This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json) Hash identifier: 6n47KRRrWsEQIYPVUU0oNll4UTnKKDh2DYhZaOOpa58= Subject key identifier: 47:1B:C0:C2:A7:EC:6B:09:A7:9A:A0:7B:91:74:CD:38:BA:6B:C8:80 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B710FF5F0CC1084A436CC8751F2896285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft Manifest number: 080E Signing time: Tue 30 Dec 2025 21:00:29 +0000 Manifest this update: Tue 30 Dec 2025 21:00:29 +0000 Manifest next update: Wed 31 Dec 2025 21:00:29 +0000 Files and hashes: 1: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=) 2: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 09Q61bqoWwmb752O4LBau1rt3GfSciLpwqMD6Y6BKGs=) 3: TWakFFxyHlxGlKeAOjVcTSyZ6SA.roa (hash: BZq7O+Mhn+xCPfei58CegAajAJORNlD7rbKNI0C8wGU=) 4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=) 5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=) 6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:f5:f0:cc:10:84:a4:36:cc:87:51:f2:89:62:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Dec 30 21:00:29 2025 GMT Not After : Dec 31 21:00:29 2025 GMT Subject: CN=471bc0c2a7ec6b09a79aa07b9174cd38ba6bc880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:e8:6a:64:db:00:f4:49:85:f7:3b:1f:69: 00:72:12:65:9e:88:a4:06:e8:fd:ef:53:3f:92:d8: 9a:b6:37:fd:37:bf:d9:f1:c3:76:d9:6c:91:fe:1b: 91:31:b3:7f:50:77:8f:a5:db:4b:ce:9d:ca:14:e9: 21:5b:4f:ff:10:7c:6b:eb:7f:51:8a:95:27:61:82: eb:40:d5:2d:5c:3c:86:06:4d:cd:a8:74:7a:2b:4d: 76:c8:ed:a2:ee:e9:78:ec:a7:ab:cc:b1:a4:79:f4: e4:cf:6a:74:ca:80:f9:32:89:26:c3:a0:b3:6a:01: 12:d2:31:5b:72:18:bd:74:df:e6:be:35:d9:d1:c4: 72:9f:46:82:d7:b9:55:47:2e:cd:f8:07:4e:54:d8: 58:19:5a:7b:ec:b5:2c:7e:0e:29:f3:6d:18:cb:fc: 04:df:9f:48:90:22:cf:20:3d:ca:70:a4:a0:d4:1d: 66:a3:e9:9a:21:79:7b:68:78:30:0c:7f:86:1f:9e: db:50:83:4b:49:0c:a6:c2:7d:7b:22:74:b6:df:26: 2f:31:4f:f4:a5:be:d6:e4:8e:b1:7a:01:fc:86:48: e4:9f:c1:20:e4:93:7e:09:ec:01:75:70:3d:af:7a: 64:80:5f:e0:d6:52:7c:96:5c:a3:58:37:d1:74:92: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:C0:C2:A7:EC:6B:09:A7:9A:A0:7B:91:74:CD:38:BA:6B:C8:80 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:88:4e:26:79:ae:e0:20:0d:cf:e1:08:38:e0:25:74:5b:87: cf:84:81:06:bd:eb:90:64:1b:c2:49:56:6b:2e:2d:0f:28:72: bb:c2:7d:9a:3c:b3:4d:10:38:14:5a:dd:82:5d:cd:71:ea:17: c8:0e:76:bb:dd:d8:43:bc:0e:04:64:5a:87:6a:ca:1d:34:31: 1a:dc:3a:23:ed:c7:ff:02:54:6d:1a:41:bd:0e:76:1d:8c:9c: 73:34:91:24:5b:da:f1:21:1b:87:69:e7:47:79:ad:d5:eb:fd: 4a:b9:b3:05:40:31:b9:96:90:18:0c:f2:1c:98:a7:5b:26:8e: cd:6e:24:a4:18:8d:62:cf:a7:29:e1:0c:bb:41:10:13:6b:9c: b5:0b:d9:40:b3:32:ca:db:0a:72:7c:80:d9:78:39:66:83:14: c0:c6:be:8e:4c:6a:bf:bd:99:ea:97:81:e5:27:83:72:86:49: 4c:79:57:7f:1b:9a:af:db:12:20:1a:d6:94:81:0b:1b:ca:94: 4c:c8:67:2a:fa:31:53:5f:14:a1:ac:bc:ce:96:9d:60:38:ec: 5e:11:de:fb:0f:9b:00:57:90:9e:0e:15:82:8b:5d:5f:ae:b7: b4:15:15:26:c9:d0:09:79:28:ce:47:f1:d9:19:af:d3:ca:4c: 45:8b:24:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD/XwzBCEpDbMh1HyiWKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjUxMjMwMjEwMDI5WhcNMjUxMjMxMjEwMDI5WjAzMTEwLwYDVQQD Eyg0NzFiYzBjMmE3ZWM2YjA5YTc5YWEwN2I5MTc0Y2QzOGJhNmJjODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUjoamTbAPRJhfc7H2kAchJlnoik Buj971M/ktiatjf9N7/Z8cN22WyR/huRMbN/UHePpdtLzp3KFOkhW0//EHxr639R ipUnYYLrQNUtXDyGBk3NqHR6K012yO2i7ul47KerzLGkefTkz2p0yoD5Mokmw6Cz agES0jFbchi9dN/mvjXZ0cRyn0aC17lVRy7N+AdOVNhYGVp77LUsfg4p820Yy/wE 359IkCLPID3KcKSg1B1mo+maIXl7aHgwDH+GH57bUINLSQymwn17InS23yYvMU/0 pb7W5I6xegH8hkjkn8Eg5JN+CewBdXA9r3pkgF/g1lJ8llyjWDfRdJIb7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcbwMKn7GsJp5qge5F0zTi6a8iAMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYhOJnmu 4CANz+EIOOAldFuHz4SBBr3rkGQbwklWay4tDyhyu8J9mjyzTRA4FFrdgl3NceoX yA52u93YQ7wOBGRah2rKHTQxGtw6I+3H/wJUbRpBvQ52HYycczSRJFva8SEbh2nn R3mt1ev9SrmzBUAxuZaQGAzyHJinWyaOzW4kpBiNYs+nKeEMu0EQE2uctQvZQLMy ytsKcnyA2Xg5ZoMUwMa+jkxqv72Z6peB5SeDcoZJTHlXfxuar9sSIBrWlIELG8qU TMhnKvoxU18Uoay8zpadYDjsXhHe+w+bAFeQng4VgotdX663tBUVJsnQCXkozkfx 2Rmv08pMRYsk1g== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:12 2025 by rpki-client