This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft File: LUNomnY4_3N1kf87JRkYhiNJaVw.mft (raw, json) Hash identifier: s1Fja9jzzDVgjCpQyFxMLoeHwfEqw+GGTCQxzyMrbmU= Subject key identifier: B8:B9:CB:64:33:76:40:74:E5:07:6E:54:63:24:8D:98:5F:67:99:AD Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c Certificate serial: 019B3A223D35A73FBB0F4802F5226CFDE4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 05:01:20 +0000 Manifest this update: Sat 20 Dec 2025 05:01:20 +0000 Manifest next update: Sun 21 Dec 2025 05:01:20 +0000 Files and hashes: 1: Bw0NNJ5G9QC3JaBlS90HbDrOyMk.roa (hash: B3vTdiTwQdK9HN3t4vz56wcZIYmvYpMISVeMsspgV1M=) 2: LUNomnY4_3N1kf87JRkYhiNJaVw.crl (hash: 6iQ9HUxp+RkYXPsrINigaZpMEnZOyWl8k79dR77+piI=) 3: QPojn2lFmOTUjkuvYm4RnM-Y1Yk.roa (hash: NcB8YHOmb6iBxrDVM7Q7nmw/YpVtYSb5GRfh3q07PNI=) 4: bIU1r6-kNYCwjKpYb1XeOOaMSrk.roa (hash: 6q2rVSVFi3ovtZSljouoEUOq4a8bSKXzuMgOvNyKriw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:3d:35:a7:3f:bb:0f:48:02:f5:22:6c:fd:e4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d43689a7638ff737591ff3b251918862349695c Validity Not Before: Dec 20 05:01:20 2025 GMT Not After : Dec 21 05:01:20 2025 GMT Subject: CN=b8b9cb6433764074e5076e5463248d985f6799ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:7f:64:eb:1b:4f:1e:e7:1f:da:d6:6f:54: 1e:b0:df:e1:9b:a8:29:33:76:89:7e:95:42:d5:4d: e2:02:42:00:63:79:9a:8f:e9:12:9a:e9:1a:74:81: 42:57:7f:0f:ab:6d:3f:32:eb:a9:72:d5:82:d7:94: 00:8c:46:d8:43:4a:7a:9c:49:84:8f:c2:00:e8:db: 18:d4:05:0b:ef:e2:6a:79:4f:df:bd:10:8e:80:7a: 32:de:3f:62:d5:30:17:92:41:74:51:1e:2e:87:4b: c3:44:55:64:a3:08:ab:84:22:d6:0a:74:7a:ed:7c: 25:85:c8:87:a6:ae:22:de:28:dc:92:38:11:bb:b7: 9f:18:de:03:ad:3a:6e:7e:64:dd:cb:85:49:4a:8f: 5d:3f:25:c3:16:41:20:52:00:69:1c:b8:c0:69:3d: d3:a2:57:cb:a1:e9:33:f4:66:45:4d:36:5a:6c:e1: 74:53:78:ff:8e:48:cd:f5:a3:0d:78:64:d9:38:4f: a1:56:56:e3:cc:d7:c1:a2:46:e9:7e:08:6a:ac:1a: de:6d:94:1c:e0:28:c5:b6:6b:19:8f:e9:a9:95:61: 32:f1:74:8a:7c:a6:4e:bd:23:94:5d:40:ec:82:dd: 07:f2:1d:33:17:d9:dc:e7:dd:e0:57:32:09:9f:ab: 6f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:CB:64:33:76:40:74:E5:07:6E:54:63:24:8D:98:5F:67:99:AD X509v3 Authority Key Identifier: keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:cc:f1:e0:7f:db:77:4f:d1:35:f0:85:6f:09:e2:a7:2f:e8: 8d:13:cc:99:22:77:c0:39:4f:e6:2c:65:e0:ea:38:f9:62:63: 22:42:20:57:15:1a:a5:ee:82:ab:df:7c:5b:4e:c4:49:b1:a0: 75:6f:8e:e4:fc:51:88:bf:97:81:1e:ff:86:46:53:cc:2b:d9: fd:99:50:f9:64:cc:88:07:12:57:db:1c:c8:fa:20:b8:8e:59: b6:09:db:a7:87:f6:22:68:6a:e3:ed:4e:ed:41:fa:55:d1:2a: af:67:43:c9:5f:6d:7f:ee:cc:60:13:4e:88:cd:18:36:81:a8: 85:f5:74:f5:ec:f5:33:30:98:09:1e:df:77:19:0e:18:d0:3a: 89:3f:14:1e:42:e7:8d:e5:64:4e:43:d3:e5:49:a1:df:fd:e1: f0:f3:6d:5c:6d:23:fd:6d:a8:76:09:22:68:68:97:e0:b7:7b: b7:30:4f:fc:e5:b2:ba:5b:09:a4:53:cd:f5:aa:d7:82:b1:e6: 73:71:22:09:b1:8e:07:a6:80:24:21:44:08:02:c3:87:b8:28: ac:bd:7e:df:42:b5:1e:e0:b5:4b:c4:a0:dc:60:58:58:a2:f1: ad:6f:80:63:c9:11:e5:f6:92:23:f9:19:3f:75:05:80:20:c7: f3:f9:60:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ij01pz+7D0gC9SJs/eT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0 OTY5NWMwHhcNMjUxMjIwMDUwMTIwWhcNMjUxMjIxMDUwMTIwWjAzMTEwLwYDVQQD EyhiOGI5Y2I2NDMzNzY0MDc0ZTUwNzZlNTQ2MzI0OGQ5ODVmNjc5OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G9/ZOsbTx7nH9rWb1QesN/hm6gp M3aJfpVC1U3iAkIAY3maj+kSmukadIFCV38Pq20/MuupctWC15QAjEbYQ0p6nEmE j8IA6NsY1AUL7+JqeU/fvRCOgHoy3j9i1TAXkkF0UR4uh0vDRFVkowirhCLWCnR6 7XwlhciHpq4i3ijckjgRu7efGN4DrTpufmTdy4VJSo9dPyXDFkEgUgBpHLjAaT3T olfLoekz9GZFTTZabOF0U3j/jkjN9aMNeGTZOE+hVlbjzNfBokbpfghqrBrebZQc 4CjFtmsZj+mplWEy8XSKfKZOvSOUXUDsgt0H8h0zF9nc593gVzIJn6tvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi5y2QzdkB05QduVGMkjZhfZ5mtMB8GA1UdIwQY MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt M2EzMDM0YTM5ZWE1LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1 LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxczx4H/b d0/RNfCFbwnipy/ojRPMmSJ3wDlP5ixl4Oo4+WJjIkIgVxUape6Cq998W07ESbGg dW+O5PxRiL+XgR7/hkZTzCvZ/ZlQ+WTMiAcSV9scyPoguI5Ztgnbp4f2Imhq4+1O 7UH6VdEqr2dDyV9tf+7MYBNOiM0YNoGohfV09ez1MzCYCR7fdxkOGNA6iT8UHkLn jeVkTkPT5Umh3/3h8PNtXG0j/W2odgkiaGiX4Ld7tzBP/OWyulsJpFPN9arXgrHm c3EiCbGOB6aAJCFECALDh7gorL1+30K1HuC1S8Sg3GBYWKLxrW+AY8kR5faSI/kZ P3UFgCDH8/lgug== -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:58 2025 by rpki-client