This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft File: LUrgdxLkhC-A-oEAnTNbxICeZB0.mft (raw, json) Hash identifier: U4gfyYwcOOct+xVZoupUUtWBjPVajBANxaHh8fZGmes= Subject key identifier: D0:33:55:CB:C8:1A:92:05:98:AC:54:D2:83:28:41:04:F2:BA:EC:A7 Authority key identifier: 2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D Certificate issuer: /CN=2d4ae07712e4842f80fa81009d335bc4809e641d Certificate serial: 019AF2771210E481A96FE66755463BB25509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft Manifest number: 07CE Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: LUrgdxLkhC-A-oEAnTNbxICeZB0.crl (hash: WT5wF+tkwG9e9yFac3GL73XXW63FPuq+UGEGo4ipejQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:12:10:e4:81:a9:6f:e6:67:55:46:3b:b2:55:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4ae07712e4842f80fa81009d335bc4809e641d Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=d03355cbc81a920598ac54d283284104f2baeca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:cc:fc:73:27:3d:df:c7:a6:d5:5f:8a:ac: b1:a8:8b:1f:28:fa:2a:64:0a:b0:2c:88:aa:64:86: c5:11:5c:65:9f:f7:8f:08:33:45:52:cc:09:36:f1: 23:b4:6a:1c:cd:e3:67:07:20:0a:eb:80:f7:60:40: 56:ca:8c:ef:3f:9c:bd:11:33:64:30:63:3f:3c:3d: 3f:0f:a3:b9:b6:d5:ca:50:19:81:9e:ba:77:67:47: 29:a7:83:f7:78:3a:eb:38:35:89:87:10:55:ba:d0: 3c:fe:95:9b:e9:6f:bb:ac:4b:44:28:6b:f7:9e:83: 55:34:c2:ac:45:f7:42:58:36:25:97:51:a6:c4:e5: 3b:35:dc:2a:2d:02:c6:80:7f:10:c4:60:2a:2f:be: 9e:8d:38:5e:5f:c5:29:25:49:6c:59:81:64:a2:28: 4d:5f:72:7b:1f:b7:bb:6d:d4:d0:a5:a2:fa:21:74: 6b:a7:d8:25:7e:e3:3a:49:66:ba:9f:dd:09:f3:d1: b8:cc:b6:46:fe:68:f2:36:3d:08:3c:b9:c5:52:7c: 6b:b6:12:93:ba:78:23:c7:dc:24:60:11:1c:7c:20: 0d:66:ab:19:45:e6:e2:6d:f9:0e:7b:91:e6:1d:8c: 9b:6e:80:d2:df:ee:f2:c3:db:83:f7:4c:23:6d:6d: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:33:55:CB:C8:1A:92:05:98:AC:54:D2:83:28:41:04:F2:BA:EC:A7 X509v3 Authority Key Identifier: keyid:2D:4A:E0:77:12:E4:84:2F:80:FA:81:00:9D:33:5B:C4:80:9E:64:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUrgdxLkhC-A-oEAnTNbxICeZB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f61db6-0192-4fff-aa47-f2bbbecc5a6e/1/LUrgdxLkhC-A-oEAnTNbxICeZB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a4:9a:6d:92:86:0d:3d:39:0c:0a:22:e7:d3:11:e6:e0:c6: 09:71:4a:15:88:24:f0:9d:43:10:6a:ba:e6:b8:d1:75:7a:f3: 89:f4:ef:ca:84:f1:6d:c2:34:78:8e:33:28:ca:c3:76:06:81: 22:10:79:bc:0d:0a:ce:76:84:d2:7a:e9:95:13:cd:66:06:bd: f9:8a:ba:1b:1b:ea:bc:30:5e:a0:9a:22:57:2f:64:04:1f:e9: 76:81:6b:73:33:60:c4:b4:7a:d6:97:97:26:6f:f4:28:7d:d6: 19:a6:0c:e8:bc:01:b1:c8:ce:e8:be:3e:25:80:be:43:46:63: 4a:8f:92:13:36:59:0b:ec:fd:6d:47:35:c0:4d:29:49:2b:d9: 91:16:07:7f:c4:b8:c1:e4:e7:a0:9b:f5:72:88:32:06:7a:36: 54:ae:79:db:b5:f8:da:5c:72:37:93:c6:28:4a:22:bf:28:96: 5c:5f:72:cb:ca:8d:ec:77:71:f1:81:25:a3:7b:9e:9b:8a:29: 35:34:9e:ca:22:47:30:11:de:8d:9c:6e:54:19:11:fd:7d:20: 9b:b9:cf:8d:77:c1:5a:f5:ca:3d:66:41:c3:60:3b:36:7f:1b: 26:ec:d8:24:e5:6f:1a:3c:6f:30:b2:50:41:88:e6:ef:02:94: dd:4d:72:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxIQ5IGpb+ZnVUY7slUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNGFlMDc3MTJlNDg0MmY4MGZhODEwMDlkMzM1YmM0ODA5 ZTY0MWQwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhkMDMzNTVjYmM4MWE5MjA1OThhYzU0ZDI4MzI4NDEwNGYyYmFlY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/3M/HMnPd/HptVfiqyxqIsfKPoq ZAqwLIiqZIbFEVxln/ePCDNFUswJNvEjtGoczeNnByAK64D3YEBWyozvP5y9ETNk MGM/PD0/D6O5ttXKUBmBnrp3Z0cpp4P3eDrrODWJhxBVutA8/pWb6W+7rEtEKGv3 noNVNMKsRfdCWDYll1GmxOU7NdwqLQLGgH8QxGAqL76ejTheX8UpJUlsWYFkoihN X3J7H7e7bdTQpaL6IXRrp9glfuM6SWa6n90J89G4zLZG/mjyNj0IPLnFUnxrthKT ungjx9wkYBEcfCANZqsZRebibfkOe5HmHYybboDS3+7yw9uD90wjbW2CPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAzVcvIGpIFmKxU0oMoQQTyuuynMB8GA1UdIwQY MBaAFC1K4HcS5IQvgPqBAJ0zW8SAnmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNjFkYjYtMDE5Mi00ZmZmLWFhNDct ZjJiYmJlY2M1YTZlLzEvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNjFkYjYtMDE5Mi00ZmZmLWFhNDctZjJiYmJlY2M1YTZl LzEvTFVyZ2R4TGtoQy1BLW9FQW5UTmJ4SUNlWkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6SabZKG DT05DAoi59MR5uDGCXFKFYgk8J1DEGq65rjRdXrzifTvyoTxbcI0eI4zKMrDdgaB IhB5vA0KznaE0nrplRPNZga9+Yq6GxvqvDBeoJoiVy9kBB/pdoFrczNgxLR61peX Jm/0KH3WGaYM6LwBscjO6L4+JYC+Q0ZjSo+SEzZZC+z9bUc1wE0pSSvZkRYHf8S4 weTnoJv1cogyBno2VK5527X42lxyN5PGKEoivyiWXF9yy8qN7Hdx8YElo3uem4op NTSeyiJHMBHejZxuVBkR/X0gm7nPjXfBWvXKPWZBw2A7Nn8bJuzYJOVvGjxvMLJQ QYjm7wKU3U1yAw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:02 2025 by rpki-client