This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json) Hash identifier: Jd463bprdTZH7uAOGYChv08qm+Ybx0Agqq0xAicu8So= Subject key identifier: 32:AA:E1:86:25:B5:BF:3B:C3:E7:FE:73:A5:4D:EC:56:19:73:15:E2 Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Certificate serial: 019B66FAF803CE83EE2A5D873C7D43419FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft Manifest number: 1414 Signing time: Sun 28 Dec 2025 22:01:22 +0000 Manifest this update: Sun 28 Dec 2025 22:01:22 +0000 Manifest next update: Mon 29 Dec 2025 22:01:22 +0000 Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=) 2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: ULETtpzVbX33GPQglRO8iSv19RYaUAGVasjftuMZn4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:f8:03:ce:83:ee:2a:5d:87:3c:7d:43:41:9f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Validity Not Before: Dec 28 22:01:22 2025 GMT Not After : Dec 29 22:01:22 2025 GMT Subject: CN=32aae18625b5bf3bc3e7fe73a54dec56197315e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:5b:4c:a6:28:df:68:60:6b:62:34:71:ce: f3:2f:78:10:ab:65:f6:79:9e:9f:b7:00:af:23:f5: 3b:8e:eb:c6:de:80:37:95:99:5f:b0:82:ac:f5:d7: 5a:22:5a:31:25:6f:21:1c:23:77:74:38:76:5e:77: f0:8a:0d:59:c8:48:50:2a:7d:5e:9c:fe:9e:44:c6: 4e:28:2e:f9:80:ee:62:26:03:41:14:b8:01:ed:ca: 8c:16:ce:56:b2:0c:c1:24:0d:d1:fd:c8:11:44:17: f5:bd:0b:92:f3:e8:b8:d0:12:1b:52:80:33:c7:2b: de:d1:85:f1:5c:5f:b9:cc:91:f5:3f:5d:d6:a0:68: da:dd:f0:0d:3f:70:ef:05:30:6c:b5:2b:3f:3c:e3: 35:77:84:e1:61:08:8c:82:3a:77:b4:c6:16:70:3e: 7c:ab:e3:d3:0c:f5:61:b0:1e:e4:cd:4d:d9:30:ee: 69:56:b7:d0:37:13:6a:0c:8c:1f:9a:93:73:8d:fb: 00:dc:de:d7:54:f0:06:bc:95:b0:aa:74:1d:83:7a: d7:1c:57:da:f1:d4:6a:73:8e:f3:d7:43:c5:9a:9f: 73:1f:13:06:3a:7d:46:a7:d1:19:5e:d5:79:c8:c3: 0f:0b:29:8f:c6:53:a3:70:8d:e9:75:05:ff:23:bf: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AA:E1:86:25:B5:BF:3B:C3:E7:FE:73:A5:4D:EC:56:19:73:15:E2 X509v3 Authority Key Identifier: keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2f:51:84:a4:96:bf:2e:c5:24:56:40:70:d8:95:39:a1:dc: 20:a0:9d:f7:3c:4c:71:18:06:dc:e4:f9:d4:ae:11:2c:76:d1: 03:dc:a8:ab:6a:92:4d:04:56:ce:6a:53:79:59:2e:a5:ea:1d: 0f:ab:97:ec:e1:2e:26:b4:e0:8a:78:93:9e:24:57:21:7f:ff: 04:9a:89:d2:94:a8:04:9b:84:b7:7a:6f:9b:10:7d:74:61:b2: 15:6d:dd:ef:a7:0e:1e:7f:49:64:a6:16:04:78:7f:f6:3b:f8: b2:4e:61:1d:a6:34:f5:c1:eb:51:09:00:06:06:57:c0:ca:80: 9e:3d:2e:e5:b5:d8:c1:7a:03:5a:bb:c5:87:c6:e3:78:83:13: 72:8b:ec:b9:43:03:59:2c:e6:ea:8a:41:9c:9d:60:40:25:70: e7:5f:83:89:87:98:2d:ab:65:c1:9b:5a:7f:01:38:6b:c4:c3: dc:74:c9:b2:04:71:2d:0f:22:1b:ce:81:77:0e:5a:5b:6e:73: 1e:2c:cf:8e:95:5a:5f:07:58:52:b5:87:9a:88:44:3d:fd:d1: ff:3c:99:de:ad:08:b6:3b:ac:d6:1e:55:33:dd:2c:59:f3:4c: f8:d7:a5:94:4d:d9:14:8c:63:28:10:70:19:43:14:bc:be:49: 05:39:63:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+vgDzoPuKl2HPH1DQZ+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0 NGM3ZjcwHhcNMjUxMjI4MjIwMTIyWhcNMjUxMjI5MjIwMTIyWjAzMTEwLwYDVQQD EygzMmFhZTE4NjI1YjViZjNiYzNlN2ZlNzNhNTRkZWM1NjE5NzMxNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7pbTKYo32hga2I0cc7zL3gQq2X2 eZ6ftwCvI/U7juvG3oA3lZlfsIKs9ddaIloxJW8hHCN3dDh2Xnfwig1ZyEhQKn1e nP6eRMZOKC75gO5iJgNBFLgB7cqMFs5WsgzBJA3R/cgRRBf1vQuS8+i40BIbUoAz xyve0YXxXF+5zJH1P13WoGja3fANP3DvBTBstSs/POM1d4ThYQiMgjp3tMYWcD58 q+PTDPVhsB7kzU3ZMO5pVrfQNxNqDIwfmpNzjfsA3N7XVPAGvJWwqnQdg3rXHFfa 8dRqc47z10PFmp9zHxMGOn1Gp9EZXtV5yMMPCymPxlOjcI3pdQX/I7/lTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKq4YYltb87w+f+c6VN7FYZcxXiMB8GA1UdIwQY MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2 LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky9RhKSW vy7FJFZAcNiVOaHcIKCd9zxMcRgG3OT51K4RLHbRA9yoq2qSTQRWzmpTeVkupeod D6uX7OEuJrTginiTniRXIX//BJqJ0pSoBJuEt3pvmxB9dGGyFW3d76cOHn9JZKYW BHh/9jv4sk5hHaY09cHrUQkABgZXwMqAnj0u5bXYwXoDWrvFh8bjeIMTcovsuUMD WSzm6opBnJ1gQCVw51+DiYeYLatlwZtafwE4a8TD3HTJsgRxLQ8iG86Bdw5aW25z HizPjpVaXwdYUrWHmohEPf3R/zyZ3q0Itjus1h5VM90sWfNM+NellE3ZFIxjKBBw GUMUvL5JBTljGg== -----END CERTIFICATE-----Generated at Mon Dec 29 06:48:48 2025 by rpki-client