This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json) Hash identifier: mO5PczHlwjXKtWmlMOPWmHmR+EazqLMbGpmoc5CHMp4= Subject key identifier: 50:94:8A:18:B6:F6:F0:3C:D4:CA:CB:70:91:24:35:C6:BD:2C:0C:BA Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019B1013F351D95A383E7A67164FC853B5D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:01:41 +0000 Manifest this update: Fri 12 Dec 2025 01:01:41 +0000 Manifest next update: Sat 13 Dec 2025 01:01:41 +0000 Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: 9ljuhr9PFWDHKsvH3f1Z1YcdB8P96mDyQLtOzCZCB2M=) 2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=) 3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f3:51:d9:5a:38:3e:7a:67:16:4f:c8:53:b5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Dec 12 01:01:41 2025 GMT Not After : Dec 13 01:01:41 2025 GMT Subject: CN=50948a18b6f6f03cd4cacb70912435c6bd2c0cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:e6:3f:42:2b:07:a9:92:18:65:56:6b:4d: 3c:b8:37:49:c8:a5:9c:8d:6e:60:e2:96:83:4a:09: 6e:2f:af:fa:3b:cc:72:e8:9d:a3:08:9e:62:b3:d7: 5b:18:a2:11:1d:12:c7:8a:1d:4f:21:7f:a4:b2:95: 6a:82:5b:7f:b8:f7:ea:29:88:20:e9:ee:18:23:21: aa:ce:ff:b3:63:4f:9c:14:b7:fe:fe:d3:83:bd:71: 52:f2:3b:8e:0c:28:31:ba:20:12:5f:f1:4d:7a:b2: c9:43:06:97:6d:a4:00:c4:35:96:c1:bb:5d:70:68: d6:d3:97:a1:59:18:2a:2c:26:1b:15:ac:5c:42:ff: bb:51:06:01:cd:49:02:81:49:ae:00:c0:e6:70:51: 15:67:ec:db:9d:d3:7f:21:ce:55:e9:ae:de:d4:91: 93:cc:50:31:c9:56:8f:04:13:1d:c7:69:64:a4:40: a8:07:9c:a0:76:5e:16:54:bc:7f:c7:e9:1d:6b:96: 95:38:be:99:53:7b:63:d1:cf:ca:08:74:0a:51:04: a1:4e:ef:b2:12:2c:f1:04:d1:15:b8:0a:ec:5e:c4: b4:80:85:01:69:32:30:f1:2c:c1:ae:ad:17:b5:54: a7:51:db:ef:9c:59:13:a5:2f:4b:39:ff:fa:6a:f0: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:94:8A:18:B6:F6:F0:3C:D4:CA:CB:70:91:24:35:C6:BD:2C:0C:BA X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:50:c1:5a:63:aa:cd:37:e0:37:55:bf:71:c3:e1:e6:b4:28: 61:32:e4:62:b0:45:5f:c5:18:b9:f6:71:c6:8f:1c:7a:46:b0: 82:47:9a:e1:27:8a:32:c7:b1:de:9f:a8:19:00:90:05:51:39: 7a:bf:e1:13:c3:6c:6e:58:40:d3:dc:f4:0a:fb:4a:4a:d7:a5: 4b:e0:41:28:97:cc:7f:e4:f2:52:0b:f8:5c:03:4e:1c:3e:2a: ca:c3:f2:65:94:3b:fb:dd:1c:8c:d2:fa:c4:be:1d:dc:4e:85: 06:06:af:8d:75:79:7b:5f:df:a9:98:cb:31:3b:11:37:75:61: ec:ec:0e:d3:85:f9:6c:62:b2:a5:de:4d:1a:5f:08:e7:f3:5e: 38:ce:73:fa:cf:cc:46:96:89:d6:58:9c:76:09:fd:fb:b2:46: 8e:75:76:45:46:d3:53:dd:4c:0c:11:92:f7:ab:7e:93:e4:6b: d6:34:dd:6d:d4:ae:a1:ff:23:62:98:f0:c1:d9:81:87:fa:ee: 18:e2:9e:57:74:1b:66:8f:3c:1c:f5:e8:c3:98:1a:0b:24:fa: de:87:f9:4d:16:77:ea:10:73:9b:55:9b:94:0e:b4:c7:c5:04: 61:b2:05:12:dd:9e:bc:89:6d:21:1c:6c:b2:0b:50:73:6f:7c: 17:ae:4f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/NR2Vo4PnpnFk/IU7XSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjUxMjEyMDEwMTQxWhcNMjUxMjEzMDEwMTQxWjAzMTEwLwYDVQQD Eyg1MDk0OGExOGI2ZjZmMDNjZDRjYWNiNzA5MTI0MzVjNmJkMmMwY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RzmP0IrB6mSGGVWa008uDdJyKWc jW5g4paDSgluL6/6O8xy6J2jCJ5is9dbGKIRHRLHih1PIX+kspVqglt/uPfqKYgg 6e4YIyGqzv+zY0+cFLf+/tODvXFS8juODCgxuiASX/FNerLJQwaXbaQAxDWWwbtd cGjW05ehWRgqLCYbFaxcQv+7UQYBzUkCgUmuAMDmcFEVZ+zbndN/Ic5V6a7e1JGT zFAxyVaPBBMdx2lkpECoB5ygdl4WVLx/x+kda5aVOL6ZU3tj0c/KCHQKUQShTu+y EizxBNEVuArsXsS0gIUBaTIw8SzBrq0XtVSnUdvvnFkTpS9LOf/6avCxaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCUihi29vA81MrLcJEkNca9LAy6MB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1DBWmOq zTfgN1W/ccPh5rQoYTLkYrBFX8UYufZxxo8cekawgkea4SeKMsex3p+oGQCQBVE5 er/hE8NsblhA09z0CvtKStelS+BBKJfMf+TyUgv4XANOHD4qysPyZZQ7+90cjNL6 xL4d3E6FBgavjXV5e1/fqZjLMTsRN3Vh7OwO04X5bGKypd5NGl8I5/NeOM5z+s/M RpaJ1licdgn9+7JGjnV2RUbTU91MDBGS96t+k+Rr1jTdbdSuof8jYpjwwdmBh/ru GOKeV3QbZo88HPXow5gaCyT63of5TRZ36hBzm1WblA60x8UEYbIFEt2evIltIRxs sgtQc298F65Pgw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:36:40 2025 by rpki-client