This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json) Hash identifier: lcmUFLk9zXqimh7fY211TPVMpltX8OJ7wpxdapuXHYQ= Subject key identifier: 2A:00:72:FE:1A:37:A8:3F:E4:32:DB:64:27:76:69:4E:10:0E:38:1C Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Certificate serial: 019B3CEBF9B936B6A011B7A80E335B7A54C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft Manifest number: 08FE Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=) 2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: BALYQC4axFiPeMw4+ivdUpVC/Mq5qvBmjbSvnkEXS6w=) 3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f9:b9:36:b6:a0:11:b7:a8:0e:33:5b:7a:54:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2 Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=2a0072fe1a37a83fe432db642776694e100e381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:4a:b7:79:75:65:58:75:47:fa:21:62:b2: ba:cd:1b:0c:71:e6:14:e4:71:a6:b9:2d:ce:d0:ad: 04:f3:e6:f6:02:51:ed:51:6f:d3:1c:d7:ee:cc:d9: 6e:b7:7a:5b:a7:7a:d3:e3:01:f9:e7:5a:13:9d:d7: 9f:d2:1e:c9:7e:f2:9f:a7:aa:12:56:48:0e:c8:d3: 93:2a:25:61:34:01:c8:a3:15:92:91:33:fc:69:2a: f9:7d:e0:cc:2e:93:f0:e3:ed:55:82:d8:a7:83:da: eb:f2:0f:26:17:dc:5a:0b:9e:9c:a0:08:a5:3a:ff: 3b:fd:53:2f:30:01:84:5e:06:44:c4:04:89:94:87: f9:99:31:36:37:dd:52:09:11:d6:15:27:e1:d3:95: 52:b2:40:a2:c9:d0:06:b8:90:be:a1:a3:34:55:86: 99:46:58:a6:21:b5:82:2c:db:0f:cc:a1:12:bb:af: 99:b4:0c:6a:a8:29:24:72:62:06:b6:b8:30:1f:bb: 21:d4:4f:d6:70:67:ed:c8:31:1a:62:f6:7d:83:b5: 84:48:e5:03:0e:1d:d6:97:5a:ee:c9:aa:9a:af:ca: 6b:a6:e7:66:f9:a4:68:5a:62:d9:17:36:e1:c1:5a: f9:a7:7a:38:08:31:f1:01:0c:fa:d2:6b:05:30:ce: f5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:72:FE:1A:37:A8:3F:E4:32:DB:64:27:76:69:4E:10:0E:38:1C X509v3 Authority Key Identifier: keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ed:2f:c2:5e:e3:5b:79:27:d3:0b:93:62:d9:08:51:82:79: 9a:07:7a:fe:0b:83:16:97:43:1f:ba:cb:c1:ca:f5:2d:a4:90: c7:ff:2c:fa:b8:ed:3c:4e:e3:5b:28:c0:3a:5b:19:1b:0f:cd: 1f:3b:82:74:1a:e6:1f:81:d3:1e:ce:7a:16:93:a3:08:46:b0: 99:b3:e1:58:0c:42:93:53:b3:f4:8a:28:c1:36:cc:21:49:5c: f0:94:e9:62:2d:64:5b:75:19:ec:5a:da:13:6e:96:aa:6d:bf: 38:63:34:85:6e:8d:e6:fc:cb:a3:11:a5:0b:5c:c0:1d:ae:c6: d3:fc:4e:f1:18:d6:4e:9e:7f:b2:7b:2a:f7:fe:01:7b:30:a0: 7e:eb:1b:ec:b4:3a:37:f3:72:1d:59:dd:20:72:72:34:cf:22: 98:0e:b0:25:bb:17:2d:61:da:9b:de:34:e3:aa:0d:5a:20:e8: af:71:bf:f5:d1:cd:9a:ee:6b:15:52:a1:c3:8d:26:70:82:72: 20:80:d5:6a:c4:57:1a:bb:33:51:10:fd:7b:15:28:4a:15:e6: 05:0c:a2:2a:6f:6e:41:01:14:61:9c:5b:95:36:92:a3:ae:4c: d2:00:b7:f9:ec:02:75:cf:66:82:71:04:2d:5b:d9:18:be:aa: fd:50:d3:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/m5NragEbeoDjNbelTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDYxZmJlZTFjMDZlM2VhZmFjMGYyZjk1MjUzY2E4NjAz YWNjZjIwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD EygyYTAwNzJmZTFhMzdhODNmZTQzMmRiNjQyNzc2Njk0ZTEwMGUzODFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOdKt3l1ZVh1R/ohYrK6zRsMceYU 5HGmuS3O0K0E8+b2AlHtUW/THNfuzNlut3pbp3rT4wH551oTndef0h7JfvKfp6oS VkgOyNOTKiVhNAHIoxWSkTP8aSr5feDMLpPw4+1Vgting9rr8g8mF9xaC56coAil Ov87/VMvMAGEXgZExASJlIf5mTE2N91SCRHWFSfh05VSskCiydAGuJC+oaM0VYaZ RlimIbWCLNsPzKESu6+ZtAxqqCkkcmIGtrgwH7sh1E/WcGftyDEaYvZ9g7WESOUD Dh3Wl1ruyaqar8prpudm+aRoWmLZFzbhwVr5p3o4CDHxAQz60msFMM71GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoAcv4aN6g/5DLbZCd2aU4QDjgcMB8GA1UdIwQY MBaAFJVGH77hwG4+r6wPL5UlPKhgOszyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTkt ODlkNWM2MGY1MDFmLzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lNWNlOGYtNWVhMC00NzlmLTkzZTktODlkNWM2MGY1MDFm LzEvbFVZZnZ1SEFiajZ2ckE4dmxTVThxR0E2elBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce0vwl7j W3kn0wuTYtkIUYJ5mgd6/guDFpdDH7rLwcr1LaSQx/8s+rjtPE7jWyjAOlsZGw/N HzuCdBrmH4HTHs56FpOjCEawmbPhWAxCk1Oz9IoowTbMIUlc8JTpYi1kW3UZ7Fra E26Wqm2/OGM0hW6N5vzLoxGlC1zAHa7G0/xO8RjWTp5/snsq9/4BezCgfusb7LQ6 N/NyHVndIHJyNM8imA6wJbsXLWHam94046oNWiDor3G/9dHNmu5rFVKhw40mcIJy IIDVasRXGrszURD9exUoShXmBQyiKm9uQQEUYZxblTaSo65M0gC3+ewCdc9mgnEE LVvZGL6q/VDTBg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:09:34 2025 by rpki-client