This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft File: LuKffz-qSKlAq42iErSxEWiD8nM.mft (raw, json) Hash identifier: Ek+70p5rvQ5q9iTQ8BZ+8wO+FEWV2RCRu4zkxZHMb9g= Subject key identifier: 45:2C:E3:1F:62:A7:54:AF:CB:D6:F7:17:86:F1:EC:89:82:89:72:47 Authority key identifier: 2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 Certificate issuer: /CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Certificate serial: 019B567527BEE6D8C740CA74AF7D4B407DAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft Manifest number: 1799 Signing time: Thu 25 Dec 2025 17:01:16 +0000 Manifest this update: Thu 25 Dec 2025 17:01:16 +0000 Manifest next update: Fri 26 Dec 2025 17:01:16 +0000 Files and hashes: 1: LuKffz-qSKlAq42iErSxEWiD8nM.crl (hash: ChGx0ucw4H61s5ukITfHHEe/yKfhxPmKGrWMDDwQ0pA=) 2: YnocbPb6eCTl7D0AAtuW-w6T8XI.roa (hash: 0/3lBvSnn24lW/dA1E4Lwb6/p+92YZin4bwE+8xDWMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:27:be:e6:d8:c7:40:ca:74:af:7d:4b:40:7d:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee29f7f3faa48a940ab8da212b4b1116883f273 Validity Not Before: Dec 25 17:01:16 2025 GMT Not After : Dec 26 17:01:16 2025 GMT Subject: CN=452ce31f62a754afcbd6f71786f1ec8982897247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bd:04:c4:42:25:17:09:87:e5:f1:87:66:67: b7:e4:6d:41:d5:4e:21:64:db:2b:06:6f:36:d7:84: de:29:89:e8:dc:6e:af:22:e5:48:cb:8b:7a:b1:2c: 7c:c3:ef:a7:1c:3d:15:ef:43:b6:9a:b5:be:d1:29: 4d:bf:08:27:fb:df:13:ab:63:05:03:12:0f:13:cd: 48:4b:a8:cd:30:bb:4d:d7:c4:4f:86:24:c7:0c:5b: 23:8e:48:d5:93:fe:4d:a3:d0:23:28:10:c9:a0:31: 05:1b:fb:9d:72:cd:41:56:38:05:a7:94:dc:1e:85: 5c:86:d9:f2:3e:8d:8d:98:05:f6:f9:88:1b:5b:b5: bf:64:34:6d:51:c8:6e:70:d8:3b:56:9f:a3:3c:f8: 39:0c:dd:15:0b:47:12:51:f4:cd:45:94:34:d1:32: a3:98:ff:e0:e6:3c:5d:77:c4:01:4d:5b:c9:7b:c9: d6:16:46:b4:2d:38:61:28:72:04:38:f6:ca:28:4d: af:f8:38:48:c3:58:06:2e:bd:73:97:5e:40:c1:e4: c3:a5:b3:24:89:c6:47:9b:0f:81:ba:b3:42:a9:1d: 11:3e:05:00:3f:d3:0d:10:60:72:68:77:ab:c8:5a: 5c:7c:be:26:af:08:45:7b:2e:95:9c:b3:ed:c9:dc: 05:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:E3:1F:62:A7:54:AF:CB:D6:F7:17:86:F1:EC:89:82:89:72:47 X509v3 Authority Key Identifier: keyid:2E:E2:9F:7F:3F:AA:48:A9:40:AB:8D:A2:12:B4:B1:11:68:83:F2:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuKffz-qSKlAq42iErSxEWiD8nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/567876-8d17-46c6-8cdd-4b843e9d04f8/1/LuKffz-qSKlAq42iErSxEWiD8nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6a:76:68:5e:f1:f2:d7:49:68:85:1c:6f:02:ef:8a:fe:bb: d9:58:86:29:dd:3e:c9:79:2a:74:9b:22:e6:77:52:f8:58:77: e7:0b:06:c2:3a:ec:82:e3:16:34:09:57:a9:11:65:f4:cd:bc: 3d:3e:f5:9a:54:4a:55:8b:6d:cf:1e:b3:57:49:69:db:37:86: 2a:dc:31:f1:72:a6:b6:ee:b8:61:20:13:b0:4d:5c:f8:69:78: bd:3f:3c:3f:19:ab:7a:64:0f:55:32:70:69:f8:d2:41:dc:8e: 13:56:97:f7:97:9b:82:ff:70:96:4f:00:6c:68:be:6a:90:b0: 13:eb:89:3d:cc:69:16:18:e8:3f:10:9d:2d:dd:39:0e:91:25: 91:c1:9b:0f:b6:bd:1e:92:65:2d:3f:81:6d:ae:09:fa:8a:ad: 12:38:85:5d:2d:c9:6c:c7:ab:53:21:80:92:50:93:94:74:fd: 97:87:94:f5:01:3e:0f:24:90:74:7b:45:25:6c:48:d9:f0:3a: a2:2c:b3:a2:e2:45:58:46:d3:de:a8:66:3f:94:5a:d8:e1:1d: 93:04:81:ab:f4:d3:fd:9a:5f:f0:0e:6c:9f:eb:2d:84:1b:43: 69:7b:db:da:e8:50:8d:7e:a3:d4:fc:56:c0:f1:f9:77:8b:ed: ab:6d:f6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdSe+5tjHQMp0r31LQH2vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTI5ZjdmM2ZhYTQ4YTk0MGFiOGRhMjEyYjRiMTExNjg4 M2YyNzMwHhcNMjUxMjI1MTcwMTE2WhcNMjUxMjI2MTcwMTE2WjAzMTEwLwYDVQQD Eyg0NTJjZTMxZjYyYTc1NGFmY2JkNmY3MTc4NmYxZWM4OTgyODk3MjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr0ExEIlFwmH5fGHZme35G1B1U4h ZNsrBm8214TeKYno3G6vIuVIy4t6sSx8w++nHD0V70O2mrW+0SlNvwgn+98Tq2MF AxIPE81IS6jNMLtN18RPhiTHDFsjjkjVk/5No9AjKBDJoDEFG/udcs1BVjgFp5Tc HoVchtnyPo2NmAX2+YgbW7W/ZDRtUchucNg7Vp+jPPg5DN0VC0cSUfTNRZQ00TKj mP/g5jxdd8QBTVvJe8nWFka0LThhKHIEOPbKKE2v+DhIw1gGLr1zl15AweTDpbMk icZHmw+BurNCqR0RPgUAP9MNEGByaHeryFpcfL4mrwhFey6VnLPtydwFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUs4x9ip1Svy9b3F4bx7ImCiXJHMB8GA1UdIwQY MBaAFC7in38/qkipQKuNohK0sRFog/JzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQt NGI4NDNlOWQwNGY4LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC81Njc4NzYtOGQxNy00NmM2LThjZGQtNGI4NDNlOWQwNGY4 LzEvTHVLZmZ6LXFTS2xBcTQyaUVyU3hFV2lEOG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWp2aF7x 8tdJaIUcbwLviv672ViGKd0+yXkqdJsi5ndS+Fh35wsGwjrsguMWNAlXqRFl9M28 PT71mlRKVYttzx6zV0lp2zeGKtwx8XKmtu64YSATsE1c+Gl4vT88PxmremQPVTJw afjSQdyOE1aX95ebgv9wlk8AbGi+apCwE+uJPcxpFhjoPxCdLd05DpElkcGbD7a9 HpJlLT+Bba4J+oqtEjiFXS3JbMerUyGAklCTlHT9l4eU9QE+DySQdHtFJWxI2fA6 oiyzouJFWEbT3qhmP5Ra2OEdkwSBq/TT/Zpf8A5sn+sthBtDaXvb2uhQjX6j1PxW wPH5d4vtq232vQ== -----END CERTIFICATE-----Generated at Thu Dec 25 22:27:30 2025 by rpki-client