This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json) Hash identifier: EiCvCtn7yfZyaXVmRrD/8iy7GYL/Ab70ckFp46wMM+8= Subject key identifier: 78:26:67:FA:6F:24:BB:90:C4:A6:72:95:5F:8D:A1:AB:3D:B7:45:F1 Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c Certificate serial: 019AF2AD3C10119EA41749326DB6C4513254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=) 2: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: MO73vjUEZqJxCX4aWO2IW71ZDKtvDswBuzVxqlAENE8=) 3: QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa (hash: NcB8YHOmb6iBxrDVM7Q7nmw/YpVtYSb5GRfh3q07PNI=) 4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3c:10:11:9e:a4:17:49:32:6d:b6:c4:51:32:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d43689a7638ff737591ff3b251918862349695c Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=782667fa6f24bb90c4a672955f8da1ab3db745f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:29:61:18:13:35:13:79:91:5a:17:70:10: 9e:14:d1:93:fc:a3:3c:59:50:be:ab:19:e6:0c:14: 89:f0:1b:99:c3:e2:ab:42:1e:52:d0:05:b7:49:ec: 6d:ee:ac:14:f5:ea:a3:dd:36:12:d1:37:f9:30:da: 44:96:5d:d4:32:69:61:6d:31:4d:e2:bd:90:06:96: 36:bd:d3:8b:ba:6b:4c:c4:5f:63:12:24:97:20:37: db:56:a6:de:b1:6a:76:64:48:29:9d:f5:9f:7c:3f: d7:eb:00:da:51:42:66:40:4a:da:ab:3c:4f:86:3d: 25:90:76:9f:f4:3e:95:5c:e9:21:f8:dc:75:c6:d2: 22:70:78:79:b7:c3:ad:06:05:d6:fb:c3:3e:03:07: c5:91:89:34:c9:a6:63:26:c6:53:70:5c:87:eb:84: f5:89:a8:e5:2e:12:15:89:97:33:01:3e:d8:50:f8: aa:e2:b8:b1:b8:03:99:27:e2:a1:83:a0:da:71:b3: 00:52:04:8f:b3:8b:be:6e:75:fd:f6:fc:d5:b6:77: d3:76:1f:30:9c:2b:b6:af:5b:c2:d5:a0:df:71:af: 57:8c:74:5d:e4:55:3e:85:b3:86:39:2b:93:5b:b7: 9f:0a:98:38:4e:79:ee:46:4f:ec:0a:dd:f8:ea:67: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:67:FA:6F:24:BB:90:C4:A6:72:95:5F:8D:A1:AB:3D:B7:45:F1 X509v3 Authority Key Identifier: keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:8b:53:9f:c4:db:cc:d5:d1:c6:34:78:e1:e7:ce:28:19:69: 7f:25:29:9a:98:4b:92:e0:58:ba:ab:df:38:be:6c:1b:7a:f3: dc:2b:cf:c0:f2:71:c1:a2:dc:91:a0:f0:00:0a:db:4e:3c:36: a5:d6:be:8e:0c:d6:89:e2:84:a7:dc:11:1a:d7:48:19:83:2c: b2:39:44:51:8e:7d:63:ea:2d:6f:2e:07:7a:5b:5c:a7:e9:2c: c5:5a:d2:57:8e:1e:5e:df:c8:90:80:88:34:49:c0:52:d3:94: c0:2a:ba:94:79:8d:f9:62:25:03:03:9f:dc:d4:e5:ee:c9:94: 95:fd:c1:6b:e2:49:4d:38:6f:9c:0e:5a:c2:8a:f6:b1:44:cf: b5:25:0a:f3:25:48:27:c1:bf:d5:ee:c4:2e:e0:d2:2c:a6:5f: eb:f5:17:52:82:2c:6d:29:e6:66:aa:34:c0:7b:80:f4:07:9a: 49:78:e0:ee:d2:32:98:3b:f3:87:b0:32:82:d9:69:0c:02:d3: 3e:ae:96:ad:8e:db:92:64:e1:52:cc:67:69:54:5e:42:cd:87: b5:55:64:2a:b1:b8:ae:73:e8:3b:99:34:0f:0c:6b:ea:60:d7: 5a:c2:ee:fd:4b:62:71:33:b7:32:2f:c2:bd:d6:d9:77:f7:9a: 3d:61:0d:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTwQEZ6kF0kybbbEUTJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0 OTY5NWMwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD Eyg3ODI2NjdmYTZmMjRiYjkwYzRhNjcyOTU1ZjhkYTFhYjNkYjc0NWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaUpYRgTNRN5kVoXcBCeFNGT/KM8 WVC+qxnmDBSJ8BuZw+KrQh5S0AW3Sext7qwU9eqj3TYS0Tf5MNpEll3UMmlhbTFN 4r2QBpY2vdOLumtMxF9jEiSXIDfbVqbesWp2ZEgpnfWffD/X6wDaUUJmQEraqzxP hj0lkHaf9D6VXOkh+Nx1xtIicHh5t8OtBgXW+8M+AwfFkYk0yaZjJsZTcFyH64T1 iajlLhIViZczAT7YUPiq4rixuAOZJ+Khg6DacbMAUgSPs4u+bnX99vzVtnfTdh8w nCu2r1vC1aDfca9XjHRd5FU+hbOGOSuTW7efCpg4TnnuRk/sCt346mf0UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgmZ/pvJLuQxKZylV+Noas9t0XxMB8GA1UdIwQY MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt M2EzMDM0YTM5ZWE1LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1 LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4tTn8Tb zNXRxjR44efOKBlpfyUpmphLkuBYuqvfOL5sG3rz3CvPwPJxwaLckaDwAArbTjw2 pda+jgzWieKEp9wRGtdIGYMssjlEUY59Y+otby4Heltcp+ksxVrSV44eXt/IkICI NEnAUtOUwCq6lHmN+WIlAwOf3NTl7smUlf3Ba+JJTThvnA5awor2sUTPtSUK8yVI J8G/1e7ELuDSLKZf6/UXUoIsbSnmZqo0wHuA9AeaSXjg7tIymDvzh7AygtlpDALT Pq6WrY7bkmThUsxnaVReQs2HtVVkKrG4rnPoO5k0Dwxr6mDXWsLu/UticTO3Mi/C vdbZd/eaPWENaA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:42 2025 by rpki-client