This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json) Hash identifier: a68/nlf3+ESGXYpYehVwE/f33SriL+XlH3j08E8y7XQ= Subject key identifier: 68:F1:82:C6:5D:FC:8F:77:14:79:53:62:CA:64:56:D3:42:D6:85:C1 Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Certificate serial: 019B269B55247A1D6A2DDB906373682759C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft Manifest number: 05C7 Signing time: Tue 16 Dec 2025 10:01:12 +0000 Manifest this update: Tue 16 Dec 2025 10:01:12 +0000 Manifest next update: Wed 17 Dec 2025 10:01:12 +0000 Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=) 2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: 2XEz2G9Dr7bhIK1xtK489+u9WAzN5FJxApsrpLrX2Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:55:24:7a:1d:6a:2d:db:90:63:73:68:27:59:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Validity Not Before: Dec 16 10:01:12 2025 GMT Not After : Dec 17 10:01:12 2025 GMT Subject: CN=68f182c65dfc8f7714795362ca6456d342d685c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:89:09:fd:4a:4f:60:d5:59:c6:21:8b:3a: b4:36:e6:ef:25:b5:a7:5d:46:f4:8a:c1:91:e3:35: e2:67:5f:64:15:cf:4f:2e:03:ad:ed:93:12:12:bf: 9a:df:37:3d:b1:31:d5:fd:1a:a7:05:d2:f5:27:79: 70:30:b2:95:13:07:77:ab:37:91:72:53:ec:c5:02: 39:19:93:92:6a:b2:db:7d:b8:ba:96:4e:e3:66:30: 95:26:4c:31:a0:9f:ce:17:8b:38:59:0e:9e:34:23: 70:eb:e7:f8:55:1b:f6:95:54:e9:f6:52:61:ea:98: 00:05:60:bb:f8:a6:7e:99:da:53:5d:be:19:d4:93: 88:92:1b:05:5f:99:05:07:a9:62:47:5b:b0:82:d3: c6:72:1c:3d:fe:55:b2:d6:7f:53:14:c3:7d:3d:a0: 01:de:81:de:12:c9:1a:ca:64:8c:d6:2a:d2:51:c1: e3:43:2c:46:27:cd:11:07:8e:10:95:24:f6:50:8d: fc:27:24:49:05:c6:87:f2:39:52:ac:84:b4:af:d3: d3:2b:54:ba:cf:12:d5:54:5f:13:e8:03:c0:c9:a0: 30:0f:b7:da:a0:5b:2e:76:98:c7:c9:bf:e0:a2:45: 17:1e:07:bd:2b:44:5a:d0:88:e3:ee:34:a5:92:98: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F1:82:C6:5D:FC:8F:77:14:79:53:62:CA:64:56:D3:42:D6:85:C1 X509v3 Authority Key Identifier: keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:2e:83:bc:ab:8f:a9:b3:e9:9a:56:85:cb:fa:01:2a:08: 07:cc:ed:43:0e:87:43:65:b9:35:20:f9:16:e3:d0:56:05:2f: 0c:31:11:65:e2:4e:d3:1f:85:f8:7b:a0:eb:cd:b9:ac:03:ff: 55:54:82:2f:cb:70:ec:3e:1f:ff:be:83:77:a8:18:64:8e:95: cf:42:04:60:ca:d8:9b:47:95:e0:9f:47:9c:1d:7d:07:27:a6: 1f:f3:6c:74:43:47:b2:eb:64:61:27:6c:e3:85:7e:44:e2:ec: ea:98:9a:d2:2c:c7:56:05:54:20:1e:1d:a1:f8:5f:30:cd:e7: b0:3e:02:31:20:24:c2:01:c6:5a:e0:66:4f:d8:b5:82:0d:02: c4:56:80:ef:d8:15:1f:65:9c:e8:a0:a7:92:92:90:d2:97:36: 77:57:e4:5d:cf:d3:2f:7e:ed:15:a8:61:fb:5d:a2:a1:69:0f: e2:d5:17:d1:6b:d1:e1:30:0e:fe:eb:3c:bb:5c:53:41:1f:d1: b1:fe:0d:ea:ca:ef:78:4d:77:2a:f2:ea:a4:98:4c:c6:46:62: 5a:f5:db:aa:6d:27:17:c6:f9:fe:62:e0:b9:6f:a1:bb:30:f0: 2e:30:ab:ba:d4:bf:e5:29:37:13:9c:ee:a9:14:23:c3:fb:3d: fb:ff:72:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm1Ukeh1qLduQY3NoJ1nHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw NzY1NGQwHhcNMjUxMjE2MTAwMTEyWhcNMjUxMjE3MTAwMTEyWjAzMTEwLwYDVQQD Eyg2OGYxODJjNjVkZmM4Zjc3MTQ3OTUzNjJjYTY0NTZkMzQyZDY4NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAaJCf1KT2DVWcYhizq0NubvJbWn XUb0isGR4zXiZ19kFc9PLgOt7ZMSEr+a3zc9sTHV/RqnBdL1J3lwMLKVEwd3qzeR clPsxQI5GZOSarLbfbi6lk7jZjCVJkwxoJ/OF4s4WQ6eNCNw6+f4VRv2lVTp9lJh 6pgABWC7+KZ+mdpTXb4Z1JOIkhsFX5kFB6liR1uwgtPGchw9/lWy1n9TFMN9PaAB 3oHeEskaymSM1irSUcHjQyxGJ80RB44QlST2UI38JyRJBcaH8jlSrIS0r9PTK1S6 zxLVVF8T6APAyaAwD7faoFsudpjHyb/gokUXHge9K0Ra0Ijj7jSlkpgj+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjxgsZd/I93FHlTYspkVtNC1oXBMB8GA1UdIwQY MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqioug7yr j6mz6ZpWhcv6ASoIB8ztQw6HQ2W5NSD5FuPQVgUvDDERZeJO0x+F+Hug6825rAP/ VVSCL8tw7D4f/76Dd6gYZI6Vz0IEYMrYm0eV4J9HnB19ByemH/NsdENHsutkYSds 44V+ROLs6pia0izHVgVUIB4dofhfMM3nsD4CMSAkwgHGWuBmT9i1gg0CxFaA79gV H2Wc6KCnkpKQ0pc2d1fkXc/TL37tFahh+12ioWkP4tUX0WvR4TAO/us8u1xTQR/R sf4N6srveE13KvLqpJhMxkZiWvXbqm0nF8b5/mLguW+huzDwLjCrutS/5Sk3E5zu qRQjw/s9+/9ybg== -----END CERTIFICATE-----Generated at Tue Dec 16 13:46:21 2025 by rpki-client