This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json) Hash identifier: VClgCsrR6DHqv27RaCAoP1UrY+D41HsWrgJUxq+u92c= Subject key identifier: FC:ED:3D:85:76:E8:42:44:91:0E:6E:A4:84:93:B1:C1:68:19:DD:82 Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Certificate serial: 019B360EE6BC1DD18ED6BBE646706DF83335 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft Manifest number: 05CF Signing time: Fri 19 Dec 2025 10:01:44 +0000 Manifest this update: Fri 19 Dec 2025 10:01:44 +0000 Manifest next update: Sat 20 Dec 2025 10:01:44 +0000 Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=) 2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: LQNx0PXQ7WOO2Gfu/4ess2uaCiL5E1IPiR2faNxxjZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:e6:bc:1d:d1:8e:d6:bb:e6:46:70:6d:f8:33:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Validity Not Before: Dec 19 10:01:44 2025 GMT Not After : Dec 20 10:01:44 2025 GMT Subject: CN=fced3d8576e84244910e6ea48493b1c16819dd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ed:6a:09:0b:4b:6a:37:fc:f6:c5:bf:7f:2b: bd:a2:2c:6a:98:ba:f9:e9:c1:71:a5:35:f2:9e:a9: bd:49:81:4b:c1:c2:f3:54:3c:3e:44:e2:45:2e:91: 13:64:cd:68:a8:3b:98:71:d5:ae:79:e6:60:bf:81: 41:5f:52:00:0a:f1:15:cd:78:2b:53:a5:e3:35:a1: dc:3e:70:61:b1:56:4d:b7:f1:0a:38:c6:a8:c1:41: 86:5c:35:9c:06:7f:75:51:26:5f:c5:50:97:c8:fb: f7:ad:0c:39:36:f7:2c:fa:2c:37:d4:53:37:e2:fc: 5d:75:85:1a:93:2b:83:38:b4:a3:66:04:8d:2e:c7: be:36:91:72:7c:ba:ef:74:ed:b2:b8:81:0d:dc:b6: 14:af:30:59:7f:25:5a:2e:83:de:65:45:dd:a8:55: fa:ae:a4:f2:51:67:23:97:aa:c0:81:49:03:af:cc: 0b:d9:65:4f:c1:8b:d6:59:90:22:37:9f:b0:d9:a0: 9a:48:1d:4c:9d:78:31:f5:90:85:c6:1d:12:1c:7c: 6b:62:69:01:80:b5:f5:ed:a7:3a:19:46:05:47:7d: 1c:a9:ed:d0:3d:6e:c8:30:7a:3a:af:66:10:0a:80: 26:80:0e:71:ab:d0:b3:24:b1:c3:0c:44:89:91:b6: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:3D:85:76:E8:42:44:91:0E:6E:A4:84:93:B1:C1:68:19:DD:82 X509v3 Authority Key Identifier: keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7e:44:69:28:2b:95:e9:9d:74:d4:de:cf:7f:2c:eb:0f:4b: 78:4d:82:7c:5c:58:8c:51:e6:bd:e3:28:88:b7:15:60:f5:16: 98:e5:42:d9:50:3e:e0:95:3b:a5:6e:58:c4:7f:7d:66:6a:d1: bd:cf:56:7e:77:eb:8e:1d:14:95:98:ef:3e:89:dd:f7:cd:da: b1:53:d1:b7:8c:f7:36:a7:a8:94:78:d5:81:e1:37:60:0c:7e: eb:3f:42:ac:92:72:24:4c:39:53:06:34:a2:d3:bc:f8:4f:57: fd:b5:f3:19:69:17:41:f6:b3:c5:7b:d7:c7:9c:15:a1:b3:e5: eb:f0:83:33:63:c2:9e:1a:1d:f7:cb:1b:56:23:20:26:c8:42: 86:99:ed:22:39:11:55:c5:60:bf:e5:be:6d:4e:33:f3:6d:9c: 68:7e:38:da:b5:cf:c6:46:3e:e6:e8:34:ac:cc:32:61:72:96: c6:58:6d:eb:67:5a:5a:c2:48:79:39:73:7b:c0:2e:a0:37:72: 5b:ac:56:e1:e7:ea:1b:30:16:58:63:35:81:d8:bc:72:9e:88: 2f:95:76:7f:fd:9b:a8:c1:c9:e7:72:89:0e:7d:01:d0:2b:08: 51:be:20:74:d5:29:3b:3f:e2:fe:ce:da:63:49:ce:59:11:d4: 22:16:7c:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dua8HdGO1rvmRnBt+DM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw NzY1NGQwHhcNMjUxMjE5MTAwMTQ0WhcNMjUxMjIwMTAwMTQ0WjAzMTEwLwYDVQQD EyhmY2VkM2Q4NTc2ZTg0MjQ0OTEwZTZlYTQ4NDkzYjFjMTY4MTlkZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+1qCQtLajf89sW/fyu9oixqmLr5 6cFxpTXynqm9SYFLwcLzVDw+ROJFLpETZM1oqDuYcdWueeZgv4FBX1IACvEVzXgr U6XjNaHcPnBhsVZNt/EKOMaowUGGXDWcBn91USZfxVCXyPv3rQw5Nvcs+iw31FM3 4vxddYUakyuDOLSjZgSNLse+NpFyfLrvdO2yuIEN3LYUrzBZfyVaLoPeZUXdqFX6 rqTyUWcjl6rAgUkDr8wL2WVPwYvWWZAiN5+w2aCaSB1MnXgx9ZCFxh0SHHxrYmkB gLX17ac6GUYFR30cqe3QPW7IMHo6r2YQCoAmgA5xq9CzJLHDDESJkbazCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPztPYV26EJEkQ5upISTscFoGd2CMB8GA1UdIwQY MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX5EaSgr lemddNTez38s6w9LeE2CfFxYjFHmveMoiLcVYPUWmOVC2VA+4JU7pW5YxH99ZmrR vc9Wfnfrjh0UlZjvPond983asVPRt4z3NqeolHjVgeE3YAx+6z9CrJJyJEw5UwY0 otO8+E9X/bXzGWkXQfazxXvXx5wVobPl6/CDM2PCnhod98sbViMgJshChpntIjkR VcVgv+W+bU4z822caH442rXPxkY+5ug0rMwyYXKWxlht62daWsJIeTlze8AuoDdy W6xW4efqGzAWWGM1gdi8cp6IL5V2f/2bqMHJ53KJDn0B0CsIUb4gdNUpOz/i/s7a Y0nOWRHUIhZ8bA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:25 2025 by rpki-client