This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json) Hash identifier: 4XUX4mVL5uItr2l8cgIHRf3XGlq9q+/b5uIui3WhpGY= Subject key identifier: 24:4E:BE:82:84:35:1B:9F:45:15:80:13:E2:57:66:65:4F:23:FF:F9 Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e Certificate serial: 019B1B0505965A45860CED1DC80E33D1B8C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft Manifest number: 06FA Signing time: Sun 14 Dec 2025 04:01:12 +0000 Manifest this update: Sun 14 Dec 2025 04:01:12 +0000 Manifest next update: Mon 15 Dec 2025 04:01:12 +0000 Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: /3BhUguHUVhak7TkJG6F58A3ZzTkjyiWpEmTO0GkWhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:05:96:5a:45:86:0c:ed:1d:c8:0e:33:d1:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d416152112daf2982442527b0f944e48285832e Validity Not Before: Dec 14 04:01:12 2025 GMT Not After : Dec 15 04:01:12 2025 GMT Subject: CN=244ebe8284351b9f45158013e25766654f23fff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:37:97:5b:ab:04:25:16:09:a1:dd:ee:e8: 4b:74:c3:60:43:91:75:03:5c:10:09:e7:59:a8:24: b8:01:bb:84:ef:d8:77:9e:dd:4d:c9:33:2d:42:b5: 19:b4:d4:0a:b5:a5:05:94:ca:e4:89:d9:e4:d0:72: e1:28:ff:87:ef:a2:25:06:26:59:22:9c:57:f5:35: 32:2e:fb:6c:fe:98:f5:7a:9f:ff:6a:6e:46:98:72: 68:3d:8f:a2:39:f7:e6:07:d6:58:dc:17:75:3f:f8: b8:ca:4f:f9:73:10:0f:a8:04:a9:a9:af:78:58:b0: 1f:1a:9c:1a:2a:df:a4:1d:ee:84:f2:d5:71:bb:a2: a7:37:88:35:3f:74:e0:22:49:2f:4d:f9:7a:1b:c7: a0:cd:a1:05:10:4d:3b:aa:fe:a3:d2:25:3c:1d:23: e3:ad:5a:28:ab:76:1e:2c:93:3e:4f:7d:ba:c6:10: fc:2c:f7:57:e2:30:0d:95:df:1d:06:f3:e2:99:a0: ef:bb:1c:bc:27:bf:fc:b1:6f:b3:6a:d3:32:1e:44: d7:c3:2a:2f:45:80:05:67:16:8f:5f:a7:c1:d0:f0: 01:da:4f:b1:27:ad:8c:78:a0:c6:08:e4:18:bd:cd: d5:a8:ce:c7:8e:41:6f:c1:41:f3:6d:aa:49:52:87: 4f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4E:BE:82:84:35:1B:9F:45:15:80:13:E2:57:66:65:4F:23:FF:F9 X509v3 Authority Key Identifier: keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:03:fd:46:f3:52:57:be:fe:ff:42:dc:e6:4a:02:ff:3c:5e: 1e:b2:fe:cc:a1:07:71:06:e5:88:da:68:f4:75:46:64:ca:6d: 5e:17:7e:74:2c:d6:62:ea:dc:c8:26:36:55:41:91:71:c2:55: ea:5c:5a:ab:c3:01:6c:62:d4:29:57:48:e4:f9:b1:59:e4:f6: f6:e1:0b:9d:f1:d6:4c:cf:70:9f:2a:6c:58:a2:3a:a8:1e:4d: 0b:87:27:35:61:b2:fc:53:c5:cd:d1:be:4c:04:e3:18:a6:2e: 35:4c:3b:d8:e4:60:24:a1:74:c3:9f:ca:ed:3a:9a:2f:09:a4: a6:10:d7:0a:e1:73:01:49:a0:2a:63:2a:b8:05:53:1e:76:43: 87:79:ac:7f:e1:c5:54:fb:94:18:6b:77:f6:1a:20:73:af:15: b6:ca:9e:38:c9:52:fa:3d:d1:09:1c:ab:c5:86:67:51:5d:d4: 33:da:af:65:3e:0b:8e:c4:bf:97:32:55:21:1e:28:43:6a:2a: a4:8a:dc:f7:4f:fc:0e:8e:f2:6d:05:ed:46:a9:13:b1:16:21: 8a:4e:70:4d:74:42:03:87:bb:e9:99:75:78:43:01:28:8b:59: c4:06:e0:4f:0c:7c:20:b5:e3:35:d1:02:a0:ac:8d:7d:8d:49: b9:ea:96:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBQWWWkWGDO0dyA4z0bjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDE2MTUyMTEyZGFmMjk4MjQ0MjUyN2IwZjk0NGU0ODI4 NTgzMmUwHhcNMjUxMjE0MDQwMTEyWhcNMjUxMjE1MDQwMTEyWjAzMTEwLwYDVQQD EygyNDRlYmU4Mjg0MzUxYjlmNDUxNTgwMTNlMjU3NjY2NTRmMjNmZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiM3l1urBCUWCaHd7uhLdMNgQ5F1 A1wQCedZqCS4AbuE79h3nt1NyTMtQrUZtNQKtaUFlMrkidnk0HLhKP+H76IlBiZZ IpxX9TUyLvts/pj1ep//am5GmHJoPY+iOffmB9ZY3Bd1P/i4yk/5cxAPqASpqa94 WLAfGpwaKt+kHe6E8tVxu6KnN4g1P3TgIkkvTfl6G8egzaEFEE07qv6j0iU8HSPj rVooq3YeLJM+T326xhD8LPdX4jANld8dBvPimaDvuxy8J7/8sW+zatMyHkTXwyov RYAFZxaPX6fB0PAB2k+xJ62MeKDGCOQYvc3VqM7HjkFvwUHzbapJUodPyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCROvoKENRufRRWAE+JXZmVPI//5MB8GA1UdIwQY MBaAFC1BYVIRLa8pgkQlJ7D5ROSChYMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMt ZDk2Y2U0MmExMTNiLzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMtZDk2Y2U0MmExMTNi LzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAP9RvNS V77+/0Lc5koC/zxeHrL+zKEHcQbliNpo9HVGZMptXhd+dCzWYurcyCY2VUGRccJV 6lxaq8MBbGLUKVdI5PmxWeT29uELnfHWTM9wnypsWKI6qB5NC4cnNWGy/FPFzdG+ TATjGKYuNUw72ORgJKF0w5/K7TqaLwmkphDXCuFzAUmgKmMquAVTHnZDh3msf+HF VPuUGGt39hogc68VtsqeOMlS+j3RCRyrxYZnUV3UM9qvZT4LjsS/lzJVIR4oQ2oq pIrc90/8Do7ybQXtRqkTsRYhik5wTXRCA4e76Zl1eEMBKItZxAbgTwx8ILXjNdEC oKyNfY1JueqWCg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:28 2025 by rpki-client