This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft File: LUFhUhEtrymCRCUnsPlE5IKFgy4.mft (raw, json) Hash identifier: Q3OpBcuF0LxAF73nZHaNgXwlGd7h3hQCTd9FLlHdd9o= Subject key identifier: AB:61:8D:D5:EE:D3:F9:6A:60:1F:74:83:33:6E:C7:D0:FE:74:B4:DE Authority key identifier: 2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E Certificate issuer: /CN=2d416152112daf2982442527b0f944e48285832e Certificate serial: 019B2C66D02C34A60DCF8387BCFD098A7F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft Manifest number: 0703 Signing time: Wed 17 Dec 2025 13:01:34 +0000 Manifest this update: Wed 17 Dec 2025 13:01:34 +0000 Manifest next update: Thu 18 Dec 2025 13:01:34 +0000 Files and hashes: 1: LUFhUhEtrymCRCUnsPlE5IKFgy4.crl (hash: s/sbmbStG8JPS3KArTHZCloTA3M3GVoIDqduaG+8QaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:d0:2c:34:a6:0d:cf:83:87:bc:fd:09:8a:7f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d416152112daf2982442527b0f944e48285832e Validity Not Before: Dec 17 13:01:34 2025 GMT Not After : Dec 18 13:01:34 2025 GMT Subject: CN=ab618dd5eed3f96a601f7483336ec7d0fe74b4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:77:78:48:3a:e2:d5:71:ad:41:f9:db:e7:87: 03:1f:62:0c:84:9d:fe:40:05:66:e0:c8:a6:83:57: f7:e7:19:fe:05:75:31:ff:2c:b0:83:2e:0b:42:d6: 6a:36:0c:a3:b2:04:93:68:1f:05:c6:ce:4f:6a:58: 6c:d1:01:39:bf:34:3c:89:93:dd:41:ad:4d:c6:ff: f1:07:1f:2e:51:0e:ed:32:a0:fe:6d:16:8e:c6:90: ab:88:6d:de:91:46:e3:fc:ad:12:a2:6f:16:dd:b1: 8b:1a:22:63:90:0e:66:78:34:9b:f4:0a:52:00:d0: 37:85:1d:3a:60:fb:b7:b2:64:df:94:7a:6b:91:c6: ac:07:06:ba:ae:55:b4:5b:0f:56:87:6f:c8:ba:26: ef:c6:d4:2a:d2:4a:46:89:9f:d3:5c:07:0d:a0:e5: e0:49:8d:d1:38:d0:b3:db:50:a6:42:3e:36:71:d4: 45:1e:58:12:d9:3c:a6:7d:a2:f4:ee:64:c9:31:4d: c3:5f:79:4b:6c:1f:b6:45:8e:45:a0:f9:66:f9:0e: 50:1d:59:d2:f5:8e:32:a3:7f:e9:40:07:88:9c:e7: 4f:ec:98:b0:e0:32:ab:46:8d:a4:e5:e7:3f:b5:7c: 08:e2:6f:f7:f0:ce:b5:7f:d4:9e:b2:b9:b0:79:82: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:8D:D5:EE:D3:F9:6A:60:1F:74:83:33:6E:C7:D0:FE:74:B4:DE X509v3 Authority Key Identifier: keyid:2D:41:61:52:11:2D:AF:29:82:44:25:27:B0:F9:44:E4:82:85:83:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUFhUhEtrymCRCUnsPlE5IKFgy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c1a14c-a78c-40a7-bf53-d96ce42a113b/1/LUFhUhEtrymCRCUnsPlE5IKFgy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:f4:5b:e6:95:fd:4c:5c:56:e9:65:bf:e3:82:da:de:46: 6c:48:93:64:4f:33:e2:cc:7d:41:c3:c9:f0:0a:7d:16:d5:c7: 79:1b:73:25:62:3c:97:2c:11:26:ad:e2:08:01:55:68:cf:e9: fe:f4:58:a4:1e:17:c3:23:78:7c:5f:e4:6f:ed:82:bc:72:88: 9f:45:dc:49:a9:0f:6e:e8:5f:2a:05:19:5c:60:e0:4d:0f:87: 2c:f3:88:1a:4e:bf:c2:9e:4d:ab:e5:ff:bb:89:31:3f:02:45: b0:01:07:d9:cf:6d:28:ac:ee:52:11:ae:d6:90:a4:eb:b5:c7: 62:f1:b0:42:f2:75:e8:09:86:14:29:fa:4c:97:08:69:49:f7: 73:32:49:77:87:8a:33:45:53:10:b3:62:88:55:1a:f3:20:92: a4:af:67:ac:f4:32:c8:18:d6:72:50:3c:38:05:24:6a:88:03: 9a:ca:17:e3:01:cd:83:f9:b3:fb:aa:eb:a1:6c:d7:b0:a9:21: 98:18:04:4d:4d:47:c9:ce:7f:83:1b:e7:74:53:29:06:28:72: 9c:53:79:dc:11:cf:ea:2d:d9:7c:51:75:68:b1:bf:69:9e:a0: 43:e5:e6:81:c8:88:bf:92:f2:a8:19:0e:ff:dc:a7:d2:16:84: ec:94:70:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZtAsNKYNz4OHvP0Jin8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDE2MTUyMTEyZGFmMjk4MjQ0MjUyN2IwZjk0NGU0ODI4 NTgzMmUwHhcNMjUxMjE3MTMwMTM0WhcNMjUxMjE4MTMwMTM0WjAzMTEwLwYDVQQD EyhhYjYxOGRkNWVlZDNmOTZhNjAxZjc0ODMzMzZlYzdkMGZlNzRiNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xd4SDri1XGtQfnb54cDH2IMhJ3+ QAVm4Mimg1f35xn+BXUx/yywgy4LQtZqNgyjsgSTaB8Fxs5Palhs0QE5vzQ8iZPd Qa1Nxv/xBx8uUQ7tMqD+bRaOxpCriG3ekUbj/K0Som8W3bGLGiJjkA5meDSb9ApS ANA3hR06YPu3smTflHprkcasBwa6rlW0Ww9Wh2/IuibvxtQq0kpGiZ/TXAcNoOXg SY3RONCz21CmQj42cdRFHlgS2TymfaL07mTJMU3DX3lLbB+2RY5FoPlm+Q5QHVnS 9Y4yo3/pQAeInOdP7Jiw4DKrRo2k5ec/tXwI4m/38M61f9SesrmweYLM/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKthjdXu0/lqYB90gzNux9D+dLTeMB8GA1UdIwQY MBaAFC1BYVIRLa8pgkQlJ7D5ROSChYMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMt ZDk2Y2U0MmExMTNiLzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jMWExNGMtYTc4Yy00MGE3LWJmNTMtZDk2Y2U0MmExMTNi LzEvTFVGaFVoRXRyeW1DUkNVbnNQbEU1SUtGZ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjL0W+aV /UxcVullv+OC2t5GbEiTZE8z4sx9QcPJ8Ap9FtXHeRtzJWI8lywRJq3iCAFVaM/p /vRYpB4XwyN4fF/kb+2CvHKIn0XcSakPbuhfKgUZXGDgTQ+HLPOIGk6/wp5Nq+X/ u4kxPwJFsAEH2c9tKKzuUhGu1pCk67XHYvGwQvJ16AmGFCn6TJcIaUn3czJJd4eK M0VTELNiiFUa8yCSpK9nrPQyyBjWclA8OAUkaogDmsoX4wHNg/mz+6rroWzXsKkh mBgETU1Hyc5/gxvndFMpBihynFN53BHP6i3ZfFF1aLG/aZ6gQ+XmgciIv5LyqBkO /9yn0haE7JRwEw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:05 2025 by rpki-client