This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft File: LUhz5ui-T503ZBhPE-V1D4xh9os.mft (raw, json) Hash identifier: QCvzg6KnJMrdsn05hkxrGHSA9JdLYpWKa5jQfJbvwTg= Subject key identifier: 60:15:69:22:4A:46:8F:C8:59:0C:CD:3A:57:75:13:08:8D:9A:46:0C Authority key identifier: 2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B Certificate issuer: /CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Certificate serial: 019AF0BF24415BC77CB71ACD038CC433FEA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft Manifest number: 0D4C Signing time: Fri 05 Dec 2025 23:00:49 +0000 Manifest this update: Fri 05 Dec 2025 23:00:49 +0000 Manifest next update: Sat 06 Dec 2025 23:00:49 +0000 Files and hashes: 1: F4j0SvgLwOArGutleMjOUsweLH0.roa (hash: rtZZS/ojxAM0GrxEZyr9Anac9IUDzruPbDxrnYwBPLQ=) 2: LUhz5ui-T503ZBhPE-V1D4xh9os.crl (hash: dM8XqUjf+wxF5VdmfGIbefTxp3/mQa3GDy1UGeCSvyU=) 3: ksKNJKdJkzArGKQ2ZNz2rCML8U0.roa (hash: 7wxM1aJdG+1AiLxgq7asY+xV1rv72VvK8vU9Va6cLgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:24:41:5b:c7:7c:b7:1a:cd:03:8c:c4:33:fe:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4873e6e8be4f9d3764184f13e5750f8c61f68b Validity Not Before: Dec 5 23:00:49 2025 GMT Not After : Dec 6 23:00:49 2025 GMT Subject: CN=601569224a468fc8590ccd3a577513088d9a460c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7e:ea:54:f3:6a:61:2d:e2:92:f1:6a:ae:8a: a6:dd:62:76:a5:4a:71:fb:01:5a:e8:97:24:51:51: 90:da:2c:a1:0a:16:68:e6:e8:82:45:09:35:af:79: d0:60:c9:1c:68:4d:03:4f:41:5e:ba:7a:3e:03:92: d8:31:5e:a4:07:4a:70:6c:5e:cc:01:4a:c5:31:71: b2:4e:a8:f1:1d:0d:b7:21:2c:5a:4b:9e:60:8e:74: 82:95:6f:34:9f:bf:10:48:2f:6e:ea:e5:b5:6a:28: 25:00:a7:84:ed:81:9c:91:90:d9:77:58:3f:ef:7d: 29:58:04:56:6e:43:09:5a:71:4d:9a:d0:e5:a7:48: 27:74:5d:eb:9e:ea:78:6e:f9:27:65:db:26:ab:db: 5f:9d:3d:6e:8c:6c:15:af:5b:dc:a6:d5:6f:84:6a: 81:1e:bd:c4:47:50:9e:ee:7e:ba:ad:02:58:be:91: ae:a2:9c:07:26:41:62:6f:6e:5e:c3:cd:f0:47:97: 3f:ee:f9:02:8b:8a:ac:e3:6c:5f:a8:2f:e7:f3:63: f4:71:59:5b:67:28:cf:fa:98:e6:c6:5a:c4:7e:2a: be:9e:5a:18:00:87:ae:a5:28:b0:97:e3:12:d2:39: 97:3e:b2:b2:4c:42:8c:aa:dc:09:03:65:53:43:54: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:15:69:22:4A:46:8F:C8:59:0C:CD:3A:57:75:13:08:8D:9A:46:0C X509v3 Authority Key Identifier: keyid:2D:48:73:E6:E8:BE:4F:9D:37:64:18:4F:13:E5:75:0F:8C:61:F6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUhz5ui-T503ZBhPE-V1D4xh9os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/47b413-6416-402a-b5e1-6596d5036362/1/LUhz5ui-T503ZBhPE-V1D4xh9os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:36:ad:d6:1c:8e:82:06:e3:f1:e0:ad:70:94:8e:1f:02:dc: cf:29:e4:24:58:6b:06:9c:ec:99:06:32:d2:29:3d:76:d2:41: 66:90:2a:81:98:46:7d:c8:3d:d5:55:fd:62:2a:f5:7e:3a:c7: f9:5a:6a:69:78:d2:ad:da:fd:bf:b9:c6:f8:46:08:c8:42:0f: d5:e0:a0:72:32:8f:35:6e:fe:2a:8d:b1:65:ef:6b:5b:ff:7d: 7a:a5:3a:04:b8:77:dc:90:71:90:9b:49:6c:71:79:11:86:a7: 0e:12:0c:99:21:47:35:b8:04:3b:1c:6b:16:6e:02:15:be:61: f8:8e:0b:f0:c8:e5:55:c2:02:6f:f0:88:dc:93:6f:81:cc:10: ab:56:2a:bb:f9:85:ae:d8:c4:cf:c5:dd:a6:c6:74:59:8b:22: 10:81:da:40:76:b3:61:be:d4:c6:44:9d:07:cd:c5:f0:b6:3f: a3:e8:19:53:bd:80:12:51:38:10:8c:82:26:3e:08:84:4b:60: 91:13:37:08:26:70:f3:51:6f:1b:f5:dd:3b:2b:59:73:66:c0: 19:40:0f:5c:00:65:cd:f7:1a:85:1a:25:c6:3f:8e:e2:90:46: b6:c1:32:03:13:e4:ad:44:79:be:d6:fb:66:6d:fd:2c:d9:3d: b2:58:58:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvyRBW8d8txrNA4zEM/6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDg3M2U2ZThiZTRmOWQzNzY0MTg0ZjEzZTU3NTBmOGM2 MWY2OGIwHhcNMjUxMjA1MjMwMDQ5WhcNMjUxMjA2MjMwMDQ5WjAzMTEwLwYDVQQD Eyg2MDE1NjkyMjRhNDY4ZmM4NTkwY2NkM2E1Nzc1MTMwODhkOWE0NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA537qVPNqYS3ikvFqroqm3WJ2pUpx +wFa6JckUVGQ2iyhChZo5uiCRQk1r3nQYMkcaE0DT0Feuno+A5LYMV6kB0pwbF7M AUrFMXGyTqjxHQ23ISxaS55gjnSClW80n78QSC9u6uW1aiglAKeE7YGckZDZd1g/ 730pWARWbkMJWnFNmtDlp0gndF3rnup4bvknZdsmq9tfnT1ujGwVr1vcptVvhGqB Hr3ER1Ce7n66rQJYvpGuopwHJkFib25ew83wR5c/7vkCi4qs42xfqC/n82P0cVlb ZyjP+pjmxlrEfiq+nloYAIeupSiwl+MS0jmXPrKyTEKMqtwJA2VTQ1SaQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAVaSJKRo/IWQzNOld1EwiNmkYMMB8GA1UdIwQY MBaAFC1Ic+bovk+dN2QYTxPldQ+MYfaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEt NjU5NmQ1MDM2MzYyLzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80N2I0MTMtNjQxNi00MDJhLWI1ZTEtNjU5NmQ1MDM2MzYy LzEvTFVoejV1aS1UNTAzWkJoUEUtVjFENHhoOW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTat1hyO ggbj8eCtcJSOHwLczynkJFhrBpzsmQYy0ik9dtJBZpAqgZhGfcg91VX9Yir1fjrH +VpqaXjSrdr9v7nG+EYIyEIP1eCgcjKPNW7+Ko2xZe9rW/99eqU6BLh33JBxkJtJ bHF5EYanDhIMmSFHNbgEOxxrFm4CFb5h+I4L8MjlVcICb/CI3JNvgcwQq1Yqu/mF rtjEz8XdpsZ0WYsiEIHaQHazYb7UxkSdB83F8LY/o+gZU72AElE4EIyCJj4IhEtg kRM3CCZw81FvG/XdOytZc2bAGUAPXABlzfcahRolxj+O4pBGtsEyAxPkrUR5vtb7 Zm39LNk9slhYSg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:04 2025 by rpki-client