This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft File: lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft (raw, json) Hash identifier: CmRiHKdkTGaYMglnvhM9/FEFxth4Ma12bjbEBDyw50w= Subject key identifier: 50:13:DD:3B:6E:3F:A6:8F:A4:C0:DA:1C:15:79:2D:56:0C:9D:FB:FA Authority key identifier: 96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A Certificate issuer: /CN=96edc682a944005117b8febed6dc8bac060f329a Certificate serial: 019B3D2325CCB46A57B026F657BC7CCBD881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft Manifest number: 067D Signing time: Sat 20 Dec 2025 19:01:12 +0000 Manifest this update: Sat 20 Dec 2025 19:01:12 +0000 Manifest next update: Sun 21 Dec 2025 19:01:12 +0000 Files and hashes: 1: GuRsW05KP8iWPMSp7vb_kToeinc.roa (hash: xtfuu25jYNsHOYwVnrJ3v+/nadbPfCZESTGZfRgdXIM=) 2: lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl (hash: feS3fLTGWenn1GgsASDoChs2w/7cv+SX5kdMtpzA3pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:25:cc:b4:6a:57:b0:26:f6:57:bc:7c:cb:d8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96edc682a944005117b8febed6dc8bac060f329a Validity Not Before: Dec 20 19:01:12 2025 GMT Not After : Dec 21 19:01:12 2025 GMT Subject: CN=5013dd3b6e3fa68fa4c0da1c15792d560c9dfbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:a2:f6:a1:1d:48:38:63:c1:4f:22:62:56: 9c:f2:06:f0:e4:38:e1:85:d7:c1:11:53:68:f4:2f: 9d:63:b5:7b:7f:6c:b0:95:26:f8:b6:13:cf:47:7b: 4d:f1:80:a0:3e:16:84:9b:2b:33:8a:5c:7f:35:7b: d7:87:ac:df:d7:77:e2:98:2d:cf:c3:f4:49:9d:12: 15:0c:9b:61:76:56:c4:6e:dc:4d:6d:ec:20:20:55: cf:3a:14:34:3b:1d:23:54:2b:ed:cb:1a:13:0c:7f: 8b:b3:e5:73:66:1e:e1:33:42:fe:e5:63:4c:ca:74: 5b:95:fb:89:82:fb:9a:d0:db:0f:ba:03:4b:4f:83: 5e:8e:6c:2b:96:74:19:47:0e:98:11:b4:1f:d9:7e: b9:cd:9a:bb:6b:01:70:f1:7b:2e:e9:67:34:2b:0d: 1f:f1:18:e6:24:9b:9b:49:d5:f9:6a:0e:ae:fe:ce: 63:e0:38:04:a6:6e:bf:56:5f:1a:ad:04:d5:56:50: 35:aa:c5:fd:ea:61:77:95:68:4f:16:47:ae:48:fb: ff:16:be:de:1e:93:9d:c1:67:cb:e4:a3:d1:e0:ff: 33:24:3f:d4:2f:b6:f1:0c:de:75:16:d1:62:02:29: f8:f4:0a:3b:b9:c6:8e:bc:49:1f:cf:07:cf:21:ca: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:13:DD:3B:6E:3F:A6:8F:A4:C0:DA:1C:15:79:2D:56:0C:9D:FB:FA X509v3 Authority Key Identifier: keyid:96:ED:C6:82:A9:44:00:51:17:B8:FE:BE:D6:DC:8B:AC:06:0F:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lu3GgqlEAFEXuP6-1tyLrAYPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c12436-61be-42e0-ad34-7f8a6750b8d7/1/lu3GgqlEAFEXuP6-1tyLrAYPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:e0:ee:57:24:ad:9d:e0:e1:af:40:80:31:85:c0:42:69:21: 5b:44:c4:06:b3:d6:a9:09:b9:93:3e:97:16:56:a5:b2:51:85: 3a:59:63:ad:49:85:26:9b:39:ae:30:8e:df:93:cb:f7:f1:18: 93:f1:1a:e1:32:c4:2b:8d:9c:30:6f:f3:74:56:c0:8a:75:0c: 68:f7:e9:69:57:ab:90:d7:92:a8:93:43:1f:8d:aa:e1:22:9b: 50:74:05:04:52:9c:fd:48:33:0b:90:98:9e:79:c7:5f:fa:52: bb:83:5a:92:94:5c:ac:51:18:6f:42:23:e6:87:e8:d1:14:04: fd:b6:b9:7a:0b:7c:46:da:41:af:54:78:c4:b9:d8:83:ce:fc: 64:85:61:be:4f:45:d3:47:07:7d:9a:05:c0:a0:61:f3:ef:f1: 84:c3:29:88:b2:61:c2:a2:ce:69:17:51:88:bc:dc:75:fc:53: e0:c3:62:e5:4f:9a:1b:88:da:02:34:bb:71:c8:e0:c7:a5:86: 1a:92:cb:64:19:0d:5e:27:5d:7b:93:2b:2d:34:e7:82:81:8e: 30:ae:2b:7f:6a:61:ac:72:1f:37:3b:0d:53:23:24:5c:c1:95: ba:25:b4:e7:72:4e:47:e8:35:09:80:96:63:c8:54:63:aa:18: 51:d8:df:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyXMtGpXsCb2V7x8y9iBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZWRjNjgyYTk0NDAwNTExN2I4ZmViZWQ2ZGM4YmFjMDYw ZjMyOWEwHhcNMjUxMjIwMTkwMTEyWhcNMjUxMjIxMTkwMTEyWjAzMTEwLwYDVQQD Eyg1MDEzZGQzYjZlM2ZhNjhmYTRjMGRhMWMxNTc5MmQ1NjBjOWRmYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD6i9qEdSDhjwU8iYlac8gbw5Djh hdfBEVNo9C+dY7V7f2ywlSb4thPPR3tN8YCgPhaEmyszilx/NXvXh6zf13fimC3P w/RJnRIVDJthdlbEbtxNbewgIFXPOhQ0Ox0jVCvtyxoTDH+Ls+VzZh7hM0L+5WNM ynRblfuJgvua0NsPugNLT4NejmwrlnQZRw6YEbQf2X65zZq7awFw8Xsu6Wc0Kw0f 8RjmJJubSdX5ag6u/s5j4DgEpm6/Vl8arQTVVlA1qsX96mF3lWhPFkeuSPv/Fr7e HpOdwWfL5KPR4P8zJD/UL7bxDN51FtFiAin49Ao7ucaOvEkfzwfPIcoY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAT3TtuP6aPpMDaHBV5LVYMnfv6MB8GA1UdIwQY MBaAFJbtxoKpRABRF7j+vtbci6wGDzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQt N2Y4YTY3NTBiOGQ3LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jMTI0MzYtNjFiZS00MmUwLWFkMzQtN2Y4YTY3NTBiOGQ3 LzEvbHUzR2dxbEVBRkVYdVA2LTF0eUxyQVlQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwuDuVySt neDhr0CAMYXAQmkhW0TEBrPWqQm5kz6XFlalslGFOlljrUmFJps5rjCO35PL9/EY k/Ea4TLEK42cMG/zdFbAinUMaPfpaVerkNeSqJNDH42q4SKbUHQFBFKc/UgzC5CY nnnHX/pSu4NakpRcrFEYb0Ij5ofo0RQE/ba5egt8RtpBr1R4xLnYg878ZIVhvk9F 00cHfZoFwKBh8+/xhMMpiLJhwqLOaRdRiLzcdfxT4MNi5U+aG4jaAjS7ccjgx6WG GpLLZBkNXidde5MrLTTngoGOMK4rf2phrHIfNzsNUyMkXMGVuiW053JOR+g1CYCW Y8hUY6oYUdjfBg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:37 2025 by rpki-client