This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json) Hash identifier: 01MHw4Q4PWRyOMQW8E61t4DOxR/hiIDweM93RTBioms= Subject key identifier: A3:87:DA:75:41:4E:C4:0A:C6:21:A2:57:64:37:0A:52:BF:9B:78:8B Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Certificate serial: 019B2D78C3A584FDE06E36785F3547129591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft Manifest number: 0338 Signing time: Wed 17 Dec 2025 18:00:47 +0000 Manifest this update: Wed 17 Dec 2025 18:00:47 +0000 Manifest next update: Thu 18 Dec 2025 18:00:47 +0000 Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: uvWzKC5yalyTpY91m0SUhEZ5airapNKjizrlld+5K/0=) 2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:c3:a5:84:fd:e0:6e:36:78:5f:35:47:12:95:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Validity Not Before: Dec 17 18:00:47 2025 GMT Not After : Dec 18 18:00:47 2025 GMT Subject: CN=a387da75414ec40ac621a25764370a52bf9b788b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:a1:c3:77:01:1e:f4:c5:9e:7d:20:87:11: 7a:a3:a7:9f:50:79:dc:ad:43:c9:22:bf:cb:86:17: 66:66:f1:11:64:89:87:f4:64:e9:2d:71:78:37:bb: 56:39:ef:07:03:70:f3:51:12:68:4a:16:c7:8c:6c: 93:cc:a0:0f:7a:7a:38:0e:62:9a:76:06:a2:82:76: c5:7b:1b:15:46:18:a1:97:c6:f7:c5:b0:e7:e9:87: 98:c3:a9:b8:17:29:51:06:fc:ed:86:ce:a8:54:71: fa:61:db:e8:a4:d1:9f:44:bb:d3:77:66:87:bf:ac: b9:7c:9c:80:c9:0c:6d:4b:43:95:82:21:40:7a:6e: 76:b4:b7:67:51:30:25:36:01:ad:bc:c9:5e:1f:81: 43:47:e6:a2:1e:fd:f0:2f:b8:2a:d4:58:a1:04:13: 40:fd:50:91:dd:df:87:b5:8d:96:ad:3b:c0:13:12: 51:f3:de:ec:65:a2:86:20:cf:1a:42:53:11:7b:d4: 4d:3a:e6:19:ed:ad:ad:23:cb:4f:3a:99:a3:df:74: 03:19:71:98:dd:88:c7:27:0f:2e:06:a7:41:62:67: 50:1c:ac:87:1b:4b:f4:93:b9:8c:f0:4d:bd:f6:f1: 58:5e:85:30:c5:43:05:c2:b9:32:7c:5e:9c:86:f7: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:DA:75:41:4E:C4:0A:C6:21:A2:57:64:37:0A:52:BF:9B:78:8B X509v3 Authority Key Identifier: keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2d:72:96:89:14:51:1b:e0:97:ad:5d:fa:bb:eb:fe:f8:58: ed:54:6f:0a:61:45:59:c9:78:49:cc:00:1a:50:43:28:b6:2a: 2c:a5:99:25:54:e0:0e:d4:2a:4b:2b:e0:21:a3:8f:0c:25:a1: d7:b2:03:13:c2:36:03:5e:79:c9:be:48:09:73:ff:3d:72:0e: 91:a5:05:f9:90:40:82:b7:41:77:84:64:d0:ee:d9:81:c6:0c: ad:90:77:06:ba:c1:cb:c6:33:1b:6a:55:4f:56:17:d5:6a:8c: ef:40:80:1d:6b:36:96:5e:06:29:bd:07:c9:23:c3:71:6e:12: ad:9a:8f:4e:d1:5f:d0:80:50:e4:ed:f9:a0:b0:29:dd:64:ec: 27:19:81:cc:c5:ee:c3:aa:1b:c8:c2:1b:10:be:4a:a5:81:4e: eb:48:b1:96:6d:e2:72:fe:be:db:7c:48:79:7a:7e:cd:79:15: 06:4d:d3:37:d6:ca:47:3f:12:d4:c1:ca:a8:dc:50:56:73:79: 2a:c1:77:8d:86:fb:8a:2f:b8:57:ae:9a:27:12:c7:80:bf:bf: e3:51:cd:c7:e3:6a:06:4a:0c:b5:b4:72:7f:60:fa:d2:d7:34: 3d:b3:48:af:5f:87:6d:75:1b:8a:8d:10:0d:46:26:ac:29:23: a3:77:16:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteMOlhP3gbjZ4XzVHEpWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1 OGFjYzAwHhcNMjUxMjE3MTgwMDQ3WhcNMjUxMjE4MTgwMDQ3WjAzMTEwLwYDVQQD EyhhMzg3ZGE3NTQxNGVjNDBhYzYyMWEyNTc2NDM3MGE1MmJmOWI3ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN2hw3cBHvTFnn0ghxF6o6efUHnc rUPJIr/LhhdmZvERZImH9GTpLXF4N7tWOe8HA3DzURJoShbHjGyTzKAPeno4DmKa dgaignbFexsVRhihl8b3xbDn6YeYw6m4FylRBvzths6oVHH6YdvopNGfRLvTd2aH v6y5fJyAyQxtS0OVgiFAem52tLdnUTAlNgGtvMleH4FDR+aiHv3wL7gq1FihBBNA /VCR3d+HtY2WrTvAExJR897sZaKGIM8aQlMRe9RNOuYZ7a2tI8tPOpmj33QDGXGY 3YjHJw8uBqdBYmdQHKyHG0v0k7mM8E299vFYXoUwxUMFwrkyfF6chvco0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOH2nVBTsQKxiGiV2Q3ClK/m3iLMB8GA1UdIwQY MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfC1ylokU URvgl61d+rvr/vhY7VRvCmFFWcl4ScwAGlBDKLYqLKWZJVTgDtQqSyvgIaOPDCWh 17IDE8I2A155yb5ICXP/PXIOkaUF+ZBAgrdBd4Rk0O7ZgcYMrZB3BrrBy8YzG2pV T1YX1WqM70CAHWs2ll4GKb0HySPDcW4SrZqPTtFf0IBQ5O35oLAp3WTsJxmBzMXu w6obyMIbEL5KpYFO60ixlm3icv6+23xIeXp+zXkVBk3TN9bKRz8S1MHKqNxQVnN5 KsF3jYb7ii+4V66aJxLHgL+/41HNx+NqBkoMtbRyf2D60tc0PbNIr1+HbXUbio0Q DUYmrCkjo3cWLA== -----END CERTIFICATE-----Generated at Thu Dec 18 03:26:41 2025 by rpki-client