This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json) Hash identifier: W3KefU9wPxoro/NDftiRbsqUeXFBaAmiwyiaKjk7JGA= Subject key identifier: 9D:C9:65:36:97:61:01:73:39:44:CB:C1:54:E7:9A:3D:F4:17:FA:55 Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019B47A656232E60578EE352CF6AEDB9B334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft Manifest number: 0D79 Signing time: Mon 22 Dec 2025 20:00:41 +0000 Manifest this update: Mon 22 Dec 2025 20:00:41 +0000 Manifest next update: Tue 23 Dec 2025 20:00:41 +0000 Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=) 2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: erHMGEyRpc0af3CS1wA46MCtx4uRuWUH8nHc4GoFANc=) 3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:56:23:2e:60:57:8e:e3:52:cf:6a:ed:b9:b3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Dec 22 20:00:41 2025 GMT Not After : Dec 23 20:00:41 2025 GMT Subject: CN=9dc96536976101733944cbc154e79a3df417fa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:49:a8:07:e9:31:ce:68:21:ca:66:25:79: 90:00:96:56:38:45:53:9c:8e:b0:4d:60:a2:b0:2d: 83:c3:f2:c1:74:82:b5:41:9a:e4:d4:1b:33:72:a7: d7:d6:5b:b7:c2:51:3d:2d:2f:b4:73:15:4f:14:97: 0d:05:a3:94:b6:56:ae:4c:7b:04:8f:ed:eb:f7:07: 81:83:83:2b:a9:3d:2d:3b:12:3b:8b:9c:a4:7d:c9: 74:10:bd:f9:c2:74:16:92:fc:b6:79:58:7d:ac:53: 00:cd:7d:06:51:c0:a2:17:73:d1:76:4d:83:6a:12: ec:32:24:48:69:69:53:1c:fd:ee:48:54:db:e2:d3: ad:f0:f9:05:29:1d:ae:0f:27:98:f1:24:fe:b5:33: 24:5c:cf:79:04:c3:cf:68:2e:42:7e:03:df:e8:f3: 2e:df:49:32:fa:8d:05:90:7d:95:c7:10:f9:a4:33: 21:8f:77:5b:bd:a4:4f:25:a0:2b:38:05:f1:3f:4d: 20:b5:57:44:e3:56:58:44:63:b4:44:7a:53:64:c8: 81:62:64:76:e0:65:80:e5:8b:d9:fa:0f:77:f9:67: a4:11:28:0f:56:e1:f7:dd:c9:fd:b9:7c:66:f4:14: 09:74:55:54:47:9e:94:34:2f:3e:50:78:4a:9a:88: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C9:65:36:97:61:01:73:39:44:CB:C1:54:E7:9A:3D:F4:17:FA:55 X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:30:7b:f7:03:f6:e5:5b:50:13:40:6b:6a:48:59:86:b1:9a: a1:28:5a:c6:e9:64:f2:e6:06:60:3b:46:fb:83:44:7c:75:55: 5e:f1:ba:1b:93:9d:af:4e:e7:81:ee:e6:80:46:ee:07:3a:f9: 1c:5d:06:0e:61:bf:82:b5:f9:47:9c:a0:bf:2b:4e:25:96:13: 13:04:40:a2:fb:88:fb:ba:68:77:3b:27:2b:ac:ac:7a:de:fe: 66:84:f3:f6:7d:35:9d:89:de:70:ec:94:ab:0e:94:b5:7e:f2: 5e:67:23:1d:cc:43:c4:f8:ad:b0:87:f5:c3:db:a2:10:81:cb: 28:00:cb:7e:54:e1:57:28:07:ff:f6:a5:66:87:cb:a4:9d:31: db:d4:48:db:04:83:cc:cc:79:53:7e:51:41:41:85:d3:66:d0: 8c:f2:04:80:86:62:34:83:74:77:59:ff:48:51:6c:ce:1f:aa: 8d:7d:5e:7b:f4:39:b3:4b:35:15:1d:17:13:16:14:e3:68:5d: ac:7f:a2:5a:3c:f5:5a:80:20:19:3f:61:f7:27:a7:ef:f7:ad: 21:8c:8a:ce:2b:27:99:69:e8:d1:f7:d0:d7:54:54:39:76:d8: 37:cd:d0:72:36:27:07:3b:5e:52:cc:7f:67:40:59:83:b5:75: 78:ff:d6:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHplYjLmBXjuNSz2rtubM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjUxMjIyMjAwMDQxWhcNMjUxMjIzMjAwMDQxWjAzMTEwLwYDVQQD Eyg5ZGM5NjUzNjk3NjEwMTczMzk0NGNiYzE1NGU3OWEzZGY0MTdmYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9dJqAfpMc5oIcpmJXmQAJZWOEVT nI6wTWCisC2Dw/LBdIK1QZrk1BszcqfX1lu3wlE9LS+0cxVPFJcNBaOUtlauTHsE j+3r9weBg4MrqT0tOxI7i5ykfcl0EL35wnQWkvy2eVh9rFMAzX0GUcCiF3PRdk2D ahLsMiRIaWlTHP3uSFTb4tOt8PkFKR2uDyeY8ST+tTMkXM95BMPPaC5CfgPf6PMu 30ky+o0FkH2VxxD5pDMhj3dbvaRPJaArOAXxP00gtVdE41ZYRGO0RHpTZMiBYmR2 4GWA5YvZ+g93+WekESgPVuH33cn9uXxm9BQJdFVUR56UNC8+UHhKmoiLuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3JZTaXYQFzOUTLwVTnmj30F/pVMB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjB79wP2 5VtQE0BrakhZhrGaoShaxulk8uYGYDtG+4NEfHVVXvG6G5Odr07nge7mgEbuBzr5 HF0GDmG/grX5R5ygvytOJZYTEwRAovuI+7podzsnK6yset7+ZoTz9n01nYnecOyU qw6UtX7yXmcjHcxDxPitsIf1w9uiEIHLKADLflThVygH//alZofLpJ0x29RI2wSD zMx5U35RQUGF02bQjPIEgIZiNIN0d1n/SFFszh+qjX1ee/Q5s0s1FR0XExYU42hd rH+iWjz1WoAgGT9h9yen7/etIYyKzisnmWno0ffQ11RUOXbYN83QcjYnBzteUsx/ Z0BZg7V1eP/WqA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:12:02 2025 by rpki-client