This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json) Hash identifier: 6ATl0FboBwgLpwJbceyw3W0Z1fTBUvn5vPdcChd1m4g= Subject key identifier: 66:24:F2:AC:25:BA:1C:4D:84:15:BD:69:05:83:B5:2B:C0:C3:58:77 Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Certificate serial: 019AB962BE4E10033E1291BECB62AFC2A061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft Manifest number: 1780 Signing time: Tue 25 Nov 2025 05:00:47 +0000 Manifest this update: Tue 25 Nov 2025 05:00:47 +0000 Manifest next update: Wed 26 Nov 2025 05:00:47 +0000 Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: vJKWKOeeok3IPmJttNV4YAdMegC6AOgLWyZf7xJsbUQ=) 2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:62:be:4e:10:03:3e:12:91:be:cb:62:af:c2:a0:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Validity Not Before: Nov 25 05:00:47 2025 GMT Not After : Nov 26 05:00:47 2025 GMT Subject: CN=6624f2ac25ba1c4d8415bd690583b52bc0c35877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:b4:c1:12:36:c5:a9:32:74:9b:1c:18:18: 1d:a7:bb:dc:cc:3f:72:69:3e:2e:79:74:5b:f5:72: 83:5d:56:af:22:bd:ff:29:e1:8f:9d:23:59:13:c9: b8:9d:fa:58:b3:27:31:af:52:dc:77:5b:e7:55:ca: 85:8d:c5:4c:51:76:a1:fb:0a:d9:10:c5:34:74:e6: 5e:4b:ec:74:f1:68:c3:51:64:0a:77:f7:6d:72:37: d6:90:92:ba:5d:e8:f8:cc:1e:20:06:54:9a:22:a4: 6b:ef:af:52:ae:57:da:22:cf:08:6f:04:76:28:07: 72:d7:f4:7f:6c:2b:e3:2f:69:42:22:b4:42:7c:e5: 50:f5:f7:60:37:85:d8:bd:a7:1a:da:20:bd:38:ff: 4c:75:ee:b8:a4:82:52:9e:a7:ff:28:70:d6:24:4d: 31:a1:20:8b:f6:5a:79:24:76:8a:d5:9d:b4:fd:e3: 15:cd:6d:81:c0:65:a7:e8:75:96:92:f3:79:49:c3: 65:09:04:93:c1:d1:30:a7:21:86:01:36:b5:2a:c5: c6:53:67:7f:83:74:f7:fd:27:a9:5c:61:ab:6a:f2: 3b:52:48:1b:3a:49:f1:f9:4b:19:fb:61:3a:c9:b4: c4:4d:97:2c:6c:8d:ad:05:e2:61:a4:36:b2:6d:db: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:24:F2:AC:25:BA:1C:4D:84:15:BD:69:05:83:B5:2B:C0:C3:58:77 X509v3 Authority Key Identifier: keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1a:f1:4b:50:22:11:31:81:42:c3:4e:f6:3f:25:41:89:09: 33:b0:2f:c9:0c:13:62:39:11:57:dd:74:21:a6:ac:99:2e:28: 45:37:6f:8f:97:7e:3f:5f:f8:1b:bd:cf:e7:24:2f:55:a5:b0: 8c:1f:54:bf:35:76:bb:d3:92:7b:f9:42:6b:e4:af:f8:2a:62: d7:97:ca:5d:38:f6:2e:b4:33:a8:26:06:94:8c:c1:89:8f:25: 44:39:65:69:aa:c3:d8:6c:7a:6d:73:8f:f9:33:b2:f2:0e:f3: a5:74:ee:ce:55:2a:1a:2f:6f:2f:03:9c:ab:86:46:38:97:56: c5:8d:cf:0c:af:9c:05:11:70:45:ba:a0:f5:62:76:3d:38:22: 02:26:94:75:39:77:ce:fa:1b:90:d0:9a:30:1c:b0:55:56:30: 63:8c:d6:b9:f2:d7:6f:69:fa:56:e3:f9:9c:5c:75:de:e5:b3: be:f0:78:5b:c6:70:48:fe:97:0d:e9:b6:c2:ce:0d:2d:fd:45: 48:81:62:69:7c:6f:47:04:d6:ab:fa:7c:79:c7:c3:0b:84:c1: 83:3f:13:34:32:72:c5:ae:a0:1c:67:cb:af:b3:5d:4f:d4:65: b5:25:cf:3e:65:57:65:42:91:c7:8a:82:45:ef:30:8d:1c:6a: d8:0d:20:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5Yr5OEAM+EpG+y2KvwqBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl YWY0M2YwHhcNMjUxMTI1MDUwMDQ3WhcNMjUxMTI2MDUwMDQ3WjAzMTEwLwYDVQQD Eyg2NjI0ZjJhYzI1YmExYzRkODQxNWJkNjkwNTgzYjUyYmMwYzM1ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqy0wRI2xakydJscGBgdp7vczD9y aT4ueXRb9XKDXVavIr3/KeGPnSNZE8m4nfpYsycxr1Lcd1vnVcqFjcVMUXah+wrZ EMU0dOZeS+x08WjDUWQKd/dtcjfWkJK6Xej4zB4gBlSaIqRr769SrlfaIs8IbwR2 KAdy1/R/bCvjL2lCIrRCfOVQ9fdgN4XYvaca2iC9OP9Mde64pIJSnqf/KHDWJE0x oSCL9lp5JHaK1Z20/eMVzW2BwGWn6HWWkvN5ScNlCQSTwdEwpyGGATa1KsXGU2d/ g3T3/SepXGGravI7UkgbOknx+UsZ+2E6ybTETZcsbI2tBeJhpDaybdscdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYk8qwluhxNhBW9aQWDtSvAw1h3MB8GA1UdIwQY MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0 LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhrxS1Ai ETGBQsNO9j8lQYkJM7AvyQwTYjkRV910IaasmS4oRTdvj5d+P1/4G73P5yQvVaWw jB9UvzV2u9OSe/lCa+Sv+Cpi15fKXTj2LrQzqCYGlIzBiY8lRDllaarD2Gx6bXOP +TOy8g7zpXTuzlUqGi9vLwOcq4ZGOJdWxY3PDK+cBRFwRbqg9WJ2PTgiAiaUdTl3 zvobkNCaMBywVVYwY4zWufLXb2n6VuP5nFx13uWzvvB4W8ZwSP6XDem2ws4NLf1F SIFiaXxvRwTWq/p8ecfDC4TBgz8TNDJyxa6gHGfLr7NdT9RltSXPPmVXZUKRx4qC Re8wjRxq2A0gig== -----END CERTIFICATE-----Generated at Tue Nov 25 12:57:48 2025 by rpki-client