This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft File: LuVtTXsdGgbOifdG95tlbHNIxSU.mft (raw, json) Hash identifier: HnR8XSzpWD1SPnseVbinEhssbeZeMhKiI4/aCEv63PM= Subject key identifier: DF:D7:D7:1B:B2:78:48:4A:F6:CA:82:B5:FB:C4:65:85:AF:77:A8:3C Authority key identifier: 2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 Certificate issuer: /CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525 Certificate serial: 019B3FECF4DFC9F5721A03798BD1787BEF03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 08:00:52 +0000 Manifest this update: Sun 21 Dec 2025 08:00:52 +0000 Manifest next update: Mon 22 Dec 2025 08:00:52 +0000 Files and hashes: 1: 2aLxopPcHENcfLMPsouZcp1_F6M.roa (hash: h4R/reMNBt8uBqG3DatHK1fJyHrvX4LbUEuuPBCoJK8=) 2: LuVtTXsdGgbOifdG95tlbHNIxSU.crl (hash: w3Xu8VHorh6TOAH+Q3TQ14vj+79wg96EiRBuosyys84=) 3: VUTE9O5_hq_bVZqW49cK8Uyj9bo.roa (hash: xI9AJIQruyMmhbpTp5z9YUSoSRn5ytxFSzSALijAUX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:f4:df:c9:f5:72:1a:03:79:8b:d1:78:7b:ef:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee56d4d7b1d1a06ce89f746f79b656c7348c525 Validity Not Before: Dec 21 08:00:52 2025 GMT Not After : Dec 22 08:00:52 2025 GMT Subject: CN=dfd7d71bb278484af6ca82b5fbc46585af77a83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:e4:5d:67:2a:cc:06:77:df:11:65:2e:2f: 42:c1:b3:7d:34:b0:e7:e1:c3:e9:3b:cb:01:d2:ec: 7c:9c:d9:f8:3e:8c:18:66:02:72:bc:03:1f:48:7e: 6b:d6:c4:63:5d:11:90:80:e2:7c:e1:d9:65:98:8a: 31:27:59:c4:a4:0c:07:00:c5:a6:79:13:fc:7c:b8: ae:b9:65:e7:69:a6:d2:0b:d1:d6:be:cb:91:25:d6: fb:f6:39:6e:9e:cb:19:dc:24:04:4a:38:db:d0:3f: 0d:74:ac:40:12:d0:d9:ae:c2:66:b4:40:25:24:6d: fa:ce:85:8f:1e:a0:19:e4:17:6a:e9:89:0e:ed:6e: 62:e3:5d:76:35:1a:67:06:76:2f:4c:84:61:09:98: d0:35:1d:3f:7d:56:13:1c:e1:6b:90:f5:5e:fb:08: 13:44:01:e0:c2:ee:7c:8a:b5:54:0f:4c:ae:f2:ce: ee:dd:95:90:1e:6b:e7:65:b5:24:1e:b6:6b:f1:6b: d0:7f:44:e2:a7:be:35:58:0d:6c:22:6e:7e:48:d3: d5:15:a7:99:24:e0:06:59:f9:45:0f:dc:6d:4e:a1: 45:7d:cb:67:83:85:47:69:bd:4e:7f:69:d7:1d:49: 6d:64:51:f8:f7:4f:1f:28:44:00:45:8a:96:ea:58: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D7:D7:1B:B2:78:48:4A:F6:CA:82:B5:FB:C4:65:85:AF:77:A8:3C X509v3 Authority Key Identifier: keyid:2E:E5:6D:4D:7B:1D:1A:06:CE:89:F7:46:F7:9B:65:6C:73:48:C5:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuVtTXsdGgbOifdG95tlbHNIxSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e0b67e-2690-4a88-9d16-22e98de26106/1/LuVtTXsdGgbOifdG95tlbHNIxSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4f:7e:73:49:eb:01:aa:60:33:80:be:39:4d:85:f9:2e:22: 59:58:98:b3:c1:53:1d:45:e7:f1:21:14:c2:c0:a1:29:f9:55: 9c:9b:e7:9b:d6:d2:fa:28:52:43:c5:74:0e:97:5e:cd:53:96: f4:80:3e:ad:32:5a:e4:ff:0f:f0:6c:2b:1c:0a:52:34:8b:61: 75:2a:6b:4f:0f:95:c7:13:b0:dc:c1:a9:6c:00:c6:17:61:a7: 7f:03:df:b2:e2:07:c2:4f:55:06:96:5c:ee:91:9d:3a:b7:23: 20:1b:74:64:c7:af:19:4d:c9:6e:55:38:87:57:79:dd:23:db: 19:de:d3:38:81:de:a8:fd:16:15:10:4c:06:66:b6:29:c6:03: 48:56:fd:59:82:55:93:27:9b:ba:a5:c8:06:fa:3b:6e:69:3f: 04:b6:1f:a1:9f:47:c3:b3:65:6e:06:83:cd:d6:4e:34:0f:f8: 32:eb:36:e9:b2:6d:8f:51:82:2d:14:2d:05:d9:13:ab:5b:30: b5:24:a7:57:66:a0:7c:c6:3b:20:01:e3:e6:4b:ab:7b:82:13: 6c:2c:95:c5:ed:ec:74:a7:be:9d:4e:af:0b:89:75:30:1a:08: 08:fd:70:3e:8f:72:14:39:d8:98:38:df:0c:03:ce:f5:c8:4f: e8:f0:6f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7PTfyfVyGgN5i9F4e+8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTU2ZDRkN2IxZDFhMDZjZTg5Zjc0NmY3OWI2NTZjNzM0 OGM1MjUwHhcNMjUxMjIxMDgwMDUyWhcNMjUxMjIyMDgwMDUyWjAzMTEwLwYDVQQD EyhkZmQ3ZDcxYmIyNzg0ODRhZjZjYTgyYjVmYmM0NjU4NWFmNzdhODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywrkXWcqzAZ33xFlLi9CwbN9NLDn 4cPpO8sB0ux8nNn4PowYZgJyvAMfSH5r1sRjXRGQgOJ84dllmIoxJ1nEpAwHAMWm eRP8fLiuuWXnaabSC9HWvsuRJdb79jlunssZ3CQESjjb0D8NdKxAEtDZrsJmtEAl JG36zoWPHqAZ5Bdq6YkO7W5i4112NRpnBnYvTIRhCZjQNR0/fVYTHOFrkPVe+wgT RAHgwu58irVUD0yu8s7u3ZWQHmvnZbUkHrZr8WvQf0Tip741WA1sIm5+SNPVFaeZ JOAGWflFD9xtTqFFfctng4VHab1Of2nXHUltZFH4908fKEQARYqW6lizQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/X1xuyeEhK9sqCtfvEZYWvd6g8MB8GA1UdIwQY MBaAFC7lbU17HRoGzon3RvebZWxzSMUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYt MjJlOThkZTI2MTA2LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lMGI2N2UtMjY5MC00YTg4LTlkMTYtMjJlOThkZTI2MTA2 LzEvTHVWdFRYc2RHZ2JPaWZkRzk1dGxiSE5JeFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKk9+c0nr AapgM4C+OU2F+S4iWViYs8FTHUXn8SEUwsChKflVnJvnm9bS+ihSQ8V0DpdezVOW 9IA+rTJa5P8P8GwrHApSNIthdSprTw+VxxOw3MGpbADGF2GnfwPfsuIHwk9VBpZc 7pGdOrcjIBt0ZMevGU3JblU4h1d53SPbGd7TOIHeqP0WFRBMBma2KcYDSFb9WYJV kyebuqXIBvo7bmk/BLYfoZ9Hw7NlbgaDzdZONA/4Mus26bJtj1GCLRQtBdkTq1sw tSSnV2agfMY7IAHj5kure4ITbCyVxe3sdKe+nU6vC4l1MBoICP1wPo9yFDnYmDjf DAPO9chP6PBvPg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:41 2025 by rpki-client