This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json) Hash identifier: eaooSdndE/8+APUAvRIJ3XyDgl1CYNilcNCFUJTFx3U= Subject key identifier: AC:C8:2A:FA:55:AE:07:8E:33:A2:DE:A5:B6:DD:FD:E5:7A:9D:1F:1A Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Certificate serial: 019AF2094FB01F1E7C66E51A5D827A839AB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft Manifest number: 14E7 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: az8WVhJe9bYdfZvkEYW/sgTsFLuMtI2mGT71Z+EeFVs=) 2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4f:b0:1f:1e:7c:66:e5:1a:5d:82:7a:83:9a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61 Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=acc82afa55ae078e33a2dea5b6ddfde57a9d1f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:99:bf:a2:e6:90:8e:21:3b:97:8a:2d:ac:53: 7a:11:d8:16:c3:32:24:dc:12:43:19:6b:6e:9a:a6: 74:f5:39:10:a3:06:8b:56:da:d8:5e:c7:5d:d7:79: ba:b5:7a:16:2a:04:05:45:54:3f:a8:b8:89:32:33: 17:a3:89:42:23:b6:23:9c:7c:a1:57:49:bc:b0:ed: 10:71:ed:77:8e:7e:53:53:d4:bf:b7:5a:b7:98:be: 3d:2b:47:ea:88:a3:b1:9f:ee:64:25:b9:48:ef:7a: c3:93:7f:70:7c:8f:d8:ed:d7:3d:19:2b:cd:f2:64: 2b:a7:35:b4:e8:41:77:d6:c9:a4:b8:ce:0d:4a:e0: 46:24:af:d0:d4:cb:d4:f9:8d:b9:39:6d:1d:40:ef: c7:60:ac:fd:07:fb:c5:3b:c9:8c:2c:6c:12:94:8e: 37:83:31:49:02:53:f7:21:6f:a3:1d:25:19:a4:f2: b9:f2:63:27:71:fd:45:52:3d:18:24:c3:a7:6f:68: 1b:99:c7:0b:b8:80:e7:9f:39:3f:8c:07:fd:e0:ac: 89:90:dc:cc:4f:c1:24:13:83:71:da:ae:5c:c0:02: 14:6d:18:dd:f3:b8:11:85:2f:02:12:15:2a:7f:dc: a3:5a:8b:86:86:51:ce:d9:49:5a:e1:8c:a6:29:01: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:2A:FA:55:AE:07:8E:33:A2:DE:A5:B6:DD:FD:E5:7A:9D:1F:1A X509v3 Authority Key Identifier: keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:cf:04:45:e7:62:bd:ba:0a:a7:d1:49:8f:d5:14:10:5d:60: 84:d8:de:08:f9:ef:50:0f:26:43:69:e7:cb:41:e5:a1:81:85: 64:20:14:cc:4d:95:ae:5c:b7:5f:5a:63:26:a2:98:83:8c:ed: 02:d3:50:c2:aa:9f:07:24:3a:e5:40:d8:1e:48:49:8f:1d:17: b6:db:3e:32:2d:69:66:70:f2:f5:81:4f:91:89:64:92:70:f0: 44:e6:8e:a7:a3:a3:0b:28:5a:11:2b:85:6e:1d:e2:02:45:d3: 84:c7:1d:1a:17:4c:23:b6:f0:b6:61:f1:0f:0f:fd:f6:8d:f7: 05:c9:5d:68:70:1e:21:86:aa:f8:27:00:5c:41:9a:11:61:59: 1e:ac:8f:aa:a7:d3:6a:59:a2:6a:4b:c8:03:b6:2a:a9:2f:d9: 49:1c:00:0d:a7:25:85:9b:50:87:d8:a6:16:de:a3:b3:1a:5e: ea:b4:6a:ad:13:87:44:e8:33:1d:fb:c1:b6:3c:ea:d2:1d:46: 2a:14:fb:e9:b6:26:f9:0c:26:55:6e:4b:23:8d:d2:b0:57:7e: 4a:ab:61:9d:83:9a:d3:40:79:42:7e:b8:8a:d8:01:af:9b:bc: a6:69:99:b7:49:ea:80:0d:7c:70:67:93:57:dc:4e:14:15:93: d7:49:a9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCU+wHx58ZuUaXYJ6g5q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YjUzYjg2ZWIxZjE5ZDBhZTdjMDBiMTMyZTk3YzAzYTk0 YmZmNjEwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EyhhY2M4MmFmYTU1YWUwNzhlMzNhMmRlYTViNmRkZmRlNTdhOWQxZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Jm/ouaQjiE7l4otrFN6EdgWwzIk 3BJDGWtumqZ09TkQowaLVtrYXsdd13m6tXoWKgQFRVQ/qLiJMjMXo4lCI7YjnHyh V0m8sO0Qce13jn5TU9S/t1q3mL49K0fqiKOxn+5kJblI73rDk39wfI/Y7dc9GSvN 8mQrpzW06EF31smkuM4NSuBGJK/Q1MvU+Y25OW0dQO/HYKz9B/vFO8mMLGwSlI43 gzFJAlP3IW+jHSUZpPK58mMncf1FUj0YJMOnb2gbmccLuIDnnzk/jAf94KyJkNzM T8EkE4Nx2q5cwAIUbRjd87gRhS8CEhUqf9yjWouGhlHO2Ula4YymKQHSywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzIKvpVrgeOM6Lepbbd/eV6nR8aMB8GA1UdIwQY MBaAFJi1O4brHxnQrnwAsTLpfAOpS/9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUt Mjc1YzVmNzMxYjQ0LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZmI0NjgtZmJjNS00YTU3LWE3ZmUtMjc1YzVmNzMxYjQ0 LzEvbUxVN2h1c2ZHZEN1ZkFDeE11bDhBNmxMXzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU88ERedi vboKp9FJj9UUEF1ghNjeCPnvUA8mQ2nny0HloYGFZCAUzE2Vrly3X1pjJqKYg4zt AtNQwqqfByQ65UDYHkhJjx0Xtts+Mi1pZnDy9YFPkYlkknDwROaOp6OjCyhaESuF bh3iAkXThMcdGhdMI7bwtmHxDw/99o33BcldaHAeIYaq+CcAXEGaEWFZHqyPqqfT almiakvIA7YqqS/ZSRwADaclhZtQh9imFt6jsxpe6rRqrROHROgzHfvBtjzq0h1G KhT76bYm+QwmVW5LI43SsFd+SqthnYOa00B5Qn64itgBr5u8pmmZt0nqgA18cGeT V9xOFBWT10mpog== -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:24 2025 by rpki-client