This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft File: LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json) Hash identifier: KmkIvzjAIUK+6zQ/2aTzRRr9WiRHPy3XA3rQlVzWbv8= Subject key identifier: A7:91:66:31:CA:CC:78:27:F2:F2:01:48:07:1A:24:73:AD:13:25:32 Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F Certificate issuer: /CN=2ee353f3503f9bff3381450035628e81a96d908f Certificate serial: 019AF464B9F785D75F207D90025EE9C0B8F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:33 +0000 Manifest this update: Sat 06 Dec 2025 16:00:33 +0000 Manifest next update: Sun 07 Dec 2025 16:00:33 +0000 Files and hashes: 1: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: 8AxhLTJM0S/qcyWdCTmBWJCIfZdThtkHz+aswvs7GkQ=) 2: i4ji4FESABQCgK0_EzuuOFD8dtc.roa (hash: 3BAjWIU8+VYQZdWD5OjHsa/ea0VN5UUvfwPcGQwXG/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:b9:f7:85:d7:5f:20:7d:90:02:5e:e9:c0:b8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f Validity Not Before: Dec 6 16:00:33 2025 GMT Not After : Dec 7 16:00:33 2025 GMT Subject: CN=a7916631cacc7827f2f20148071a2473ad132532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b9:90:59:46:c1:3d:6d:fb:0f:90:8a:13:2c: bd:23:58:01:05:a4:6b:0c:f4:67:d0:a3:01:1a:6e: 0d:c4:cb:a9:1b:c2:4f:95:da:6c:d9:a6:93:ba:44: 9b:38:71:ef:9a:e1:29:f6:ab:88:1f:fd:c2:6e:99: f7:e1:03:d1:8c:dd:00:c8:9a:4b:54:d0:b8:0a:40: c0:f4:5d:7b:9e:c0:24:2a:fb:f9:c9:7a:bc:aa:88: 68:3e:c5:4b:f7:e8:fd:06:5d:31:50:24:ed:9b:3a: 27:9b:8e:8f:37:db:ee:30:f0:53:31:3a:81:e8:57: b0:4b:2a:8e:65:2c:14:24:45:ad:02:df:70:9b:e1: ba:3c:d7:0e:53:d5:2c:f1:5d:7d:36:85:ba:e1:03: b0:48:a5:36:4b:a0:c8:e0:9e:66:1e:54:68:fa:5b: 63:64:10:6d:80:70:2f:f2:70:ad:8a:95:53:01:ef: f4:cd:27:96:e8:88:3c:5b:3b:c0:21:2c:9b:9f:24: 5f:22:71:5b:2a:22:8b:4c:62:f1:6d:5c:67:80:dd: 82:4d:eb:58:75:c1:ec:27:12:5f:7a:f1:a2:bc:49: 82:00:7e:a8:45:d4:be:40:ad:99:1c:21:27:11:7a: a4:2e:2b:83:87:b5:8d:2a:3a:e4:7f:c7:ab:60:cb: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:91:66:31:CA:CC:78:27:F2:F2:01:48:07:1A:24:73:AD:13:25:32 X509v3 Authority Key Identifier: keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:99:c4:ce:5e:1f:12:21:df:6c:fb:a0:97:37:aa:ac:a6:f7: 10:06:d0:3d:37:fa:c4:64:cc:a4:75:dc:ff:46:d3:0f:03:60: 31:c3:00:f2:34:d1:fd:1f:2f:cd:7b:f8:a2:7a:f0:3d:ff:bb: 25:a0:03:96:e2:36:61:c8:33:12:c8:9e:f1:ce:81:34:48:d8: e8:f5:3d:0c:66:e7:b7:ca:ad:fa:3f:b1:33:4e:ed:4b:1d:5a: 38:76:ae:12:f5:40:14:f6:33:42:ef:54:ff:2b:07:96:44:9f: bf:80:0b:83:15:e8:b4:d9:5a:3e:15:91:cc:3a:61:dd:c4:52: e8:ef:c0:5f:a6:49:d2:06:01:4c:c7:17:05:b3:f1:8f:ed:13: 0d:38:9d:0e:f9:de:0c:16:1c:7c:e6:0b:d5:6c:bb:c2:f1:0e: 40:b1:9a:47:34:bd:21:1a:aa:55:9a:a5:68:a8:6f:ea:67:a2: e7:e9:31:c3:58:b7:e5:79:8f:ad:5b:6e:ad:1d:12:2e:3e:26: ae:85:f5:83:4f:ef:24:b4:b6:a2:8d:d7:18:78:fd:eb:66:20: 4f:c4:f2:cb:54:38:04:c1:d9:56:a4:b9:7a:b9:9f:64:d9:25: 98:07:e5:d8:05:6d:dd:1f:f6:c6:95:be:67:00:cb:27:ae:06: b0:37:d2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLn3hddfIH2QAl7pwLj3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTM1M2YzNTAzZjliZmYzMzgxNDUwMDM1NjI4ZTgxYTk2 ZDkwOGYwHhcNMjUxMjA2MTYwMDMzWhcNMjUxMjA3MTYwMDMzWjAzMTEwLwYDVQQD EyhhNzkxNjYzMWNhY2M3ODI3ZjJmMjAxNDgwNzFhMjQ3M2FkMTMyNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bmQWUbBPW37D5CKEyy9I1gBBaRr DPRn0KMBGm4NxMupG8JPldps2aaTukSbOHHvmuEp9quIH/3Cbpn34QPRjN0AyJpL VNC4CkDA9F17nsAkKvv5yXq8qohoPsVL9+j9Bl0xUCTtmzonm46PN9vuMPBTMTqB 6FewSyqOZSwUJEWtAt9wm+G6PNcOU9Us8V19NoW64QOwSKU2S6DI4J5mHlRo+ltj ZBBtgHAv8nCtipVTAe/0zSeW6Ig8WzvAISybnyRfInFbKiKLTGLxbVxngN2CTetY dcHsJxJfevGivEmCAH6oRdS+QK2ZHCEnEXqkLiuDh7WNKjrkf8erYMuQgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeRZjHKzHgn8vIBSAcaJHOtEyUyMB8GA1UdIwQY MBaAFC7jU/NQP5v/M4FFADVijoGpbZCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjIt MmZkYTZhNTY1MDEzLzEvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjItMmZkYTZhNTY1MDEz LzEvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJnEzl4f EiHfbPuglzeqrKb3EAbQPTf6xGTMpHXc/0bTDwNgMcMA8jTR/R8vzXv4onrwPf+7 JaADluI2YcgzEsie8c6BNEjY6PU9DGbnt8qt+j+xM07tSx1aOHauEvVAFPYzQu9U /ysHlkSfv4ALgxXotNlaPhWRzDph3cRS6O/AX6ZJ0gYBTMcXBbPxj+0TDTidDvne DBYcfOYL1Wy7wvEOQLGaRzS9IRqqVZqlaKhv6mei5+kxw1i35XmPrVturR0SLj4m roX1g0/vJLS2oo3XGHj962YgT8Tyy1Q4BMHZVqS5ermfZNklmAfl2AVt3R/2xpW+ ZwDLJ64GsDfSWA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:04 2025 by rpki-client