This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft File: LyCNidN2_IiDt9BxMb00pwWa7_o.mft (raw, json) Hash identifier: XBq4ldGAaJ4/rIy2PVAbzxshACqda7V18qVBqauf+DI= Subject key identifier: 16:01:F1:DE:B7:3C:99:91:C3:FD:CB:9A:36:E5:95:EA:B2:CC:66:A8 Authority key identifier: 2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA Certificate issuer: /CN=2f208d89d376fc8883b7d07131bd34a7059aeffa Certificate serial: 019B1FF46BFCF3139875B0DBE784AEB75F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft Manifest number: 1709 Signing time: Mon 15 Dec 2025 03:01:10 +0000 Manifest this update: Mon 15 Dec 2025 03:01:10 +0000 Manifest next update: Tue 16 Dec 2025 03:01:10 +0000 Files and hashes: 1: LyCNidN2_IiDt9BxMb00pwWa7_o.crl (hash: Y8Fldxcs2vCYj302tkfZDNhH2Kv0ptYAlzxGJPG82vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:6b:fc:f3:13:98:75:b0:db:e7:84:ae:b7:5f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f208d89d376fc8883b7d07131bd34a7059aeffa Validity Not Before: Dec 15 03:01:10 2025 GMT Not After : Dec 16 03:01:10 2025 GMT Subject: CN=1601f1deb73c9991c3fdcb9a36e595eab2cc66a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:30:a9:54:b3:e3:12:02:e4:2b:06:3b:6f: a5:5d:6f:4f:d4:98:32:73:95:eb:ed:52:66:8c:d8: f4:fd:2c:a1:f2:04:ba:90:8b:c7:13:62:bb:a0:0a: 7f:25:28:e6:95:b9:e3:c9:7f:24:17:bd:56:96:57: b0:7b:eb:69:f4:7a:f5:03:c5:31:98:3a:0e:8f:1b: f2:07:d6:40:ca:3b:bf:f2:1c:fd:e6:bd:92:6f:f7: 7e:12:dd:b0:b9:11:4e:33:91:45:b3:0d:d3:f6:09: 5f:12:80:51:f0:48:d5:21:79:02:ef:1b:8a:a7:66: 03:aa:b4:75:ea:63:ff:a9:29:1d:b4:64:63:56:c2: 92:9f:22:fa:3a:9f:c5:f3:14:65:57:10:12:5c:70: 55:2e:40:5f:43:18:c9:96:4a:c6:05:39:17:97:57: 93:a2:53:3a:53:aa:6f:20:9f:b9:36:2b:39:88:db: 52:20:27:62:67:9f:2a:c5:21:55:8a:f4:dd:4a:e6: ed:21:a3:ec:2e:9d:d1:a5:bb:1e:4f:31:98:11:01: d3:35:2d:78:d8:64:90:8b:0e:4d:b0:3a:a0:1d:ab: 45:49:73:3d:98:71:11:f4:c4:3b:5a:6b:b0:df:c9: 7b:22:72:cd:58:48:f2:62:33:14:45:47:e6:2d:ff: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:01:F1:DE:B7:3C:99:91:C3:FD:CB:9A:36:E5:95:EA:B2:CC:66:A8 X509v3 Authority Key Identifier: keyid:2F:20:8D:89:D3:76:FC:88:83:B7:D0:71:31:BD:34:A7:05:9A:EF:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCNidN2_IiDt9BxMb00pwWa7_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c513c-aa3a-48aa-ac9c-22242b9ab2b3/1/LyCNidN2_IiDt9BxMb00pwWa7_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:36:d8:c5:6f:25:74:02:47:07:70:c4:55:02:14:08:79:0b: eb:0d:b9:0d:0a:81:b3:c8:54:c2:fa:ef:9b:62:af:0d:ff:5e: a2:ef:28:78:af:88:ea:2a:81:25:11:9c:31:c5:5c:74:de:01: f3:2c:5c:78:28:9f:c3:99:bb:a7:07:4f:e1:d2:87:59:cb:49: 8c:3c:9a:64:20:03:97:cb:96:2e:c5:f5:86:50:b2:3b:34:45: 12:31:ff:dd:16:93:40:49:3b:be:3d:69:7a:4c:ad:ee:e1:8d: 6c:86:18:99:cb:ae:12:ef:44:a1:6a:dd:3d:68:ec:bc:15:5a: 8a:55:28:fd:79:be:a8:1e:0e:c7:ff:8b:81:a1:be:77:f0:b0: 8e:e0:e2:4b:3a:87:b2:f2:ad:21:8d:0f:96:79:99:f2:ac:f3: 62:dc:88:2e:85:58:1f:86:3f:8d:87:51:1b:f9:40:12:55:d3: 0e:57:7e:be:5c:76:d3:bd:70:6d:40:91:8d:22:d2:51:42:10: ce:6d:e3:d3:10:4c:3d:91:5c:9f:2f:c3:da:a8:9c:77:8b:44: 1b:f1:ab:cc:d0:af:d9:c7:dd:6c:aa:3d:d6:8e:c1:a5:a8:59: e7:26:41:11:42:02:e4:f0:22:72:b9:8d:2a:ac:85:3d:b4:51: ed:94:a6:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9Gv88xOYdbDb54Sut197MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjA4ZDg5ZDM3NmZjODg4M2I3ZDA3MTMxYmQzNGE3MDU5 YWVmZmEwHhcNMjUxMjE1MDMwMTEwWhcNMjUxMjE2MDMwMTEwWjAzMTEwLwYDVQQD EygxNjAxZjFkZWI3M2M5OTkxYzNmZGNiOWEzNmU1OTVlYWIyY2M2NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaMwqVSz4xIC5CsGO2+lXW9P1Jgy c5Xr7VJmjNj0/Syh8gS6kIvHE2K7oAp/JSjmlbnjyX8kF71Wllewe+tp9Hr1A8Ux mDoOjxvyB9ZAyju/8hz95r2Sb/d+Et2wuRFOM5FFsw3T9glfEoBR8EjVIXkC7xuK p2YDqrR16mP/qSkdtGRjVsKSnyL6Op/F8xRlVxASXHBVLkBfQxjJlkrGBTkXl1eT olM6U6pvIJ+5Nis5iNtSICdiZ58qxSFVivTdSubtIaPsLp3RpbseTzGYEQHTNS14 2GSQiw5NsDqgHatFSXM9mHER9MQ7Wmuw38l7InLNWEjyYjMURUfmLf+LuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYB8d63PJmRw/3LmjblleqyzGaoMB8GA1UdIwQY MBaAFC8gjYnTdvyIg7fQcTG9NKcFmu/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMt MjIyNDJiOWFiMmIzLzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzUxM2MtYWEzYS00OGFhLWFjOWMtMjIyNDJiOWFiMmIz LzEvTHlDTmlkTjJfSWlEdDlCeE1iMDBwd1dhN19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDbYxW8l dAJHB3DEVQIUCHkL6w25DQqBs8hUwvrvm2KvDf9eou8oeK+I6iqBJRGcMcVcdN4B 8yxceCifw5m7pwdP4dKHWctJjDyaZCADl8uWLsX1hlCyOzRFEjH/3RaTQEk7vj1p ekyt7uGNbIYYmcuuEu9EoWrdPWjsvBVailUo/Xm+qB4Ox/+LgaG+d/CwjuDiSzqH svKtIY0PlnmZ8qzzYtyILoVYH4Y/jYdRG/lAElXTDld+vlx2071wbUCRjSLSUUIQ zm3j0xBMPZFcny/D2qicd4tEG/GrzNCv2cfdbKo91o7BpahZ5yZBEUIC5PAicrmN KqyFPbRR7ZSmQQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:17 2025 by rpki-client