This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft File: lUqTUetm2NhiTiDRafdmty9YrMA.mft (raw, json) Hash identifier: xdwFMJN1KcNOk7I/0BxGElr7WgLyrmbxJnoivFpcOoA= Subject key identifier: 74:8C:3D:24:FA:D0:47:48:69:19:D6:EB:75:5C:5C:46:CC:5E:CA:0D Authority key identifier: 95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 Certificate issuer: /CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Certificate serial: 019B3344139B22058FFFB586A1880B3B8AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft Manifest number: 033B Signing time: Thu 18 Dec 2025 21:00:57 +0000 Manifest this update: Thu 18 Dec 2025 21:00:57 +0000 Manifest next update: Fri 19 Dec 2025 21:00:57 +0000 Files and hashes: 1: lUqTUetm2NhiTiDRafdmty9YrMA.crl (hash: sn2duxkQFAJdKHZ3fmpa0xKNXIp57sSmILKjTrS7kus=) 2: t16PzAlvWekYsP-M8rbE-GQqrKw.roa (hash: 3vnPnuhk/OI+4T9XrhuO16OQVY7hpcxK0i/qFVmYQP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:13:9b:22:05:8f:ff:b5:86:a1:88:0b:3b:8a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954a9351eb66d8d8624e20d169f766b72f58acc0 Validity Not Before: Dec 18 21:00:57 2025 GMT Not After : Dec 19 21:00:57 2025 GMT Subject: CN=748c3d24fad047486919d6eb755c5c46cc5eca0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:d0:1a:2b:b2:f8:45:b9:57:40:71:f5:2c: 61:a6:10:e2:27:6e:87:df:4f:1b:72:d2:1f:d5:29: cb:1e:3b:9a:04:5d:4f:c6:51:cf:ff:4e:f3:7c:3e: e2:02:33:40:bf:44:d3:1c:51:a7:42:af:82:cb:47: 1d:52:13:9e:e6:75:01:bf:ca:0e:d7:cd:de:98:7e: 15:51:60:df:15:08:5c:56:70:bd:29:59:fa:59:9a: 0e:9d:2e:5c:ef:e2:b7:19:e1:41:7f:32:99:36:e8: 2e:89:dd:70:0f:3a:5f:f1:65:a2:e2:ab:78:86:7a: 65:85:25:22:54:a8:74:9e:46:54:03:e5:6b:3b:8f: e5:11:d2:1b:2b:16:1f:fb:cf:40:0a:19:49:d9:19: 11:8d:78:7f:7a:50:70:69:69:99:00:da:5f:d5:cf: 84:d5:f9:bb:fa:bf:7e:3d:c0:c7:a7:ec:a4:da:b0: 85:db:55:12:16:34:64:68:4f:d8:dc:35:6d:eb:ee: 1d:d0:f4:c9:30:c2:f9:86:a8:2d:9a:07:6d:35:5a: 7b:3e:bb:ff:85:53:1c:f1:b3:26:16:e9:e8:10:d1: b9:b1:64:b0:83:6d:18:f7:fc:5d:c1:65:9d:4f:19: e3:0f:d6:44:9a:a7:96:4b:21:c7:20:b5:b0:d3:23: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8C:3D:24:FA:D0:47:48:69:19:D6:EB:75:5C:5C:46:CC:5E:CA:0D X509v3 Authority Key Identifier: keyid:95:4A:93:51:EB:66:D8:D8:62:4E:20:D1:69:F7:66:B7:2F:58:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUqTUetm2NhiTiDRafdmty9YrMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cf683e-6abd-4f5d-9943-02f3ddba1942/1/lUqTUetm2NhiTiDRafdmty9YrMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1d:d8:01:ac:fd:46:d5:11:c8:30:8f:57:fc:4e:67:3f:dc: df:08:40:11:71:ed:c1:51:b7:44:d8:63:07:2a:15:8f:8a:c9: c3:98:96:19:8e:2f:a3:ef:7a:7a:00:f0:3c:cb:eb:da:79:84: 9d:cf:71:da:1a:8a:25:52:6b:a0:61:be:fd:20:50:8e:4f:17: f2:60:32:b2:cb:7a:f5:e4:79:bc:46:5f:df:ea:28:6f:dd:d2: 3c:de:81:14:27:2c:d2:d5:1d:b8:77:38:a3:ce:c8:2f:07:e0: 49:29:3c:b9:ba:cd:20:02:92:30:43:7e:8d:01:aa:49:eb:f1: a0:27:de:38:b5:f7:48:80:2e:01:93:81:d1:21:61:1b:d3:11: d0:79:6a:2b:42:d8:11:0a:d4:5a:af:c3:95:b4:86:40:69:03: 3b:17:64:4e:a0:e4:6a:01:52:37:c9:64:79:96:fa:65:28:c4: dc:ab:d7:e4:c4:36:94:9a:99:a2:11:5c:0c:dc:85:e4:de:78: e9:18:d2:82:55:12:52:14:66:86:1e:14:2b:c2:15:72:1a:48: 23:a2:de:ac:c1:26:3e:a4:d0:83:61:04:ee:ef:a1:d2:f1:cd: a4:97:31:43:27:ad:71:ea:15:7b:c1:6d:ef:fe:a2:e3:3d:ea: f2:e1:a9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBObIgWP/7WGoYgLO4rmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGE5MzUxZWI2NmQ4ZDg2MjRlMjBkMTY5Zjc2NmI3MmY1 OGFjYzAwHhcNMjUxMjE4MjEwMDU3WhcNMjUxMjE5MjEwMDU3WjAzMTEwLwYDVQQD Eyg3NDhjM2QyNGZhZDA0NzQ4NjkxOWQ2ZWI3NTVjNWM0NmNjNWVjYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKDQGiuy+EW5V0Bx9SxhphDiJ26H 308bctIf1SnLHjuaBF1PxlHP/07zfD7iAjNAv0TTHFGnQq+Cy0cdUhOe5nUBv8oO 183emH4VUWDfFQhcVnC9KVn6WZoOnS5c7+K3GeFBfzKZNuguid1wDzpf8WWi4qt4 hnplhSUiVKh0nkZUA+VrO4/lEdIbKxYf+89AChlJ2RkRjXh/elBwaWmZANpf1c+E 1fm7+r9+PcDHp+yk2rCF21USFjRkaE/Y3DVt6+4d0PTJMML5hqgtmgdtNVp7Prv/ hVMc8bMmFunoENG5sWSwg20Y9/xdwWWdTxnjD9ZEmqeWSyHHILWw0yOCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSMPST60EdIaRnW63VcXEbMXsoNMB8GA1UdIwQY MBaAFJVKk1HrZtjYYk4g0Wn3ZrcvWKzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMt MDJmM2RkYmExOTQyLzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jZjY4M2UtNmFiZC00ZjVkLTk5NDMtMDJmM2RkYmExOTQy LzEvbFVxVFVldG0yTmhpVGlEUmFmZG10eTlZck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx3YAaz9 RtURyDCPV/xOZz/c3whAEXHtwVG3RNhjByoVj4rJw5iWGY4vo+96egDwPMvr2nmE nc9x2hqKJVJroGG+/SBQjk8X8mAysst69eR5vEZf3+oob93SPN6BFCcs0tUduHc4 o87ILwfgSSk8ubrNIAKSMEN+jQGqSevxoCfeOLX3SIAuAZOB0SFhG9MR0HlqK0LY EQrUWq/DlbSGQGkDOxdkTqDkagFSN8lkeZb6ZSjE3KvX5MQ2lJqZohFcDNyF5N54 6RjSglUSUhRmhh4UK8IVchpII6LerMEmPqTQg2EE7u+h0vHNpJcxQyetceoVe8Ft 7/6i4z3q8uGpCw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:11:44 2025 by rpki-client