This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json) Hash identifier: xCbxI8d/gFV0Af4kFees6H1wsAtKEAFFA2XWyBbwjY8= Subject key identifier: DF:47:73:CE:13:EF:4E:AF:0D:72:91:2D:14:3B:67:34:0A:F4:3E:72 Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Certificate serial: 019B5298D4E0E30E1FC7E247152D6B5AA27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 23:01:46 +0000 Manifest this update: Wed 24 Dec 2025 23:01:46 +0000 Manifest next update: Thu 25 Dec 2025 23:01:46 +0000 Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: xEOvZIBqduF9Z4I4f3Tk1PU7wpDj7E/cd4fHJfsqxJU=) 2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:d4:e0:e3:0e:1f:c7:e2:47:15:2d:6b:5a:a2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Validity Not Before: Dec 24 23:01:46 2025 GMT Not After : Dec 25 23:01:46 2025 GMT Subject: CN=df4773ce13ef4eaf0d72912d143b67340af43e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:1e:11:74:96:3d:99:67:c3:14:30:26:c4: 06:01:47:5b:0e:ec:5e:43:24:73:9e:e1:cf:d7:c0: 8e:83:94:14:ff:12:9c:0b:e7:eb:73:d2:f2:ea:a5: 3d:73:79:ce:2a:a2:48:12:9e:ba:6e:4d:2e:e3:60: bb:58:63:14:49:54:52:ae:76:6d:16:60:ed:7c:b3: 74:c2:77:a7:0e:15:62:05:72:6b:c8:23:41:77:f8: e4:bb:8f:04:a6:68:d1:c3:fa:60:94:19:5d:f5:d7: df:cd:3c:81:20:0c:4a:71:42:f0:56:84:e6:bf:f3: 11:2e:dc:80:3f:44:05:b3:49:73:08:43:8b:69:38: 1f:7f:7c:b3:4e:74:99:bc:aa:ff:97:a1:21:48:77: 56:c2:a3:5a:36:a0:21:ec:43:a5:b0:05:a0:a2:ce: 24:e9:d1:bd:c2:fa:a6:08:d2:0b:9c:65:b7:98:b0: fb:9c:19:27:41:98:e4:7b:a1:1c:f6:2f:cf:7a:55: c9:ab:13:fb:77:89:3b:50:e1:f9:25:c3:fa:ea:0d: 31:be:a3:3a:7c:7e:71:ad:34:a9:62:61:ac:8a:aa: 65:c8:67:2c:4c:e0:c7:d8:5f:33:69:58:bb:bb:99: a7:32:e8:b0:98:51:57:f5:f0:3c:a3:76:98:c0:f0: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:73:CE:13:EF:4E:AF:0D:72:91:2D:14:3B:67:34:0A:F4:3E:72 X509v3 Authority Key Identifier: keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:89:b7:3e:22:93:71:61:3d:7f:75:78:11:0f:30:e0:4d:76: 38:38:af:8f:ee:6d:a1:a9:0e:01:f7:0c:e3:d7:95:0c:f5:5a: de:5d:da:1b:a7:5c:fd:4d:1a:75:33:f3:52:80:a6:aa:31:42: e1:07:6a:11:39:2c:b8:23:0a:55:e0:b6:10:2b:70:d3:f5:48: fd:43:9f:7e:92:70:09:7b:93:d3:42:9c:61:80:da:b3:4d:2a: 67:ae:6d:dc:de:ae:25:c7:c7:23:23:e9:83:90:b4:38:46:46: 08:83:da:cb:8d:90:5a:80:d9:46:12:be:2a:aa:1e:d8:c6:82: 33:32:87:37:64:47:69:ba:cf:74:92:92:4d:4b:dc:65:66:8f: bd:c7:9d:42:f0:0c:54:7a:14:74:9a:7d:72:31:cd:4a:e5:ef: 2e:5b:e3:25:f8:4a:3d:9c:f2:ec:ab:9e:ec:c1:d0:9d:3a:51: 9d:9f:1f:47:a2:11:d3:3c:53:20:f1:8c:56:62:21:3c:e6:87: 6b:37:a3:2c:4a:db:47:80:72:f9:b8:f3:3e:b4:fb:f8:f6:51: df:00:67:ba:6f:c3:a9:41:38:44:a8:ea:4c:0d:5f:fe:47:14: 99:3e:e6:dd:55:53:4c:c4:82:ad:83:ed:6d:42:33:15:b0:dd: 28:f4:59:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmNTg4w4fx+JHFS1rWqJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4 M2YyNzMwHhcNMjUxMjI0MjMwMTQ2WhcNMjUxMjI1MjMwMTQ2WjAzMTEwLwYDVQQD EyhkZjQ3NzNjZTEzZWY0ZWFmMGQ3MjkxMmQxNDNiNjczNDBhZjQzZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQceEXSWPZlnwxQwJsQGAUdbDuxe QyRznuHP18COg5QU/xKcC+frc9Ly6qU9c3nOKqJIEp66bk0u42C7WGMUSVRSrnZt FmDtfLN0wnenDhViBXJryCNBd/jku48EpmjRw/pglBld9dffzTyBIAxKcULwVoTm v/MRLtyAP0QFs0lzCEOLaTgff3yzTnSZvKr/l6EhSHdWwqNaNqAh7EOlsAWgos4k 6dG9wvqmCNILnGW3mLD7nBknQZjke6Ec9i/PelXJqxP7d4k7UOH5JcP66g0xvqM6 fH5xrTSpYmGsiqplyGcsTODH2F8zaVi7u5mnMuiwmFFX9fA8o3aYwPB0DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9Hc84T706vDXKRLRQ7ZzQK9D5yMB8GA1UdIwQY MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4 LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYm3PiKT cWE9f3V4EQ8w4E12ODivj+5toakOAfcM49eVDPVa3l3aG6dc/U0adTPzUoCmqjFC 4QdqETksuCMKVeC2ECtw0/VI/UOffpJwCXuT00KcYYDas00qZ65t3N6uJcfHIyPp g5C0OEZGCIPay42QWoDZRhK+Kqoe2MaCMzKHN2RHabrPdJKSTUvcZWaPvcedQvAM VHoUdJp9cjHNSuXvLlvjJfhKPZzy7Kue7MHQnTpRnZ8fR6IR0zxTIPGMVmIhPOaH azejLErbR4By+bjzPrT7+PZR3wBnum/DqUE4RKjqTA1f/kcUmT7m3VVTTMSCrYPt bUIzFbDdKPRZwQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:24:50 2025 by rpki-client