This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft File: luqmiIUr9hQfUxdoBoMLTRbHZq8.mft (raw, json) Hash identifier: oh2czbVt2dGmcrOzOQsdX7NZLbqCxxrH0z5GBgnDxkc= Subject key identifier: 80:C5:97:FD:46:FB:3D:C0:19:CF:61:F9:10:6B:C5:42:20:65:CA:FF Authority key identifier: 96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF Certificate issuer: /CN=96eaa688852bf6141f53176806830b4d16c766af Certificate serial: 019AF352C718DE35F3A4ACA8EC3109B80C1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft Manifest number: 0117 Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: luqmiIUr9hQfUxdoBoMLTRbHZq8.crl (hash: 8YP5Xx55Vu1shBO9uHdqigalm1PhFR8++XFNA3D9jzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c7:18:de:35:f3:a4:ac:a8:ec:31:09:b8:0c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eaa688852bf6141f53176806830b4d16c766af Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=80c597fd46fb3dc019cf61f9106bc5422065caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:b7:17:d1:eb:79:5b:39:78:e6:3e:f6:04: b0:7a:02:7c:54:e2:c0:6d:10:2c:d5:ef:01:31:3b: cd:68:11:5f:e5:56:b9:cf:f8:19:c1:a5:43:04:9f: 42:13:db:d0:0c:9e:14:a8:45:c8:17:9c:94:9d:21: 8f:a4:2c:be:d1:e2:79:ad:47:13:30:2e:7d:3f:9c: 2b:45:77:77:62:39:1c:e1:8b:1a:d5:c1:25:4a:a3: 4d:69:79:70:fd:9a:37:70:91:16:69:f2:24:09:a9: fb:24:df:0d:5f:38:c4:c5:c4:ac:f8:4b:f2:93:48: ab:98:73:92:cf:a1:13:27:51:3d:dd:9a:e1:27:ce: 4b:31:d8:83:8e:57:a7:55:63:16:32:a4:17:4a:49: 50:2d:76:6a:e9:ba:da:46:fa:0a:e4:af:d2:94:e7: 7f:2f:9d:ec:9d:c6:c7:c0:28:ca:24:7c:62:c1:9e: d9:26:4a:79:75:0a:40:02:86:8d:f4:47:bf:23:57: eb:06:3f:1f:16:21:cc:82:cf:e3:88:44:a5:57:65: 30:12:7f:6b:79:6e:78:2c:09:d3:3e:b5:89:c8:04: 7a:45:7f:42:dc:5b:ad:f6:14:6c:18:bd:f2:79:ba: 84:f2:cd:56:ff:ac:be:b0:ed:08:62:11:b5:15:66: 52:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C5:97:FD:46:FB:3D:C0:19:CF:61:F9:10:6B:C5:42:20:65:CA:FF X509v3 Authority Key Identifier: keyid:96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:04:eb:0f:15:be:b6:63:86:38:74:49:d6:ee:32:26:b7:ed: 18:61:c5:dd:39:f8:44:57:0c:be:e9:45:44:00:36:81:cb:45: fc:ef:28:f9:b4:08:e0:51:f6:85:60:47:a8:c1:3d:c8:3a:09: f0:12:2f:08:43:b4:3b:da:0b:32:34:c4:b6:9c:f6:5a:1d:46: 9e:72:35:84:1b:05:23:2c:0a:4a:fc:a5:5d:2a:b5:9d:ab:90: ac:7d:8e:41:42:f8:89:7a:37:55:bf:e8:a9:b0:3f:23:2d:12: 3e:9f:a9:78:3a:10:71:ba:4b:dd:e9:00:92:2c:9f:c6:3c:75: fc:2f:ca:df:77:e3:3c:2e:a5:3f:bc:5a:1b:ae:59:46:93:98: 17:6e:46:ad:0c:0c:e2:12:9d:7f:ee:10:d3:13:b4:de:6d:83: 4e:ba:59:57:97:a9:51:e6:64:12:30:5b:a9:8e:c4:00:6b:9f: 50:ed:58:f6:c2:a8:fe:f8:f6:d2:e7:b2:56:0d:f7:92:18:7f: 7c:38:63:4d:41:5d:7e:d6:41:23:9f:52:b9:e3:e5:ac:3c:76: 53:8c:62:b6:a5:41:c0:69:b7:30:49:aa:04:fc:ea:70:b2:de: b9:24:3b:d7:9b:db:38:81:43:bb:ec:a8:3c:6c:74:42:28:db: 98:e1:10:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUscY3jXzpKyo7DEJuAweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFhNjg4ODUyYmY2MTQxZjUzMTc2ODA2ODMwYjRkMTZj NzY2YWYwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD Eyg4MGM1OTdmZDQ2ZmIzZGMwMTljZjYxZjkxMDZiYzU0MjIwNjVjYWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9K3F9HreVs5eOY+9gSwegJ8VOLA bRAs1e8BMTvNaBFf5Va5z/gZwaVDBJ9CE9vQDJ4UqEXIF5yUnSGPpCy+0eJ5rUcT MC59P5wrRXd3Yjkc4Ysa1cElSqNNaXlw/Zo3cJEWafIkCan7JN8NXzjExcSs+Evy k0irmHOSz6ETJ1E93ZrhJ85LMdiDjlenVWMWMqQXSklQLXZq6braRvoK5K/SlOd/ L53sncbHwCjKJHxiwZ7ZJkp5dQpAAoaN9Ee/I1frBj8fFiHMgs/jiESlV2UwEn9r eW54LAnTPrWJyAR6RX9C3Fut9hRsGL3yebqE8s1W/6y+sO0IYhG1FWZS1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDFl/1G+z3AGc9h+RBrxUIgZcr/MB8GA1UdIwQY MBaAFJbqpoiFK/YUH1MXaAaDC00Wx2avMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kMjY3MjctYjUxMi00ZDM3LWIwM2Qt NGM0ZjcwNDMzNzQxLzEvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kMjY3MjctYjUxMi00ZDM3LWIwM2QtNGM0ZjcwNDMzNzQx LzEvbHVxbWlJVXI5aFFmVXhkb0JvTUxUUmJIWnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgTrDxW+ tmOGOHRJ1u4yJrftGGHF3Tn4RFcMvulFRAA2gctF/O8o+bQI4FH2hWBHqME9yDoJ 8BIvCEO0O9oLMjTEtpz2Wh1GnnI1hBsFIywKSvylXSq1nauQrH2OQUL4iXo3Vb/o qbA/Iy0SPp+peDoQcbpL3ekAkiyfxjx1/C/K33fjPC6lP7xaG65ZRpOYF25GrQwM 4hKdf+4Q0xO03m2DTrpZV5epUeZkEjBbqY7EAGufUO1Y9sKo/vj20ueyVg33khh/ fDhjTUFdftZBI59SuePlrDx2U4xitqVBwGm3MEmqBPzqcLLeuSQ715vbOIFDu+yo PGx0QijbmOEQNg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:55 2025 by rpki-client