This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json) Hash identifier: 99mEAzhtw7XDh9ODJA9q2p5zueP3cBygv048NRqWqiI= Subject key identifier: 26:30:36:5C:74:63:61:FD:89:F2:F2:AF:EB:C8:CF:AA:B5:E5:E2:7E Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019B0FA574C782B12D3A7EC65C3E0B3CD790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft Manifest number: 0D5C Signing time: Thu 11 Dec 2025 23:01:00 +0000 Manifest this update: Thu 11 Dec 2025 23:01:00 +0000 Manifest next update: Fri 12 Dec 2025 23:01:00 +0000 Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=) 2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: sNctMBGGEcF+rICLnpO1YLeplt/hKzCWErVpZIKhORQ=) 3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:74:c7:82:b1:2d:3a:7e:c6:5c:3e:0b:3c:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Dec 11 23:01:00 2025 GMT Not After : Dec 12 23:01:00 2025 GMT Subject: CN=2630365c746361fd89f2f2afebc8cfaab5e5e27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:65:c5:a2:d2:bd:a7:47:73:18:c5:76:c9: 23:ac:b6:8d:77:98:34:7c:d9:62:5f:63:3b:fd:18: 17:e1:8a:2c:8d:a6:50:da:5c:8b:10:7f:3f:6c:89: 24:bc:d2:0b:0e:56:47:dd:76:dc:10:25:f2:7a:ff: 99:29:00:0a:80:96:54:cf:3b:c5:f7:d1:b1:62:07: f5:a3:99:95:80:96:2d:0e:5b:b6:74:71:c2:f0:39: 30:60:ec:90:8b:a7:39:46:3b:57:42:df:e3:18:69: 51:fd:e5:73:93:1b:95:f0:30:b9:3e:e3:f8:06:d8: 1e:db:23:fe:a8:8a:4d:60:09:51:69:13:31:10:9e: ac:32:83:fb:66:66:d7:44:2d:4a:12:62:5e:ce:88: c4:eb:32:a2:24:3d:50:64:57:4e:a1:cd:18:22:86: 8d:33:3b:e2:9f:b4:89:d4:80:c0:f4:62:85:87:21: 38:a5:df:5c:17:75:f1:15:cc:eb:4f:c1:88:99:e8: ac:9d:ef:c5:6b:3d:cf:b0:ff:2c:67:57:19:c4:1f: a0:f7:52:48:39:11:a8:39:68:fa:3d:f7:bb:97:df: bc:0b:66:ed:9b:bb:75:47:f7:17:f4:9d:1d:9e:29: 79:f6:33:c2:37:92:4b:b5:33:30:a8:c1:24:28:d7: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:36:5C:74:63:61:FD:89:F2:F2:AF:EB:C8:CF:AA:B5:E5:E2:7E X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:da:f2:ed:01:cb:fc:09:49:92:d4:b4:65:ab:cc:48:5b:89: 10:16:2a:da:06:ac:d7:76:a5:87:50:97:c1:15:28:0a:c0:c6: a8:71:b7:8f:ea:e1:43:5c:f9:c7:44:04:b6:4c:44:c7:bf:80: d6:90:50:89:98:27:03:21:1b:dc:33:6e:98:fe:0d:28:fc:90: 11:a1:29:86:b2:3e:37:bb:db:a0:f0:1c:51:88:d1:c0:7e:e9: 8e:f5:a9:a0:ab:dc:7b:9f:f9:41:b2:cd:4a:35:af:c5:96:2c: 45:98:d1:da:ad:5c:e6:1f:a5:2f:26:54:e2:8a:a7:31:a3:50: 58:f3:e3:92:67:54:a1:60:23:e1:f3:ca:0e:40:3a:22:18:a6: b5:26:d0:84:5a:70:9b:22:dc:94:70:20:1a:6f:bd:3f:36:5f: 7e:5e:45:98:c8:27:07:11:05:7f:ef:0d:da:8c:66:bd:02:71: 29:cd:f9:41:92:fe:f8:1d:bd:9d:cb:90:72:6d:5b:3c:35:7e: 61:64:0f:3f:4f:e6:c8:1e:49:44:bf:9b:12:bd:b0:86:47:9b: 69:80:15:00:19:88:27:82:e4:ec:47:4e:57:21:7c:4b:7a:96: 3c:43:17:41:1a:24:97:a5:bf:6b:f4:59:cc:5b:8a:e6:fa:27: 21:82:5a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpXTHgrEtOn7GXD4LPNeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjUxMjExMjMwMTAwWhcNMjUxMjEyMjMwMTAwWjAzMTEwLwYDVQQD EygyNjMwMzY1Yzc0NjM2MWZkODlmMmYyYWZlYmM4Y2ZhYWI1ZTVlMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFlxaLSvadHcxjFdskjrLaNd5g0 fNliX2M7/RgX4YosjaZQ2lyLEH8/bIkkvNILDlZH3XbcECXyev+ZKQAKgJZUzzvF 99GxYgf1o5mVgJYtDlu2dHHC8DkwYOyQi6c5RjtXQt/jGGlR/eVzkxuV8DC5PuP4 Btge2yP+qIpNYAlRaRMxEJ6sMoP7ZmbXRC1KEmJezojE6zKiJD1QZFdOoc0YIoaN Mzvin7SJ1IDA9GKFhyE4pd9cF3XxFczrT8GImeisne/Faz3PsP8sZ1cZxB+g91JI ORGoOWj6Pfe7l9+8C2btm7t1R/cX9J0dnil59jPCN5JLtTMwqMEkKNeA/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYwNlx0Y2H9ifLyr+vIz6q15eJ+MB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNry7QHL /AlJktS0ZavMSFuJEBYq2gas13alh1CXwRUoCsDGqHG3j+rhQ1z5x0QEtkxEx7+A 1pBQiZgnAyEb3DNumP4NKPyQEaEphrI+N7vboPAcUYjRwH7pjvWpoKvce5/5QbLN SjWvxZYsRZjR2q1c5h+lLyZU4oqnMaNQWPPjkmdUoWAj4fPKDkA6IhimtSbQhFpw myLclHAgGm+9PzZffl5FmMgnBxEFf+8N2oxmvQJxKc35QZL++B29ncuQcm1bPDV+ YWQPP0/myB5JRL+bEr2whkebaYAVABmIJ4Lk7EdOVyF8S3qWPEMXQRokl6W/a/RZ zFuK5vonIYJaMg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:06:51 2025 by rpki-client