D:67:7D:D6:11:59:15:45:3D:97:9F:B3:C6:DA:DB Authority key identifier: 2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 Certificate issuer: /CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Certificate serial: 019B2EFAFFE570693DF94392E01C69EBF8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft Manifest number: 0688 Signing time: Thu 18 Dec 2025 01:02:39 +0000 Manifest this update: Thu 18 Dec 2025 01:02:39 +0000 Manifest next update: Fri 19 Dec 2025 01:02:39 +0000 Files and hashes: 1: L_YYK-t7gshXPfi21RBE1sZyToI.crl (hash: L1WEztc2cRTKaVZOzp8WjK/YXAv5tXQVGt+aO12sO20=) 2: mKj7VCU5no5LHtut8FCNTeMgxrs.roa (hash: 07We1y7VE9nXCcX30DqvaFWOJDVjyaLC5AtO5yEYVdI=) 3: xhqwO8h-NtHmNo7-Qs1PvAeqCns.roa (hash: euSAJF/P/Pf62S03sCfYP3rS1wT/ay20A2O2n4ybt1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:ff:e5:70:69:3d:f9:43:92:e0:1c:69:eb:f8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff6182beb7b82c8573df8b6d51044d6c6724e82 Validity Not Before: Dec 18 01:02:39 2025 GMT Not After : Dec 19 01:02:39 2025 GMT Subject: CN=b0d0ade4af6d677dd6115915453d979fb3c6dadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:f3:71:3a:03:e5:26:6a:3f:80:28:ec:31: 24:7d:04:3c:de:38:fc:d2:24:54:e8:8a:ac:d2:47: 6c:d7:05:0e:ec:2f:d6:b2:42:d6:58:12:ec:fe:15: 38:0a:86:eb:2f:3f:63:d9:f3:31:35:8f:74:e4:f8: 4e:c6:1f:82:9f:50:82:7e:fb:23:28:8b:c5:b7:06: b2:5f:18:4b:10:00:ac:08:49:90:41:35:44:86:9d: d3:46:b1:5d:39:57:36:e9:7f:3f:d1:40:71:40:fd: cb:f5:d7:af:ff:40:86:7b:72:79:77:14:72:f2:a3: d5:57:76:eb:42:c6:16:d5:f0:04:59:49:b8:f7:7b: 49:0f:08:fe:4c:b8:0a:e0:17:00:d6:a0:04:dd:88: 11:49:a7:f0:3e:49:bf:87:f4:b8:05:08:4d:d8:6b: 7d:72:07:70:7d:e2:b7:44:ac:66:bc:a3:55:83:12: fd:d8:db:d7:c3:d5:60:d1:b3:c1:96:af:48:a5:73: 4b:1e:01:57:1f:53:b9:bc:ea:af:0a:19:66:a9:67: 61:11:39:9f:ed:20:19:f9:db:1c:5b:5e:0b:91:f9: 00:9f:a5:a1:43:51:a0:1b:25:09:01:ad:67:db:7f: de:4f:e0:58:21:36:a7:10:1a:e0:a0:79:a0:2e:67: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D0:AD:E4:AF:6D:67:7D:D6:11:59:15:45:3D:97:9F:B3:C6:DA:DB X509v3 Authority Key Identifier: keyid:2F:F6:18:2B:EB:7B:82:C8:57:3D:F8:B6:D5:10:44:D6:C6:72:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_YYK-t7gshXPfi21RBE1sZyToI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a8ecfb-7355-4cfe-84bf-b776a220456b/1/L_YYK-t7gshXPfi21RBE1sZyToI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a2:23:26:43:f6:2a:a0:ea:8a:eb:de:13:c7:4f:5b:9f:bd: 0b:1a:32:4b:4a:d4:7a:77:18:1a:cc:b1:0b:c0:82:db:5b:87: a7:32:a6:8f:e4:4c:de:f5:58:35:4a:a7:2e:af:6b:06:70:71: 60:38:49:2f:f9:22:a3:e9:dc:1c:b3:e1:4a:62:d4:26:13:dc: 7c:08:22:0b:c3:5b:a0:2e:f1:23:7c:24:53:18:14:2b:d8:d3: 64:6b:47:a8:ae:79:77:f3:9d:2c:92:4c:36:8c:e6:d8:49:ef: 0a:1b:f4:fe:6c:03:4f:34:f1:e3:73:0e:11:fa:d3:1c:f7:21: 40:0a:69:73:ac:0c:7d:d7:78:a5:3b:3d:18:90:5e:e3:1e:13: f0:38:f1:0f:63:c2:e9:ea:fd:31:e5:0a:55:0e:eb:d5:d1:11: b0:ad:94:dc:5a:b1:c5:b1:dd:82:e0:14:58:48:98:76:86:89: 42:60:aa:e7:3a:b4:64:6d:71:62:a1:39:57:6d:1e:62:ae:6a: a1:2a:94:e7:28:d2:df:10:35:30:65:3a:3a:38:e5:8c:4b:8c: 3a:8d:24:7b:54:7f:8e:77:03:4a:72:13:d2:66:ed:33:54:56: b1:c5:ae:b3:37:53:aa:ae:8c:d2:cd:b8:38:f3:eb:e0:8e:5e: ea:f0:d2:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+v/lcGk9+UOS4Bxp6/iyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmZjYxODJiZWI3YjgyYzg1NzNkZjhiNmQ1MTA0NGQ2YzY3 MjRlODIwHhcNMjUxMjE4MDEwMjM5WhcNMjUxMjE5MDEwMjM5WjAzMTEwLwYDVQQD EyhiMGQwYWRlNGFmNmQ2NzdkZDYxMTU5MTU0NTNkOTc5ZmIzYzZkYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9fzcToD5SZqP4Ao7DEkfQQ83jj8 0iRU6Iqs0kds1wUO7C/WskLWWBLs/hU4CobrLz9j2fMxNY905PhOxh+Cn1CCfvsj KIvFtwayXxhLEACsCEmQQTVEhp3TRrFdOVc26X8/0UBxQP3L9dev/0CGe3J5dxRy 8qPVV3brQsYW1fAEWUm493tJDwj+TLgK4BcA1qAE3YgRSafwPkm/h/S4BQhN2Gt9 cgdwfeK3RKxmvKNVgxL92NvXw9Vg0bPBlq9IpXNLHgFXH1O5vOqvChlmqWdhETmf 7SAZ+dscW14LkfkAn6WhQ1GgGyUJAa1n23/eT+BYITanEBrgoHmgLmc+dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDQreSvbWd91hFZFUU9l5+zxtrbMB8GA1UdIwQY MBaAFC/2GCvre4LIVz34ttUQRNbGck6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYt Yjc3NmEyMjA0NTZiLzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hOGVjZmItNzM1NS00Y2ZlLTg0YmYtYjc3NmEyMjA0NTZi LzEvTF9ZWUstdDdnc2hYUGZpMjFSQkUxc1p5VG9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6IjJkP2 KqDqiuveE8dPW5+9CxoyS0rUencYGsyxC8CC21uHpzKmj+RM3vVYNUqnLq9rBnBx YDhJL/kio+ncHLPhSmLUJhPcfAgiC8NboC7xI3wkUxgUK9jTZGtHqK55d/OdLJJM Nozm2EnvChv0/mwDTzTx43MOEfrTHPchQAppc6wMfdd4pTs9GJBe4x4T8DjxD2PC 6er9MeUKVQ7r1dERsK2U3FqxxbHdguAUWEiYdoaJQmCq5zq0ZG1xYqE5V20eYq5q oSqU5yjS3xA1MGU6OjjljEuMOo0ke1R/jncDSnIT0mbtM1RWscWuszdTqq6M0s24 OPPr4I5e6vDSwQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:03 2025 by rpki-client