This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft File: lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json) Hash identifier: NvVnQmyoPWntwORf62pNy8NVpzn8YQanERUCakoMoDQ= Subject key identifier: B9:62:A3:B2:23:55:23:84:15:68:7C:44:58:5D:7D:DD:96:B6:57:85 Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 Certificate issuer: /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Certificate serial: 019B4A0336705792F112BB64D8A39C08009D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft Manifest number: 1405 Signing time: Tue 23 Dec 2025 07:01:23 +0000 Manifest this update: Tue 23 Dec 2025 07:01:23 +0000 Manifest next update: Wed 24 Dec 2025 07:01:23 +0000 Files and hashes: 1: V951RqjYUqqNTOCnWY4hHiyU0dI.roa (hash: NM+yo7N0AeqhrBUOSbPrA/tZY2hhs3N8wJ0kX4oE1ak=) 2: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: nyJ8MOTxx2KdaG9Q564eAaoXxH8thnv8W4hyprDuzdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:36:70:57:92:f1:12:bb:64:d8:a3:9c:08:00:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7 Validity Not Before: Dec 23 07:01:23 2025 GMT Not After : Dec 24 07:01:23 2025 GMT Subject: CN=b962a3b22355238415687c44585d7ddd96b65785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:3c:94:01:a9:43:e0:c8:e5:90:35:42:ca: 89:02:aa:f1:b1:bd:cd:65:b5:09:d2:a0:90:94:9b: 6f:6b:9e:6e:5d:af:78:f2:22:2f:7b:b1:70:f6:28: 46:fa:66:67:22:52:3f:2f:19:9a:4c:51:95:2b:f4: 92:62:29:7e:7a:aa:7d:de:58:bd:d5:76:ed:3e:fb: 72:31:7f:94:66:0f:de:25:f5:86:14:9f:ec:9d:5a: 88:24:ef:2b:f4:08:ef:83:f4:5b:98:b2:a3:e9:74: a1:cc:48:58:fe:e5:ae:6e:a5:fa:7c:5f:83:5d:73: f7:7e:ac:4d:b2:a8:cc:c0:4a:27:f7:71:2b:ac:f3: 66:6a:72:31:3d:de:a1:cb:e5:e0:d5:83:1f:b6:2c: 6d:f8:b2:3d:c7:53:a6:c3:49:8f:75:65:ac:2e:de: 5f:03:8b:99:17:05:43:4a:9a:8b:fa:21:10:00:63: e5:45:e5:96:fa:cb:ff:22:50:99:26:77:ba:0d:44: 2c:01:59:60:03:7b:b0:23:8f:1d:fa:ed:d7:c3:cb: 80:99:18:32:b9:32:0e:99:40:d5:b2:10:53:33:8e: 30:41:ff:48:75:70:8c:9f:60:b3:e1:be:de:88:95: 46:51:da:f9:70:2e:05:32:e1:a6:86:b6:6a:d2:79: ce:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:A3:B2:23:55:23:84:15:68:7C:44:58:5D:7D:DD:96:B6:57:85 X509v3 Authority Key Identifier: keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d1:84:34:4f:af:a1:8d:29:a6:ae:58:48:c8:23:67:af:87: f5:9e:aa:5c:30:21:ab:13:59:a2:71:0c:3d:94:f3:07:68:5e: ec:85:74:39:d7:06:78:91:65:4b:fa:69:28:df:a5:93:3e:53: 20:a0:c1:5f:58:ab:d0:3d:8b:2f:84:58:ca:09:46:81:5d:92: a0:1d:81:e8:5c:67:ae:2a:88:21:58:2e:01:fb:dc:74:0d:9a: 3a:04:43:8d:8e:29:a6:9e:d9:ba:6d:f0:12:97:ba:7b:d1:23: 36:7b:40:7e:ab:ea:7f:55:1d:64:b2:af:b5:52:97:c3:09:0b: 33:6c:d0:af:6c:99:e7:18:31:78:bd:72:42:bc:c0:72:7d:4a: 46:6c:10:6d:18:a9:93:ac:fc:b0:ba:bd:ef:98:83:1a:fc:18: 74:4b:27:8f:25:be:d2:d3:1b:ce:ae:35:9e:24:8d:34:dc:8d: 95:16:a5:2c:39:35:7f:c6:4a:c9:5f:be:46:66:6c:b7:39:41: e2:94:f9:05:6c:76:74:93:9b:6d:bb:e4:6a:78:1a:f2:ca:93: 5a:aa:b2:52:18:ae:d4:bc:53:52:a9:d0:95:04:1b:2d:30:14: 86:00:03:5b:2a:3d:0b:02:18:c9:55:01:70:6a:f6:52:39:36: 25:77:9e:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAzZwV5LxErtk2KOcCACdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MTUxZmJiNzFlNDFiMmQxMDYzZDNiMTExNDFhZGExYTg0 NGM3ZjcwHhcNMjUxMjIzMDcwMTIzWhcNMjUxMjI0MDcwMTIzWjAzMTEwLwYDVQQD EyhiOTYyYTNiMjIzNTUyMzg0MTU2ODdjNDQ1ODVkN2RkZDk2YjY1Nzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntQ8lAGpQ+DI5ZA1QsqJAqrxsb3N ZbUJ0qCQlJtva55uXa948iIve7Fw9ihG+mZnIlI/LxmaTFGVK/SSYil+eqp93li9 1XbtPvtyMX+UZg/eJfWGFJ/snVqIJO8r9Ajvg/RbmLKj6XShzEhY/uWubqX6fF+D XXP3fqxNsqjMwEon93ErrPNmanIxPd6hy+Xg1YMftixt+LI9x1Omw0mPdWWsLt5f A4uZFwVDSpqL+iEQAGPlReWW+sv/IlCZJne6DUQsAVlgA3uwI48d+u3Xw8uAmRgy uTIOmUDVshBTM44wQf9IdXCMn2Cz4b7eiJVGUdr5cC4FMuGmhrZq0nnOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlio7IjVSOEFWh8RFhdfd2WtleFMB8GA1UdIwQY MBaAFJUVH7tx5BstEGPTsRFBraGoRMf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYt OWZkODM2ZThiMzY2LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xODVmZTktMjUxNy00MzhjLThlMjYtOWZkODM2ZThiMzY2 LzEvbFJVZnUzSGtHeTBRWTlPeEVVR3RvYWhFeF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtGENE+v oY0ppq5YSMgjZ6+H9Z6qXDAhqxNZonEMPZTzB2he7IV0OdcGeJFlS/ppKN+lkz5T IKDBX1ir0D2LL4RYyglGgV2SoB2B6FxnriqIIVguAfvcdA2aOgRDjY4ppp7Zum3w Epe6e9EjNntAfqvqf1UdZLKvtVKXwwkLM2zQr2yZ5xgxeL1yQrzAcn1KRmwQbRip k6z8sLq975iDGvwYdEsnjyW+0tMbzq41niSNNNyNlRalLDk1f8ZKyV++RmZstzlB 4pT5BWx2dJObbbvkanga8sqTWqqyUhiu1LxTUqnQlQQbLTAUhgADWyo9CwIYyVUB cGr2Ujk2JXeedg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:53 2025 by rpki-client