This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft File: LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json) Hash identifier: QPaNe0aaWoQVJfiDHfQMIRvEdl3gUPCQXVdn7CTg+AY= Subject key identifier: CF:35:86:2A:C2:03:64:2E:76:AD:29:B3:DB:14:1E:88:51:94:00:03 Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 Certificate issuer: /CN=2ee96208925d836f8d037d179980a83a1b0c1342 Certificate serial: 019B5D535B784192167793F05D2DA5EC7A52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 01:01:42 +0000 Manifest this update: Sat 27 Dec 2025 01:01:42 +0000 Manifest next update: Sun 28 Dec 2025 01:01:42 +0000 Files and hashes: 1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: oNdANeOrEu25z/I3+EIeqLuXetOAVaigLrfknDx7WVQ=) 2: dr9TUWCMOOrZgw4ya4BHH6Fl9S4.roa (hash: MHmzUWCdf8/9JI0888l1CY7P5xnPYz06hMJxDs/OenM=) 3: g5NXYnWEAdkaK-Lr_Xc0-zmGZq0.roa (hash: iRJFMsAKyY3mWv0ViO4zwD2HGWC+kyCn/YQlP9uYKFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:5b:78:41:92:16:77:93:f0:5d:2d:a5:ec:7a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342 Validity Not Before: Dec 27 01:01:42 2025 GMT Not After : Dec 28 01:01:42 2025 GMT Subject: CN=cf35862ac203642e76ad29b3db141e8851940003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:f6:80:28:3c:36:9f:85:e9:8d:c0:e6:08: dc:d4:a0:58:02:55:7b:4c:96:95:c2:b6:6d:59:ab: cb:73:0f:33:72:84:87:d6:3f:ba:1c:ca:4c:19:06: 29:77:d3:1c:bb:4b:f6:80:45:47:8a:f3:a3:3b:45: 8e:ab:a3:28:d0:f8:da:10:3d:60:36:a1:7e:08:e2: 43:37:bd:ee:92:c1:4a:89:ea:15:80:b7:d5:f8:6d: 5a:63:1b:f3:43:e3:70:24:7f:c0:ec:ee:ba:35:51: c7:55:62:84:ce:22:ca:db:68:67:6d:b9:b9:04:4e: 94:c3:5a:d9:80:0b:80:9e:1f:55:93:f2:df:f4:45: 04:22:28:5a:75:f0:b4:49:37:77:c4:79:a1:51:57: a5:27:77:5b:38:0d:59:01:fc:41:87:96:82:02:3f: e1:9b:71:01:7f:34:6d:87:a1:34:87:7e:1d:cf:8d: 57:73:c4:84:01:52:47:4c:83:9e:3b:68:88:22:a5: d5:df:25:c7:32:cd:11:41:ed:04:76:c5:b3:62:df: 75:bc:9a:6f:9a:1a:cc:8c:f2:c4:ee:c1:fe:ab:11: b0:5f:a2:d4:62:a7:1b:0e:d5:7f:b1:69:ab:2f:f8: 81:0d:16:3c:ca:8b:84:da:ac:1c:86:f5:54:18:eb: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:35:86:2A:C2:03:64:2E:76:AD:29:B3:DB:14:1E:88:51:94:00:03 X509v3 Authority Key Identifier: keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:43:1d:6d:69:15:84:45:fb:37:cc:5d:ef:59:13:66:d7:37: e7:b0:39:0c:4e:2a:ce:84:06:55:4b:fc:ae:55:ec:6b:85:c4: 8e:cf:3e:f3:a1:6f:44:4f:da:40:ec:a9:a7:dd:43:23:48:7e: 0c:ce:be:5e:f7:29:a2:01:96:99:06:ab:56:01:a1:ba:df:af: e6:fc:0d:4d:68:c4:c9:ba:e2:29:fc:55:b1:8c:02:f6:aa:40: d3:ad:a4:4e:cb:66:c7:18:1d:5b:d3:98:0a:32:61:05:76:c4: 99:e7:f5:2f:60:a4:f3:d8:f5:1d:2e:dd:4d:44:e1:a0:19:ff: 51:f8:d9:c1:74:34:13:4e:ae:bd:fa:05:c8:55:fc:f8:e2:3a: e7:a8:19:65:94:51:b1:5b:9f:b7:bf:84:4c:7c:54:c7:b3:b6: 34:12:33:7d:8a:3c:77:b1:50:ad:14:0f:1f:5a:60:36:d9:d4: 93:fb:fd:b6:ef:45:c2:83:70:ad:96:ed:5b:37:4b:f3:c2:99: f0:1d:1c:f9:84:2e:0a:40:69:5a:83:40:a1:90:db:37:e0:b2: 9b:08:e1:a3:a6:13:0e:29:dc:9a:5f:38:a8:81:7e:92:cb:1d: 99:d0:3c:ba:fb:ae:1f:e0:e7:6e:12:c8:7f:64:ca:f3:ef:7e: 50:21:54:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU1t4QZIWd5PwXS2l7HpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw YzEzNDIwHhcNMjUxMjI3MDEwMTQyWhcNMjUxMjI4MDEwMTQyWjAzMTEwLwYDVQQD EyhjZjM1ODYyYWMyMDM2NDJlNzZhZDI5YjNkYjE0MWU4ODUxOTQwMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP32gCg8Np+F6Y3A5gjc1KBYAlV7 TJaVwrZtWavLcw8zcoSH1j+6HMpMGQYpd9Mcu0v2gEVHivOjO0WOq6Mo0PjaED1g NqF+COJDN73uksFKieoVgLfV+G1aYxvzQ+NwJH/A7O66NVHHVWKEziLK22hnbbm5 BE6Uw1rZgAuAnh9Vk/Lf9EUEIihadfC0STd3xHmhUVelJ3dbOA1ZAfxBh5aCAj/h m3EBfzRth6E0h34dz41Xc8SEAVJHTIOeO2iIIqXV3yXHMs0RQe0EdsWzYt91vJpv mhrMjPLE7sH+qxGwX6LUYqcbDtV/sWmrL/iBDRY8youE2qwchvVUGOsEFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM81hirCA2Qudq0ps9sUHohRlAADMB8GA1UdIwQY MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEMdbWkV hEX7N8xd71kTZtc357A5DE4qzoQGVUv8rlXsa4XEjs8+86FvRE/aQOypp91DI0h+ DM6+XvcpogGWmQarVgGhut+v5vwNTWjEybriKfxVsYwC9qpA062kTstmxxgdW9OY CjJhBXbEmef1L2Ck89j1HS7dTUThoBn/UfjZwXQ0E06uvfoFyFX8+OI656gZZZRR sVuft7+ETHxUx7O2NBIzfYo8d7FQrRQPH1pgNtnUk/v9tu9FwoNwrZbtWzdL88KZ 8B0c+YQuCkBpWoNAoZDbN+Cymwjho6YTDincml84qIF+kssdmdA8uvuuH+DnbhLI f2TK8+9+UCFUag== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:42 2025 by rpki-client