This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json) Hash identifier: fjPKiHSBUkIjvXsQRx34RDyM0Rr6Q8ddfo3UBot8E7E= Subject key identifier: 82:BB:F1:D2:7F:59:5E:A9:97:55:F0:74:B6:C7:04:BB:07:93:DF:B2 Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Certificate serial: 019B53AB26A1D79B80881C89033C385581B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft Manifest number: 140A Signing time: Thu 25 Dec 2025 04:01:23 +0000 Manifest this update: Thu 25 Dec 2025 04:01:23 +0000 Manifest next update: Fri 26 Dec 2025 04:01:23 +0000 Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=) 2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: PVUsH1T/TtnlVKINrSrbJOw55ICakOLNZxwIGYshPgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:26:a1:d7:9b:80:88:1c:89:03:3c:38:55:81:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Validity Not Before: Dec 25 04:01:23 2025 GMT Not After : Dec 26 04:01:23 2025 GMT Subject: CN=82bbf1d27f595ea99755f074b6c704bb0793dfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:34:a4:ce:f2:74:a4:c7:ff:b6:f0:c2:5d: 11:88:07:1e:1a:c1:e9:36:fa:28:b9:05:ef:16:56: 81:58:0f:16:e8:27:d8:43:38:8f:9e:3f:e5:ea:78: 71:53:f8:bf:dd:80:6f:62:81:c0:6b:ee:59:18:33: 88:86:ff:a5:f6:3a:ca:ce:c5:d9:ca:98:6f:5d:5a: 5e:03:ac:ae:4d:62:af:27:d6:bf:db:00:10:b0:0a: a5:5d:cd:52:97:a6:64:9e:c8:5e:4d:ae:c3:8a:24: c8:47:6c:c4:6f:2b:2d:fa:20:66:37:21:58:6b:ba: 4c:77:95:2d:8a:80:e0:19:07:16:2e:b8:f2:cc:77: ff:9d:be:2e:e1:3f:aa:ba:79:bc:f3:bc:c9:17:17: ed:35:cf:bb:fc:32:09:80:b7:88:52:1d:1e:cf:ce: 8b:27:2e:b2:96:2d:f2:bd:88:ad:8e:3c:96:2c:83: a5:f4:f0:60:6a:5d:13:b2:9d:cf:f3:f5:fa:c8:33: 16:00:bb:27:42:94:e7:83:1f:09:1c:1c:15:df:71: 43:9f:86:b8:e0:6e:27:44:7a:dd:64:92:e0:f7:bc: dc:74:ee:36:1e:80:cb:e7:60:be:86:48:40:cf:99: 9b:7c:96:c5:47:17:86:81:6a:60:73:ed:39:32:bf: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BB:F1:D2:7F:59:5E:A9:97:55:F0:74:B6:C7:04:BB:07:93:DF:B2 X509v3 Authority Key Identifier: keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0e:b6:99:f7:46:b0:aa:09:0d:04:93:00:48:a2:08:b1:8d: 29:f6:a3:3c:0d:02:44:26:b5:de:32:6e:ad:2c:45:3a:20:20: 98:be:0d:58:fd:d4:88:c1:2c:ab:9c:2d:55:9c:ad:58:e2:29: c4:a9:6e:51:a5:89:75:19:7d:ff:e1:8e:68:8d:bb:71:88:94: 81:e2:a4:fe:27:6b:b7:22:db:cf:fb:46:82:77:dd:36:b4:38: b1:ab:87:53:ae:4f:ab:42:48:61:4e:f8:c0:0b:84:f7:d5:9a: 40:42:a9:e0:5f:23:c6:79:ad:2b:4e:bb:1a:1d:8d:11:3c:b6: ce:d8:eb:c7:83:63:2b:6e:9c:a8:e8:e9:ec:46:3f:5b:54:a8: 8f:dc:89:33:b9:10:f3:05:9c:53:dd:2c:cc:77:f9:3d:2a:05: 10:4e:0f:48:d6:d0:03:9d:64:cd:f8:7d:85:44:86:da:00:7b: 4b:25:16:8b:1b:24:2b:99:0f:0c:4a:76:e7:12:e9:94:87:0e: f7:8e:f3:d0:0b:cb:c8:6f:e2:0a:44:c1:dc:b7:ab:34:7f:26: 09:64:82:b1:f7:ed:40:2a:7d:57:c3:aa:3c:9c:0a:a6:59:86: 2f:d7:51:5c:d7:c5:15:38:f9:9b:9e:cb:1e:8f:a5:8f:97:cd: 4f:dc:35:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqyah15uAiByJAzw4VYG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0 NGM3ZjcwHhcNMjUxMjI1MDQwMTIzWhcNMjUxMjI2MDQwMTIzWjAzMTEwLwYDVQQD Eyg4MmJiZjFkMjdmNTk1ZWE5OTc1NWYwNzRiNmM3MDRiYjA3OTNkZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXg0pM7ydKTH/7bwwl0RiAceGsHp NvoouQXvFlaBWA8W6CfYQziPnj/l6nhxU/i/3YBvYoHAa+5ZGDOIhv+l9jrKzsXZ yphvXVpeA6yuTWKvJ9a/2wAQsAqlXc1Sl6ZknsheTa7DiiTIR2zEbyst+iBmNyFY a7pMd5UtioDgGQcWLrjyzHf/nb4u4T+qunm887zJFxftNc+7/DIJgLeIUh0ez86L Jy6yli3yvYitjjyWLIOl9PBgal0Tsp3P8/X6yDMWALsnQpTngx8JHBwV33FDn4a4 4G4nRHrdZJLg97zcdO42HoDL52C+hkhAz5mbfJbFRxeGgWpgc+05Mr+MwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK78dJ/WV6pl1XwdLbHBLsHk9+yMB8GA1UdIwQY MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2 LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA62mfdG sKoJDQSTAEiiCLGNKfajPA0CRCa13jJurSxFOiAgmL4NWP3UiMEsq5wtVZytWOIp xKluUaWJdRl9/+GOaI27cYiUgeKk/idrtyLbz/tGgnfdNrQ4sauHU65Pq0JIYU74 wAuE99WaQEKp4F8jxnmtK067Gh2NETy2ztjrx4NjK26cqOjp7EY/W1Soj9yJM7kQ 8wWcU90szHf5PSoFEE4PSNbQA51kzfh9hUSG2gB7SyUWixskK5kPDEp25xLplIcO 947z0AvLyG/iCkTB3LerNH8mCWSCsfftQCp9V8OqPJwKplmGL9dRXNfFFTj5m57L Ho+lj5fNT9w1QQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:22:06 2025 by rpki-client