This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft File: LUUkZslYX29anMHDDo17Fu1HSkg.mft (raw, json) Hash identifier: ZqfnNQ0h91trLAm3sGjwZ/oKm6zxadxKRGYpP3+JacE= Subject key identifier: 60:78:A0:72:33:FF:A6:46:F2:9F:EB:14:B4:D5:83:0C:0A:39:EB:11 Authority key identifier: 2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 Certificate issuer: /CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48 Certificate serial: 019B1C17F7E5A66769E1DF2F308A20565C3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft Manifest number: 07EA Signing time: Sun 14 Dec 2025 09:01:31 +0000 Manifest this update: Sun 14 Dec 2025 09:01:31 +0000 Manifest next update: Mon 15 Dec 2025 09:01:31 +0000 Files and hashes: 1: LUUkZslYX29anMHDDo17Fu1HSkg.crl (hash: d2JhuVw5W8sOYiicpCRKUGXaQ93CO5gZVe4EqWkuNOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:f7:e5:a6:67:69:e1:df:2f:30:8a:20:56:5c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d452466c9585f6f5a9cc1c30e8d7b16ed474a48 Validity Not Before: Dec 14 09:01:31 2025 GMT Not After : Dec 15 09:01:31 2025 GMT Subject: CN=6078a07233ffa646f29feb14b4d5830c0a39eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0c:4a:7d:12:6b:0d:48:02:f6:13:ee:21:f9: 5a:fe:28:84:ce:42:e7:4a:58:b5:d4:00:db:ac:8f: c6:8b:75:cf:c2:e4:c8:9f:2c:44:e1:53:8e:55:4f: 19:14:63:e6:ff:ec:03:76:1a:4c:f7:54:2e:eb:51: d2:85:a1:80:34:8f:dd:54:47:0f:1b:f5:65:c5:ea: ba:1c:0e:33:f6:b7:a7:f0:bf:dc:4f:e3:9f:b9:b7: 84:c3:dd:e4:fe:2e:72:a6:70:d5:98:58:7e:f8:88: ca:f1:20:9c:0d:f3:4c:34:c1:ab:d2:55:ef:8a:f3: 94:82:e5:77:66:d0:44:b6:da:72:e6:64:87:be:bd: 46:52:52:94:a6:70:82:a6:9c:ab:80:41:6d:95:7b: 8e:76:9d:e5:fe:d1:e2:d7:94:36:4e:f1:e4:77:68: 66:1c:89:f2:0f:93:1b:1b:80:8a:e1:5a:96:3b:8d: 67:5c:17:82:8c:0e:f5:4b:17:7f:47:51:ad:14:21: 03:ea:31:c8:7a:cd:21:9e:9b:b2:62:89:e4:c9:79: 0a:8a:ee:cd:84:c7:f0:65:30:16:c7:93:05:a4:d3: 98:fc:d0:68:05:48:a5:cd:5b:55:e1:b5:e6:fb:da: 87:6f:10:dd:39:b4:c9:62:ae:97:3b:d9:b7:52:dc: 92:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:78:A0:72:33:FF:A6:46:F2:9F:EB:14:B4:D5:83:0C:0A:39:EB:11 X509v3 Authority Key Identifier: keyid:2D:45:24:66:C9:58:5F:6F:5A:9C:C1:C3:0E:8D:7B:16:ED:47:4A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUUkZslYX29anMHDDo17Fu1HSkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6bc00-6fd5-4782-b06e-23e9aa5c8aa1/1/LUUkZslYX29anMHDDo17Fu1HSkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d2:9d:d2:79:5f:2a:02:d6:d2:f5:19:96:86:87:0b:88:92: 5a:77:65:b4:67:c2:d0:cd:7e:ed:20:93:4d:02:24:17:75:28: 8d:0c:e6:33:76:46:49:36:ad:3d:4d:9e:25:63:11:75:2e:bf: cc:16:d3:cc:bb:b8:77:e8:f2:92:26:b2:72:d9:c0:3e:18:ca: e7:7f:0e:40:88:37:22:bf:dc:dd:75:b4:7c:68:c3:37:e5:f4: c1:85:c9:46:23:06:82:6f:ee:97:f3:4e:8a:ed:b4:0f:0a:ba: a0:f9:9a:53:26:4e:9f:ce:5d:32:2f:bc:a9:b8:ba:2d:62:df: 2e:47:3b:d7:97:e0:bd:9c:18:76:bf:8a:aa:bf:69:f4:47:e9: ec:7c:3f:37:11:ee:b8:4d:11:c5:ac:fe:1b:81:cf:8e:bb:bd: da:e9:42:8c:93:52:6b:aa:bd:86:11:b7:f2:5a:3a:ba:aa:04: 53:9a:ea:f7:6c:ad:34:db:49:fa:5d:b1:e0:de:36:48:a5:f4: fe:d8:7f:74:df:48:f9:95:d1:e0:cd:4d:46:91:a5:a2:0d:a1: 9d:f3:60:20:96:f0:e8:71:ed:45:5c:cb:18:e5:cb:83:4c:f5: 9d:1e:cd:c5:aa:1d:50:f7:f7:51:59:99:ec:19:3b:e6:3d:66: 42:1e:e0:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF/flpmdp4d8vMIogVlw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDUyNDY2Yzk1ODVmNmY1YTljYzFjMzBlOGQ3YjE2ZWQ0 NzRhNDgwHhcNMjUxMjE0MDkwMTMxWhcNMjUxMjE1MDkwMTMxWjAzMTEwLwYDVQQD Eyg2MDc4YTA3MjMzZmZhNjQ2ZjI5ZmViMTRiNGQ1ODMwYzBhMzllYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgxKfRJrDUgC9hPuIfla/iiEzkLn Sli11ADbrI/Gi3XPwuTInyxE4VOOVU8ZFGPm/+wDdhpM91Qu61HShaGANI/dVEcP G/Vlxeq6HA4z9ren8L/cT+OfubeEw93k/i5ypnDVmFh++IjK8SCcDfNMNMGr0lXv ivOUguV3ZtBEttpy5mSHvr1GUlKUpnCCppyrgEFtlXuOdp3l/tHi15Q2TvHkd2hm HInyD5MbG4CK4VqWO41nXBeCjA71Sxd/R1GtFCED6jHIes0hnpuyYonkyXkKiu7N hMfwZTAWx5MFpNOY/NBoBUilzVtV4bXm+9qHbxDdObTJYq6XO9m3UtySrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGB4oHIz/6ZG8p/rFLTVgwwKOesRMB8GA1UdIwQY MBaAFC1FJGbJWF9vWpzBww6NexbtR0pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUt MjNlOWFhNWM4YWExLzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNmJjMDAtNmZkNS00NzgyLWIwNmUtMjNlOWFhNWM4YWEx LzEvTFVVa1pzbFlYMjlhbk1IRERvMTdGdTFIU2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtKd0nlf KgLW0vUZloaHC4iSWndltGfC0M1+7SCTTQIkF3UojQzmM3ZGSTatPU2eJWMRdS6/ zBbTzLu4d+jykiayctnAPhjK538OQIg3Ir/c3XW0fGjDN+X0wYXJRiMGgm/ul/NO iu20Dwq6oPmaUyZOn85dMi+8qbi6LWLfLkc715fgvZwYdr+Kqr9p9Efp7Hw/NxHu uE0Rxaz+G4HPjru92ulCjJNSa6q9hhG38lo6uqoEU5rq92ytNNtJ+l2x4N42SKX0 /th/dN9I+ZXR4M1NRpGlog2hnfNgIJbw6HHtRVzLGOXLg0z1nR7NxaodUPf3UVmZ 7Bk75j1mQh7gyQ== -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:16 2025 by rpki-client