This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json) Hash identifier: bi31F5rv/947mgQs37BqsdrO89x6DC4tut2hTgnA9H4= Subject key identifier: 40:D8:09:F3:28:20:46:E6:13:20:00:32:A8:96:89:C5:48:79:E8:B2 Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23 Certificate serial: 019B484B02198510508263A36A8EA1F53149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft Manifest number: 0677 Signing time: Mon 22 Dec 2025 23:00:33 +0000 Manifest this update: Mon 22 Dec 2025 23:00:33 +0000 Manifest next update: Tue 23 Dec 2025 23:00:33 +0000 Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: 6umTjpWthYDVWJ4ys+yPjHG4D9H97xvRAs3txH33uE0=) 2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:02:19:85:10:50:82:63:a3:6a:8e:a1:f5:31:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23 Validity Not Before: Dec 22 23:00:33 2025 GMT Not After : Dec 23 23:00:33 2025 GMT Subject: CN=40d809f3282046e613200032a89689c54879e8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:9b:16:14:a5:a9:58:30:08:55:7e:a8:55: 55:cb:c1:9e:16:2d:11:5b:26:ff:71:1d:4a:49:35: 88:22:bf:1b:b8:50:c9:a0:41:9d:ee:95:67:72:23: 36:70:8a:02:33:b9:29:c9:1e:81:6d:9c:94:7a:5e: 5b:d5:2d:b6:c8:95:47:43:5e:3f:e4:4b:fc:0d:12: 6e:64:6d:70:9a:fd:91:b3:24:b9:c6:3e:be:f9:b5: 62:a0:3a:b3:61:0a:05:99:a7:c5:88:8c:7c:49:ce: c7:14:58:39:fd:f5:f0:4f:42:c7:e6:d8:b8:93:bc: 9c:d4:86:29:d7:9b:0e:66:f3:ff:43:cc:fa:3d:61: b8:fa:95:90:c9:25:e5:22:5c:ff:53:9f:f4:cd:93: 39:90:52:4c:b8:35:b9:4c:36:46:c6:e2:3d:c2:48: 2e:06:a1:59:ff:fa:0c:76:23:fc:0c:5b:e4:ad:17: 43:40:a7:98:7f:18:27:3e:29:a3:67:63:c6:d5:ea: 65:67:dc:6d:c7:25:f2:0e:c7:4f:0a:8f:f0:99:3b: 2c:d6:ab:59:56:70:64:00:2a:65:af:81:73:00:f2: cb:19:66:6e:a9:18:f7:78:0d:bf:ff:e0:4a:52:ac: 8a:12:24:17:c7:a1:af:72:2a:2e:6f:d4:44:c2:41: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:09:F3:28:20:46:E6:13:20:00:32:A8:96:89:C5:48:79:E8:B2 X509v3 Authority Key Identifier: keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b7:f6:58:68:38:49:0c:1b:b1:9d:d6:62:5f:2f:f4:7a:34: b5:94:35:86:0f:90:98:26:ae:43:09:c0:bb:e4:6c:5b:2c:dc: 51:ee:7d:b1:f2:9d:04:eb:c9:96:d1:fa:b5:71:25:1f:89:6a: dd:da:ce:81:7d:01:59:33:f8:d5:91:e5:03:b2:af:7d:7d:df: 44:66:79:22:9c:f5:be:ef:5c:35:1a:2e:03:af:dc:3f:92:90: 1c:2a:c8:b4:a5:b0:bf:45:a5:6a:6e:a2:78:f4:ed:e1:78:a9: ed:26:98:1b:e7:4f:08:86:80:24:2d:c9:91:a6:69:35:2c:21: 38:47:55:2f:80:a9:cb:13:27:ed:fa:0c:5f:88:18:14:dc:c3: 98:1e:f5:e0:1f:ff:7d:84:92:6c:18:5e:e5:56:3c:0b:49:c1: 0c:34:cd:8f:8e:e5:fc:a5:27:ef:55:34:5a:3c:30:ac:bf:e8: 4e:02:e1:e9:56:0c:ca:89:20:f8:16:65:02:c1:0c:e6:db:e5: de:b2:27:34:81:4d:81:8e:32:6f:6a:88:c6:f3:64:c6:ab:41: 7d:80:ac:84:e1:38:45:3c:30:8d:e7:c6:a8:97:55:2d:2b:35: a0:5b:e3:73:85:3b:53:5b:4a:78:5f:19:cc:aa:c0:d3:0d:03: c9:ac:55:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISwIZhRBQgmOjao6h9TFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTVhZDUzYmZjNzM4NDBjNDI1NzExYzAxMDQ1MzU3MTA1 N2RjMjMwHhcNMjUxMjIyMjMwMDMzWhcNMjUxMjIzMjMwMDMzWjAzMTEwLwYDVQQD Eyg0MGQ4MDlmMzI4MjA0NmU2MTMyMDAwMzJhODk2ODljNTQ4NzllOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sabFhSlqVgwCFV+qFVVy8GeFi0R Wyb/cR1KSTWIIr8buFDJoEGd7pVnciM2cIoCM7kpyR6BbZyUel5b1S22yJVHQ14/ 5Ev8DRJuZG1wmv2RsyS5xj6++bVioDqzYQoFmafFiIx8Sc7HFFg5/fXwT0LH5ti4 k7yc1IYp15sOZvP/Q8z6PWG4+pWQySXlIlz/U5/0zZM5kFJMuDW5TDZGxuI9wkgu BqFZ//oMdiP8DFvkrRdDQKeYfxgnPimjZ2PG1eplZ9xtxyXyDsdPCo/wmTss1qtZ VnBkACplr4FzAPLLGWZuqRj3eA2//+BKUqyKEiQXx6Gvcioub9REwkF10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDYCfMoIEbmEyAAMqiWicVIeeiyMB8GA1UdIwQY MBaAFJblrVO/xzhAxCVxHAEEU1cQV9wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQt ZWY5YTU4NGJkMTEzLzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQtZWY5YTU4NGJkMTEz LzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbf2WGg4 SQwbsZ3WYl8v9Ho0tZQ1hg+QmCauQwnAu+RsWyzcUe59sfKdBOvJltH6tXElH4lq 3drOgX0BWTP41ZHlA7KvfX3fRGZ5Ipz1vu9cNRouA6/cP5KQHCrItKWwv0Wlam6i ePTt4Xip7SaYG+dPCIaAJC3JkaZpNSwhOEdVL4CpyxMn7foMX4gYFNzDmB714B// fYSSbBhe5VY8C0nBDDTNj47l/KUn71U0WjwwrL/oTgLh6VYMyokg+BZlAsEM5tvl 3rInNIFNgY4yb2qIxvNkxqtBfYCshOE4RTwwjefGqJdVLSs1oFvjc4U7U1tKeF8Z zKrA0w0DyaxVZA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:05:29 2025 by rpki-client