This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json) Hash identifier: 3+LH003K8cOfOtV6c7Mk+Bw3xkzJdNSRArTMgBayomw= Subject key identifier: E4:71:A9:04:7D:CF:78:8B:9E:0C:A8:5C:2D:71:B3:52:6A:60:AE:1A Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019B28F6FA70AB4A35B25D26AC7C4694E06F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft Manifest number: 1458 Signing time: Tue 16 Dec 2025 21:00:33 +0000 Manifest this update: Tue 16 Dec 2025 21:00:33 +0000 Manifest next update: Wed 17 Dec 2025 21:00:33 +0000 Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=) 2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=) 3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=) 4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=) 5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: 4ZvXiPRgdMxtDebDnRGj34f9UuPNs9EM+alll/pnZBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:f6:fa:70:ab:4a:35:b2:5d:26:ac:7c:46:94:e0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Dec 16 21:00:33 2025 GMT Not After : Dec 17 21:00:33 2025 GMT Subject: CN=e471a9047dcf788b9e0ca85c2d71b3526a60ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:48:b0:66:a9:c6:e2:ff:c8:d2:da:38:39: 01:08:96:5b:2e:99:8b:bf:b1:ab:1d:be:9a:6e:70: d7:77:15:6d:0c:07:54:fb:54:3e:e1:27:5d:e5:56: d7:41:eb:5a:09:cf:70:af:d1:9c:52:ad:47:b1:2a: 50:7a:96:16:5e:80:65:e9:8a:08:5a:47:f3:7d:cb: f5:5e:08:87:34:cd:95:58:f0:99:52:31:ab:20:27: 62:7e:31:da:37:c1:38:21:d3:89:52:92:7d:e4:e9: 04:27:65:5a:be:da:1b:20:52:6d:86:41:e0:cf:dd: 6a:ed:98:29:0e:29:3b:41:06:b3:80:65:9b:ed:c7: 34:a1:2c:b0:46:0f:e2:a0:8e:1e:9c:15:64:c2:bd: 38:6b:7d:a8:f0:b9:86:20:b4:44:b2:63:dd:8c:5e: 77:3a:15:57:49:44:de:5b:a0:5b:ab:89:e9:46:11: 6f:37:13:13:ae:94:b3:4a:2e:4d:65:24:6e:c2:24: 6d:a5:96:8c:27:e3:a5:f3:01:e8:c4:e1:15:c0:2b: 4a:92:a1:ae:c7:2a:c2:c6:e3:fd:97:b5:35:2e:db: 4b:07:88:c1:a6:81:d7:28:6c:35:f6:a2:ef:9d:26: bb:a2:4a:f0:34:48:0a:2c:8e:7a:68:5e:f0:a6:b0: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:71:A9:04:7D:CF:78:8B:9E:0C:A8:5C:2D:71:B3:52:6A:60:AE:1A X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0e:68:b6:37:fa:b1:56:61:3b:52:ca:d9:3b:b4:5e:4d:44: df:a9:28:53:b8:2c:22:35:6a:a8:71:f3:f2:e2:f6:e1:1b:a1: 44:22:79:72:e0:b8:2a:46:8a:3a:53:4d:9c:3e:e0:f9:b3:46: 5a:6a:8c:dd:db:74:65:6d:b1:5a:94:8b:39:08:9d:26:ef:6d: e8:7f:c8:df:77:15:dc:d6:f0:c0:2b:5f:85:7a:02:0c:45:54: 29:51:68:e7:f1:da:68:55:19:90:64:3c:de:85:d5:ef:2c:1e: 05:15:14:8b:f4:5b:58:81:72:39:7d:ad:13:9c:4f:24:5e:c2: bf:0b:8e:c1:f4:8f:1c:78:6d:c5:e0:dc:b6:27:e7:ef:63:ce: f7:55:02:a3:0a:c1:f8:91:dd:87:76:fc:da:72:70:c7:9e:11: 6c:61:56:68:85:dc:3b:de:74:33:17:3a:90:08:7b:37:07:66: c7:60:7e:8b:c1:66:97:dd:ff:12:79:ff:cf:f6:5e:4a:70:47: 57:3f:26:78:4a:2a:f5:df:d2:1a:bc:f5:46:a9:e9:c6:c4:de: 6c:68:c8:84:8c:3b:b4:f2:5c:e0:7b:9f:52:e8:1c:08:8c:81: c0:55:37:da:16:b2:b4:f4:f4:17:5d:40:01:d1:03:e6:5f:72: 4b:5b:87:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZso9vpwq0o1sl0mrHxGlOBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjUxMjE2MjEwMDMzWhcNMjUxMjE3MjEwMDMzWjAzMTEwLwYDVQQD EyhlNDcxYTkwNDdkY2Y3ODhiOWUwY2E4NWMyZDcxYjM1MjZhNjBhZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeFIsGapxuL/yNLaODkBCJZbLpmL v7GrHb6abnDXdxVtDAdU+1Q+4Sdd5VbXQetaCc9wr9GcUq1HsSpQepYWXoBl6YoI Wkfzfcv1XgiHNM2VWPCZUjGrICdifjHaN8E4IdOJUpJ95OkEJ2VavtobIFJthkHg z91q7ZgpDik7QQazgGWb7cc0oSywRg/ioI4enBVkwr04a32o8LmGILREsmPdjF53 OhVXSUTeW6Bbq4npRhFvNxMTrpSzSi5NZSRuwiRtpZaMJ+Ol8wHoxOEVwCtKkqGu xyrCxuP9l7U1LttLB4jBpoHXKGw19qLvnSa7okrwNEgKLI56aF7wprAukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORxqQR9z3iLngyoXC1xs1JqYK4aMB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEg5otjf6 sVZhO1LK2Tu0Xk1E36koU7gsIjVqqHHz8uL24RuhRCJ5cuC4KkaKOlNNnD7g+bNG WmqM3dt0ZW2xWpSLOQidJu9t6H/I33cV3NbwwCtfhXoCDEVUKVFo5/HaaFUZkGQ8 3oXV7yweBRUUi/RbWIFyOX2tE5xPJF7CvwuOwfSPHHhtxeDctifn72PO91UCowrB +JHdh3b82nJwx54RbGFWaIXcO950Mxc6kAh7Nwdmx2B+i8Fml93/Enn/z/ZeSnBH Vz8meEoq9d/SGrz1RqnpxsTebGjIhIw7tPJc4HufUugcCIyBwFU32haytPT0F11A AdED5l9yS1uH8A== -----END CERTIFICATE-----Generated at Wed Dec 17 04:17:45 2025 by rpki-client