This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft File: LuUlFj3AHc0wibsdz7CRLnftr5g.mft (raw, json) Hash identifier: fiUFvb2sT2vvK1w8AG402XrbBrTX3qaQyr2fu2qv/KY= Subject key identifier: A5:C3:1B:79:7C:92:A9:09:14:EB:FE:AE:B9:76:0E:A3:C1:BF:CA:23 Authority key identifier: 2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98 Certificate issuer: /CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98 Certificate serial: 019AF208CBFAA189E7390C6ED93A7E85B0A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:00:53 +0000 Manifest this update: Sat 06 Dec 2025 05:00:53 +0000 Manifest next update: Sun 07 Dec 2025 05:00:53 +0000 Files and hashes: 1: LuUlFj3AHc0wibsdz7CRLnftr5g.crl (hash: exXBgCvfJkRpcB6ytYKfpovdGvHMmCA8B0rW3MCienk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cb:fa:a1:89:e7:39:0c:6e:d9:3a:7e:85:b0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee525163dc01dcd3089bb1dcfb0912e77edaf98 Validity Not Before: Dec 6 05:00:53 2025 GMT Not After : Dec 7 05:00:53 2025 GMT Subject: CN=a5c31b797c92a90914ebfeaeb9760ea3c1bfca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:f7:a4:c2:a8:05:f1:9b:ce:cf:ed:e1:8b: 9a:71:08:6d:fa:cc:c2:ff:ed:c4:33:b3:4b:da:4b: 97:23:4a:56:0d:cf:52:70:4f:4c:76:8f:e9:29:44: df:0a:a7:7e:e4:42:0c:b2:11:5d:c1:89:01:28:a2: b0:32:c0:b1:b3:d7:86:19:c9:ba:7e:2d:00:31:7f: 94:ff:62:ab:dd:10:ff:13:ab:02:d1:ce:8e:45:eb: 1c:d6:b3:90:af:2d:7d:43:f3:0d:a1:fb:ff:29:b3: 6c:d4:10:6a:69:78:64:c0:51:12:e8:32:77:d2:74: ad:12:dc:61:7b:4f:0d:7b:83:8f:66:2d:29:a0:bd: 71:bd:c7:e5:19:4d:48:48:eb:69:fe:40:4a:6a:26: 82:70:ba:30:8c:48:91:8a:99:43:92:4f:96:09:2a: b0:17:a3:ef:10:3e:2d:14:10:42:3f:01:3b:97:8a: bb:9c:29:ff:ab:ff:35:16:f9:36:2d:03:41:18:ad: d0:55:b5:a0:94:a4:66:e0:e3:2f:28:42:f1:3d:ab: 77:1e:9b:14:6f:75:c0:85:71:d1:86:52:59:33:69: 45:88:46:94:c0:c8:06:84:98:4a:d2:cd:4f:fe:3c: f4:cb:d5:a8:82:ba:e7:40:2a:92:2a:61:62:e7:8a: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C3:1B:79:7C:92:A9:09:14:EB:FE:AE:B9:76:0E:A3:C1:BF:CA:23 X509v3 Authority Key Identifier: keyid:2E:E5:25:16:3D:C0:1D:CD:30:89:BB:1D:CF:B0:91:2E:77:ED:AF:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuUlFj3AHc0wibsdz7CRLnftr5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/35cf7b-0144-4507-bf39-cc68dc854e88/1/LuUlFj3AHc0wibsdz7CRLnftr5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f3:9b:8b:12:dc:c9:76:f5:9d:f1:46:9c:9f:d9:da:65:ba: c6:d4:d0:56:78:86:23:a3:89:f3:0a:84:9f:54:c1:95:ca:bb: eb:19:02:82:42:58:75:87:6c:69:d1:27:14:8e:03:10:9c:3d: 4e:23:ad:4d:c0:f5:cb:eb:e8:e8:6c:d8:81:69:cf:7e:ba:eb: eb:d0:e7:9c:2a:ba:56:31:9b:c5:c1:63:4a:96:cd:b5:7d:db: 40:aa:e7:7c:ff:b2:73:0e:d3:7c:eb:19:3c:27:9b:1f:c3:12: 72:b6:4b:77:ab:b8:e1:f7:d7:80:69:6e:48:9b:29:37:7e:28: 4b:df:e1:46:64:2b:c2:fe:fd:d3:56:c4:9a:e0:6b:20:fa:79: cf:cd:f5:7c:f6:76:06:3c:b1:2b:9e:28:c6:f3:a0:61:69:71: a7:9f:ef:cd:71:54:86:48:31:b9:00:94:21:3c:e6:42:21:cb: 69:cc:1c:12:48:f9:e1:ce:5f:5d:f9:b4:20:c0:68:b1:3b:c8: 31:1d:86:1e:27:a1:14:ba:20:3c:a8:77:5b:6e:17:c4:42:4b: b4:86:7d:46:01:31:7d:35:f4:fe:2f:f9:b9:a3:83:b1:c5:13: ab:de:08:06:eb:07:3f:d5:b1:ea:f8:ab:2b:ec:d8:c1:47:25: 06:8d:a9:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMv6oYnnOQxu2Tp+hbCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTUyNTE2M2RjMDFkY2QzMDg5YmIxZGNmYjA5MTJlNzdl ZGFmOTgwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD EyhhNWMzMWI3OTdjOTJhOTA5MTRlYmZlYWViOTc2MGVhM2MxYmZjYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMf3pMKoBfGbzs/t4YuacQht+szC /+3EM7NL2kuXI0pWDc9ScE9Mdo/pKUTfCqd+5EIMshFdwYkBKKKwMsCxs9eGGcm6 fi0AMX+U/2Kr3RD/E6sC0c6OResc1rOQry19Q/MNofv/KbNs1BBqaXhkwFES6DJ3 0nStEtxhe08Ne4OPZi0poL1xvcflGU1ISOtp/kBKaiaCcLowjEiRiplDkk+WCSqw F6PvED4tFBBCPwE7l4q7nCn/q/81Fvk2LQNBGK3QVbWglKRm4OMvKELxPat3HpsU b3XAhXHRhlJZM2lFiEaUwMgGhJhK0s1P/jz0y9WogrrnQCqSKmFi54pHbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXDG3l8kqkJFOv+rrl2DqPBv8ojMB8GA1UdIwQY MBaAFC7lJRY9wB3NMIm7Hc+wkS537a+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzkt Y2M2OGRjODU0ZTg4LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNWNmN2ItMDE0NC00NTA3LWJmMzktY2M2OGRjODU0ZTg4 LzEvTHVVbEZqM0FIYzB3aWJzZHo3Q1JMbmZ0cjVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvObixLc yXb1nfFGnJ/Z2mW6xtTQVniGI6OJ8wqEn1TBlcq76xkCgkJYdYdsadEnFI4DEJw9 TiOtTcD1y+vo6GzYgWnPfrrr69DnnCq6VjGbxcFjSpbNtX3bQKrnfP+ycw7TfOsZ PCebH8MScrZLd6u44ffXgGluSJspN34oS9/hRmQrwv7901bEmuBrIPp5z831fPZ2 BjyxK54oxvOgYWlxp5/vzXFUhkgxuQCUITzmQiHLacwcEkj54c5fXfm0IMBosTvI MR2GHiehFLogPKh3W24XxEJLtIZ9RgExfTX0/i/5uaODscUTq94IBusHP9Wx6vir K+zYwUclBo2pnw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:27 2025 by rpki-client