This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json) Hash identifier: Fk42FxUfUk3NV33iVL9RMZSxxy92mDyez7B2QPVkpDg= Subject key identifier: 24:AA:71:EE:2D:2C:44:47:1B:EC:7B:CE:D2:E5:1C:BC:E4:E2:6C:AA Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019AF19B6BC99536E0510F04969062E9DE9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft Manifest number: 07CC Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=) 2: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: hMuSGVtwj3qrb0fzgwEt4iBbzyqZPvsAYy3VFp8ojcM=) 3: TWakFFxyHlxGlKeAOjVcTSyZ6SA.roa (hash: BZq7O+Mhn+xCPfei58CegAajAJORNlD7rbKNI0C8wGU=) 4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=) 5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=) 6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6b:c9:95:36:e0:51:0f:04:96:90:62:e9:de:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=24aa71ee2d2c44471bec7bced2e51cbce4e26caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:81:99:c0:9d:1a:60:cd:c1:3a:4b:62:e0: 21:7a:ae:10:9f:c6:21:7c:5a:e0:5f:eb:ea:69:a8: 3a:72:b0:69:5b:7e:90:7e:a3:74:0f:c2:a2:a4:61: 9b:a4:d7:84:a2:88:5a:0e:1a:cd:bd:15:aa:0e:5c: 51:26:b1:c7:a1:d6:91:65:d0:ff:cf:95:bd:12:1f: 85:99:9d:e0:41:01:08:2d:d3:72:b5:cd:7f:95:46: cf:4f:3e:ad:67:b1:d7:54:37:ce:89:a2:80:12:20: 8f:9e:08:5b:1e:a8:6f:ba:f0:23:b6:12:fb:46:3f: 3c:07:21:06:63:a8:fc:b3:87:65:8f:2b:93:fb:23: 9e:38:aa:64:ed:75:7e:9e:04:49:9f:de:72:0b:e2: e7:d2:bb:ac:64:c5:3f:48:e0:2c:1d:30:6c:32:52: 37:68:5e:94:09:36:89:20:0d:3a:b2:01:91:65:54: 49:cc:7b:23:2c:1c:31:77:8c:be:0f:ae:d2:f7:03: 81:6d:5b:4c:7b:74:50:7d:05:93:a1:5c:f7:8a:25: 51:22:8e:bd:07:aa:c9:2c:e4:4e:23:34:f8:5e:c8: c5:a5:14:db:33:f1:72:d5:be:64:83:f2:84:60:79: 5d:66:17:b9:d9:a2:7e:29:91:97:a2:54:6c:17:18: e4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AA:71:EE:2D:2C:44:47:1B:EC:7B:CE:D2:E5:1C:BC:E4:E2:6C:AA X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:12:d6:26:34:35:4d:6e:fa:81:bc:29:d1:87:3c:26:63:85: 69:dc:39:19:54:af:36:cd:f5:69:44:be:94:51:06:76:2d:31: 63:a5:b1:b9:08:9f:78:4d:14:95:96:a4:63:d3:18:ad:8a:25: 28:1c:2a:a4:ab:82:d4:a2:6f:b7:51:ef:fb:06:7e:a3:12:7a: 82:d5:c5:77:d9:9e:1b:43:07:6d:4c:1f:fe:be:1a:4f:60:18: 17:33:2e:d7:1d:cb:f3:bd:43:61:c7:87:ab:73:cb:5e:95:fb: ca:ba:c3:97:cb:02:c3:9a:32:af:27:e4:51:31:1c:39:3e:8f: f8:69:4d:5d:91:9e:64:ca:5e:e1:9b:ad:6d:46:4d:b4:75:d1: 2b:95:78:38:2a:5f:16:fb:7a:a3:9c:5e:70:57:f1:cb:3f:50: d0:28:8d:b2:28:d3:b7:4e:f5:d4:37:69:0b:ed:57:55:2a:fc: e5:73:47:47:3b:90:b4:98:41:df:aa:21:32:f3:3c:d8:c3:2f: 6f:b4:cf:bd:11:8d:38:c2:0f:77:35:ca:85:c4:f8:ad:53:0a: 95:af:cf:ec:e0:56:08:60:47:ac:a5:83:8d:3b:36:17:d1:a8: 64:b3:14:6a:73:1c:c7:ff:0d:23:f6:ee:ff:2b:32:df:f9:54: c2:cc:5a:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2vJlTbgUQ8ElpBi6d6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EygyNGFhNzFlZTJkMmM0NDQ3MWJlYzdiY2VkMmU1MWNiY2U0ZTI2Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6mBmcCdGmDNwTpLYuAheq4Qn8Yh fFrgX+vqaag6crBpW36QfqN0D8KipGGbpNeEoohaDhrNvRWqDlxRJrHHodaRZdD/ z5W9Eh+FmZ3gQQEILdNytc1/lUbPTz6tZ7HXVDfOiaKAEiCPnghbHqhvuvAjthL7 Rj88ByEGY6j8s4dljyuT+yOeOKpk7XV+ngRJn95yC+Ln0rusZMU/SOAsHTBsMlI3 aF6UCTaJIA06sgGRZVRJzHsjLBwxd4y+D67S9wOBbVtMe3RQfQWToVz3iiVRIo69 B6rJLOROIzT4XsjFpRTbM/Fy1b5kg/KEYHldZhe52aJ+KZGXolRsFxjk3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSqce4tLERHG+x7ztLlHLzk4myqMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRLWJjQ1 TW76gbwp0Yc8JmOFadw5GVSvNs31aUS+lFEGdi0xY6WxuQifeE0UlZakY9MYrYol KBwqpKuC1KJvt1Hv+wZ+oxJ6gtXFd9meG0MHbUwf/r4aT2AYFzMu1x3L871DYceH q3PLXpX7yrrDl8sCw5oyryfkUTEcOT6P+GlNXZGeZMpe4ZutbUZNtHXRK5V4OCpf Fvt6o5xecFfxyz9Q0CiNsijTt0711DdpC+1XVSr85XNHRzuQtJhB36ohMvM82MMv b7TPvRGNOMIPdzXKhcT4rVMKla/P7OBWCGBHrKWDjTs2F9GoZLMUanMcx/8NI/bu /ysy3/lUwsxaBA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:03 2025 by rpki-client