This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json) Hash identifier: IlvaehPlhKQ6CWyThWn5bjtXZrZ82HbmRXQRWoeoGZw= Subject key identifier: 60:3C:B6:AB:2E:1A:99:88:35:BE:47:43:22:8A:56:03:30:A3:F9:94 Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019AF0F5DAB7B7815103F817D78C774A2D40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft Manifest number: 143B Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=) 2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=) 3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=) 4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=) 5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: ajqGagF24B8cVmmniB9GCfj4cLz2JdLDvdhwhX7Smgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:da:b7:b7:81:51:03:f8:17:d7:8c:77:4a:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=603cb6ab2e1a998835be4743228a560330a3f994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:f0:f0:39:7f:d2:6e:82:55:1e:89:b5:19: ce:85:ad:f1:0c:00:3f:da:18:a5:e3:31:85:77:1c: db:1b:45:b4:0e:c0:03:14:f3:23:cc:08:0e:13:42: 3a:35:10:6a:39:cf:50:20:53:59:73:df:a2:73:80: 61:26:77:e1:6b:4e:89:ea:dd:e4:f7:52:5b:93:36: 3e:dc:19:d9:24:36:56:f9:51:63:64:ac:38:b6:5d: ec:ab:39:39:82:df:74:de:34:5b:e3:02:b5:97:61: 3b:93:7f:71:13:87:5a:7c:7c:af:cb:5d:09:de:7c: aa:5d:87:74:cd:82:0c:cb:6e:7d:e4:d6:14:dc:a7: c0:8d:01:84:63:2c:9c:d0:97:3e:84:73:5c:6f:66: a1:7a:c7:5c:d0:bc:09:aa:ea:3a:f2:f2:c3:30:5d: f3:3e:6e:67:64:53:d2:68:6f:aa:89:ca:26:ee:77: 1b:3d:c9:92:45:54:b7:b4:ff:9a:b4:31:2a:b2:0f: cf:df:66:c9:68:a1:9e:74:1b:98:28:95:6f:81:4a: 12:a3:d5:58:ee:2e:99:fe:b8:cd:e0:29:5b:9f:24: 1d:f5:94:9d:b1:9d:32:b1:08:1a:4f:36:fa:8e:d8: 37:b0:4f:6b:a4:cb:6a:dd:fe:b0:ce:e9:4d:67:54: 3f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3C:B6:AB:2E:1A:99:88:35:BE:47:43:22:8A:56:03:30:A3:F9:94 X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c9:b6:a1:49:34:4f:37:46:a1:bc:df:6b:18:9b:9f:ef:5e: 59:0f:cf:a2:79:64:25:4c:c4:7c:04:b4:9c:ef:84:74:01:b2: 82:9d:43:51:e1:3c:03:3c:89:6f:fc:1f:6e:b0:09:d2:08:72: 32:66:40:f9:1e:77:e2:a7:e9:f4:6a:0c:b2:00:a5:67:f1:fa: 74:da:c0:0a:d8:a6:eb:be:1c:69:50:3d:e5:c2:55:67:34:fc: 97:d7:7d:9f:84:b7:d2:b1:13:05:ff:08:62:38:e1:ff:7e:86: ce:6a:9e:7a:22:7e:80:c3:37:d9:cb:df:f7:6b:88:50:db:85: c3:b3:fd:39:f3:86:f5:39:98:b8:29:11:c0:b2:0d:bb:50:81: 84:17:2b:6a:95:60:8b:8a:0f:30:35:05:1b:58:65:d7:8f:46: 09:3b:c7:ba:9a:a9:fb:86:45:1c:77:d8:9d:a0:9d:1e:c5:33: a7:79:ec:4c:ba:d6:6b:6d:1f:26:71:b9:98:92:88:4a:a0:e6: 97:b1:17:e9:2a:8b:9b:a5:29:03:92:3e:c0:52:90:02:90:97: ca:91:5d:c3:78:3c:60:1e:bb:1e:a9:95:85:dd:b7:29:8b:e8: 87:a0:86:ac:cd:a4:56:43:ba:cc:58:09:4e:85:bb:4b:c1:64: 55:c8:6f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dq3t4FRA/gX14x3Si1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg2MDNjYjZhYjJlMWE5OTg4MzViZTQ3NDMyMjhhNTYwMzMwYTNmOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tjw8Dl/0m6CVR6JtRnOha3xDAA/ 2hil4zGFdxzbG0W0DsADFPMjzAgOE0I6NRBqOc9QIFNZc9+ic4BhJnfha06J6t3k 91JbkzY+3BnZJDZW+VFjZKw4tl3sqzk5gt903jRb4wK1l2E7k39xE4dafHyvy10J 3nyqXYd0zYIMy2595NYU3KfAjQGEYyyc0Jc+hHNcb2ahesdc0LwJquo68vLDMF3z Pm5nZFPSaG+qicom7ncbPcmSRVS3tP+atDEqsg/P32bJaKGedBuYKJVvgUoSo9VY 7i6Z/rjN4ClbnyQd9ZSdsZ0ysQgaTzb6jtg3sE9rpMtq3f6wzulNZ1Q/TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA8tqsuGpmINb5HQyKKVgMwo/mUMB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcm2oUk0 TzdGobzfaxibn+9eWQ/PonlkJUzEfAS0nO+EdAGygp1DUeE8AzyJb/wfbrAJ0ghy MmZA+R534qfp9GoMsgClZ/H6dNrACtim674caVA95cJVZzT8l9d9n4S30rETBf8I Yjjh/36GzmqeeiJ+gMM32cvf92uIUNuFw7P9OfOG9TmYuCkRwLINu1CBhBcrapVg i4oPMDUFG1hl149GCTvHupqp+4ZFHHfYnaCdHsUzp3nsTLrWa20fJnG5mJKISqDm l7EX6SqLm6UpA5I+wFKQApCXypFdw3g8YB67HqmVhd23KYvoh6CGrM2kVkO6zFgJ ToW7S8FkVchvcA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:29 2025 by rpki-client