This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json) Hash identifier: Qpy09iKO38ubTgoi9CxGLO7akBrF3OkiDaFJ2RZ0Ogw= Subject key identifier: 27:8F:0D:20:6D:E2:5F:92:A4:18:83:25:F2:62:FF:B0:EF:3B:D1:86 Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a Certificate serial: 019AF1D1D7E9E23F871C10E852954EDB0796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft Manifest number: 0656 Signing time: Sat 06 Dec 2025 04:00:52 +0000 Manifest this update: Sat 06 Dec 2025 04:00:52 +0000 Manifest next update: Sun 07 Dec 2025 04:00:52 +0000 Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=) 2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: f1jK29GBQfZ3msiIsD35Zr6ks5x5UD8ZrnSgMq/xQuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d7:e9:e2:3f:87:1c:10:e8:52:95:4e:db:07:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a Validity Not Before: Dec 6 04:00:52 2025 GMT Not After : Dec 7 04:00:52 2025 GMT Subject: CN=278f0d206de25f92a4188325f262ffb0ef3bd186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:0a:af:f5:01:bc:46:9b:02:d7:57:87:d9: dd:f5:86:cf:d9:6b:95:de:22:40:ef:17:4f:22:1c: 40:78:52:97:aa:c8:2e:5d:15:2f:08:a9:8a:af:50: 11:e6:b6:8d:a7:0f:19:b0:21:3b:18:0c:8c:de:c7: f6:5a:07:c5:e2:85:6f:97:47:c8:b5:08:6f:5b:aa: 04:35:ba:c4:0a:f2:96:20:0b:d5:ff:d7:24:b6:ee: 28:c4:70:16:6b:6b:eb:73:72:0c:aa:5f:e0:b2:a7: 91:14:08:ce:fb:b4:1b:4b:eb:d4:e8:b7:8a:b3:78: 68:11:4a:30:26:b9:25:2e:66:63:ae:e3:6d:2f:25: db:07:84:b5:ce:99:db:34:85:30:6e:55:4a:a3:38: 1b:33:a8:74:be:57:43:0c:39:60:7e:fa:d6:04:98: da:72:2e:63:fa:c9:b2:d5:84:d9:88:2d:7e:80:cc: c3:9b:e8:64:de:89:a6:b8:16:77:59:2d:19:ab:77: 3d:b0:93:e5:e0:28:bb:dd:78:f4:85:18:66:5d:7f: 2a:10:45:73:75:1e:2b:53:8a:46:78:0d:f1:f5:8d: f6:07:d6:be:e1:b0:ae:7e:96:3a:52:72:f9:71:1e: f0:29:f0:a4:55:d6:a6:f1:a3:3a:38:8d:44:67:79: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8F:0D:20:6D:E2:5F:92:A4:18:83:25:F2:62:FF:B0:EF:3B:D1:86 X509v3 Authority Key Identifier: keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:9b:0d:98:75:d4:f2:9f:a6:30:c0:db:50:ac:ea:c8:96:e6: ce:75:92:23:7d:1f:8c:d5:34:bc:87:af:a2:f5:1e:6c:0c:30: 17:3c:f2:dd:11:d6:e7:dc:71:72:ac:55:ca:09:9a:d8:b9:6f: f6:75:55:97:e7:cc:f1:d9:3b:29:ec:de:38:a7:28:19:01:b5: 5b:68:68:41:2a:15:30:cb:ad:1b:c7:82:c1:f9:21:42:30:19: c9:69:5a:51:b9:85:62:37:46:e4:45:a5:d7:25:bc:ed:72:8f: 9a:c9:ef:19:09:08:0b:10:d9:43:cc:94:9c:8e:29:e6:cf:76: 9c:17:ee:1b:29:63:f5:f0:be:2d:34:c2:0d:28:ac:be:4c:c9: 7e:f0:24:f5:d6:2a:66:4d:d4:61:a8:2e:19:4c:9c:87:9e:37: fd:88:63:9c:60:1c:8a:00:b6:79:ed:ca:98:62:4f:2b:7c:a9: 06:43:1a:fd:8f:ca:5d:73:10:e7:fa:64:f5:1c:3b:d5:8c:a5: 19:ea:c8:e2:93:c6:cf:74:62:ba:25:56:f4:bd:b7:4b:f8:a8: 98:71:19:f6:06:9a:ac:93:06:d7:83:60:5f:ab:b8:4b:1c:f5: dd:1a:69:5d:9e:b5:3f:dc:ee:36:37:67:5d:a5:60:dd:e8:d3: 7b:19:5c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dfp4j+HHBDoUpVO2weWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWRjNjgyYTk0NDAwNTExN2I4ZmViZWQ2ZGM4YmFjMDYw ZjMyOWEwHhcNMjUxMjA2MDQwMDUyWhcNMjUxMjA3MDQwMDUyWjAzMTEwLwYDVQQD EygyNzhmMGQyMDZkZTI1ZjkyYTQxODgzMjVmMjYyZmZiMGVmM2JkMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydEKr/UBvEabAtdXh9nd9YbP2WuV 3iJA7xdPIhxAeFKXqsguXRUvCKmKr1AR5raNpw8ZsCE7GAyM3sf2WgfF4oVvl0fI tQhvW6oENbrECvKWIAvV/9cktu4oxHAWa2vrc3IMql/gsqeRFAjO+7QbS+vU6LeK s3hoEUowJrklLmZjruNtLyXbB4S1zpnbNIUwblVKozgbM6h0vldDDDlgfvrWBJja ci5j+smy1YTZiC1+gMzDm+hk3ommuBZ3WS0Zq3c9sJPl4Ci73Xj0hRhmXX8qEEVz dR4rU4pGeA3x9Y32B9a+4bCufpY6UnL5cR7wKfCkVdam8aM6OI1EZ3n+KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCePDSBt4l+SpBiDJfJi/7DvO9GGMB8GA1UdIwQY MBaAFJbtxoKpRABRF7j+vtbci6wGDzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQt N2Y4YTY3NTBiOGQ3LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQtN2Y4YTY3NTBiOGQ3 LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyZsNmHXU 8p+mMMDbUKzqyJbmznWSI30fjNU0vIevovUebAwwFzzy3RHW59xxcqxVygma2Llv 9nVVl+fM8dk7KezeOKcoGQG1W2hoQSoVMMutG8eCwfkhQjAZyWlaUbmFYjdG5EWl 1yW87XKPmsnvGQkICxDZQ8yUnI4p5s92nBfuGylj9fC+LTTCDSisvkzJfvAk9dYq Zk3UYaguGUych543/YhjnGAcigC2ee3KmGJPK3ypBkMa/Y/KXXMQ5/pk9Rw71Yyl GerI4pPGz3RiuiVW9L23S/iomHEZ9gaarJMG14NgX6u4Sxz13RppXZ61P9zuNjdn XaVg3ejTexlcDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:49 2025 by rpki-client