This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json) Hash identifier: Fr7Yqn22Toym05G1nPDtrlvrVG0KciyeFPRfvGs0vF4= Subject key identifier: DD:4E:03:72:AA:97:94:23:3A:15:55:4A:C2:0F:05:CD:DA:BC:42:FB Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14 Certificate serial: 019AF19B0A4CFE3A56CB166E8FC843546A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=) 2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: ZcC0Cqs+RukC0O1M1/b1vMRonYeeMEC6e2MYDE6vwW4=) 3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0a:4c:fe:3a:56:cb:16:6e:8f:c8:43:54:6a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=dd4e0372aa9794233a15554ac20f05cddabc42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:8e:48:e7:70:03:b1:52:c9:6e:a2:12:b1: 9e:a5:0d:05:f4:18:f2:be:c8:a7:46:78:da:67:76: 22:07:70:a5:54:e0:48:79:f9:34:b7:cd:02:5e:11: f8:c4:7f:b7:28:41:32:17:52:7b:54:6d:b2:89:22: 1c:68:a8:2c:fb:1d:f3:23:16:33:4b:34:12:18:ff: a5:89:da:2f:63:f0:89:41:c3:48:e2:d3:e9:5d:21: 8c:28:19:04:df:7c:74:72:7d:66:21:ce:b3:59:07: 2c:5a:46:64:38:4f:33:15:51:5b:56:ee:a1:53:ba: e3:91:bc:75:dd:8d:d0:25:d6:dd:2c:24:1e:2f:f8: 10:df:9e:06:f1:f1:78:2e:a7:03:b7:3d:4e:48:34: cd:e9:74:8a:52:cc:f3:1e:71:7a:41:61:b9:8a:c8: 26:9f:98:c8:5f:a6:cb:1b:f2:2e:81:61:be:e1:1d: 43:c4:ed:2c:b1:88:8b:29:fa:8d:6a:c3:87:ae:81: cb:06:a9:46:ce:b8:70:38:e3:4a:38:8f:e5:bd:6b: 7e:b3:0f:ff:6c:62:47:54:9d:37:25:1d:02:e6:1b: b6:ce:bd:23:73:8d:54:b9:08:31:9d:b0:b7:63:8f: 49:e2:16:68:91:5c:7f:3b:42:39:2d:46:0e:56:d8: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4E:03:72:AA:97:94:23:3A:15:55:4A:C2:0F:05:CD:DA:BC:42:FB X509v3 Authority Key Identifier: keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5b:8a:ef:33:72:22:3d:2b:e5:9b:45:06:96:7d:a2:c5:a9: ee:15:54:10:2e:54:ba:ed:19:49:3a:ba:ad:9b:5b:33:6e:d1: 33:24:2c:d9:3d:52:49:f3:82:cd:ab:5c:29:88:b0:fb:21:eb: 39:ed:44:8a:a1:1b:07:f3:ed:c8:82:22:d5:17:eb:fc:5f:db: 07:a7:a3:e8:16:be:35:04:2e:97:eb:7c:d6:b1:fb:59:8d:e9: f5:85:22:df:06:2d:8c:b9:4e:2d:39:15:ea:32:b3:69:2e:51: c4:d0:6e:de:4f:5a:57:38:a9:c9:4c:02:f7:36:27:18:1a:0f: 53:a6:f0:26:84:f9:bd:ab:23:18:5b:df:1a:47:b9:c1:55:87: 0f:3b:cc:61:21:5e:4f:84:f2:91:54:77:41:ed:60:59:f2:7a: ca:c1:e3:31:8a:f6:6f:6c:7d:33:d1:08:72:89:77:36:22:b1: a5:e1:a7:95:74:6f:4d:fb:d9:60:cc:05:b2:dc:f1:66:ae:84: 19:fe:2c:0c:ce:b7:77:9d:23:ea:58:05:ae:13:b8:f9:9b:9d: 16:cf:d7:d2:a2:1e:b3:6e:41:af:e4:fe:c2:2a:c3:c8:e8:4e: e3:fa:45:b1:98:84:30:e3:41:d4:ee:c1:7c:ec:14:f3:89:b7: 87:0d:9c:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwpM/jpWyxZuj8hDVGowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk OTdmMTQwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhkZDRlMDM3MmFhOTc5NDIzM2ExNTU1NGFjMjBmMDVjZGRhYmM0MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKmOSOdwA7FSyW6iErGepQ0F9Bjy vsinRnjaZ3YiB3ClVOBIefk0t80CXhH4xH+3KEEyF1J7VG2yiSIcaKgs+x3zIxYz SzQSGP+lidovY/CJQcNI4tPpXSGMKBkE33x0cn1mIc6zWQcsWkZkOE8zFVFbVu6h U7rjkbx13Y3QJdbdLCQeL/gQ354G8fF4LqcDtz1OSDTN6XSKUszzHnF6QWG5isgm n5jIX6bLG/IugWG+4R1DxO0ssYiLKfqNasOHroHLBqlGzrhwOONKOI/lvWt+sw// bGJHVJ03JR0C5hu2zr0jc41UuQgxnbC3Y49J4hZokVx/O0I5LUYOVtiucwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1OA3Kql5QjOhVVSsIPBc3avEL7MB8GA1UdIwQY MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVuK7zNy Ij0r5ZtFBpZ9osWp7hVUEC5Uuu0ZSTq6rZtbM27RMyQs2T1SSfOCzatcKYiw+yHr Oe1EiqEbB/PtyIIi1Rfr/F/bB6ej6Ba+NQQul+t81rH7WY3p9YUi3wYtjLlOLTkV 6jKzaS5RxNBu3k9aVzipyUwC9zYnGBoPU6bwJoT5vasjGFvfGke5wVWHDzvMYSFe T4TykVR3Qe1gWfJ6ysHjMYr2b2x9M9EIcol3NiKxpeGnlXRvTfvZYMwFstzxZq6E Gf4sDM63d50j6lgFrhO4+ZudFs/X0qIes25Br+T+wirDyOhO4/pFsZiEMONB1O7B fOwU84m3hw2cIA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:34 2025 by rpki-client