This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft File: lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft (raw, json) Hash identifier: t5C8BIZl958qgdO4ob9o0JmZrrdD+qvclUjbxt6RbFI= Subject key identifier: 9B:21:90:AC:5C:42:0E:94:1A:9E:0A:1C:40:47:66:21:CF:75:B3:3D Authority key identifier: 96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F Certificate issuer: /CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Certificate serial: 019B4023E26AAA9C1AC215E39FE4970552C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft Manifest number: 1464 Signing time: Sun 21 Dec 2025 09:00:52 +0000 Manifest this update: Sun 21 Dec 2025 09:00:52 +0000 Manifest next update: Mon 22 Dec 2025 09:00:52 +0000 Files and hashes: 1: 6uBRMAdPwa-lKO2ylO9DlsGgsHY.roa (hash: +m2JD+JFXF9SBNg+lpjDT6mDr6YnDMqmBejWjKgStAQ=) 2: O3aj1sq28jEncC-VrEHScIVqm2s.roa (hash: ErVAkKBfexXNdqxolDCKn4vodt0IXWxMoZE998REcOM=) 3: VRYfwJddtKzQsHE8MbAEFYO6ZHo.roa (hash: EYXXmNlMh3UrU0hKdU6hQ+CFn2MC63mGZvBuDrRNCLw=) 4: aQ92mv4OX0TrGXRhoE4qVRj9Lwg.roa (hash: Sn7Iy1mnHMRUkHR2YiOO0Z7B9rvVJ+lItzyRTfMio1A=) 5: lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl (hash: RyNs7gdSCVYyC4bP4qpv6i8H7YubLu2wcEh4BMNpI8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:e2:6a:aa:9c:1a:c2:15:e3:9f:e4:97:05:52:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e6f77cbda101987d9dfc84be90b6fba66adc9f Validity Not Before: Dec 21 09:00:52 2025 GMT Not After : Dec 22 09:00:52 2025 GMT Subject: CN=9b2190ac5c420e941a9e0a1c40476621cf75b33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:b6:f4:65:ff:8a:f1:8b:49:06:15:44:1c: 5a:76:ff:37:11:6a:fb:7c:70:2e:cd:ef:bc:17:5a: ab:1e:df:07:4a:c9:3b:b0:7e:e5:38:12:1c:0a:66: 42:d8:8d:cd:59:5d:33:75:8a:0a:21:93:cc:ba:86: af:43:af:b3:9b:97:90:fa:4a:81:4c:54:f5:b0:f1: db:ec:07:2c:1e:32:2a:85:17:b0:fd:e1:e2:18:2a: 11:f7:9c:9f:b1:d1:d6:1b:5a:6f:5c:14:58:35:fa: b0:d9:c4:c1:19:c8:90:b8:a5:e1:c8:28:d7:7e:0a: 33:91:21:34:ae:78:43:63:0b:29:a7:a6:3d:30:c4: 13:18:a1:0c:5d:c2:11:78:72:d9:d3:9a:82:29:00: 5c:dc:a8:60:db:87:2a:53:a0:73:de:b8:0d:83:a4: 68:0e:d6:fa:f5:39:b9:b4:ea:76:f8:29:55:e5:e2: 7f:81:30:ec:be:54:6f:1c:54:53:f7:17:9a:5d:50: 02:85:9a:47:27:d8:78:e7:ee:a1:23:c5:35:86:2a: e4:59:94:3e:55:15:84:76:dc:a4:16:33:4c:90:97: 6a:12:56:d6:da:ec:54:b2:ed:26:1b:c5:6d:f6:1e: 33:cd:e9:17:51:c4:2b:2e:11:d3:95:e5:fd:dc:00: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:90:AC:5C:42:0E:94:1A:9E:0A:1C:40:47:66:21:CF:75:B3:3D X509v3 Authority Key Identifier: keyid:96:E6:F7:7C:BD:A1:01:98:7D:9D:FC:84:BE:90:B6:FB:A6:6A:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lub3fL2hAZh9nfyEvpC2-6Zq3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1cbc1e-4d46-4b5b-b249-3208de39c09d/1/lub3fL2hAZh9nfyEvpC2-6Zq3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b5:36:c7:b2:8b:74:f3:43:85:d0:92:6c:4b:93:35:dc:fb: e1:90:c6:dc:2f:54:cc:b0:9e:bd:bd:d6:e7:fc:eb:29:73:19: b6:75:c9:89:20:a5:f4:6b:fe:63:4f:12:95:27:04:2e:73:6b: 8a:da:4a:7f:dc:f9:48:46:8e:43:ba:fe:7f:6b:76:93:64:02: 3e:78:03:cf:53:5d:95:45:8a:e5:04:ce:c0:1f:f3:33:1d:ca: 5f:b4:8e:7f:90:69:33:94:a4:5f:69:4a:85:68:e3:d4:a5:d7: b6:25:66:30:42:ed:3d:a3:75:8f:83:f2:88:4c:b6:d6:03:71: 35:0f:72:b2:af:cd:28:91:6c:c2:0a:37:f4:5f:66:05:41:92: e4:9d:76:c4:63:78:53:52:fa:a1:74:14:5d:19:68:fe:03:c0: 31:c2:fe:00:d0:13:ff:00:4e:e3:87:fd:53:2b:6b:77:cb:11: 3f:aa:de:fd:5a:95:6e:7e:f2:dc:ff:33:b9:93:d3:4f:ec:da: e5:d5:2d:2b:8b:85:29:0a:ab:99:d8:20:73:20:bc:fe:fe:cd: 77:b0:56:32:a8:9a:18:a0:1b:8b:80:c9:11:ab:7f:57:05:ad: ac:df:95:08:2c:4f:6a:26:23:17:98:69:34:58:c9:d5:cf:28: 69:03:8e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI+JqqpwawhXjn+SXBVLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTZmNzdjYmRhMTAxOTg3ZDlkZmM4NGJlOTBiNmZiYTY2 YWRjOWYwHhcNMjUxMjIxMDkwMDUyWhcNMjUxMjIyMDkwMDUyWjAzMTEwLwYDVQQD Eyg5YjIxOTBhYzVjNDIwZTk0MWE5ZTBhMWM0MDQ3NjYyMWNmNzViMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl229GX/ivGLSQYVRBxadv83EWr7 fHAuze+8F1qrHt8HSsk7sH7lOBIcCmZC2I3NWV0zdYoKIZPMuoavQ6+zm5eQ+kqB TFT1sPHb7AcsHjIqhRew/eHiGCoR95yfsdHWG1pvXBRYNfqw2cTBGciQuKXhyCjX fgozkSE0rnhDYwspp6Y9MMQTGKEMXcIReHLZ05qCKQBc3Khg24cqU6Bz3rgNg6Ro Dtb69Tm5tOp2+ClV5eJ/gTDsvlRvHFRT9xeaXVAChZpHJ9h45+6hI8U1hirkWZQ+ VRWEdtykFjNMkJdqElbW2uxUsu0mG8Vt9h4zzekXUcQrLhHTleX93ADJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJshkKxcQg6UGp4KHEBHZiHPdbM9MB8GA1UdIwQY MBaAFJbm93y9oQGYfZ38hL6QtvumatyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDkt MzIwOGRlMzljMDlkLzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xY2JjMWUtNGQ0Ni00YjViLWIyNDktMzIwOGRlMzljMDlk LzEvbHViM2ZMMmhBWmg5bmZ5RXZwQzItNlpxM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbU2x7KL dPNDhdCSbEuTNdz74ZDG3C9UzLCevb3W5/zrKXMZtnXJiSCl9Gv+Y08SlScELnNr itpKf9z5SEaOQ7r+f2t2k2QCPngDz1NdlUWK5QTOwB/zMx3KX7SOf5BpM5SkX2lK hWjj1KXXtiVmMELtPaN1j4PyiEy21gNxNQ9ysq/NKJFswgo39F9mBUGS5J12xGN4 U1L6oXQUXRlo/gPAMcL+ANAT/wBO44f9Uytrd8sRP6re/VqVbn7y3P8zuZPTT+za 5dUtK4uFKQqrmdggcyC8/v7Nd7BWMqiaGKAbi4DJEat/VwWtrN+VCCxPaiYjF5hp NFjJ1c8oaQOOjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:35 2025 by rpki-client