This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json) Hash identifier: dhen2XP7fPjp86YRYQoIZxcuXt6KpROHuuKaRRjZqbI= Subject key identifier: 77:31:AD:23:2F:72:27:47:87:AB:BC:56:D6:60:BD:F1:F2:41:72:20 Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B3721129A5BFD65EFCA25D8EE3B028F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft Manifest number: 07F0 Signing time: Fri 19 Dec 2025 15:01:12 +0000 Manifest this update: Fri 19 Dec 2025 15:01:12 +0000 Manifest next update: Sat 20 Dec 2025 15:01:12 +0000 Files and hashes: 1: 87B1R1Ly07iN_VRjdrgxFYLtl5w.roa (hash: 3ih93qEnHHLCi18p/5kWwbmQNsTRHDDhN4fxQjWgGu8=) 2: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: m7mT2SwPGqEULA78MjDO9EOYrUUVp3CAA75IDSmliNE=) 3: TWakFFxyHlxGlKeAOjVcTSyZ6SA.roa (hash: BZq7O+Mhn+xCPfei58CegAajAJORNlD7rbKNI0C8wGU=) 4: dFfIOZTNjmtKOcc4023M78S_S70.roa (hash: 6CGV9j9qdPqI4pKlwtB9DN8T1F/5NX7UDdZenv7Vpak=) 5: wiDHcS0iTsfwm6c97RKRXwFMQDU.roa (hash: 9nPfgHjI+btRAVI2Wt5za4YufA+AcNW7aC+26eTYpiY=) 6: xnJULPv-3bpcn4ABPEe_Bhnb0Ns.roa (hash: qKMg0D26Bdpspxuqyj648E/RMnypwNEK+2p5ZVi5UUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:12:9a:5b:fd:65:ef:ca:25:d8:ee:3b:02:8f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Dec 19 15:01:12 2025 GMT Not After : Dec 20 15:01:12 2025 GMT Subject: CN=7731ad232f72274787abbc56d660bdf1f2417220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:22:39:29:3e:06:23:a7:e3:ac:ad:11:fb: d3:9b:4a:65:4d:9d:e3:b1:28:17:34:04:b2:21:52: 1e:b4:4f:a5:9b:b6:5b:79:95:e3:13:d9:39:36:f5: d0:be:48:be:74:23:38:60:86:11:cd:55:42:e0:08: db:92:54:4c:16:cb:31:6b:9b:30:e3:d0:e6:1e:0f: ce:3d:75:36:94:d2:67:ff:f4:40:be:95:ac:e2:84: 11:d7:1c:2c:dc:6d:c8:53:81:e9:31:b5:32:84:6d: 58:f0:67:56:00:06:7d:a7:45:a1:ec:fc:3a:93:1f: 65:09:fb:7c:73:37:01:e5:8f:a8:f9:c2:97:ea:bc: a7:a4:57:e2:c1:8c:58:71:4d:54:c2:6a:d3:a0:e2: 7c:80:fa:4c:25:a6:9a:2d:ab:c6:59:78:19:9d:db: 77:73:c0:56:2d:63:b6:00:d2:c2:43:8a:19:a5:da: 68:e7:f8:f0:cd:54:6d:1b:aa:b2:2c:17:44:3e:60: fd:28:0c:2a:81:cd:c5:dd:e5:3e:f3:e3:8c:d0:d1: 79:5f:59:ac:5b:16:4f:26:37:48:98:2d:0f:85:0e: 4e:7e:0b:e8:30:15:eb:6e:19:82:0d:80:fd:5a:cf: ed:25:c5:c0:cf:9a:19:3f:1e:e6:08:85:05:a7:95: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:31:AD:23:2F:72:27:47:87:AB:BC:56:D6:60:BD:F1:F2:41:72:20 X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d6:24:eb:5b:53:a2:de:43:75:05:f1:f6:ce:1c:3e:6e:57: b0:da:09:85:be:9e:b5:84:74:19:97:01:3a:ae:8d:3e:48:80: f3:52:d7:7e:c9:d8:67:5b:c9:fa:df:b6:e7:4e:47:3b:20:56: 67:e4:00:2b:57:00:c9:79:5f:d0:b3:41:18:e9:b1:22:af:48: 6f:29:09:07:96:50:5c:65:aa:46:36:b6:92:24:60:2d:ab:02: 17:f4:87:7d:54:30:fc:c6:d0:5c:71:99:62:a7:93:87:ac:bc: 3f:11:65:cb:d2:0e:5f:e3:26:37:97:7f:63:f6:8a:f9:07:48: 5e:b9:77:27:d5:8f:61:90:cb:63:fa:2b:68:57:a8:64:e5:fd: 63:e4:2d:dc:64:a5:c1:23:41:98:07:96:0b:95:a8:99:7f:26: 3c:68:83:17:40:ef:39:3c:db:c7:72:8d:4c:bc:98:ac:ff:47: 55:48:00:5d:e4:15:ed:5d:c8:cc:6f:3f:e9:84:4c:c2:9a:35: 0a:15:e5:f4:d0:60:d5:35:76:0d:5d:92:da:00:40:a5:9d:c6: ff:ae:9a:54:9a:95:5e:46:43:23:43:be:1d:12:28:38:00:a6: 6e:e1:a0:fd:e5:76:57:4b:2f:32:53:8b:ed:e2:4d:10:f5:30: 6e:2f:ef:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IRKaW/1l78ol2O47Ao9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjUxMjE5MTUwMTEyWhcNMjUxMjIwMTUwMTEyWjAzMTEwLwYDVQQD Eyg3NzMxYWQyMzJmNzIyNzQ3ODdhYmJjNTZkNjYwYmRmMWYyNDE3MjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMgiOSk+BiOn46ytEfvTm0plTZ3j sSgXNASyIVIetE+lm7ZbeZXjE9k5NvXQvki+dCM4YIYRzVVC4AjbklRMFssxa5sw 49DmHg/OPXU2lNJn//RAvpWs4oQR1xws3G3IU4HpMbUyhG1Y8GdWAAZ9p0Wh7Pw6 kx9lCft8czcB5Y+o+cKX6rynpFfiwYxYcU1UwmrToOJ8gPpMJaaaLavGWXgZndt3 c8BWLWO2ANLCQ4oZpdpo5/jwzVRtG6qyLBdEPmD9KAwqgc3F3eU+8+OM0NF5X1ms WxZPJjdImC0PhQ5OfgvoMBXrbhmCDYD9Ws/tJcXAz5oZPx7mCIUFp5UDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcxrSMvcidHh6u8VtZgvfHyQXIgMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9Yk61tT ot5DdQXx9s4cPm5XsNoJhb6etYR0GZcBOq6NPkiA81LXfsnYZ1vJ+t+2505HOyBW Z+QAK1cAyXlf0LNBGOmxIq9IbykJB5ZQXGWqRja2kiRgLasCF/SHfVQw/MbQXHGZ YqeTh6y8PxFly9IOX+MmN5d/Y/aK+QdIXrl3J9WPYZDLY/oraFeoZOX9Y+Qt3GSl wSNBmAeWC5WomX8mPGiDF0DvOTzbx3KNTLyYrP9HVUgAXeQV7V3IzG8/6YRMwpo1 ChXl9NBg1TV2DV2S2gBApZ3G/66aVJqVXkZDI0O+HRIoOACmbuGg/eV2V0svMlOL 7eJNEPUwbi/vrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:03 2025 by rpki-client