This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft File: LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json) Hash identifier: L9OTJ4bvjdXtrV+6xNEj1MfA0jNk2DmpQHtZ+qHG3NU= Subject key identifier: 4B:03:28:73:86:6C:A2:CD:66:86:66:8D:85:64:D2:2F:EE:92:2E:56 Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F Certificate issuer: /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Certificate serial: 019AF16459F7B3574B41922312ADC3844467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft Manifest number: 179D Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: zjrWWk9NYAwWOZE6TWSYmGe5AzFtNtKH7AJD5yCtHAM=) 2: xfTt7QwtZDYwpOqt-xtQurA5I0c.roa (hash: ZlEBp7t71aNEAPDDQ8kVF7//cmlxkwRPGVq3nvU6tPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:59:f7:b3:57:4b:41:92:23:12:ad:c3:84:44:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=4b032873866ca2cd6686668d8564d22fee922e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0d:a9:59:b7:a8:45:f5:00:e8:ed:ee:c6:d9: a8:86:c2:14:c7:45:30:06:e1:42:6f:d4:10:61:e4: 9e:8c:71:a1:bb:2d:3a:60:ab:2e:7b:12:04:ea:41: 18:a4:c0:5c:66:fd:d5:09:05:f3:0f:7f:e4:c1:a2: 6b:e3:26:bb:8f:c1:c7:4f:41:e2:2b:15:02:c4:c1: f6:8c:18:61:51:1c:8a:cc:b6:cb:04:27:75:16:b3: 93:6e:3e:d3:3d:10:63:bb:fb:24:7a:4e:dc:62:0e: e1:30:c2:47:52:b0:b1:31:25:e9:d2:fd:2c:e6:78: cb:db:2c:5b:1d:cd:c2:45:77:97:9d:1d:73:0e:70: f3:1d:77:81:60:65:db:e1:1b:15:a3:ea:21:e5:ce: 8e:32:7d:8e:24:5e:9b:2a:cc:5b:1b:4b:b8:c3:94: 53:5c:7d:a5:37:53:74:e1:3a:ac:78:e5:91:ee:4f: 03:21:c0:e4:96:93:53:5c:7f:99:7e:83:d1:fb:63: 55:70:27:1a:85:f2:ef:8b:1a:aa:ef:c1:bf:c7:86: 57:88:cc:32:ea:56:af:6a:43:d7:59:8d:db:c2:a7: f8:4e:5a:7d:09:77:6c:74:a1:bd:3f:2b:17:e1:ab: 1c:f9:9d:57:3c:16:bf:5e:4b:dd:b2:6a:4f:40:44: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:03:28:73:86:6C:A2:CD:66:86:66:8D:85:64:D2:2F:EE:92:2E:56 X509v3 Authority Key Identifier: keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:08:fe:c0:44:81:4e:24:4d:b9:0d:d6:4e:ee:cf:e1:4e:5d: 1b:a7:d4:71:b6:cd:72:9a:a4:e5:d8:a5:85:87:7b:fb:21:61: 47:9a:3f:93:b8:df:c7:b7:a8:4d:c6:ae:51:de:2a:80:e4:9a: 71:bc:43:e0:b7:e4:0f:ef:ec:e5:07:35:00:d2:0d:89:18:32: eb:9b:cc:04:c9:37:0e:92:cd:cb:88:45:53:c2:ea:2b:1b:fa: 00:3a:3a:39:87:8e:59:ef:9c:eb:bd:6a:f9:14:ef:4e:18:68: ad:e6:4d:24:a7:99:49:5b:6e:5f:1f:47:65:57:50:31:82:f4: 53:e1:16:7a:51:86:6d:5c:79:67:c7:2c:e5:10:0e:bc:85:68: fc:4a:29:06:5f:07:69:80:35:7d:2f:ab:e8:89:a5:44:eb:0d: da:5c:83:bd:c1:64:aa:bf:fa:9f:1e:fb:98:0c:21:05:1e:0a: 0c:4e:56:0d:59:f3:5a:d6:be:94:67:b3:9b:a4:f2:89:ac:53: d3:76:0b:96:bb:ad:cf:44:72:eb:70:b7:80:f5:ed:8e:3e:38: 8d:fb:6e:dc:98:63:08:e8:cb:dd:98:64:52:4a:56:6b:4e:58: 24:ba:ed:28:1b:57:e0:56:22:76:e1:3f:d1:a4:df:e1:47:7a: f9:4c:1c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFn3s1dLQZIjEq3DhERnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl YWY0M2YwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg0YjAzMjg3Mzg2NmNhMmNkNjY4NjY2OGQ4NTY0ZDIyZmVlOTIyZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng2pWbeoRfUA6O3uxtmohsIUx0Uw BuFCb9QQYeSejHGhuy06YKsuexIE6kEYpMBcZv3VCQXzD3/kwaJr4ya7j8HHT0Hi KxUCxMH2jBhhURyKzLbLBCd1FrOTbj7TPRBju/skek7cYg7hMMJHUrCxMSXp0v0s 5njL2yxbHc3CRXeXnR1zDnDzHXeBYGXb4RsVo+oh5c6OMn2OJF6bKsxbG0u4w5RT XH2lN1N04TqseOWR7k8DIcDklpNTXH+ZfoPR+2NVcCcahfLvixqq78G/x4ZXiMwy 6lavakPXWY3bwqf4Tlp9CXdsdKG9PysX4asc+Z1XPBa/XkvdsmpPQERkRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsDKHOGbKLNZoZmjYVk0i/uki5WMB8GA1UdIwQY MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0 LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAj+wESB TiRNuQ3WTu7P4U5dG6fUcbbNcpqk5dilhYd7+yFhR5o/k7jfx7eoTcauUd4qgOSa cbxD4LfkD+/s5Qc1ANINiRgy65vMBMk3DpLNy4hFU8LqKxv6ADo6OYeOWe+c671q +RTvThhoreZNJKeZSVtuXx9HZVdQMYL0U+EWelGGbVx5Z8cs5RAOvIVo/EopBl8H aYA1fS+r6ImlROsN2lyDvcFkqr/6nx77mAwhBR4KDE5WDVnzWta+lGezm6TyiaxT 03YLlrutz0Ry63C3gPXtjj44jftu3JhjCOjL3ZhkUkpWa05YJLrtKBtX4FYiduE/ 0aTf4Ud6+UwcZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:11 2025 by rpki-client