This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json) Hash identifier: 7kJYyOhGDgQBmhgUUl1t8iHSfAj2TtVgG9EJpztjNwQ= Subject key identifier: DB:F0:36:57:E0:B4:10:F1:A0:85:EE:F2:D0:3F:0C:47:5C:B5:FA:1B Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019B251A2FE982D4D23D30B4B89925D43D51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft Manifest number: 1456 Signing time: Tue 16 Dec 2025 03:00:31 +0000 Manifest this update: Tue 16 Dec 2025 03:00:31 +0000 Manifest next update: Wed 17 Dec 2025 03:00:31 +0000 Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=) 2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=) 3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=) 4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=) 5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: OCYhEjSVfPQmTM/WwBgEZpqVEEq06WWhRPSGFBNW00I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:1a:2f:e9:82:d4:d2:3d:30:b4:b8:99:25:d4:3d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Dec 16 03:00:31 2025 GMT Not After : Dec 17 03:00:31 2025 GMT Subject: CN=dbf03657e0b410f1a085eef2d03f0c475cb5fa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:bd:31:74:5a:32:30:ac:ee:17:e2:4f:bb: 73:1f:8b:c7:02:fb:40:15:a3:00:45:4f:d6:2f:55: 24:2a:67:2d:a9:35:2c:ff:ed:25:b0:4d:7a:b4:d2: 94:ba:46:e3:16:4b:ec:9e:78:83:2d:8e:b2:89:fe: 6e:fb:a8:65:49:ed:5c:53:b1:7b:09:c1:b5:95:cb: 35:f9:cf:83:64:73:6e:37:7d:e5:be:66:45:92:b8: 76:95:a7:07:fc:d5:da:7f:3c:3b:fb:44:3e:7a:d2: 35:9d:d1:8f:50:6d:ab:b2:29:8c:78:43:2d:93:a0: f4:c3:e3:3c:30:78:df:2f:a7:e0:43:79:12:87:15: 0d:9e:ee:37:90:26:ba:62:cc:a2:a5:d2:63:fb:6c: 5f:92:0a:f9:bf:61:fc:10:a3:5b:5b:6e:2a:6f:b3: 14:e4:d0:18:25:4b:f0:45:15:fc:72:65:18:32:fb: 9c:a1:d9:14:82:f5:c7:cc:a2:c7:82:dd:d0:37:66: ed:fb:0f:48:7e:9d:3f:37:0b:b3:c4:d9:47:cb:cb: 7e:70:7e:11:4f:09:94:6c:75:6b:b8:ff:41:a5:92: 0f:f1:5c:66:1a:1a:75:b1:ea:d1:89:cd:4e:40:c5: 97:d1:f6:64:68:6b:49:87:ee:61:d3:b0:77:75:e2: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:36:57:E0:B4:10:F1:A0:85:EE:F2:D0:3F:0C:47:5C:B5:FA:1B X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b8:88:24:0b:2b:4a:50:31:a5:b7:09:6b:29:70:70:c5:73: a5:26:cc:42:20:51:63:d3:c7:d1:5e:4b:4c:d3:8f:79:b3:6c: 5c:b1:95:a6:35:59:87:26:a9:ea:61:c0:ac:82:0a:ea:1a:89: 69:4d:d4:ad:f1:42:49:3e:09:6d:71:4f:d4:f3:1d:f7:90:d3: 21:57:39:e9:7f:43:51:2d:39:56:42:0a:ac:2d:91:9e:0b:0a: 19:cc:43:b6:22:21:b9:12:f2:bc:03:07:89:24:48:a8:e3:e6: dc:6b:ac:3b:a4:0b:73:b1:09:e5:61:a7:ba:38:8f:e5:03:70: fb:cf:3d:83:e3:78:a4:74:f3:68:1a:dd:e1:6d:0c:4e:cf:da: 7f:d3:8e:44:ac:c2:ca:49:24:ce:da:56:e8:29:c7:05:54:63: 16:99:6f:4f:4e:d1:fe:b0:09:09:c6:66:10:1d:88:9c:2f:eb: f2:f7:57:17:b0:17:ba:4c:5a:6d:5a:90:86:b9:ba:1c:99:f8: c2:b3:02:38:88:79:76:3d:a7:47:da:46:82:88:10:ca:4f:27: ec:2d:33:15:f9:08:e8:25:bb:68:30:bc:b2:27:98:1a:37:0e: 39:f2:34:c7:f9:5e:f6:76:9c:73:4e:30:52:18:23:54:e4:a4: 09:fd:90:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslGi/pgtTSPTC0uJkl1D1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjUxMjE2MDMwMDMxWhcNMjUxMjE3MDMwMDMxWjAzMTEwLwYDVQQD EyhkYmYwMzY1N2UwYjQxMGYxYTA4NWVlZjJkMDNmMGM0NzVjYjVmYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyO9MXRaMjCs7hfiT7tzH4vHAvtA FaMARU/WL1UkKmctqTUs/+0lsE16tNKUukbjFkvsnniDLY6yif5u+6hlSe1cU7F7 CcG1lcs1+c+DZHNuN33lvmZFkrh2lacH/NXafzw7+0Q+etI1ndGPUG2rsimMeEMt k6D0w+M8MHjfL6fgQ3kShxUNnu43kCa6YsyipdJj+2xfkgr5v2H8EKNbW24qb7MU 5NAYJUvwRRX8cmUYMvucodkUgvXHzKLHgt3QN2bt+w9Ifp0/NwuzxNlHy8t+cH4R TwmUbHVruP9BpZIP8VxmGhp1serRic1OQMWX0fZkaGtJh+5h07B3deJQTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvwNlfgtBDxoIXu8tA/DEdctfobMB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7iIJAsr SlAxpbcJaylwcMVzpSbMQiBRY9PH0V5LTNOPebNsXLGVpjVZhyap6mHArIIK6hqJ aU3UrfFCST4JbXFP1PMd95DTIVc56X9DUS05VkIKrC2RngsKGcxDtiIhuRLyvAMH iSRIqOPm3GusO6QLc7EJ5WGnujiP5QNw+889g+N4pHTzaBrd4W0MTs/af9OORKzC ykkkztpW6CnHBVRjFplvT07R/rAJCcZmEB2InC/r8vdXF7AXukxabVqQhrm6HJn4 wrMCOIh5dj2nR9pGgogQyk8n7C0zFfkI6CW7aDC8sieYGjcOOfI0x/le9nacc04w UhgjVOSkCf2QHw== -----END CERTIFICATE-----Generated at Tue Dec 16 10:18:45 2025 by rpki-client