This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json) Hash identifier: exvLNdJ1icku4LaTP4JD4Raf8h66EBQB/u436uwCKnw= Subject key identifier: 05:DA:65:F6:8F:23:2E:ED:F3:9F:7C:B7:DA:B8:8E:68:63:70:FB:70 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019AF31C4D56CE00D52041990CBF455BE665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:49 +0000 Manifest this update: Sat 06 Dec 2025 10:01:49 +0000 Manifest next update: Sun 07 Dec 2025 10:01:49 +0000 Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: tCItA+SUN2uaqpxY9pBWdcoNOLZKtH9l2GcgPbPsuoA=) 2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=) 3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4d:56:ce:00:d5:20:41:99:0c:bf:45:5b:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Dec 6 10:01:49 2025 GMT Not After : Dec 7 10:01:49 2025 GMT Subject: CN=05da65f68f232eedf39f7cb7dab88e686370fb70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3b:fa:fb:0e:f1:a4:f9:73:92:83:23:01:5c: bc:8f:13:09:af:5b:4e:b9:b7:59:0e:63:ae:8d:b4: 88:c7:2c:74:ef:af:c2:35:e0:84:04:d7:99:88:8e: 35:1e:9b:f9:e5:22:9d:b1:44:29:70:ce:06:ae:df: c1:06:3d:c8:72:40:e7:c5:1e:cf:7d:ed:c8:ca:b9: 03:53:86:7d:50:73:a2:b9:be:cc:fb:50:b5:c4:63: 59:95:b8:69:00:c7:e5:89:cc:01:87:75:5d:56:2b: 06:19:c3:74:cb:b0:03:5a:a3:9d:94:d5:e3:c6:dd: 27:34:8b:d2:e8:c1:e0:75:38:5b:70:84:ad:18:40: 7a:0a:1b:0b:28:9f:b3:40:36:81:a8:50:81:b4:94: e1:3f:5e:ab:87:09:65:91:3b:e4:55:35:d4:4b:4d: cf:1e:19:cd:23:a5:1b:46:aa:aa:25:f9:c4:c1:cb: e2:0b:7f:ba:cc:8b:23:1c:6b:11:af:27:ee:38:24: f8:37:04:fb:cb:6a:92:a7:79:64:4f:fb:64:97:7a: f5:3c:44:64:af:39:50:21:f3:17:11:8d:6c:1a:d8: b5:b8:80:6a:d4:82:38:63:76:5f:90:8d:28:08:94: d5:c2:e7:9d:2f:d1:71:a4:bd:16:e5:1f:a9:90:db: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DA:65:F6:8F:23:2E:ED:F3:9F:7C:B7:DA:B8:8E:68:63:70:FB:70 X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:53:8b:92:e0:76:d9:9b:7d:f1:1a:ba:5a:80:20:9f:5b:5b: 40:40:56:69:02:ee:a9:13:bd:c4:5c:54:85:f7:8b:e2:4a:2d: 0b:c8:98:13:0c:6f:b4:f8:07:dc:92:84:f8:de:ee:5a:78:66: 02:ec:a8:e9:4b:bd:c9:04:a7:dc:79:ed:c4:a0:15:26:c1:3b: 13:bd:44:f3:8b:83:87:30:88:9c:0f:95:06:5e:7e:01:b5:98: 35:7a:50:2d:00:ca:e8:ec:4f:b0:55:81:9b:30:93:68:30:58: cb:5b:56:dd:54:de:86:9c:79:27:4e:ce:dc:94:02:16:39:ca: aa:6e:5e:1e:a5:97:8a:b3:5a:95:ac:a3:39:c4:80:8a:e2:d0: 2a:81:b5:73:53:a3:44:29:dd:88:8f:e8:a0:ad:d7:d5:9d:16: 34:ba:dc:81:82:09:ca:21:a8:36:70:43:c7:21:45:8b:d5:ef: 69:fe:b9:5e:92:06:73:d5:98:be:15:01:2a:82:8e:af:e4:85: 46:a6:6a:cf:23:5f:be:f6:54:39:1b:ca:d9:7b:88:f0:66:be: 3e:eb:22:41:34:f6:62:17:f8:cf:1a:ef:2f:1b:12:b4:c2:87: 80:95:b8:8d:76:12:d4:52:2b:a6:bb:2d:c5:35:8b:d9:95:5b: f1:8c:2e:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHE1WzgDVIEGZDL9FW+ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjUxMjA2MTAwMTQ5WhcNMjUxMjA3MTAwMTQ5WjAzMTEwLwYDVQQD EygwNWRhNjVmNjhmMjMyZWVkZjM5ZjdjYjdkYWI4OGU2ODYzNzBmYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizv6+w7xpPlzkoMjAVy8jxMJr1tO ubdZDmOujbSIxyx076/CNeCEBNeZiI41Hpv55SKdsUQpcM4Grt/BBj3IckDnxR7P fe3IyrkDU4Z9UHOiub7M+1C1xGNZlbhpAMflicwBh3VdVisGGcN0y7ADWqOdlNXj xt0nNIvS6MHgdThbcIStGEB6ChsLKJ+zQDaBqFCBtJThP16rhwllkTvkVTXUS03P HhnNI6UbRqqqJfnEwcviC3+6zIsjHGsRryfuOCT4NwT7y2qSp3lkT/tkl3r1PERk rzlQIfMXEY1sGti1uIBq1II4Y3ZfkI0oCJTVwuedL9FxpL0W5R+pkNu42QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXaZfaPIy7t8598t9q4jmhjcPtwMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlOLkuB2 2Zt98Rq6WoAgn1tbQEBWaQLuqRO9xFxUhfeL4kotC8iYEwxvtPgH3JKE+N7uWnhm Auyo6Uu9yQSn3HntxKAVJsE7E71E84uDhzCInA+VBl5+AbWYNXpQLQDK6OxPsFWB mzCTaDBYy1tW3VTehpx5J07O3JQCFjnKqm5eHqWXirNalayjOcSAiuLQKoG1c1Oj RCndiI/ooK3X1Z0WNLrcgYIJyiGoNnBDxyFFi9Xvaf65XpIGc9WYvhUBKoKOr+SF RqZqzyNfvvZUORvK2XuI8Ga+PusiQTT2Yhf4zxrvLxsStMKHgJW4jXYS1FIrprst xTWL2ZVb8YwuCA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:28 2025 by rpki-client