This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json) Hash identifier: +gfD3MvBui8+oDSbVR++yUv8gXbTNrAOx8D02qWph2w= Subject key identifier: BE:DF:2F:DC:88:88:E3:6B:E3:20:37:34:EC:27:9F:5A:98:39:93:21 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B1FF4617F635A134BF0D95D2E9F6B99FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft Manifest number: 07E4 Signing time: Mon 15 Dec 2025 03:01:07 +0000 Manifest this update: Mon 15 Dec 2025 03:01:07 +0000 Manifest next update: Tue 16 Dec 2025 03:01:07 +0000 Files and hashes: 1: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=) 2: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: SgSuSait932CfLHn16PYX6DUiWEeyuvReSHhAM+CG1E=) 3: TWakFFxyHlxGlKeAOjVcTSyZ6SA.roa (hash: BZq7O+Mhn+xCPfei58CegAajAJORNlD7rbKNI0C8wGU=) 4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=) 5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=) 6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:61:7f:63:5a:13:4b:f0:d9:5d:2e:9f:6b:99:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Dec 15 03:01:07 2025 GMT Not After : Dec 16 03:01:07 2025 GMT Subject: CN=bedf2fdc8888e36be3203734ec279f5a98399321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:1f:a7:9f:f6:48:17:fc:83:4e:e5:af:64: b2:a0:2f:88:5a:3d:03:37:9d:1e:25:23:70:0c:6d: 8b:62:2b:26:ce:ae:2c:e9:c4:59:97:4d:b5:0a:f1: 24:6b:b2:c2:ad:22:50:95:53:75:80:fc:ae:f4:e7: 64:f2:7d:96:32:4c:ef:ae:c7:3d:cb:89:44:ad:dd: 4d:a0:50:6d:49:ed:50:45:ee:1f:55:ef:db:5b:23: 95:de:1e:e1:e5:09:ae:e5:3e:24:4f:dd:c5:79:fb: 05:87:2d:81:4d:f8:ba:d3:59:40:ff:be:22:15:07: 22:ab:eb:8a:12:d5:44:c2:44:22:fb:c9:8b:e3:b7: 9a:c9:67:72:8c:dc:4b:7f:4f:57:75:4e:c5:3b:47: bc:6a:7f:b1:be:d6:b4:b8:7e:14:24:fb:25:02:d3: b7:b7:45:17:e4:a6:e9:31:3c:95:c8:dd:97:a1:de: 89:8d:f0:51:73:3c:ef:27:ab:ad:90:fa:77:23:3e: 46:03:f3:9c:75:35:44:c3:44:83:0c:2a:2e:eb:e7: 6d:98:34:ba:4b:ec:b4:fe:c8:74:f2:3f:85:d2:2a: 28:d4:0e:a0:24:ef:e3:26:6a:9c:ea:32:81:d9:69: 3e:c4:e3:32:f5:01:b3:23:9e:04:e6:84:60:34:66: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:2F:DC:88:88:E3:6B:E3:20:37:34:EC:27:9F:5A:98:39:93:21 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:dd:34:ea:18:3c:47:56:17:24:7e:68:76:2a:b7:ed:28:d9: b2:96:40:c2:4e:71:c8:6e:0b:71:f6:65:72:b2:f4:82:e2:ef: 73:f1:84:35:29:39:ff:7d:40:b5:e4:8b:7e:4c:b2:c7:1a:3b: 49:23:40:b1:21:f6:15:d4:28:77:22:5c:9b:f8:c4:a3:50:e3: 6b:1f:7f:67:9f:14:16:9b:d8:b0:0d:8e:d3:79:4a:7e:ff:65: c0:12:8e:f2:19:70:88:90:a0:36:2f:1f:89:ed:bc:d9:91:d2: 18:f7:ea:4a:c2:c1:ff:2d:c0:54:52:51:81:d8:24:af:12:0a: 6b:be:c1:9e:a1:60:17:96:2a:b4:fa:84:f3:34:0a:9d:5e:47: 34:ab:b2:ac:f4:30:5d:3c:b6:4d:9c:99:ec:fb:42:cb:e4:18: 62:2e:b3:5c:ce:e5:8e:3a:03:30:a9:06:ee:75:08:09:20:28: d5:4a:6c:a2:8b:23:9e:78:67:72:7f:7d:00:20:4b:5b:dc:1b: 54:78:97:4c:b5:0f:2c:6e:ed:61:86:df:8f:e4:11:ab:7c:0a: ff:58:c1:bd:48:56:7b:aa:dc:34:02:bd:46:17:4e:02:40:3b: 28:0d:96:4a:3d:77:a5:d9:57:a3:59:88:cb:b7:ed:12:22:ec: a7:36:bf:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9GF/Y1oTS/DZXS6fa5n/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjUxMjE1MDMwMTA3WhcNMjUxMjE2MDMwMTA3WjAzMTEwLwYDVQQD EyhiZWRmMmZkYzg4ODhlMzZiZTMyMDM3MzRlYzI3OWY1YTk4Mzk5MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl8fp5/2SBf8g07lr2SyoC+IWj0D N50eJSNwDG2LYismzq4s6cRZl021CvEka7LCrSJQlVN1gPyu9Odk8n2WMkzvrsc9 y4lErd1NoFBtSe1QRe4fVe/bWyOV3h7h5Qmu5T4kT93FefsFhy2BTfi601lA/74i FQciq+uKEtVEwkQi+8mL47eayWdyjNxLf09XdU7FO0e8an+xvta0uH4UJPslAtO3 t0UX5KbpMTyVyN2Xod6JjfBRczzvJ6utkPp3Iz5GA/OcdTVEw0SDDCou6+dtmDS6 S+y0/sh08j+F0ioo1A6gJO/jJmqc6jKB2Wk+xOMy9QGzI54E5oRgNGaOrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7fL9yIiONr4yA3NOwnn1qYOZMhMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9006hg8 R1YXJH5odiq37SjZspZAwk5xyG4LcfZlcrL0guLvc/GENSk5/31AteSLfkyyxxo7 SSNAsSH2FdQodyJcm/jEo1Djax9/Z58UFpvYsA2O03lKfv9lwBKO8hlwiJCgNi8f ie282ZHSGPfqSsLB/y3AVFJRgdgkrxIKa77BnqFgF5YqtPqE8zQKnV5HNKuyrPQw XTy2TZyZ7PtCy+QYYi6zXM7ljjoDMKkG7nUICSAo1Upsoosjnnhncn99ACBLW9wb VHiXTLUPLG7tYYbfj+QRq3wK/1jBvUhWe6rcNAK9RhdOAkA7KA2WSj13pdlXo1mI y7ftEiLspza/qQ== -----END CERTIFICATE-----Generated at Mon Dec 15 06:51:25 2025 by rpki-client