This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json) Hash identifier: o2PiYbDPY40rm7mC2VNM5wIbm65sqP7Kk36WsbKEnXk= Subject key identifier: 5E:7F:B2:06:6B:45:BD:5E:F8:D9:D0:C1:9B:14:4F:CD:4B:6D:96:AD Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019AF76661E6D268E802FBB00CDE65E029B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft Manifest number: 08DA Signing time: Sun 07 Dec 2025 06:01:13 +0000 Manifest this update: Sun 07 Dec 2025 06:01:13 +0000 Manifest next update: Mon 08 Dec 2025 06:01:13 +0000 Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=) 2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: Usb1NjAjGijIkn59PjuxDSjL3s5ddKooZik5IqLlAaA=) 3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:66:61:e6:d2:68:e8:02:fb:b0:0c:de:65:e0:29:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Dec 7 06:01:13 2025 GMT Not After : Dec 8 06:01:13 2025 GMT Subject: CN=5e7fb2066b45bd5ef8d9d0c19b144fcd4b6d96ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:4c:87:63:ca:78:d0:dd:f5:cb:bd:64:0c: a0:5f:f4:2c:b2:be:0f:13:ad:ac:15:39:d6:b8:02: 0d:b7:e8:38:ed:ad:bd:d3:12:6e:1c:e8:00:02:81: e0:fe:aa:6e:47:c9:bf:35:ca:a0:46:39:37:3f:b5: 36:0a:b9:2f:8d:6a:89:e9:91:e9:48:08:1e:c1:09: 61:36:bc:dd:c2:f7:57:6c:bb:da:e0:c3:37:3c:f0: 17:2b:61:89:47:27:65:e6:40:07:91:60:9b:4e:5c: b1:87:86:75:0c:fa:f9:9c:a7:b8:9e:bc:c5:55:42: 63:f3:c0:79:04:73:e8:7c:e6:e4:b1:32:7a:04:0e: 66:cc:47:51:95:f2:ea:bb:74:b6:e9:0a:51:19:54: f5:cd:3b:ff:ed:e9:ab:f0:e5:b3:4a:ca:f6:5f:a0: 68:48:ab:59:a3:1c:ca:a2:0e:95:35:fd:01:b5:ec: 65:f3:06:ea:ac:fd:6b:0c:90:12:23:1f:c7:f9:f1: 72:2d:c7:6e:bd:b4:4b:41:50:3d:17:28:00:c4:81: a0:1c:88:22:06:e3:42:9a:b5:7b:23:35:87:fb:22: a5:29:86:85:c3:4c:f9:94:0e:85:98:c9:15:e2:b2: 47:8d:0f:a1:73:33:99:5b:6d:38:ee:8d:3e:0c:4f: 9b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7F:B2:06:6B:45:BD:5E:F8:D9:D0:C1:9B:14:4F:CD:4B:6D:96:AD X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0b:3d:66:ea:b0:bd:ac:7e:a6:75:31:26:60:d3:c9:23:46: c1:b4:4c:32:ed:ea:80:7c:b7:30:92:14:47:d8:8d:ba:43:07: b0:af:00:d5:66:4f:6c:79:c2:cd:83:c1:08:f8:8e:c1:01:48: 43:8f:9c:ba:cb:1c:64:3f:db:20:b6:3a:51:d3:71:6b:c2:6c: d7:9d:a8:9a:2b:c0:7c:b4:70:b3:50:95:e8:69:6f:ee:a9:0d: 16:5c:8b:a5:69:6a:81:2c:10:b1:0b:f1:07:95:9c:29:7e:f4: a7:18:ae:e0:14:ca:e6:8a:4e:fb:73:34:b2:9d:22:2b:a7:29: a1:28:73:19:25:00:f3:97:01:75:2c:9a:04:47:e8:7a:2e:ac: ba:1e:49:63:bf:93:e7:44:8b:59:73:e3:41:eb:99:a7:a1:de: f2:e2:f5:74:03:8a:32:c3:9f:92:3f:13:ef:0a:a3:ca:4e:84: 5a:25:a3:c2:e9:16:0b:8a:b3:50:76:15:5b:2b:a8:9f:37:29: c9:72:b5:bc:98:4f:f8:4a:43:b0:1a:8b:37:4e:75:1f:98:c2: cf:e5:b8:d5:ca:ec:d9:dd:56:74:f8:8b:e5:e9:13:9a:4b:da: 8f:2d:73:1a:c6:a9:5a:47:b3:68:be:52:d0:26:6d:36:ef:34: 58:88:ea:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3ZmHm0mjoAvuwDN5l4CmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjUxMjA3MDYwMTEzWhcNMjUxMjA4MDYwMTEzWjAzMTEwLwYDVQQD Eyg1ZTdmYjIwNjZiNDViZDVlZjhkOWQwYzE5YjE0NGZjZDRiNmQ5NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye1Mh2PKeNDd9cu9ZAygX/Qssr4P E62sFTnWuAINt+g47a290xJuHOgAAoHg/qpuR8m/NcqgRjk3P7U2CrkvjWqJ6ZHp SAgewQlhNrzdwvdXbLva4MM3PPAXK2GJRydl5kAHkWCbTlyxh4Z1DPr5nKe4nrzF VUJj88B5BHPofObksTJ6BA5mzEdRlfLqu3S26QpRGVT1zTv/7emr8OWzSsr2X6Bo SKtZoxzKog6VNf0Btexl8wbqrP1rDJASIx/H+fFyLcduvbRLQVA9FygAxIGgHIgi BuNCmrV7IzWH+yKlKYaFw0z5lA6FmMkV4rJHjQ+hczOZW2047o0+DE+b6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5/sgZrRb1e+NnQwZsUT81LbZatMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgs9Zuqw vax+pnUxJmDTySNGwbRMMu3qgHy3MJIUR9iNukMHsK8A1WZPbHnCzYPBCPiOwQFI Q4+cusscZD/bILY6UdNxa8Js152omivAfLRws1CV6Glv7qkNFlyLpWlqgSwQsQvx B5WcKX70pxiu4BTK5opO+3M0sp0iK6cpoShzGSUA85cBdSyaBEfoei6suh5JY7+T 50SLWXPjQeuZp6He8uL1dAOKMsOfkj8T7wqjyk6EWiWjwukWC4qzUHYVWyuonzcp yXK1vJhP+EpDsBqLN051H5jCz+W41crs2d1WdPiL5ekTmkvajy1zGsapWkezaL5S 0CZtNu80WIjqlg== -----END CERTIFICATE-----Generated at Sun Dec 7 09:43:42 2025 by rpki-client