This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json) Hash identifier: yXkGv296b2lOQbIPOL+1R/U5J+uYYA7+mX0F7g9+Ez0= Subject key identifier: EB:BB:0B:B2:9C:FE:B6:FC:92:8F:1E:28:77:0F:EF:16:8E:9B:3E:3E Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Certificate serial: 019AF209765C5F6A299D88295EF5E2924F45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: w6lrKmu9bZ89mjhzcjv5EMMlAKtM2wuycmIcQAh+WDI=) 2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:76:5c:5f:6a:29:9d:88:29:5e:f5:e2:92:4f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=ebbb0bb29cfeb6fc928f1e28770fef168e9b3e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:94:d0:6e:8a:40:c5:84:65:00:8e:01:1f:4e: ac:96:9a:54:3c:33:7e:ef:53:fe:3f:fd:33:07:bb: a9:f6:8f:48:d6:6d:ca:f7:ae:6d:4b:b7:57:cd:1e: 07:d1:8f:bf:30:4b:79:8d:da:a4:d6:3b:5d:19:2b: b2:89:a0:7b:8d:43:a0:47:08:3a:6e:b7:05:88:3f: ea:67:a9:ee:5d:e3:9a:9f:f8:88:65:7c:87:2d:0e: 03:32:dc:c0:ab:51:5b:3c:eb:79:0b:20:9d:d0:80: 54:f9:ef:b8:ae:07:d6:e4:56:61:e9:32:66:23:bf: 2c:3a:4b:cf:1d:2f:1e:98:2d:4e:2c:f1:20:1c:a5: 55:f5:7c:5a:09:fb:68:c1:7c:00:da:7e:c6:0d:b4: a1:db:0d:e0:17:13:2f:e1:a6:a4:e4:49:38:e8:a9: 38:96:4c:76:44:55:da:d6:2f:d2:84:65:ff:a7:08: 37:53:84:4d:fd:a8:ea:20:c3:01:67:67:52:8e:96: df:92:47:2a:de:4a:cf:b2:9a:48:63:15:ad:37:22: 3b:88:ad:50:8f:7e:6f:67:87:2d:97:08:bc:4e:c4: 5c:bf:68:c7:79:57:ea:30:7e:c4:72:c4:fe:8a:ae: 0f:c4:df:ef:36:9f:ed:95:0d:05:2f:4e:86:87:0b: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:0B:B2:9C:FE:B6:FC:92:8F:1E:28:77:0F:EF:16:8E:9B:3E:3E X509v3 Authority Key Identifier: keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:06:b8:14:5d:ba:a2:32:1a:6a:fa:18:fc:51:13:1e:b7:3c: d0:7a:07:3f:7d:50:33:58:16:a7:22:af:70:21:88:17:2c:9f: 58:8d:e9:d5:45:1c:5e:b9:f8:8b:01:0b:d9:e5:96:8f:1f:0a: 33:23:bc:14:8d:93:38:85:a4:ec:a2:a8:53:d2:70:53:c8:0b: db:0b:59:e8:86:88:86:1a:2f:0d:d3:3a:48:41:95:6e:f6:10: 81:7f:c9:c0:da:5b:cd:89:db:ce:9c:65:d7:47:ca:13:29:37: 49:0e:b9:f3:b1:66:fc:f8:4b:cd:8a:d1:12:5a:05:00:a5:50: 7d:78:51:fc:87:50:d5:6b:ac:79:bd:cc:b7:00:5a:04:7f:e7: a8:46:2d:03:ff:1b:3f:60:82:2d:db:90:b7:49:90:b5:5c:cd: 5f:be:92:4e:54:54:8b:14:ca:00:90:2e:84:c7:ab:18:79:2a: 5f:1d:26:c1:60:f5:b8:dd:d3:9c:71:41:41:de:ce:07:f8:b2: 9e:5a:06:e9:88:55:ee:0a:8c:98:04:6c:8f:f4:90:a4:c4:dc: 22:cf:4d:5b:f3:ef:7a:30:cc:53:1c:28:05:b9:74:da:4e:a0: c6:20:2b:ab:a3:cf:19:b1:36:d6:95:75:00:1c:e8:08:95:67: 00:c5:a9:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXZcX2opnYgpXvXikk9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4 M2YyNzMwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD EyhlYmJiMGJiMjljZmViNmZjOTI4ZjFlMjg3NzBmZWYxNjhlOWIzZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZTQbopAxYRlAI4BH06slppUPDN+ 71P+P/0zB7up9o9I1m3K965tS7dXzR4H0Y+/MEt5jdqk1jtdGSuyiaB7jUOgRwg6 brcFiD/qZ6nuXeOan/iIZXyHLQ4DMtzAq1FbPOt5CyCd0IBU+e+4rgfW5FZh6TJm I78sOkvPHS8emC1OLPEgHKVV9XxaCftowXwA2n7GDbSh2w3gFxMv4aak5Ek46Kk4 lkx2RFXa1i/ShGX/pwg3U4RN/ajqIMMBZ2dSjpbfkkcq3krPsppIYxWtNyI7iK1Q j35vZ4ctlwi8TsRcv2jHeVfqMH7EcsT+iq4PxN/vNp/tlQ0FL06GhwtUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu7C7Kc/rb8ko8eKHcP7xaOmz4+MB8GA1UdIwQY MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4 LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQa4FF26 ojIaavoY/FETHrc80HoHP31QM1gWpyKvcCGIFyyfWI3p1UUcXrn4iwEL2eWWjx8K MyO8FI2TOIWk7KKoU9JwU8gL2wtZ6IaIhhovDdM6SEGVbvYQgX/JwNpbzYnbzpxl 10fKEyk3SQ6587Fm/PhLzYrREloFAKVQfXhR/IdQ1Wuseb3MtwBaBH/nqEYtA/8b P2CCLduQt0mQtVzNX76STlRUixTKAJAuhMerGHkqXx0mwWD1uN3TnHFBQd7OB/iy nloG6YhV7gqMmARsj/SQpMTcIs9NW/PvejDMUxwoBbl02k6gxiArq6PPGbE21pV1 ABzoCJVnAMWpAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:03 2025 by rpki-client