This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json) Hash identifier: TVITZ0GrFaJGgTpfEearO4WFe2gDFVDVKQV0R/Cfs5U= Subject key identifier: 3D:1E:8A:4F:E1:4D:22:53:CA:3A:30:1C:32:42:0B:D0:AF:0D:F4:4A Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc Certificate serial: 019B5907BD5D2052F6FEF2826CE62AC3F6E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft Manifest number: 179C Signing time: Fri 26 Dec 2025 05:00:38 +0000 Manifest this update: Fri 26 Dec 2025 05:00:38 +0000 Manifest next update: Sat 27 Dec 2025 05:00:38 +0000 Files and hashes: 1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=) 2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=) 3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=) 4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: F1GFQkyFe8l2YxXgIC2d1V1/ATU5RzByzC9e8oaNNJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:07:bd:5d:20:52:f6:fe:f2:82:6c:e6:2a:c3:f6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc Validity Not Before: Dec 26 05:00:38 2025 GMT Not After : Dec 27 05:00:38 2025 GMT Subject: CN=3d1e8a4fe14d2253ca3a301c32420bd0af0df44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:3a:06:51:62:a3:4c:dd:82:9a:aa:32:17: 6a:d5:e1:db:f5:c0:54:3f:d9:61:aa:31:3b:11:27: f0:8b:68:e8:7b:10:9d:c0:02:dd:73:85:6f:d6:bd: 36:bd:5d:45:87:60:25:98:35:57:66:5e:69:e2:c7: e9:8a:c5:d0:4b:0e:dd:6c:61:a8:db:ba:8c:07:d8: 8c:0e:a3:ee:38:90:a5:f4:41:a3:20:3d:cc:9e:14: 53:60:1a:1c:9a:31:1e:fb:93:f9:96:c2:f5:b8:b4: 0b:bf:cd:78:95:e1:c3:57:6c:f6:3b:10:ee:72:48: f0:e5:31:0d:c4:dc:6a:8a:8e:ca:eb:3a:9f:e9:9f: ee:71:a5:23:e5:e6:b4:11:a8:93:84:44:88:35:02: 59:32:33:fc:97:69:1e:d6:76:e2:72:0d:fb:7e:ff: ea:82:1a:cd:08:42:fe:e4:ad:e6:87:78:28:52:a1: 3c:c3:ac:5a:98:c8:ba:4b:4d:d3:ba:82:4e:bf:9a: cb:9c:e1:a3:4a:16:a8:66:0f:ce:83:d4:d1:10:e5: 69:d5:9f:da:0c:16:f6:26:ca:04:0a:95:8d:c2:80: 55:75:a5:ba:69:99:c4:ef:ed:a5:6a:9a:a7:30:71: e0:c0:f6:05:b4:9f:30:85:03:52:1c:ea:32:c2:bd: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1E:8A:4F:E1:4D:22:53:CA:3A:30:1C:32:42:0B:D0:AF:0D:F4:4A X509v3 Authority Key Identifier: keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:48:c8:ed:30:aa:bf:81:53:7a:ce:0d:e1:60:48:a4:7f:74: d5:50:21:4d:1c:a2:04:77:18:62:84:8f:dc:c1:a8:9a:b8:3a: 98:43:e4:20:78:3b:42:da:f3:dc:b9:b0:c9:a7:78:e7:a2:ed: 84:8e:e2:ce:5e:88:f4:72:cd:c3:c5:f8:a5:70:74:a4:0a:71: ad:5e:d8:88:65:44:6f:c9:40:12:bf:f4:94:54:40:05:c9:0f: 10:2f:c6:96:cf:98:40:8e:1e:d6:f0:62:75:4c:d7:16:60:3d: e0:a5:17:02:9d:3a:d0:a7:ec:e4:12:4c:c2:83:26:53:72:80: 86:f8:55:19:31:90:78:45:8d:6d:c9:bf:1e:42:97:e2:4c:5e: b0:e9:ec:4e:20:5c:5a:dd:80:c5:81:f7:9c:a0:f6:ba:a7:21: 3a:c0:58:db:0d:4c:d2:3c:6a:a0:38:aa:8d:52:6e:67:07:48: 51:4f:fe:59:76:92:c5:b8:c1:b1:f2:59:e7:59:a5:d6:47:94: de:a3:ab:39:35:aa:5b:35:59:05:76:7e:98:5d:36:a5:59:d2: 16:6b:ba:cc:e1:36:23:cb:e4:28:85:29:94:ce:32:78:ea:18: 79:93:ce:5f:a1:6a:c1:d3:8d:36:fb:88:74:0e:b2:85:7a:c4: 19:b6:bd:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZB71dIFL2/vKCbOYqw/bhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MjQyZGJhMjZlZDg4MmIzODBkYWJlYmFiM2M1ZjM5NDIw MDZlY2MwHhcNMjUxMjI2MDUwMDM4WhcNMjUxMjI3MDUwMDM4WjAzMTEwLwYDVQQD EygzZDFlOGE0ZmUxNGQyMjUzY2EzYTMwMWMzMjQyMGJkMGFmMGRmNDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYQ6BlFio0zdgpqqMhdq1eHb9cBU P9lhqjE7ESfwi2joexCdwALdc4Vv1r02vV1Fh2AlmDVXZl5p4sfpisXQSw7dbGGo 27qMB9iMDqPuOJCl9EGjID3MnhRTYBocmjEe+5P5lsL1uLQLv814leHDV2z2OxDu ckjw5TENxNxqio7K6zqf6Z/ucaUj5ea0EaiThESINQJZMjP8l2ke1nbicg37fv/q ghrNCEL+5K3mh3goUqE8w6xamMi6S03TuoJOv5rLnOGjShaoZg/Og9TREOVp1Z/a DBb2JsoECpWNwoBVdaW6aZnE7+2lapqnMHHgwPYFtJ8whQNSHOoywr1elwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0eik/hTSJTyjowHDJCC9CvDfRKMB8GA1UdIwQY MBaAFJckLbom7YgrOA2r66s8XzlCAG7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmIt NjA3MjcyZDczN2NiLzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80Y2I2ODctODdmZC00YWYwLWEzNmItNjA3MjcyZDczN2Ni LzEvbHlRdHVpYnRpQ3M0RGF2cnF6eGZPVUlBYnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEjI7TCq v4FTes4N4WBIpH901VAhTRyiBHcYYoSP3MGomrg6mEPkIHg7Qtrz3Lmwyad456Lt hI7izl6I9HLNw8X4pXB0pApxrV7YiGVEb8lAEr/0lFRABckPEC/Gls+YQI4e1vBi dUzXFmA94KUXAp060Kfs5BJMwoMmU3KAhvhVGTGQeEWNbcm/HkKX4kxesOnsTiBc Wt2AxYH3nKD2uqchOsBY2w1M0jxqoDiqjVJuZwdIUU/+WXaSxbjBsfJZ51ml1keU 3qOrOTWqWzVZBXZ+mF02pVnSFmu6zOE2I8vkKIUplM4yeOoYeZPOX6FqwdONNvuI dA6yhXrEGba93g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:17 2025 by rpki-client