This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft File: jlNMDBgsQ4N_LCvU7csLizq-luk.mft (raw, json) Hash identifier: s+C0dHPSJb1y/J/z2Jp8yzKI5CipOgmnpkc5J3fbAT0= Subject key identifier: 69:AF:BC:E6:44:96:F5:40:2E:25:30:4D:C1:61:07:5D:FB:6D:0F:C5 Authority key identifier: 8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 Certificate issuer: /CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Certificate serial: 019B631F17F98864C1A3E68A392063D575D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft Manifest number: 0309 Signing time: Sun 28 Dec 2025 04:02:20 +0000 Manifest this update: Sun 28 Dec 2025 04:02:20 +0000 Manifest next update: Mon 29 Dec 2025 04:02:20 +0000 Files and hashes: 1: U_5c8CxOIHHrRakjJdwAMkWA57k.roa (hash: QboBS3SLtO5jQZfeGl+2o8dQ0vIC+Re5+Wn8IQ4OL28=) 2: jlNMDBgsQ4N_LCvU7csLizq-luk.crl (hash: RX3fBracOltBygOXD4pIPYFpVyaejMqRU7qsbtvEc+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:17:f9:88:64:c1:a3:e6:8a:39:20:63:d5:75:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e534c0c182c43837f2c2bd4edcb0b8b3abe96e9 Validity Not Before: Dec 28 04:02:20 2025 GMT Not After : Dec 29 04:02:20 2025 GMT Subject: CN=69afbce64496f5402e25304dc161075dfb6d0fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:e3:82:f8:bd:b0:e1:e2:a3:cf:c0:2c:c4: fb:3f:21:b5:59:e9:61:59:1a:78:cc:03:4d:d7:40: 2b:bd:5b:e9:2d:29:7c:76:fd:01:41:66:48:dc:80: fb:29:ce:66:1c:16:ce:b9:f7:15:28:f6:36:3a:c0: 3e:9b:69:97:cf:11:73:0f:ae:79:09:33:ac:85:cd: 61:b1:7f:9f:68:05:70:a9:6f:c3:b7:f4:fe:52:7c: ce:0c:9c:f8:8b:a5:5b:31:1f:61:ba:bb:f4:e6:ae: ce:1e:5a:a5:c1:d5:3c:dd:cd:44:9e:8c:ed:91:b0: d0:b8:7a:a1:f3:88:c1:23:89:f9:49:e2:11:89:b1: bc:a8:41:d6:e9:54:cf:d5:19:7b:ee:04:73:55:4a: 62:89:05:6b:09:9c:1b:f4:58:53:38:7d:bd:ea:1e: 1b:d3:f5:65:f7:26:e1:5a:2e:5b:da:79:f1:6e:38: 95:b1:ae:a5:57:56:2f:34:89:ec:ae:33:d6:00:c3: 8b:c1:db:67:00:a4:ac:b2:a7:d4:d5:26:ee:55:3e: 21:4a:cd:78:66:89:86:45:ca:e2:9b:b3:24:ef:11: 60:25:3e:eb:05:27:ea:33:1f:71:df:d9:96:24:40: bd:b0:db:c4:02:5f:2f:bd:a7:ce:7a:80:0b:00:62: ba:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:BC:E6:44:96:F5:40:2E:25:30:4D:C1:61:07:5D:FB:6D:0F:C5 X509v3 Authority Key Identifier: keyid:8E:53:4C:0C:18:2C:43:83:7F:2C:2B:D4:ED:CB:0B:8B:3A:BE:96:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlNMDBgsQ4N_LCvU7csLizq-luk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/137a56-f706-4785-b4cb-985476c55e43/1/jlNMDBgsQ4N_LCvU7csLizq-luk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:68:ac:03:df:9a:59:98:4a:dd:4d:40:5e:b4:fa:01:06:6e: 1c:eb:df:0e:cc:28:b6:80:6e:4c:25:5e:73:38:74:11:85:31: 8c:8e:a0:66:64:ee:e2:6c:61:b0:46:bd:ce:d2:1c:cd:86:ad: f7:96:46:cf:53:2d:40:b7:da:4b:c4:47:3c:20:ec:94:23:4c: f3:14:5e:f8:c8:b4:47:18:b5:b8:76:ed:64:7e:96:a3:0d:76: c5:6a:77:d2:4c:c7:e2:06:3d:84:b7:c6:b0:ab:77:b8:3a:16: f6:c1:5b:30:ff:c6:39:18:97:93:fa:d2:c7:d5:ea:41:05:21: 15:58:55:58:68:83:c1:b5:ca:44:f3:fd:49:34:cf:4f:67:eb: 88:00:40:88:8f:1d:e2:69:1a:0b:c8:f0:67:24:e1:32:0e:ef: d4:b8:7c:7b:2e:be:43:57:84:11:e9:44:8d:05:09:27:63:7f: 13:27:80:39:ed:6d:70:e6:9f:70:a3:20:b7:30:56:88:25:33: e5:e3:b1:55:20:f5:72:03:8b:f7:26:66:3e:98:6e:4b:97:cb: 36:e2:39:91:3d:11:00:b9:56:ce:09:13:d5:23:33:84:19:7e: d3:3e:da:71:5a:63:65:11:73:5c:95:7e:d1:22:bd:9a:83:c0: 69:cd:51:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHxf5iGTBo+aKOSBj1XXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNTM0YzBjMTgyYzQzODM3ZjJjMmJkNGVkY2IwYjhiM2Fi ZTk2ZTkwHhcNMjUxMjI4MDQwMjIwWhcNMjUxMjI5MDQwMjIwWjAzMTEwLwYDVQQD Eyg2OWFmYmNlNjQ0OTZmNTQwMmUyNTMwNGRjMTYxMDc1ZGZiNmQwZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupbjgvi9sOHio8/ALMT7PyG1Welh WRp4zANN10ArvVvpLSl8dv0BQWZI3ID7Kc5mHBbOufcVKPY2OsA+m2mXzxFzD655 CTOshc1hsX+faAVwqW/Dt/T+UnzODJz4i6VbMR9hurv05q7OHlqlwdU83c1Enozt kbDQuHqh84jBI4n5SeIRibG8qEHW6VTP1Rl77gRzVUpiiQVrCZwb9FhTOH296h4b 0/Vl9ybhWi5b2nnxbjiVsa6lV1YvNInsrjPWAMOLwdtnAKSssqfU1SbuVT4hSs14 ZomGRcrim7Mk7xFgJT7rBSfqMx9x39mWJEC9sNvEAl8vvafOeoALAGK6yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmvvOZElvVALiUwTcFhB137bQ/FMB8GA1UdIwQY MBaAFI5TTAwYLEODfywr1O3LC4s6vpbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2It OTg1NDc2YzU1ZTQzLzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xMzdhNTYtZjcwNi00Nzg1LWI0Y2ItOTg1NDc2YzU1ZTQz LzEvamxOTURCZ3NRNE5fTEN2VTdjc0xpenEtbHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2isA9+a WZhK3U1AXrT6AQZuHOvfDswotoBuTCVeczh0EYUxjI6gZmTu4mxhsEa9ztIczYat 95ZGz1MtQLfaS8RHPCDslCNM8xRe+Mi0Rxi1uHbtZH6Wow12xWp30kzH4gY9hLfG sKt3uDoW9sFbMP/GORiXk/rSx9XqQQUhFVhVWGiDwbXKRPP9STTPT2friABAiI8d 4mkaC8jwZyThMg7v1Lh8ey6+Q1eEEelEjQUJJ2N/EyeAOe1tcOafcKMgtzBWiCUz 5eOxVSD1cgOL9yZmPphuS5fLNuI5kT0RALlWzgkT1SMzhBl+0z7acVpjZRFzXJV+ 0SK9moPAac1Rvw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:24:55 2025 by rpki-client