This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json) Hash identifier: QlEP1HGrUssguBZRXcG6cS6LDWjTIsiwrDHLsRfVwAE= Subject key identifier: EC:E8:87:AD:6C:96:56:4E:E8:35:86:E8:81:33:4C:35:06:2C:85:DD Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Certificate serial: 019AF12D87E0ABEA2CED1C5DB1CD600B28CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft Manifest number: 13D7 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=) 2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: +sG/DbfoaRFt4Bk9SdrRfp01slSNbyN1fdKSJqQ+fhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:e0:ab:ea:2c:ed:1c:5d:b1:cd:60:0b:28:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=ece887ad6c96564ee83586e881334c35062c85dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:df:a4:69:b4:24:7f:b1:99:ef:03:51:77:c1: 10:96:29:9d:67:29:9b:61:85:06:a3:d5:5e:24:70: 25:c5:df:a4:84:c4:57:f8:56:15:74:ae:91:27:75: 80:83:89:45:5e:0f:ee:b3:25:a8:e9:f2:e3:ff:fc: 82:4a:cb:45:a6:e1:42:f1:eb:48:38:50:fd:c8:5d: e2:58:02:e1:ce:29:7b:d8:9e:55:52:4c:a6:23:ec: 91:92:3e:24:f2:df:df:04:b0:0d:d1:11:2a:3b:be: 23:19:f4:72:96:52:3c:ed:74:81:2a:d5:54:4d:89: 30:33:c5:83:d0:06:15:49:08:2f:53:3f:2b:b7:ab: 1e:c3:90:8a:fd:6c:62:39:92:24:79:75:e1:12:1c: 32:b9:3c:b9:2f:96:b2:8e:6d:ab:b2:b3:de:0a:4b: 2e:ab:34:7f:e0:1a:2d:e6:76:8a:a0:db:85:b1:b4: 30:19:e4:f6:30:48:42:20:74:e2:a2:2e:bc:06:c4: 22:68:a0:99:b2:4f:e0:9b:d8:71:6f:0e:d2:f0:86: a5:df:c0:a3:ba:ed:63:ce:9a:bd:b4:ed:08:3c:7e: 66:0b:a3:cc:fd:82:90:7d:3f:11:39:f9:7f:11:2d: 71:e8:62:08:4c:b1:c0:6f:6f:00:ff:b4:0d:23:68: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E8:87:AD:6C:96:56:4E:E8:35:86:E8:81:33:4C:35:06:2C:85:DD X509v3 Authority Key Identifier: keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:53:ba:13:11:8e:e2:5d:ff:f1:75:c5:34:5b:45:39:5f:c8: df:14:6e:37:f9:56:f5:aa:bb:9c:0b:d8:29:70:72:cf:94:d1: 3e:6b:6b:0e:8d:34:0e:3d:80:c0:e7:bd:02:4d:a3:06:4c:b4: cd:53:11:d9:5b:a5:87:77:f5:47:41:98:14:02:4d:46:91:4e: ff:3b:6c:6d:54:cd:4e:20:64:f7:0e:a8:0e:d8:64:14:d5:e6: 78:0b:ed:22:af:f2:c0:e1:f7:5a:e3:8d:59:f9:e9:e5:3e:91: f1:8e:58:ed:7b:dc:7b:ad:83:1b:17:6a:fe:35:59:63:34:05: 7e:27:1a:6b:39:ac:b0:be:cc:72:96:d6:48:05:79:fb:f2:21: 54:e5:8a:ab:9f:80:46:39:a3:8f:7e:e8:dc:4d:c7:1d:b4:a5: 41:0e:02:3d:b6:1f:bd:2d:58:67:35:bc:de:cc:6d:40:d0:30: a6:c6:c4:73:7b:27:b1:6e:ee:f7:17:16:70:31:11:20:79:0b: 17:ad:b5:61:9b:ff:42:24:c8:bc:4c:ff:54:7a:58:ee:fa:90: 5f:19:2e:92:0c:75:f6:4e:76:5a:c9:9a:80:bb:2a:06:37:18: 78:45:c2:13:5b:ef:1d:ca:f2:09:dd:e9:9a:26:5a:6a:90:77: ad:38:bc:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYfgq+os7Rxdsc1gCyjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0 NGM3ZjcwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EyhlY2U4ODdhZDZjOTY1NjRlZTgzNTg2ZTg4MTMzNGMzNTA2MmM4NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid+kabQkf7GZ7wNRd8EQlimdZymb YYUGo9VeJHAlxd+khMRX+FYVdK6RJ3WAg4lFXg/usyWo6fLj//yCSstFpuFC8etI OFD9yF3iWALhzil72J5VUkymI+yRkj4k8t/fBLAN0REqO74jGfRyllI87XSBKtVU TYkwM8WD0AYVSQgvUz8rt6sew5CK/WxiOZIkeXXhEhwyuTy5L5ayjm2rsrPeCksu qzR/4Bot5naKoNuFsbQwGeT2MEhCIHTioi68BsQiaKCZsk/gm9hxbw7S8Ial38Cj uu1jzpq9tO0IPH5mC6PM/YKQfT8ROfl/ES1x6GIITLHAb28A/7QNI2gtKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzoh61sllZO6DWG6IEzTDUGLIXdMB8GA1UdIwQY MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2 LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFO6ExGO 4l3/8XXFNFtFOV/I3xRuN/lW9aq7nAvYKXByz5TRPmtrDo00Dj2AwOe9Ak2jBky0 zVMR2Vulh3f1R0GYFAJNRpFO/ztsbVTNTiBk9w6oDthkFNXmeAvtIq/ywOH3WuON Wfnp5T6R8Y5Y7Xvce62DGxdq/jVZYzQFficaazmssL7McpbWSAV5+/IhVOWKq5+A Rjmjj37o3E3HHbSlQQ4CPbYfvS1YZzW83sxtQNAwpsbEc3snsW7u9xcWcDERIHkL F621YZv/QiTIvEz/VHpY7vqQXxkukgx19k52WsmagLsqBjcYeEXCE1vvHcryCd3p miZaapB3rTi8rA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:57 2025 by rpki-client