This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json) Hash identifier: Wvqi55nVnr6GCm8T2ezxudF1tbp1VpBhcNOtLxl6gvg= Subject key identifier: C0:49:DB:1E:69:F0:1F:EE:31:64:C5:D8:46:4A:08:EC:D3:96:97:E5 Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14 Certificate serial: 019B0E929438A1EF184B5CFC8C30540B99B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft Manifest number: 1703 Signing time: Thu 11 Dec 2025 18:00:45 +0000 Manifest this update: Thu 11 Dec 2025 18:00:45 +0000 Manifest next update: Fri 12 Dec 2025 18:00:45 +0000 Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=) 2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: kQBJVBHRuAZZh7ZZCB5h8G8IzFqe5vFRssJxom6XBQQ=) 3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:94:38:a1:ef:18:4b:5c:fc:8c:30:54:0b:99:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14 Validity Not Before: Dec 11 18:00:45 2025 GMT Not After : Dec 12 18:00:45 2025 GMT Subject: CN=c049db1e69f01fee3164c5d8464a08ecd39697e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:c8:a1:cd:4e:1e:a3:ea:78:f7:37:d2:94: b7:e2:d0:d1:03:3b:ff:ae:bd:90:a4:ca:65:2a:ed: 16:bc:57:93:ae:e6:9f:ab:09:67:3b:d6:5a:61:46: 0a:e2:ac:8f:2a:66:c9:2e:07:f4:59:20:a6:f9:2e: 41:d0:c8:17:07:42:18:ae:6a:02:b7:14:7e:c5:8a: 72:58:2c:aa:d0:de:20:39:a9:03:03:1f:d0:e1:ca: 1a:b6:a7:13:5a:2c:fd:c9:bf:ee:77:7e:c1:c6:0d: bf:40:a4:c7:e6:9e:d5:47:65:bf:b8:3e:50:57:67: 41:a5:1b:27:6f:b8:0a:05:fe:d1:9f:6a:df:5e:2b: 5d:f9:e3:76:b9:e6:bc:8d:50:2d:8f:a1:cd:6d:4f: de:19:17:e7:c4:8f:cf:c6:40:5c:6a:86:45:c4:91: 55:f2:52:98:85:6b:a4:db:4c:ec:4a:af:77:7e:6e: 18:ac:dc:3b:bf:3d:9b:fb:b6:e9:8b:3a:17:b8:7a: f5:a0:4e:b0:97:25:19:59:30:ba:be:76:59:c0:f6: 02:b8:ad:e8:79:9e:c7:b8:5e:99:42:03:8b:e2:2b: e4:3e:a0:db:58:a3:17:98:a0:14:56:30:19:54:d7: 99:15:ea:ac:79:ea:f9:2f:dd:1a:1c:62:21:89:95: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:49:DB:1E:69:F0:1F:EE:31:64:C5:D8:46:4A:08:EC:D3:96:97:E5 X509v3 Authority Key Identifier: keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:25:e9:99:18:49:c7:fc:65:9e:3a:cb:f6:95:35:95:8b:1b: a0:6f:98:c3:fb:37:56:28:8b:2f:b9:f8:00:b2:f7:d6:2d:fc: 01:68:c5:06:03:ae:ba:6e:8d:3b:3a:9e:bb:4a:f2:58:28:7f: 98:65:a0:90:87:33:07:e5:ff:8f:b0:55:6c:6e:31:7d:2b:95: 93:59:86:27:cd:fe:55:7c:47:46:5e:d5:8f:b3:25:34:c2:7e: 93:f5:dd:40:4c:72:6d:ae:84:59:99:7f:b8:93:4d:1c:a7:99: 42:e0:fd:0c:e8:6f:eb:fb:c0:3b:4e:74:80:8a:f2:57:5c:51: 57:f0:83:67:fe:14:43:cf:53:23:b8:e5:2f:e7:ce:08:71:7c: 94:3c:ca:1e:2c:e6:ff:96:98:e0:84:e7:6a:48:88:49:67:46: d0:a2:c0:cd:a3:cd:f6:fd:24:76:f0:b3:b0:2c:1d:7e:bf:b8: db:bc:bb:cd:01:49:e8:80:4f:7b:e5:f3:ee:02:ec:94:63:28: 39:bc:9c:d0:e0:d3:cb:e1:04:15:dc:f8:b6:dd:af:b0:88:d9: c7:cc:4f:b3:ae:ee:ca:a0:27:16:c2:51:66:6e:83:5e:5a:18: 4a:ec:20:5e:a0:ea:0b:30:b3:e4:b2:84:4d:a2:74:16:85:58: 3c:63:39:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkpQ4oe8YS1z8jDBUC5m5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk OTdmMTQwHhcNMjUxMjExMTgwMDQ1WhcNMjUxMjEyMTgwMDQ1WjAzMTEwLwYDVQQD EyhjMDQ5ZGIxZTY5ZjAxZmVlMzE2NGM1ZDg0NjRhMDhlY2QzOTY5N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ7Ioc1OHqPqePc30pS34tDRAzv/ rr2QpMplKu0WvFeTruafqwlnO9ZaYUYK4qyPKmbJLgf0WSCm+S5B0MgXB0IYrmoC txR+xYpyWCyq0N4gOakDAx/Q4coatqcTWiz9yb/ud37Bxg2/QKTH5p7VR2W/uD5Q V2dBpRsnb7gKBf7Rn2rfXitd+eN2uea8jVAtj6HNbU/eGRfnxI/PxkBcaoZFxJFV 8lKYhWuk20zsSq93fm4YrNw7vz2b+7bpizoXuHr1oE6wlyUZWTC6vnZZwPYCuK3o eZ7HuF6ZQgOL4ivkPqDbWKMXmKAUVjAZVNeZFeqseer5L90aHGIhiZXbDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBJ2x5p8B/uMWTF2EZKCOzTlpflMB8GA1UdIwQY MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCXpmRhJ x/xlnjrL9pU1lYsboG+Yw/s3ViiLL7n4ALL31i38AWjFBgOuum6NOzqeu0ryWCh/ mGWgkIczB+X/j7BVbG4xfSuVk1mGJ83+VXxHRl7Vj7MlNMJ+k/XdQExyba6EWZl/ uJNNHKeZQuD9DOhv6/vAO050gIryV1xRV/CDZ/4UQ89TI7jlL+fOCHF8lDzKHizm /5aY4ITnakiISWdG0KLAzaPN9v0kdvCzsCwdfr+427y7zQFJ6IBPe+Xz7gLslGMo Obyc0ODTy+EEFdz4tt2vsIjZx8xPs67uyqAnFsJRZm6DXloYSuwgXqDqCzCz5LKE TaJ0FoVYPGM5yw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:02:06 2025 by rpki-client