This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft File: lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft (raw, json) Hash identifier: T4H3br3c37lRVFrt2BMgGJ3jZQmxYsiceX6Z81hc3b8= Subject key identifier: 58:7D:41:6C:B9:ED:EF:80:B6:F0:DB:69:45:DF:D6:99:D0:C0:19:AA Authority key identifier: 95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 Certificate issuer: /CN=954b071a03db5d233d05ab0394548007767f83e7 Certificate serial: 019B3E6C90709A9F57190E583D27D153C050 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft Manifest number: 0800 Signing time: Sun 21 Dec 2025 01:01:00 +0000 Manifest this update: Sun 21 Dec 2025 01:01:00 +0000 Manifest next update: Mon 22 Dec 2025 01:01:00 +0000 Files and hashes: 1: MeHcHEJLI5aJxpbL08K_nBsRPYY.roa (hash: N7FogbwCwinhT6HlieiaEOy7N6CNclRf7G6B1lRFJU0=) 2: lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl (hash: Wx/nJYhIEZYrcQ5EmlelFHCMFwud/6PhyHcYoI9MLlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:90:70:9a:9f:57:19:0e:58:3d:27:d1:53:c0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954b071a03db5d233d05ab0394548007767f83e7 Validity Not Before: Dec 21 01:01:00 2025 GMT Not After : Dec 22 01:01:00 2025 GMT Subject: CN=587d416cb9edef80b6f0db6945dfd699d0c019aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:7e:93:74:0a:07:8e:fa:93:4c:89:24:61: ec:23:5a:59:f5:33:67:74:84:76:f3:e9:4a:bf:33: 5e:31:83:67:35:0f:cb:c0:a5:5c:fe:d9:20:9f:c6: 5c:18:73:50:3b:fb:d4:63:50:c6:1b:8f:73:7c:8e: 52:4c:c3:33:5c:f8:21:68:48:c4:63:74:48:e7:59: c5:f7:2d:04:82:3d:1f:aa:62:f9:3b:c9:3d:ce:da: 1d:28:d3:77:c8:02:e2:7b:b0:64:63:85:51:aa:69: 43:bc:ab:c3:81:48:46:c7:22:e6:b3:6b:4c:75:22: 25:b2:28:01:92:29:e2:b3:4d:f8:21:fb:36:e2:82: d9:e2:48:c9:ab:0a:c2:d7:83:8b:24:f5:13:17:74: 2a:c3:31:55:44:23:77:88:63:0e:76:0d:09:86:15: b0:ae:be:00:02:87:5c:7f:0f:59:79:43:9c:89:21: 02:08:d2:b7:9e:15:a2:ff:9f:02:00:f3:a6:38:2d: e4:bc:59:32:65:d8:83:fd:c4:db:98:53:a5:15:51: 88:ce:33:56:17:c0:b0:e9:64:f5:68:81:58:c6:c4: 54:c6:b1:d8:49:5e:e0:5d:49:b4:fe:ca:c0:fd:6d: 2f:3d:a2:21:8d:d6:0b:df:0c:11:0d:2a:09:4f:fb: bb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7D:41:6C:B9:ED:EF:80:B6:F0:DB:69:45:DF:D6:99:D0:C0:19:AA X509v3 Authority Key Identifier: keyid:95:4B:07:1A:03:DB:5D:23:3D:05:AB:03:94:54:80:07:76:7F:83:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUsHGgPbXSM9BasDlFSAB3Z_g-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/lUsHGgPbXSM9BasDlFSAB3Z_g-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:65:76:c2:b9:28:1e:68:82:50:0b:bf:19:78:3c:57:75:a2: 10:dd:0d:f6:51:c9:94:47:ed:42:b2:54:80:04:b2:cf:3a:bc: 96:c8:a4:13:c2:04:b2:63:ed:16:b3:d4:cc:e8:a9:6a:48:0e: 3e:58:89:17:98:41:b1:9d:f5:4a:57:6f:5a:1d:3f:7d:aa:19: 27:a1:80:e4:0b:04:f0:88:77:d5:02:ac:f7:73:8b:85:e8:3d: e3:0f:82:28:7d:c1:2b:ab:ea:75:b4:78:11:4a:ed:90:4a:2c: b1:96:44:fd:c8:1e:72:87:a9:4d:44:47:2f:ba:48:20:75:b9: 6e:88:7b:6f:0d:1b:46:3f:93:25:f6:3f:b8:53:c4:9b:71:6c: 85:44:69:9b:8b:12:8e:55:d3:39:1e:92:6f:c0:16:1a:ed:b7: a2:8e:b8:00:15:f9:0a:d2:54:36:3c:23:4a:55:ed:da:e2:b7: 53:2c:e2:7b:cc:d4:6c:b8:e2:56:04:ee:6f:60:e3:34:f6:70: ad:85:82:93:d3:c0:6e:dc:84:88:87:0e:b8:ba:02:5a:c3:85: d3:4b:9c:70:e1:6e:aa:4b:c3:72:c5:03:df:09:47:6b:e1:a9: 45:92:1b:c0:d9:d5:3b:6b:31:f5:47:c9:28:ff:9e:fe:a4:b2: e5:bb:fd:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJBwmp9XGQ5YPSfRU8BQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NGIwNzFhMDNkYjVkMjMzZDA1YWIwMzk0NTQ4MDA3NzY3 ZjgzZTcwHhcNMjUxMjIxMDEwMTAwWhcNMjUxMjIyMDEwMTAwWjAzMTEwLwYDVQQD Eyg1ODdkNDE2Y2I5ZWRlZjgwYjZmMGRiNjk0NWRmZDY5OWQwYzAxOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MB+k3QKB476k0yJJGHsI1pZ9TNn dIR28+lKvzNeMYNnNQ/LwKVc/tkgn8ZcGHNQO/vUY1DGG49zfI5STMMzXPghaEjE Y3RI51nF9y0Egj0fqmL5O8k9ztodKNN3yALie7BkY4VRqmlDvKvDgUhGxyLms2tM dSIlsigBkinis034Ifs24oLZ4kjJqwrC14OLJPUTF3QqwzFVRCN3iGMOdg0JhhWw rr4AAodcfw9ZeUOciSECCNK3nhWi/58CAPOmOC3kvFkyZdiD/cTbmFOlFVGIzjNW F8Cw6WT1aIFYxsRUxrHYSV7gXUm0/srA/W0vPaIhjdYL3wwRDSoJT/u73wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh9QWy57e+AtvDbaUXf1pnQwBmqMB8GA1UdIwQY MBaAFJVLBxoD210jPQWrA5RUgAd2f4PnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1Njkt MjY2YWMxMDRmN2I0LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNjQ2MjUtY2I4Yi00OWNiLTg1NjktMjY2YWMxMDRmN2I0 LzEvbFVzSEdnUGJYU005QmFzRGxGU0FCM1pfZy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmV2wrko HmiCUAu/GXg8V3WiEN0N9lHJlEftQrJUgASyzzq8lsikE8IEsmPtFrPUzOipakgO PliJF5hBsZ31SldvWh0/faoZJ6GA5AsE8Ih31QKs93OLheg94w+CKH3BK6vqdbR4 EUrtkEossZZE/cgecoepTURHL7pIIHW5boh7bw0bRj+TJfY/uFPEm3FshURpm4sS jlXTOR6Sb8AWGu23oo64ABX5CtJUNjwjSlXt2uK3Uyzie8zUbLjiVgTub2DjNPZw rYWCk9PAbtyEiIcOuLoCWsOF00uccOFuqkvDcsUD3wlHa+GpRZIbwNnVO2sx9UfJ KP+e/qSy5bv94w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:25 2025 by rpki-client