This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json) Hash identifier: R2R5THlsL1b3SU1oSVB0TCEK2E2D34XlOmcOwxViAKU= Subject key identifier: 68:3F:2C:F5:B4:81:B8:DC:E3:2D:67:35:69:4B:D3:35:FE:E6:36:F1 Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Certificate serial: 019B2BF90B8A685B22C5661A545CE47C2233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft Manifest number: 1505 Signing time: Wed 17 Dec 2025 11:01:40 +0000 Manifest this update: Wed 17 Dec 2025 11:01:40 +0000 Manifest next update: Thu 18 Dec 2025 11:01:40 +0000 Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: odfSGa09eqRPMGRUvTdBBpp+mEv497uA4dbMytTl4w4=) 2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:0b:8a:68:5b:22:c5:66:1a:54:5c:e4:7c:22:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Validity Not Before: Dec 17 11:01:40 2025 GMT Not After : Dec 18 11:01:40 2025 GMT Subject: CN=683f2cf5b481b8dce32d6735694bd335fee636f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:8a:0f:f1:b8:4a:c9:ba:52:61:99:95:8e: f1:8b:d8:8c:ea:50:0c:22:a6:df:bd:62:08:ca:35: 92:50:ec:c5:d0:85:d4:e6:7c:ed:63:a2:d2:87:14: 86:2c:99:dc:10:ba:d9:fe:1c:24:4a:41:10:9c:8a: da:df:f5:d2:ad:df:94:46:ff:42:89:cc:c3:9e:06: 76:de:ef:b1:0e:a4:16:0f:3a:20:84:5e:1b:4e:40: d7:16:68:6f:68:fd:18:71:1b:bf:b7:e3:64:95:eb: f1:76:f7:af:c0:f9:6e:62:2d:78:15:1e:62:26:c2: 79:22:5e:02:4d:0c:bf:2c:1f:21:3b:97:ac:21:b2: b9:fc:77:55:cb:e9:d1:82:ee:0e:6a:d2:59:b2:3d: 8f:4c:4e:2c:42:e5:7f:8b:a8:1e:df:49:45:c7:91: 22:05:f8:be:a0:37:d4:40:3d:14:d2:15:39:9c:f9: b7:3c:e2:fe:06:1e:83:eb:18:57:d9:e8:52:29:53: eb:2b:a5:0a:e7:7a:2a:99:15:c5:a9:c4:d3:9a:ff: 70:53:2d:e2:b1:9b:af:98:cf:4a:b0:be:7a:48:f8: 35:31:10:1e:98:f1:40:3f:d7:0b:d3:e8:f7:21:ad: 4a:80:08:d5:2c:d3:12:a8:ee:b9:e1:f1:0d:2d:1b: 0c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3F:2C:F5:B4:81:B8:DC:E3:2D:67:35:69:4B:D3:35:FE:E6:36:F1 X509v3 Authority Key Identifier: keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:78:66:79:c2:9f:73:c2:42:34:f5:01:fc:c3:01:e0:48:47: 5a:16:1f:dd:86:68:ba:e4:7f:07:a2:da:58:f7:b5:9f:6a:4b: 7a:f9:4e:89:c1:e5:01:05:0b:e2:7f:e8:d8:0f:a1:9f:ba:6d: 7e:a0:a5:4b:0b:90:9f:5b:2d:da:85:96:aa:12:95:1b:f8:4c: 18:2e:b7:42:c0:4c:33:fb:01:47:bd:d6:30:90:09:3f:c2:04: d3:86:b9:97:4e:d7:73:27:b4:38:92:54:e7:5c:cc:11:97:cd: bf:58:09:0f:c5:17:f4:bc:d5:4a:e0:5c:98:9d:f6:aa:c0:d1: 02:b4:5a:98:36:04:67:c7:89:cd:45:b5:4f:75:56:b9:17:e7: de:02:a8:38:e7:15:cc:39:c0:46:94:4a:ce:93:62:ff:ea:8e: d3:55:3a:8d:3a:e9:91:1d:50:d5:19:21:ee:60:6f:8c:8d:86: 06:bd:a5:1b:3c:fb:76:13:9e:d8:3e:63:86:c0:46:97:00:97: 0e:af:c7:98:88:15:bb:59:c2:95:9a:6d:90:d9:74:32:85:d4: 33:4f:62:22:91:29:93:90:99:b9:39:68:00:70:2c:b1:6a:d4: 7b:f9:5b:69:0f:53:ae:39:66:63:58:dc:e5:ea:a7:9d:20:df: 44:d1:9e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+QuKaFsixWYaVFzkfCIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0 YmZmNjEwHhcNMjUxMjE3MTEwMTQwWhcNMjUxMjE4MTEwMTQwWjAzMTEwLwYDVQQD Eyg2ODNmMmNmNWI0ODFiOGRjZTMyZDY3MzU2OTRiZDMzNWZlZTYzNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthOKD/G4Ssm6UmGZlY7xi9iM6lAM IqbfvWIIyjWSUOzF0IXU5nztY6LShxSGLJncELrZ/hwkSkEQnIra3/XSrd+URv9C iczDngZ23u+xDqQWDzoghF4bTkDXFmhvaP0YcRu/t+NklevxdvevwPluYi14FR5i JsJ5Il4CTQy/LB8hO5esIbK5/HdVy+nRgu4OatJZsj2PTE4sQuV/i6ge30lFx5Ei Bfi+oDfUQD0U0hU5nPm3POL+Bh6D6xhX2ehSKVPrK6UK53oqmRXFqcTTmv9wUy3i sZuvmM9KsL56SPg1MRAemPFAP9cL0+j3Ia1KgAjVLNMSqO654fENLRsMiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg/LPW0gbjc4y1nNWlL0zX+5jbxMB8GA1UdIwQY MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt Mjc1YzVmNzMxYjQ0LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0 LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHhmecKf c8JCNPUB/MMB4EhHWhYf3YZouuR/B6LaWPe1n2pLevlOicHlAQUL4n/o2A+hn7pt fqClSwuQn1st2oWWqhKVG/hMGC63QsBMM/sBR73WMJAJP8IE04a5l07Xcye0OJJU 51zMEZfNv1gJD8UX9LzVSuBcmJ32qsDRArRamDYEZ8eJzUW1T3VWuRfn3gKoOOcV zDnARpRKzpNi/+qO01U6jTrpkR1Q1Rkh7mBvjI2GBr2lGzz7dhOe2D5jhsBGlwCX Dq/HmIgVu1nClZptkNl0MoXUM09iIpEpk5CZuTloAHAssWrUe/lbaQ9TrjlmY1jc 5eqnnSDfRNGeIQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:11 2025 by rpki-client