This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft File: lugqtki4s_iFdWnDmvlUSt_BfAE.mft (raw, json) Hash identifier: gimffmNXygvOYOpN0qmug/ts/0WeqsKnHA4+sDTHHSo= Subject key identifier: BC:DE:F0:C6:DE:78:29:3D:A7:30:7E:82:05:1A:C6:4C:4C:D2:1F:36 Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Certificate serial: 019B56756527CA0CF63206E501072673D920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft Manifest number: 0E51 Signing time: Thu 25 Dec 2025 17:01:32 +0000 Manifest this update: Thu 25 Dec 2025 17:01:32 +0000 Manifest next update: Fri 26 Dec 2025 17:01:32 +0000 Files and hashes: 1: 1-Dw1PHMy6IBe_-mHLEz4ebvy2w0.roa (hash: Ah1oxFMhZvVxbnGr/mLU8GHb80xSkSSdAwDT+auz+vQ=) 2: 7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (hash: VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=) 3: lugqtki4s_iFdWnDmvlUSt_BfAE.crl (hash: oR4aFdfkY+G9ewPRe13LoaqjcvwqxpMXD6B+erzmD6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:75:65:27:ca:0c:f6:32:06:e5:01:07:26:73:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Validity Not Before: Dec 25 17:01:32 2025 GMT Not After : Dec 26 17:01:32 2025 GMT Subject: CN=bcdef0c6de78293da7307e82051ac64c4cd21f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b0:c8:29:8b:62:ea:d9:5e:04:2d:3b:f1:8b: df:c8:17:b3:47:ba:a0:3a:3a:b1:23:6c:20:b3:3d: d0:5d:08:48:6f:2d:f7:66:17:21:31:09:00:75:0e: 96:0b:f8:f4:d7:dd:09:ad:92:10:8c:4f:ae:be:ea: e3:e5:5d:ae:6c:2f:07:6e:ee:46:03:77:0d:c8:f6: 7a:9c:91:d5:c7:b5:b7:8b:c3:aa:c9:92:15:e1:83: 23:12:85:7f:20:90:4d:e6:29:02:f3:94:4c:ec:44: cb:83:d8:7f:02:18:5e:bc:62:7c:5d:c9:b8:30:a2: 49:50:9c:b2:e7:4a:84:a7:1a:e6:96:1a:95:7f:fa: 9e:30:46:27:37:2f:59:97:da:19:ee:f6:93:ae:39: a1:73:ce:ba:ff:1a:e6:1a:31:c3:9a:ad:6f:be:ae: 54:7f:2d:e0:23:ea:c4:d0:f7:82:fc:c3:37:01:36: 01:35:37:d6:77:cd:fa:48:b6:74:50:de:27:44:ac: 90:5f:1a:50:43:7f:8a:f2:cc:4c:41:2b:02:83:8b: d8:1f:a1:3a:2b:0c:c9:85:01:49:63:68:a5:5a:13: c1:29:78:2c:12:7d:7b:2e:a3:07:a7:e0:1e:cb:7d: 5c:5b:fe:2c:76:dd:4d:37:96:82:8c:63:dd:19:45: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:F0:C6:DE:78:29:3D:A7:30:7E:82:05:1A:C6:4C:4C:D2:1F:36 X509v3 Authority Key Identifier: keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7b:43:32:7c:e1:4e:1c:cc:9c:d1:df:52:9f:d1:dc:2f:eb: ab:05:1f:ca:d5:3d:13:29:e5:98:8c:07:9a:4d:05:30:fb:e7: 42:0e:ee:90:5c:07:56:0c:18:cd:72:e6:2a:1d:01:88:ae:0a: b9:81:f0:ab:d7:cc:93:bc:3e:88:7c:9e:ce:85:2c:2d:4d:58: 47:1e:4d:f9:48:36:3e:cb:34:06:d8:be:28:07:79:45:88:34: 72:73:ac:b0:82:b4:0c:70:d8:bb:da:af:e8:87:35:76:80:c0: 6b:36:e2:a6:bb:02:24:8b:f0:7c:0a:5c:5f:e0:ca:34:25:6d: 7f:d8:8a:be:16:6e:88:91:fd:fc:d2:16:fe:51:72:cf:2f:32: 4f:15:fb:e6:dd:55:7a:d6:17:68:44:ed:b5:d7:7f:cb:88:1a: db:82:db:66:71:63:86:ac:ed:d0:30:51:e5:92:16:68:46:55: 81:a8:65:d0:f0:a6:43:32:70:87:1a:12:78:ab:74:02:97:c6: 11:f7:3f:0e:49:10:aa:b7:e6:7d:79:f1:03:9f:a9:a4:96:09: b5:eb:42:75:e8:c7:ce:7f:76:66:65:39:a5:a4:a7:38:b0:dc: 83:11:65:45:29:07:23:4e:2b:36:ae:1c:63:ab:49:5f:d4:05: 54:01:a6:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWdWUnygz2MgblAQcmc9kgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZj MTdjMDEwHhcNMjUxMjI1MTcwMTMyWhcNMjUxMjI2MTcwMTMyWjAzMTEwLwYDVQQD EyhiY2RlZjBjNmRlNzgyOTNkYTczMDdlODIwNTFhYzY0YzRjZDIxZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LDIKYti6tleBC078YvfyBezR7qg OjqxI2wgsz3QXQhIby33ZhchMQkAdQ6WC/j0190JrZIQjE+uvurj5V2ubC8Hbu5G A3cNyPZ6nJHVx7W3i8OqyZIV4YMjEoV/IJBN5ikC85RM7ETLg9h/AhhevGJ8Xcm4 MKJJUJyy50qEpxrmlhqVf/qeMEYnNy9Zl9oZ7vaTrjmhc866/xrmGjHDmq1vvq5U fy3gI+rE0PeC/MM3ATYBNTfWd836SLZ0UN4nRKyQXxpQQ3+K8sxMQSsCg4vYH6E6 KwzJhQFJY2ilWhPBKXgsEn17LqMHp+Aey31cW/4sdt1NN5aCjGPdGUW3RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLze8MbeeCk9pzB+ggUaxkxM0h82MB8GA1UdIwQY MBaAFJboKrZIuLP4hXVpw5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMt MTkzYWQ1Yzc5YjgzLzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5Yjgz LzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHtDMnzh ThzMnNHfUp/R3C/rqwUfytU9EynlmIwHmk0FMPvnQg7ukFwHVgwYzXLmKh0BiK4K uYHwq9fMk7w+iHyezoUsLU1YRx5N+Ug2Pss0Bti+KAd5RYg0cnOssIK0DHDYu9qv 6Ic1doDAazbiprsCJIvwfApcX+DKNCVtf9iKvhZuiJH9/NIW/lFyzy8yTxX75t1V etYXaETttdd/y4ga24LbZnFjhqzt0DBR5ZIWaEZVgahl0PCmQzJwhxoSeKt0ApfG Efc/DkkQqrfmfXnxA5+ppJYJtetCdejHzn92ZmU5paSnOLDcgxFlRSkHI04rNq4c Y6tJX9QFVAGm+w== -----END CERTIFICATE-----Generated at Thu Dec 25 19:41:57 2025 by rpki-client