This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft File: luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json) Hash identifier: Hg2tjKHio62WAjOiPSVcuGPELtQkriTiVWhs6rReqUo= Subject key identifier: AA:69:5A:A5:9C:8C:D5:AA:38:43:D0:C7:B1:27:7A:9A:86:34:49:2D Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23 Certificate serial: 019AF54118AD00DFDAC5F53B92A2A55AC363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft Manifest number: 064C Signing time: Sat 06 Dec 2025 20:01:15 +0000 Manifest this update: Sat 06 Dec 2025 20:01:15 +0000 Manifest next update: Sun 07 Dec 2025 20:01:15 +0000 Files and hashes: 1: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: dYfx2IIKdQZRXzvzAeKH+isOYxo+NjzeoKUW1HR1z4Y=) 2: vu4Plg05nKKxO7-zyqD-UVbYxtw.roa (hash: VNGXTJm2qjOCVOfzY/Ol932aR/HbK5RQpSPZuClIe/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:18:ad:00:df:da:c5:f5:3b:92:a2:a5:5a:c3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23 Validity Not Before: Dec 6 20:01:15 2025 GMT Not After : Dec 7 20:01:15 2025 GMT Subject: CN=aa695aa59c8cd5aa3843d0c7b1277a9a8634492d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:76:ae:6d:89:48:ea:c4:d8:9a:f5:64:db: ee:ba:93:f5:90:96:e0:0b:e1:99:06:c8:b2:3e:10: 50:09:19:6c:1e:6a:f4:eb:38:99:f7:d4:1a:4f:16: 88:3b:b9:21:3a:0a:77:7c:c4:4b:dd:2c:a9:13:d5: 4e:36:cf:fa:c6:c8:23:ca:48:56:39:0b:13:f2:e2: 49:1e:a2:bb:9a:37:8e:a3:46:8b:6b:b4:b9:0c:d2: a0:4c:c3:ef:fe:aa:a5:9c:3f:85:3e:0e:d6:83:ef: 78:0e:aa:6b:31:17:bb:b8:33:0c:4c:ef:7c:5e:50: 24:c5:32:34:6d:2e:2a:ce:b9:ea:71:08:39:71:ee: d7:34:34:7c:db:bf:d7:66:a3:3d:25:5f:67:9e:ae: 02:a8:bb:5d:ed:cc:fe:91:72:49:1b:97:93:58:ba: b8:de:22:7e:72:03:07:60:55:6a:2c:ab:ac:8b:68: 77:eb:75:4b:8f:36:50:fc:0e:41:cc:2b:d4:ab:44: 1a:cd:a2:c2:02:66:56:9e:93:10:6c:54:54:14:45: 24:2e:c7:3c:1f:fb:46:fc:09:57:bd:6a:8b:55:ee: ab:93:20:ad:e1:5d:7e:37:03:d8:1f:ab:25:38:91: e6:91:16:2f:b2:94:20:52:48:0a:9b:7f:a9:a2:98: 21:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:69:5A:A5:9C:8C:D5:AA:38:43:D0:C7:B1:27:7A:9A:86:34:49:2D X509v3 Authority Key Identifier: keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e2:ec:9c:f3:de:7c:77:04:93:40:70:09:46:11:7b:b7:a6: 18:06:7c:85:b4:66:ae:c6:69:93:c7:57:ae:89:dc:27:c0:db: cb:9b:b3:af:12:6d:d9:59:05:52:ba:17:8f:76:c9:76:6e:ec: ba:4f:b5:02:b4:0d:d7:69:22:74:61:79:ce:25:31:8b:f8:b7: e3:04:60:0c:54:a3:8f:5b:77:de:90:9a:79:2d:76:0d:3e:be: 8d:5d:dc:0c:c4:63:d3:1f:31:30:d6:82:7b:ca:3c:3d:dc:9b: 11:41:52:d7:b2:36:5f:8e:8e:f8:b2:b9:6b:21:25:15:ec:b0: ae:24:39:6b:ca:36:ad:d5:b2:c6:93:7a:f4:9c:f6:04:a8:74: 70:06:7d:81:bd:5d:75:4a:4a:8a:29:15:9e:94:5c:3d:2c:f6: ac:2b:19:0a:de:19:a6:ff:98:f9:ad:d2:ba:9f:fc:3b:d4:41: 62:2a:59:ec:28:ce:d0:ee:7f:f2:f7:e8:43:c3:b4:61:a3:fd: 32:d4:47:b7:4c:d1:4f:95:ba:bc:38:e0:9b:08:9e:66:64:1d: 11:05:fb:46:24:c9:7b:fe:ce:ce:ae:f0:89:24:c3:07:2b:9c: 63:2c:d5:f4:c7:2d:ae:90:22:de:0d:7b:e7:dc:ca:5e:de:8b: 26:15:58:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRitAN/axfU7kqKlWsNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTVhZDUzYmZjNzM4NDBjNDI1NzExYzAxMDQ1MzU3MTA1 N2RjMjMwHhcNMjUxMjA2MjAwMTE1WhcNMjUxMjA3MjAwMTE1WjAzMTEwLwYDVQQD EyhhYTY5NWFhNTljOGNkNWFhMzg0M2QwYzdiMTI3N2E5YTg2MzQ0OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIV2rm2JSOrE2Jr1ZNvuupP1kJbg C+GZBsiyPhBQCRlsHmr06ziZ99QaTxaIO7khOgp3fMRL3SypE9VONs/6xsgjykhW OQsT8uJJHqK7mjeOo0aLa7S5DNKgTMPv/qqlnD+FPg7Wg+94DqprMRe7uDMMTO98 XlAkxTI0bS4qzrnqcQg5ce7XNDR827/XZqM9JV9nnq4CqLtd7cz+kXJJG5eTWLq4 3iJ+cgMHYFVqLKusi2h363VLjzZQ/A5BzCvUq0QazaLCAmZWnpMQbFRUFEUkLsc8 H/tG/AlXvWqLVe6rkyCt4V1+NwPYH6slOJHmkRYvspQgUkgKm3+popghZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKppWqWcjNWqOEPQx7EnepqGNEktMB8GA1UdIwQY MBaAFJblrVO/xzhAxCVxHAEEU1cQV9wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQt ZWY5YTU4NGJkMTEzLzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8yZDhlNmMtNjllMi00N2NiLWJmOGQtZWY5YTU4NGJkMTEz LzEvbHVXdFU3X0hPRURFSlhFY0FRUlRWeEJYM0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceLsnPPe fHcEk0BwCUYRe7emGAZ8hbRmrsZpk8dXroncJ8Dby5uzrxJt2VkFUroXj3bJdm7s uk+1ArQN12kidGF5ziUxi/i34wRgDFSjj1t33pCaeS12DT6+jV3cDMRj0x8xMNaC e8o8PdybEUFS17I2X46O+LK5ayElFeywriQ5a8o2rdWyxpN69Jz2BKh0cAZ9gb1d dUpKiikVnpRcPSz2rCsZCt4Zpv+Y+a3Sup/8O9RBYipZ7CjO0O5/8vfoQ8O0YaP9 MtRHt0zRT5W6vDjgmwieZmQdEQX7RiTJe/7Ozq7wiSTDByucYyzV9MctrpAi3g17 59zKXt6LJhVYUA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:02:45 2025 by rpki-client