This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft File: LuNT81A_m_8zgUUANWKOgaltkI8.mft (raw, json) Hash identifier: YlwS64s8VpT863gEJnQWDJxh2ZwdKmEhk/c63r+ISAQ= Subject key identifier: D2:DE:AD:D9:41:D1:19:68:5D:1C:80:9E:57:BE:35:E9:28:A8:CF:7B Authority key identifier: 2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F Certificate issuer: /CN=2ee353f3503f9bff3381450035628e81a96d908f Certificate serial: 019B3DC7597F7DBAE8F7D0F52290CD07F7AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 22:00:33 +0000 Manifest this update: Sat 20 Dec 2025 22:00:33 +0000 Manifest next update: Sun 21 Dec 2025 22:00:33 +0000 Files and hashes: 1: LuNT81A_m_8zgUUANWKOgaltkI8.crl (hash: v3E9kIM8IgsKhX7qCv6QCU5jKZQViiKZklRL5gS5dgw=) 2: i4ji4FESABQCgK0_EzuuOFD8dtc.roa (hash: 3BAjWIU8+VYQZdWD5OjHsa/ea0VN5UUvfwPcGQwXG/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:59:7f:7d:ba:e8:f7:d0:f5:22:90:cd:07:f7:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee353f3503f9bff3381450035628e81a96d908f Validity Not Before: Dec 20 22:00:33 2025 GMT Not After : Dec 21 22:00:33 2025 GMT Subject: CN=d2deadd941d119685d1c809e57be35e928a8cf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:b6:e0:0a:8e:6c:91:f3:c0:8d:ef:46:e6: 24:1b:d0:67:35:2a:40:93:c5:d2:ab:39:20:b4:cc: 25:01:b2:fb:71:7a:29:d3:8f:55:4a:e9:af:ac:71: 10:15:49:7e:31:34:43:52:f6:63:68:3d:5a:48:90: 03:70:38:0b:7c:ff:c4:77:94:1a:90:28:51:3b:ac: 1a:f8:55:da:8a:25:2a:a4:a9:cb:f3:20:92:35:81: 7c:09:08:81:63:ba:71:58:38:a7:17:9a:8b:96:43: 55:93:04:b4:0f:66:94:91:04:bd:f4:47:6e:de:f3: b1:34:34:78:ab:6c:e7:33:1d:4c:26:d0:dd:d6:8d: 50:0d:65:96:d8:a6:f5:02:9c:1d:5a:82:57:8a:88: 53:1d:bf:8c:80:be:a8:94:76:a8:23:5e:09:84:eb: 72:65:68:fc:a4:3a:86:51:83:56:56:53:60:72:0a: 9a:7e:92:61:0e:3c:84:93:6b:11:af:4b:8f:f4:13: f4:86:38:8b:b0:87:0a:37:8d:54:85:0d:87:56:ef: a4:7f:ca:3b:58:76:a1:4b:e9:e5:a1:81:29:d3:28: 5e:a4:57:92:82:96:0e:07:30:ea:be:02:76:cf:d1: 9f:be:ed:3b:bd:18:e7:3a:1c:f4:3e:d2:84:74:88: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DE:AD:D9:41:D1:19:68:5D:1C:80:9E:57:BE:35:E9:28:A8:CF:7B X509v3 Authority Key Identifier: keyid:2E:E3:53:F3:50:3F:9B:FF:33:81:45:00:35:62:8E:81:A9:6D:90:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuNT81A_m_8zgUUANWKOgaltkI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a067c3-6ba8-45f3-8d62-2fda6a565013/1/LuNT81A_m_8zgUUANWKOgaltkI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:be:b1:0b:57:92:57:d7:dc:0c:51:f6:55:fc:15:56:3b:da: 96:ce:a1:bd:fe:23:b0:db:87:63:58:5a:89:22:69:02:a2:41: cf:4d:63:1e:6f:c9:d4:c2:5a:42:27:5f:a3:5e:5a:f3:fe:41: 15:fd:c2:72:7b:da:61:f6:9b:a5:fa:75:89:d7:49:b2:56:92: 3c:72:75:e3:53:fa:97:a3:d5:db:42:17:9b:62:0f:48:eb:1e: 9b:be:aa:91:ff:35:18:32:98:bd:77:c6:3d:be:01:bf:14:f8: 6e:96:be:41:ba:e8:a4:32:ff:a8:e0:eb:df:15:8b:5e:9e:0c: c6:97:11:0e:7b:e7:d1:33:fc:e7:5c:95:bc:b5:b6:a3:f1:ca: b0:c2:63:2b:5d:b1:69:54:cb:71:2c:74:01:06:8f:55:e1:a6: 91:1a:e8:b0:6f:4d:ec:67:9a:95:84:e8:cf:28:64:51:00:a0: e5:85:3f:a5:6f:37:d1:d6:a0:51:fe:3d:bb:8b:49:8a:60:a5: de:fc:ce:5e:a4:7e:5b:ff:ac:5f:4c:b0:91:3d:40:17:1a:3b: f3:e0:d1:9c:ae:78:03:cc:ae:c5:86:df:2f:5d:ca:cf:1b:12: af:e5:12:c2:6d:0f:55:79:38:f1:e5:7d:6f:3e:aa:93:52:f3: ab:78:33:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1l/fbro99D1IpDNB/erMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTM1M2YzNTAzZjliZmYzMzgxNDUwMDM1NjI4ZTgxYTk2 ZDkwOGYwHhcNMjUxMjIwMjIwMDMzWhcNMjUxMjIxMjIwMDMzWjAzMTEwLwYDVQQD EyhkMmRlYWRkOTQxZDExOTY4NWQxYzgwOWU1N2JlMzVlOTI4YThjZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBy24AqObJHzwI3vRuYkG9BnNSpA k8XSqzkgtMwlAbL7cXop049VSumvrHEQFUl+MTRDUvZjaD1aSJADcDgLfP/Ed5Qa kChRO6wa+FXaiiUqpKnL8yCSNYF8CQiBY7pxWDinF5qLlkNVkwS0D2aUkQS99Edu 3vOxNDR4q2znMx1MJtDd1o1QDWWW2Kb1ApwdWoJXiohTHb+MgL6olHaoI14JhOty ZWj8pDqGUYNWVlNgcgqafpJhDjyEk2sRr0uP9BP0hjiLsIcKN41UhQ2HVu+kf8o7 WHahS+nloYEp0yhepFeSgpYOBzDqvgJ2z9Gfvu07vRjnOhz0PtKEdIhcrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLerdlB0RloXRyAnle+NekoqM97MB8GA1UdIwQY MBaAFC7jU/NQP5v/M4FFADVijoGpbZCPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjIt MmZkYTZhNTY1MDEzLzEvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hMDY3YzMtNmJhOC00NWYzLThkNjItMmZkYTZhNTY1MDEz LzEvTHVOVDgxQV9tXzh6Z1VVQU5XS09nYWx0a0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArr6xC1eS V9fcDFH2VfwVVjvals6hvf4jsNuHY1haiSJpAqJBz01jHm/J1MJaQidfo15a8/5B Ff3CcnvaYfabpfp1iddJslaSPHJ141P6l6PV20IXm2IPSOsem76qkf81GDKYvXfG Pb4BvxT4bpa+QbropDL/qODr3xWLXp4MxpcRDnvn0TP851yVvLW2o/HKsMJjK12x aVTLcSx0AQaPVeGmkRrosG9N7GealYTozyhkUQCg5YU/pW830dagUf49u4tJimCl 3vzOXqR+W/+sX0ywkT1AFxo78+DRnK54A8yuxYbfL13KzxsSr+USwm0PVXk48eV9 bz6qk1Lzq3gzXw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:56:42 2025 by rpki-client