This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft File: luqxm-wiLHBaHrA6gN80FTnZfxQ.mft (raw, json) Hash identifier: HDcXuHo1KydTdqbDgDHJbKcEf1Nq1MTsKJuZXlmN9FI= Subject key identifier: BB:4B:7F:95:D2:F5:71:12:AB:E9:1E:55:09:90:CE:6C:61:C0:0F:9D Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14 Certificate serial: 019B3EDACFC57FBD0D9CA92D912257639309 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 03:01:25 +0000 Manifest this update: Sun 21 Dec 2025 03:01:25 +0000 Manifest next update: Mon 22 Dec 2025 03:01:25 +0000 Files and hashes: 1: blyZeWce4rBJhg8ME28pqKDnfCo.roa (hash: pmP+XETNQkgSAUy5VzGeDOXPtY/M0adsiUhjlBBfT5Y=) 2: luqxm-wiLHBaHrA6gN80FTnZfxQ.crl (hash: Tu6xDWfF3802oZt/EYr6VIV0J6kLhYk+WPw0CSRJoqA=) 3: qQSd71qvgVE6AEMVf4NRXim3Uqc.roa (hash: pYH5A4ODtsYFff8vY+9foyO/zYwlIDjtHW60f2mDcu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:cf:c5:7f:bd:0d:9c:a9:2d:91:22:57:63:93:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14 Validity Not Before: Dec 21 03:01:25 2025 GMT Not After : Dec 22 03:01:25 2025 GMT Subject: CN=bb4b7f95d2f57112abe91e550990ce6c61c00f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:af:3b:ab:d1:1d:1b:86:9b:2b:4e:a7:a8: db:f2:0e:5c:66:e1:8d:5c:57:7f:a3:1e:96:86:33: 16:68:7c:d5:c7:24:9b:d8:cf:6a:8f:f0:f0:ec:1f: 58:a7:4d:31:af:d1:88:c0:dc:32:c6:eb:04:8d:de: 11:28:37:90:23:cc:aa:66:8f:e0:e7:a0:97:e7:4f: c1:6d:f4:3c:66:08:a7:e2:44:b3:fa:e3:6d:e7:c8: 8b:41:4a:bb:6e:4d:8d:7b:c7:dd:ec:69:a3:b9:20: af:d5:b5:4b:5c:1c:05:13:9c:cf:99:f8:46:fc:28: e8:64:4d:f7:b5:4a:2b:6c:1b:71:93:2c:8b:ca:55: 7c:b5:07:d3:69:f0:e6:83:7a:46:8b:f5:57:ce:cb: 79:3d:b3:d3:06:f2:4f:88:37:00:8c:e8:a3:d3:96: fd:71:89:8a:f8:a7:53:48:43:bd:6a:d8:15:40:e5: 09:bc:fc:1c:6f:c0:9f:e8:f1:ac:a5:2c:ae:0b:bd: 41:b9:57:11:40:75:b8:e4:44:a5:c4:82:4d:7b:eb: e9:3a:bc:93:8d:ee:a3:db:a3:e2:d8:b4:55:7d:03: 85:a6:18:f1:50:b2:f8:54:db:fd:49:97:d8:64:cd: 15:a7:9a:e4:59:c8:73:4b:5d:71:5e:bb:d8:f0:19: 9b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4B:7F:95:D2:F5:71:12:AB:E9:1E:55:09:90:CE:6C:61:C0:0F:9D X509v3 Authority Key Identifier: keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:13:da:c8:b2:f1:18:1f:56:70:a2:e8:48:0f:21:e6:cd:b1: fb:65:fe:a3:4d:e8:fc:5d:ca:44:0c:d5:f1:1e:0b:8f:5c:98: 7a:5f:bf:ea:bc:13:b5:a1:78:8f:9a:3c:cf:c0:6c:5e:98:69: 19:53:d5:58:51:66:c9:a8:ba:3a:d2:56:71:81:31:cf:16:27: bf:03:41:92:77:0b:dd:2e:e4:a5:5f:a3:65:d1:ff:9e:dd:97: 06:84:55:cb:97:d0:e5:d0:c8:09:2b:f5:95:c4:1d:e3:46:03: 9e:78:3b:60:4d:e7:90:f2:28:3d:1b:b1:cc:b0:a6:98:1d:d3: 63:ba:be:49:fc:ba:fc:77:6d:7d:e8:53:77:91:34:19:6a:85: b3:b4:a1:06:67:bd:5e:14:e4:aa:89:1a:26:56:fd:20:bd:63: 7e:5f:80:67:30:87:bd:72:55:cf:c6:b0:ea:f0:cb:8d:0e:1d: 88:46:dd:c5:22:6d:ea:f0:61:1d:3d:4d:c5:56:1f:c8:59:36: 3e:ee:7e:ab:47:ae:2f:b7:67:2a:85:ff:bd:be:6e:27:d4:58: ef:3c:3c:f2:0f:9a:57:ef:b5:d5:cc:45:81:a3:ca:67:e5:7c: 38:4d:df:4e:a3:92:3a:9f:9c:91:db:03:84:7e:8e:60:65:ef: 96:19:56:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2s/Ff70NnKktkSJXY5MJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk OTdmMTQwHhcNMjUxMjIxMDMwMTI1WhcNMjUxMjIyMDMwMTI1WjAzMTEwLwYDVQQD EyhiYjRiN2Y5NWQyZjU3MTEyYWJlOTFlNTUwOTkwY2U2YzYxYzAwZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqvO6vRHRuGmytOp6jb8g5cZuGN XFd/ox6WhjMWaHzVxySb2M9qj/Dw7B9Yp00xr9GIwNwyxusEjd4RKDeQI8yqZo/g 56CX50/BbfQ8Zgin4kSz+uNt58iLQUq7bk2Ne8fd7GmjuSCv1bVLXBwFE5zPmfhG /CjoZE33tUorbBtxkyyLylV8tQfTafDmg3pGi/VXzst5PbPTBvJPiDcAjOij05b9 cYmK+KdTSEO9atgVQOUJvPwcb8Cf6PGspSyuC71BuVcRQHW45ESlxIJNe+vpOryT je6j26Pi2LRVfQOFphjxULL4VNv9SZfYZM0Vp5rkWchzS11xXrvY8BmbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtLf5XS9XESq+keVQmQzmxhwA+dMB8GA1UdIwQY MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt NDEwMDYxZTM1NzZhLzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxPayLLx GB9WcKLoSA8h5s2x+2X+o03o/F3KRAzV8R4Lj1yYel+/6rwTtaF4j5o8z8BsXphp GVPVWFFmyai6OtJWcYExzxYnvwNBkncL3S7kpV+jZdH/nt2XBoRVy5fQ5dDICSv1 lcQd40YDnng7YE3nkPIoPRuxzLCmmB3TY7q+Sfy6/HdtfehTd5E0GWqFs7ShBme9 XhTkqokaJlb9IL1jfl+AZzCHvXJVz8aw6vDLjQ4diEbdxSJt6vBhHT1NxVYfyFk2 Pu5+q0euL7dnKoX/vb5uJ9RY7zw88g+aV++11cxFgaPKZ+V8OE3fTqOSOp+ckdsD hH6OYGXvlhlWJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:53 2025 by rpki-client