This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft File: LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft (raw, json) Hash identifier: 6nLtaK4Gc3zkRRGqNxcAXiAKjHoDiYSVPd4yzy42dL4= Subject key identifier: 70:82:33:C5:A9:D5:8B:DA:71:9A:B9:F8:15:B6:D9:B8:87:C4:4B:9C Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2 Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2 Certificate serial: 019AF31B43CD0213BF54E23A9F2E0AB82E8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft Manifest number: 0ED4 Signing time: Sat 06 Dec 2025 10:00:41 +0000 Manifest this update: Sat 06 Dec 2025 10:00:41 +0000 Manifest next update: Sun 07 Dec 2025 10:00:41 +0000 Files and hashes: 1: LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl (hash: yEBV49aesiArWf2yYNLfG61K8iDgOWIy5JSmQqj9le4=) 2: YwSn1lGGwl7KLAZTYR2zvBndC9g.roa (hash: 8r7UZf1B94Wo3xzBwCz0diJ6mM+rBducaQI/NNaX0EM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:43:cd:02:13:bf:54:e2:3a:9f:2e:0a:b8:2e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2 Validity Not Before: Dec 6 10:00:41 2025 GMT Not After : Dec 7 10:00:41 2025 GMT Subject: CN=708233c5a9d58bda719ab9f815b6d9b887c44b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d4:de:dd:c0:fa:a8:f4:10:dc:5e:36:6b:5e: ba:b2:bc:e8:7d:02:6b:1b:d0:ab:c3:58:59:cc:64: 09:34:bb:c4:8e:1f:ad:59:cd:86:34:03:34:4f:6f: 83:f0:9a:df:9f:74:1d:84:97:b8:ef:3e:c8:7b:e2: 0a:4f:e6:31:13:3e:7b:59:6e:a4:81:a8:13:af:44: ca:49:7f:09:3f:3b:7b:7d:21:16:f2:a3:f4:a8:7f: 11:08:c2:78:d5:08:5b:9c:7c:19:13:6b:a1:ac:b6: 4f:73:9f:43:a3:97:34:13:a8:b3:6d:0d:05:3f:00: 5c:ba:ee:13:85:2c:4f:52:9e:67:d3:c6:a4:c8:79: 20:0d:e8:f5:31:89:5a:d4:ba:2b:3f:4d:e4:78:fc: 63:41:1f:e5:d5:3b:c8:db:6d:88:c5:71:2e:5f:90: f9:4c:25:88:e7:f9:34:0c:a7:27:da:ab:48:21:6c: e8:02:aa:0c:73:74:08:f1:28:85:7c:b3:69:aa:39: d8:6d:cd:c9:6e:c8:f8:6c:b6:f7:bd:f8:90:53:14: 22:cb:d1:4c:cd:d2:f5:45:fc:23:1e:e0:3e:15:f4: 6c:cc:62:0c:41:77:9e:4d:8e:a5:12:08:3c:ac:fd: 57:8a:b6:bd:b9:ef:93:73:d8:bb:2a:d3:39:b2:0b: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:33:C5:A9:D5:8B:DA:71:9A:B9:F8:15:B6:D9:B8:87:C4:4B:9C X509v3 Authority Key Identifier: keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:18:89:7f:fb:45:a6:a4:30:6e:4a:4e:8c:19:c6:e9:2e:30: e1:14:b7:58:7b:44:ed:f7:9c:0f:54:9b:35:b6:e4:9d:ff:63: 01:d6:82:c6:50:40:21:16:78:32:48:40:04:82:24:18:83:ab: a0:1a:31:9f:16:e6:ec:29:61:2d:15:74:af:96:d3:94:17:ef: a4:a4:13:6b:a9:17:ae:7e:01:40:49:7d:ef:20:38:12:d5:02: 1f:b4:8c:cb:58:06:4c:35:9d:3c:4f:67:b6:e0:42:a3:5e:61: 61:3c:d3:2f:36:ea:66:19:fa:b6:10:2f:47:89:5a:c0:3f:d2: 12:d1:e1:2a:6f:bc:39:b9:a9:9b:d8:61:29:45:cd:1f:ea:15: b5:61:73:92:86:2c:58:b4:98:10:7d:da:49:f7:cd:ed:5f:19: c1:b5:ae:b8:ff:7e:dd:a9:a6:02:d1:86:b5:df:46:44:d9:8a: 77:a0:75:c3:60:dd:7e:89:05:eb:74:3d:e5:47:66:bf:68:7c: 31:f3:1c:18:97:5c:05:4b:f5:51:2b:ea:76:6e:37:db:0e:aa: 9b:51:f1:65:1b:b0:96:5a:a2:e3:1b:cb:60:df:b6:17:5e:70: 60:e0:1f:55:60:f9:f6:bd:63:9a:0e:93:c3:22:31:24:b6:6a: 3f:2e:a1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0PNAhO/VOI6ny4KuC6MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNGM5M2FlMDUxY2UyNmNmYmM4N2VmZTA4ZTEwOWU0YjJj ZWUwYjIwHhcNMjUxMjA2MTAwMDQxWhcNMjUxMjA3MTAwMDQxWjAzMTEwLwYDVQQD Eyg3MDgyMzNjNWE5ZDU4YmRhNzE5YWI5ZjgxNWI2ZDliODg3YzQ0YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dTe3cD6qPQQ3F42a166srzofQJr G9Crw1hZzGQJNLvEjh+tWc2GNAM0T2+D8Jrfn3QdhJe47z7Ie+IKT+YxEz57WW6k gagTr0TKSX8JPzt7fSEW8qP0qH8RCMJ41QhbnHwZE2uhrLZPc59Do5c0E6izbQ0F PwBcuu4ThSxPUp5n08akyHkgDej1MYla1LorP03kePxjQR/l1TvI222IxXEuX5D5 TCWI5/k0DKcn2qtIIWzoAqoMc3QI8SiFfLNpqjnYbc3Jbsj4bLb3vfiQUxQiy9FM zdL1RfwjHuA+FfRszGIMQXeeTY6lEgg8rP1Xira9ue+Tc9i7KtM5sgtWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCCM8Wp1YvacZq5+BW22biHxEucMB8GA1UdIwQY MBaAFC1Mk64FHOJs+8h+/gjhCeSyzuCyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFV5VHJnVWM0bXo3eUg3LUNPRUo1TExPNExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lZThjMWEtZTUwMS00ZjMxLTk5ZTkt M2E2NjQwMzYwOTkzLzEvTFV5VHJnVWM0bXo3eUg3LUNPRUo1TExPNExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lZThjMWEtZTUwMS00ZjMxLTk5ZTktM2E2NjQwMzYwOTkz LzEvTFV5VHJnVWM0bXo3eUg3LUNPRUo1TExPNExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxiJf/tF pqQwbkpOjBnG6S4w4RS3WHtE7fecD1SbNbbknf9jAdaCxlBAIRZ4MkhABIIkGIOr oBoxnxbm7ClhLRV0r5bTlBfvpKQTa6kXrn4BQEl97yA4EtUCH7SMy1gGTDWdPE9n tuBCo15hYTzTLzbqZhn6thAvR4lawD/SEtHhKm+8Obmpm9hhKUXNH+oVtWFzkoYs WLSYEH3aSffN7V8ZwbWuuP9+3ammAtGGtd9GRNmKd6B1w2DdfokF63Q95Udmv2h8 MfMcGJdcBUv1USvqdm432w6qm1HxZRuwllqi4xvLYN+2F15wYOAfVWD59r1jmg6T wyIxJLZqPy6h1w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:34 2025 by rpki-client