This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft File: PtWjaKny40iTSpFIiEVZQ2I_lus.mft (raw, json) Hash identifier: 9ruVblN+n03kAYvfc5Zmf3TTIOPUc6eOL19tSqIAya0= Subject key identifier: 8E:E1:03:25:7B:C5:A0:B2:B1:61:01:93:BA:9B:BC:9D:E0:97:6E:4B Authority key identifier: 3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB Certificate issuer: /CN=3ed5a368a9f2e348934a914888455943623f96eb Certificate serial: 019AF12CBC350277BFB3827EFA01154A1167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft Manifest number: 1344 Signing time: Sat 06 Dec 2025 01:00:32 +0000 Manifest this update: Sat 06 Dec 2025 01:00:32 +0000 Manifest next update: Sun 07 Dec 2025 01:00:32 +0000 Files and hashes: 1: PtWjaKny40iTSpFIiEVZQ2I_lus.crl (hash: 0xM9C+QeGPlDAp8Od6WnbtQhYmZKHCqcsxLq+1qJfpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:bc:35:02:77:bf:b3:82:7e:fa:01:15:4a:11:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed5a368a9f2e348934a914888455943623f96eb Validity Not Before: Dec 6 01:00:32 2025 GMT Not After : Dec 7 01:00:32 2025 GMT Subject: CN=8ee103257bc5a0b2b1610193ba9bbc9de0976e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:5e:44:a2:c6:6c:c5:34:bc:c3:ec:5d:48: e7:98:05:cc:05:30:76:a1:b1:16:1e:7a:02:c8:31: ff:d6:c8:19:b1:e1:39:b5:af:33:6d:2c:ce:10:de: e2:e3:38:12:61:e8:8d:8c:f5:e5:ae:c6:8b:bf:8f: 83:64:d9:ba:11:e5:91:81:c8:c2:7f:01:94:a4:e5: 3a:2c:66:35:e0:5a:94:b5:cd:38:05:39:07:ce:bf: b6:fe:2c:e3:df:e9:3d:90:02:32:80:43:78:97:cb: a0:d5:bd:03:b4:81:24:36:bf:c0:4d:7a:34:8a:7a: 4a:be:14:e5:3a:04:b6:9d:c2:a9:1f:ad:7d:ab:dd: 72:35:a7:54:14:90:80:f0:0c:35:d9:92:b3:b9:54: a6:7c:7f:6c:98:2f:f4:9e:67:a7:b6:25:5d:45:1a: 36:4f:fd:b9:16:f6:8b:3c:7f:4a:e0:9d:2e:f5:d0: 74:a5:c3:c0:7f:95:c5:c8:0b:7c:53:1f:99:82:cb: aa:f3:89:28:da:05:d7:c1:04:e3:5f:09:ef:70:2d: e3:f4:6b:32:11:5b:58:50:56:c7:ba:5a:a4:21:30: 8a:8f:5c:91:b4:a1:8f:3d:dd:8b:52:00:78:a3:6e: d7:94:16:8c:7c:d4:c1:be:be:5f:fe:02:1d:a4:64: fd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E1:03:25:7B:C5:A0:B2:B1:61:01:93:BA:9B:BC:9D:E0:97:6E:4B X509v3 Authority Key Identifier: keyid:3E:D5:A3:68:A9:F2:E3:48:93:4A:91:48:88:45:59:43:62:3F:96:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtWjaKny40iTSpFIiEVZQ2I_lus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8c70c4-9060-4ffc-8ad3-6f017e1f1eed/1/PtWjaKny40iTSpFIiEVZQ2I_lus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:24:5f:97:cd:a8:b1:53:11:43:60:d4:28:6e:0a:b2:0f:46: 18:bd:4e:9c:b7:36:5a:19:34:5b:b6:e9:86:e5:56:20:fc:67: 63:da:a0:91:c2:12:be:2c:d7:e1:a4:8d:4f:96:4c:61:18:ae: 73:5d:92:8b:0b:d5:35:17:80:62:79:f2:e5:d7:23:6b:72:4f: 8c:2b:ce:f1:12:9b:c8:7d:56:ba:74:3f:2b:5f:23:25:1f:8b: ac:3f:e4:ff:5c:aa:d0:24:1d:c6:8d:51:a5:10:06:47:b0:01: 84:19:77:aa:f7:3a:58:24:03:2f:1b:f8:a8:3f:90:3f:e0:2d: b6:02:66:7f:d0:cf:98:b7:ad:73:84:e8:70:18:f6:4f:47:b5: f2:7d:38:8d:dd:36:29:ca:4b:f1:64:ba:93:00:e0:47:1a:e8: 4e:d4:31:7a:38:04:7e:f1:04:71:5c:c0:ce:d0:08:91:e1:ef: 90:7a:8d:e9:e1:a4:31:d6:76:84:04:cd:fb:9d:4f:7e:b4:39: c6:ba:b6:9e:10:10:12:77:b3:df:29:66:99:a7:88:8a:c9:42: 88:05:8c:61:44:19:68:12:04:46:74:a9:e0:9a:f4:ed:9e:03: a1:0b:1a:32:7c:65:64:fd:4a:6b:a7:28:a0:30:9f:d0:cf:3e: a2:6a:2d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLw1Ane/s4J++gEVShFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZDVhMzY4YTlmMmUzNDg5MzRhOTE0ODg4NDU1OTQzNjIz Zjk2ZWIwHhcNMjUxMjA2MDEwMDMyWhcNMjUxMjA3MDEwMDMyWjAzMTEwLwYDVQQD Eyg4ZWUxMDMyNTdiYzVhMGIyYjE2MTAxOTNiYTliYmM5ZGUwOTc2ZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvFeRKLGbMU0vMPsXUjnmAXMBTB2 obEWHnoCyDH/1sgZseE5ta8zbSzOEN7i4zgSYeiNjPXlrsaLv4+DZNm6EeWRgcjC fwGUpOU6LGY14FqUtc04BTkHzr+2/izj3+k9kAIygEN4l8ug1b0DtIEkNr/ATXo0 inpKvhTlOgS2ncKpH619q91yNadUFJCA8Aw12ZKzuVSmfH9smC/0nmentiVdRRo2 T/25FvaLPH9K4J0u9dB0pcPAf5XFyAt8Ux+Zgsuq84ko2gXXwQTjXwnvcC3j9Gsy EVtYUFbHulqkITCKj1yRtKGPPd2LUgB4o27XlBaMfNTBvr5f/gIdpGT9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7hAyV7xaCysWEBk7qbvJ3gl25LMB8GA1UdIwQY MBaAFD7Vo2ip8uNIk0qRSIhFWUNiP5brMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YzcwYzQtOTA2MC00ZmZjLThhZDMt NmYwMTdlMWYxZWVkLzEvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84YzcwYzQtOTA2MC00ZmZjLThhZDMtNmYwMTdlMWYxZWVk LzEvUHRXamFLbnk0MGlUU3BGSWlFVlpRMklfbHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiRfl82o sVMRQ2DUKG4Ksg9GGL1OnLc2Whk0W7bphuVWIPxnY9qgkcISvizX4aSNT5ZMYRiu c12SiwvVNReAYnny5dcja3JPjCvO8RKbyH1WunQ/K18jJR+LrD/k/1yq0CQdxo1R pRAGR7ABhBl3qvc6WCQDLxv4qD+QP+AttgJmf9DPmLetc4TocBj2T0e18n04jd02 KcpL8WS6kwDgRxroTtQxejgEfvEEcVzAztAIkeHvkHqN6eGkMdZ2hATN+51PfrQ5 xrq2nhAQEnez3ylmmaeIislCiAWMYUQZaBIERnSp4Jr07Z4DoQsaMnxlZP1Ka6co oDCf0M8+omotFA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:58 2025 by rpki-client