This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json) Hash identifier: ghNBwZEvemLanqKXLV8VR0Y2RlFDPFaokp/U2SRA82Q= Subject key identifier: 85:34:A9:E5:21:79:54:E3:96:2E:3E:02:9F:A5:C9:29:8B:F5:8F:7B Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7 Certificate serial: 019AF12D5C94D7B98B1450568D4BA3EDA5E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft Manifest number: 07D8 Signing time: Sat 06 Dec 2025 01:01:13 +0000 Manifest this update: Sat 06 Dec 2025 01:01:13 +0000 Manifest next update: Sun 07 Dec 2025 01:01:13 +0000 Files and hashes: 1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=) 2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: AXuoHizUqg/FBwVQ0j1mduLtsj2xHnTiLdNnXyot3lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:5c:94:d7:b9:8b:14:50:56:8d:4b:a3:ed:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7 Validity Not Before: Dec 6 01:01:13 2025 GMT Not After : Dec 7 01:01:13 2025 GMT Subject: CN=8534a9e5217954e3962e3e029fa5c9298bf58f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:62:a1:89:e5:9c:7f:9d:5b:ee:d6:80:56: da:20:c1:8a:45:83:70:3f:a9:a1:d8:00:5d:7e:ee: 86:2b:ba:e3:aa:5c:db:78:62:73:36:79:5e:84:6a: 71:2e:ae:3a:47:33:13:8e:c6:f6:47:ae:9d:20:1a: f4:bd:21:80:a5:7c:3c:f0:da:37:08:4f:83:c2:dc: 3f:fd:c8:f2:d8:6f:61:ea:73:8b:44:c9:19:d3:25: 1a:89:c0:e5:c6:e5:3e:3c:97:78:91:36:4b:98:fa: 30:27:61:38:39:bb:51:45:e6:b4:c9:e6:82:e3:9e: 6f:49:de:d2:28:e0:bb:ce:64:cb:03:96:33:a6:17: 62:08:de:8f:2e:42:0f:91:47:76:01:2b:c8:97:1f: 62:62:8d:09:f9:f5:dc:41:bd:5f:10:b4:c6:55:54: fe:08:ad:95:45:1a:70:99:4f:e1:0f:35:aa:8a:79: c0:dc:e6:20:7a:2c:8a:5f:dc:0b:c1:15:13:51:f2: 8e:de:0a:ee:a4:f1:c0:ce:f9:e4:5f:8d:f2:a8:49: 7b:14:ec:0e:d9:a8:3f:07:ad:38:13:da:bc:7c:58: d6:bb:5e:17:55:8b:86:15:5f:ea:0f:37:fe:07:df: 51:3a:72:41:25:8d:7f:18:47:01:48:f2:cc:67:99: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:34:A9:E5:21:79:54:E3:96:2E:3E:02:9F:A5:C9:29:8B:F5:8F:7B X509v3 Authority Key Identifier: keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f1:47:10:64:8c:c3:25:82:ad:aa:e2:45:af:f6:2f:ed:d4: d1:1c:9e:a4:f9:6c:38:2f:d4:00:d1:64:a7:5c:4e:3e:cb:5a: 8f:7f:38:b7:55:c0:4d:07:60:05:c9:a5:0c:0f:f0:3f:2c:cd: cb:1f:46:c6:0a:78:55:20:bb:e4:70:21:2f:9f:cd:82:e9:bd: 1f:94:75:9d:64:29:56:79:3a:5e:08:d6:10:21:61:67:f1:f9: db:7b:b2:5d:23:83:c8:a2:a1:fc:65:33:ba:04:c8:93:00:6f: 39:f3:5e:93:a0:ca:3a:0a:0a:82:32:b6:bf:23:29:31:24:81: 85:ba:4c:5f:4e:1a:9b:4c:1d:15:91:54:60:e5:91:93:13:e3: 26:9d:1a:24:56:e3:87:1b:a3:2b:09:5b:b2:4d:10:37:f8:04: 37:fb:5e:10:b5:f3:23:6d:54:71:57:c6:32:f9:96:60:d1:93: d0:e1:55:d1:a9:22:5f:9a:21:ca:5a:b0:5a:4e:7d:6b:39:83: a2:84:c3:a6:03:7a:84:e7:74:09:5e:cf:4f:57:9b:19:97:75: 14:90:44:23:f1:7b:b9:42:8b:6f:01:ff:34:3b:03:66:29:df: 71:a8:5e:7f:cb:ca:0f:62:9d:8b:dd:dc:0e:be:53:b0:e4:47: d4:fd:8e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVyU17mLFFBWjUuj7aXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3 ZjgzZTcwHhcNMjUxMjA2MDEwMTEzWhcNMjUxMjA3MDEwMTEzWjAzMTEwLwYDVQQD Eyg4NTM0YTllNTIxNzk1NGUzOTYyZTNlMDI5ZmE1YzkyOThiZjU4ZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9lioYnlnH+dW+7WgFbaIMGKRYNw P6mh2ABdfu6GK7rjqlzbeGJzNnlehGpxLq46RzMTjsb2R66dIBr0vSGApXw88No3 CE+Dwtw//cjy2G9h6nOLRMkZ0yUaicDlxuU+PJd4kTZLmPowJ2E4ObtRRea0yeaC 455vSd7SKOC7zmTLA5YzphdiCN6PLkIPkUd2ASvIlx9iYo0J+fXcQb1fELTGVVT+ CK2VRRpwmU/hDzWqinnA3OYgeiyKX9wLwRUTUfKO3grupPHAzvnkX43yqEl7FOwO 2ag/B604E9q8fFjWu14XVYuGFV/qDzf+B99ROnJBJY1/GEcBSPLMZ5mqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIU0qeUheVTjli4+Ap+lySmL9Y97MB8GA1UdIwQY MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0 LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfFHEGSM wyWCrariRa/2L+3U0RyepPlsOC/UANFkp1xOPstaj384t1XATQdgBcmlDA/wPyzN yx9Gxgp4VSC75HAhL5/Ngum9H5R1nWQpVnk6XgjWECFhZ/H523uyXSODyKKh/GUz ugTIkwBvOfNek6DKOgoKgjK2vyMpMSSBhbpMX04am0wdFZFUYOWRkxPjJp0aJFbj hxujKwlbsk0QN/gEN/teELXzI21UcVfGMvmWYNGT0OFV0akiX5ohylqwWk59azmD ooTDpgN6hOd0CV7PT1ebGZd1FJBEI/F7uUKLbwH/NDsDZinfcahef8vKD2Kdi93c Dr5TsORH1P2OxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:13 2025 by rpki-client