This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json) Hash identifier: XytpZmo8UjNF0WGHQvqxnFuuZsKGpNvpEnMIELOkW0Y= Subject key identifier: 5B:68:D9:7D:76:18:4A:7D:4B:AD:27:BF:A6:9C:9B:51:25:D6:6D:82 Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Certificate serial: 019AF31B8A8C28BF9E6E8036149002AE7B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft Manifest number: 02CF Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=) 2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: qu0XecPKwgPsg30lhoTWX8YHv5+Cjo5OWsWM6oj9W4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8a:8c:28:bf:9e:6e:80:36:14:90:02:ae:7b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=5b68d97d76184a7d4bad27bfa69c9b5125d66d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:9d:1c:59:71:71:49:94:f8:87:1c:e5:9f: c2:a9:7f:83:e0:bf:59:57:e9:8e:12:53:dc:b0:1e: d4:9f:bd:90:05:45:8b:a5:10:b1:35:be:3b:9d:a3: a1:e0:52:85:03:0c:77:91:91:a8:0e:12:87:86:d1: 4d:5d:49:b4:c2:02:8c:11:65:3c:67:d5:02:4a:d4: 84:59:a4:cd:da:d5:84:fb:6d:29:89:fe:b9:84:c1: fe:df:07:6b:98:ce:24:7b:a4:e1:46:81:37:86:60: 36:f2:bd:76:9d:ef:2b:ec:66:3d:71:8c:fc:a1:8c: e2:db:d3:9b:3b:fb:f1:25:60:14:fb:41:31:52:e4: e2:26:eb:d4:c0:36:f7:27:6c:35:4e:28:64:c3:c4: ea:c4:dc:55:cd:ca:9c:93:e2:5f:7b:93:9c:ba:e8: 6f:56:8b:19:56:62:e8:90:2f:1e:2a:0e:b7:a2:23: 1b:9e:7a:95:5b:1e:fc:08:33:8d:32:84:38:54:93: 5d:36:0a:4e:03:68:00:f5:24:73:3c:13:6e:e3:d7: 9f:40:6c:c8:36:01:1f:4e:22:ad:49:f1:91:57:f2: 1b:4d:3c:61:7e:94:b1:1d:bf:f9:bf:2d:1e:52:0d: 84:f2:52:85:8d:69:ad:68:cf:b0:16:9f:0f:41:99: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:D9:7D:76:18:4A:7D:4B:AD:27:BF:A6:9C:9B:51:25:D6:6D:82 X509v3 Authority Key Identifier: keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:14:54:55:f3:48:85:8b:96:ea:8d:12:cf:fe:c4:b2:d6:37: f1:24:8c:00:ab:1c:a4:0a:13:3e:4b:a7:ba:f7:bf:31:da:91: d1:09:51:51:8b:98:1b:1d:db:1b:81:2c:a2:9c:38:4e:58:23: 0d:53:f6:1f:82:98:74:09:85:d4:c7:4c:fe:19:22:90:4e:f3: 41:e6:61:26:c8:c6:b1:d7:34:df:1d:c2:24:af:71:51:98:12: ae:23:5c:d6:99:ff:6e:f0:74:40:6d:f3:40:41:aa:58:e6:fa: 42:b2:92:51:6a:7c:61:c4:2a:11:7e:bd:ee:f6:19:91:a3:c6: d1:14:ff:d4:57:58:0d:a5:25:e4:89:4c:f8:45:8d:96:1c:cf: a1:09:a6:c8:3d:55:16:a0:a2:a3:0f:8b:67:0d:9e:8e:d8:d9: 87:bd:4b:f4:7f:42:1c:88:30:b1:60:b6:24:31:61:e2:c0:b5: 91:49:17:99:eb:01:34:ea:b1:98:07:4b:46:f4:ef:dd:3f:b1: 6a:2d:ba:20:8a:31:56:88:ad:9e:98:9a:3a:dc:99:55:5a:fc: c4:fc:26:43:09:93:9b:4e:78:b0:76:84:20:b2:f5:f8:0c:7c: 89:02:f7:b7:a7:7d:df:63:fa:7c:c5:67:a3:8c:70:dc:5e:fe: d8:62:af:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4qMKL+eboA2FJACrnt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTM0YzBjMTgyYzQzODM3ZjJjMmJkNGVkY2IwYjhiM2Fi ZTk2ZTkwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD Eyg1YjY4ZDk3ZDc2MTg0YTdkNGJhZDI3YmZhNjljOWI1MTI1ZDY2ZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE2dHFlxcUmU+Icc5Z/CqX+D4L9Z V+mOElPcsB7Un72QBUWLpRCxNb47naOh4FKFAwx3kZGoDhKHhtFNXUm0wgKMEWU8 Z9UCStSEWaTN2tWE+20pif65hMH+3wdrmM4ke6ThRoE3hmA28r12ne8r7GY9cYz8 oYzi29ObO/vxJWAU+0ExUuTiJuvUwDb3J2w1Tihkw8TqxNxVzcqck+Jfe5Ocuuhv VosZVmLokC8eKg63oiMbnnqVWx78CDONMoQ4VJNdNgpOA2gA9SRzPBNu49efQGzI NgEfTiKtSfGRV/IbTTxhfpSxHb/5vy0eUg2E8lKFjWmtaM+wFp8PQZmiGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFto2X12GEp9S60nv6acm1El1m2CMB8GA1UdIwQY MBaAFI5TTAwYLEODfywr1O3LC4s6vpbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2It OTg1NDc2YzU1ZTQzLzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2ItOTg1NDc2YzU1ZTQz LzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixRUVfNI hYuW6o0Sz/7EstY38SSMAKscpAoTPkunuve/MdqR0QlRUYuYGx3bG4Esopw4Tlgj DVP2H4KYdAmF1MdM/hkikE7zQeZhJsjGsdc03x3CJK9xUZgSriNc1pn/bvB0QG3z QEGqWOb6QrKSUWp8YcQqEX697vYZkaPG0RT/1FdYDaUl5IlM+EWNlhzPoQmmyD1V FqCiow+LZw2ejtjZh71L9H9CHIgwsWC2JDFh4sC1kUkXmesBNOqxmAdLRvTv3T+x ai26IIoxVoitnpiaOtyZVVr8xPwmQwmTm054sHaEILL1+Ax8iQL3t6d932P6fMVn o4xw3F7+2GKvYg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:10 2025 by rpki-client