This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json) Hash identifier: cdJy8bHPt7mWCnrAFXuw7MoQTK9yJHoq4cLNDhXbHrY= Subject key identifier: C8:AB:44:42:91:FB:1F:32:0C:85:F9:6F:7A:C9:A9:5B:C6:35:5F:2B Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7 Certificate serial: 019B23634061542D7A37136D72CE1211A5DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft Manifest number: 07F2 Signing time: Mon 15 Dec 2025 19:01:05 +0000 Manifest this update: Mon 15 Dec 2025 19:01:05 +0000 Manifest next update: Tue 16 Dec 2025 19:01:05 +0000 Files and hashes: 1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=) 2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: ViE55BnYlWyKISQE4hLCr12x3JN3vEWdDtRUSWIbnCc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:40:61:54:2d:7a:37:13:6d:72:ce:12:11:a5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7 Validity Not Before: Dec 15 19:01:05 2025 GMT Not After : Dec 16 19:01:05 2025 GMT Subject: CN=c8ab444291fb1f320c85f96f7ac9a95bc6355f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:12:5a:77:3c:0f:bf:37:d6:42:75:7c:43: 5d:9c:97:ad:7d:3f:4b:d7:d0:0d:d7:ff:aa:a8:41: a4:19:e5:af:fa:a8:65:98:27:40:e1:5b:1d:66:48: 0a:53:16:17:f9:a7:6d:46:87:71:b9:b5:d1:a9:b0: 26:06:80:83:4b:04:e8:d8:70:28:d4:70:e3:8b:d3: be:c2:07:39:ff:24:1c:35:31:f5:20:95:b7:64:ac: 46:90:2d:0e:46:c0:87:0d:5d:b5:c5:60:0e:e4:8d: 84:1c:a1:61:31:8b:be:4d:c0:7c:52:98:a0:34:8c: 1e:ae:e2:a5:11:ec:eb:bf:76:0c:98:c4:db:bb:63: ec:f7:c5:bb:a8:13:31:85:e0:72:b4:d4:0e:fa:84: 78:41:62:6f:d4:76:25:d4:b0:0c:9b:1f:a0:05:e9: 48:c8:eb:df:fd:da:34:0d:7a:bc:ab:a0:a4:f4:c7: ce:49:e8:f5:18:ac:9d:d9:77:c8:7d:b0:1c:85:9e: 4c:55:09:8a:3d:d1:23:24:2e:45:57:08:b7:9d:3c: b6:3d:08:ea:38:cb:8c:d8:31:73:d8:af:31:3e:f3: 1c:03:f3:95:36:7a:aa:83:e0:c3:47:57:59:dd:1b: 6c:d3:c1:21:79:f7:c2:1d:40:d8:0f:32:81:a1:8c: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AB:44:42:91:FB:1F:32:0C:85:F9:6F:7A:C9:A9:5B:C6:35:5F:2B X509v3 Authority Key Identifier: keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:9b:de:42:19:83:27:19:1d:41:24:34:b2:3b:eb:a5:e7:ec: bd:ea:91:70:f4:36:9f:66:78:5f:32:1f:12:6b:fc:3e:4b:c3: f9:d8:10:22:e3:a0:c4:92:11:8a:7a:c1:85:4f:31:6c:0a:f0: 2e:1f:5d:90:c2:ec:fb:74:d1:6f:8c:c8:88:c9:0d:a2:37:34: 79:80:59:1a:42:3c:e2:4b:0a:95:4b:35:1f:ac:5a:7a:0a:bd: c1:08:10:9d:5c:91:c7:f3:d2:57:7f:2b:eb:b4:c8:da:88:fb: 1a:e7:ed:7c:63:d6:d0:5a:84:46:be:45:cf:58:71:1c:7f:a5: f9:e0:9c:88:05:6e:18:d1:a4:9d:74:37:f1:93:86:42:ab:f4: a2:46:ff:f9:d8:ba:b2:c1:c1:59:4b:53:f6:3f:ee:f6:b0:97: 6a:52:65:e1:5e:90:98:c3:7d:ad:92:06:8e:4c:a1:66:3b:52: 83:cf:33:2a:a6:aa:bc:f1:89:6b:9a:21:f2:d9:0b:4a:1d:2a: c5:36:50:b4:a5:b0:41:b2:58:14:3c:a0:ad:31:b3:c5:f7:c7: ff:30:fb:fc:24:55:cc:ee:81:4c:10:98:7d:01:22:51:35:39: f7:2a:91:69:bd:89:c3:58:76:02:87:36:3d:26:1c:32:57:f7: c2:bd:79:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY0BhVC16NxNtcs4SEaXfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3 ZjgzZTcwHhcNMjUxMjE1MTkwMTA1WhcNMjUxMjE2MTkwMTA1WjAzMTEwLwYDVQQD EyhjOGFiNDQ0MjkxZmIxZjMyMGM4NWY5NmY3YWM5YTk1YmM2MzU1ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnoSWnc8D7831kJ1fENdnJetfT9L 19AN1/+qqEGkGeWv+qhlmCdA4VsdZkgKUxYX+adtRodxubXRqbAmBoCDSwTo2HAo 1HDji9O+wgc5/yQcNTH1IJW3ZKxGkC0ORsCHDV21xWAO5I2EHKFhMYu+TcB8Upig NIweruKlEezrv3YMmMTbu2Ps98W7qBMxheBytNQO+oR4QWJv1HYl1LAMmx+gBelI yOvf/do0DXq8q6Ck9MfOSej1GKyd2XfIfbAchZ5MVQmKPdEjJC5FVwi3nTy2PQjq OMuM2DFz2K8xPvMcA/OVNnqqg+DDR1dZ3Rts08EheffCHUDYDzKBoYwTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMirREKR+x8yDIX5b3rJqVvGNV8rMB8GA1UdIwQY MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0 LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZveQhmD JxkdQSQ0sjvrpefsveqRcPQ2n2Z4XzIfEmv8PkvD+dgQIuOgxJIRinrBhU8xbArw Lh9dkMLs+3TRb4zIiMkNojc0eYBZGkI84ksKlUs1H6xaegq9wQgQnVyRx/PSV38r 67TI2oj7GuftfGPW0FqERr5Fz1hxHH+l+eCciAVuGNGknXQ38ZOGQqv0okb/+di6 ssHBWUtT9j/u9rCXalJl4V6QmMN9rZIGjkyhZjtSg88zKqaqvPGJa5oh8tkLSh0q xTZQtKWwQbJYFDygrTGzxffH/zD7/CRVzO6BTBCYfQEiUTU59yqRab2Jw1h2Aoc2 PSYcMlf3wr15Cw== -----END CERTIFICATE-----Generated at Mon Dec 15 23:41:37 2025 by rpki-client