This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft File: lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft (raw, json) Hash identifier: tGUNA6mFXfmYDeYBKfKEe1aNxFG8H4mdPKL892WMcuQ= Subject key identifier: B1:DE:F6:70:9A:7A:BC:3F:8F:42:88:40:A4:6A:71:E8:1B:3B:BD:12 Authority key identifier: 95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D Certificate issuer: /CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Certificate serial: 019B6C20EB9A8CFFDD7C3D708B7AF822FA92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft Manifest number: 05EB Signing time: Mon 29 Dec 2025 22:00:55 +0000 Manifest this update: Mon 29 Dec 2025 22:00:55 +0000 Manifest next update: Tue 30 Dec 2025 22:00:55 +0000 Files and hashes: 1: NWUftztBrG96_y2EzypECwRaWiE.roa (hash: iB3abFntFNLTwV5YoQUMjYIpTV58Rd0ggjc38BexLcc=) 2: lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl (hash: xPnoU92ErlxScfWX3D3PzWxML5vonbVbeNf2n4P24TQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:20:eb:9a:8c:ff:dd:7c:3d:70:8b:7a:f8:22:fa:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9546465ca5b86c25a02e52ecbf04c4cfbc07654d Validity Not Before: Dec 29 22:00:55 2025 GMT Not After : Dec 30 22:00:55 2025 GMT Subject: CN=b1def6709a7abc3f8f428840a46a71e81b3bbd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:8a:8e:d4:33:ca:e9:c4:60:77:8c:17:56: 9a:f5:68:6e:c6:fa:b0:c4:d3:d5:54:86:d9:9b:d5: 06:0b:38:a6:f4:2d:76:2c:bb:8a:93:b8:d3:d4:86: e6:5c:1f:a9:ad:2d:d6:ec:99:f6:7f:a5:2e:4e:40: aa:e0:64:d8:0b:d4:51:da:8c:90:59:cd:44:e3:dd: e9:3a:82:07:7c:96:60:fe:1f:e6:00:b9:9d:18:b4: 4f:44:23:69:f3:c7:3c:17:a8:9d:06:0e:02:ef:55: 4c:cc:72:5e:30:36:17:ff:04:a3:1f:b5:ca:a3:47: 6c:45:e9:36:77:a7:a4:1a:88:a4:e2:30:1b:3e:50: 52:d9:6c:c8:c9:54:14:7a:6c:57:d4:61:5a:97:8c: b0:35:c1:88:cf:63:a0:80:86:41:d7:32:86:a7:11: b2:9c:a1:af:40:98:17:4d:58:44:11:52:56:8c:08: f0:a3:b0:c2:cf:f6:3d:a7:0b:06:2b:a0:59:29:82: 72:ff:39:e6:22:5e:a9:25:d2:39:00:60:34:0b:87: 46:60:c1:ed:d6:10:ab:78:5a:1b:8e:6d:db:4f:f4: 79:58:40:00:5e:12:4b:92:ef:9b:29:0e:d0:1b:c0: 86:db:75:c4:c9:7f:34:8c:23:4a:2c:7a:90:90:df: 35:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:F6:70:9A:7A:BC:3F:8F:42:88:40:A4:6A:71:E8:1B:3B:BD:12 X509v3 Authority Key Identifier: keyid:95:46:46:5C:A5:B8:6C:25:A0:2E:52:EC:BF:04:C4:CF:BC:07:65:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUZGXKW4bCWgLlLsvwTEz7wHZU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c48b4c-0221-4646-bb72-05cf9db430b3/1/lUZGXKW4bCWgLlLsvwTEz7wHZU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3c:b8:03:5b:19:79:f4:03:c3:d5:c4:fb:5b:a8:7d:c8:c3: 32:db:dd:cf:33:8a:83:7f:6e:77:76:46:f3:65:cf:35:d9:01: d4:be:1c:f2:01:a6:d5:1a:2a:2f:2a:fe:6a:dd:4c:70:17:a6: 36:31:4b:63:c7:1b:24:5f:bf:40:2e:6c:06:3d:f2:86:ff:e2: 49:21:7f:48:d2:1a:45:6e:86:e8:76:3f:08:94:e1:23:f8:12: c5:37:fa:9e:b0:75:b5:d9:2e:50:0b:72:d5:41:38:14:b9:30: 47:56:cd:bf:c5:ae:64:cd:99:fe:b3:75:f1:1e:91:86:4c:a3: 73:cd:41:83:a0:59:7e:6e:1d:b4:51:16:31:c1:47:73:eb:4e: bc:ff:b2:aa:d8:72:8f:05:94:78:94:e4:14:f0:d2:d8:12:30: 85:9f:03:19:eb:46:55:bb:93:20:59:c3:88:61:89:11:67:54: 7c:ee:30:36:32:5d:5d:46:4b:ed:dd:9e:ed:82:7e:14:b6:4b: 8f:d8:74:99:e3:4c:ee:46:e3:8b:ae:08:4c:ed:c5:df:90:99: 6b:36:5c:3b:4b:0f:09:04:67:f0:ad:63:35:4d:d5:42:33:87: d5:f1:ff:48:be:72:86:81:0a:4c:00:f5:86:07:1b:97:8e:6a: 5b:f0:18:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsIOuajP/dfD1wi3r4IvqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NDY0NjVjYTViODZjMjVhMDJlNTJlY2JmMDRjNGNmYmMw NzY1NGQwHhcNMjUxMjI5MjIwMDU1WhcNMjUxMjMwMjIwMDU1WjAzMTEwLwYDVQQD EyhiMWRlZjY3MDlhN2FiYzNmOGY0Mjg4NDBhNDZhNzFlODFiM2JiZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+GKjtQzyunEYHeMF1aa9Whuxvqw xNPVVIbZm9UGCzim9C12LLuKk7jT1IbmXB+prS3W7Jn2f6UuTkCq4GTYC9RR2oyQ Wc1E493pOoIHfJZg/h/mALmdGLRPRCNp88c8F6idBg4C71VMzHJeMDYX/wSjH7XK o0dsRek2d6ekGoik4jAbPlBS2WzIyVQUemxX1GFal4ywNcGIz2OggIZB1zKGpxGy nKGvQJgXTVhEEVJWjAjwo7DCz/Y9pwsGK6BZKYJy/znmIl6pJdI5AGA0C4dGYMHt 1hCreFobjm3bT/R5WEAAXhJLku+bKQ7QG8CG23XEyX80jCNKLHqQkN81ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHe9nCaerw/j0KIQKRqcegbO70SMB8GA1UdIwQY MBaAFJVGRlyluGwloC5S7L8ExM+8B2VNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzIt MDVjZjlkYjQzMGIzLzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNDhiNGMtMDIyMS00NjQ2LWJiNzItMDVjZjlkYjQzMGIz LzEvbFVaR1hLVzRiQ1dnTGxMc3Z3VEV6N3dIWlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTy4A1sZ efQDw9XE+1uofcjDMtvdzzOKg39ud3ZG82XPNdkB1L4c8gGm1RoqLyr+at1McBem NjFLY8cbJF+/QC5sBj3yhv/iSSF/SNIaRW6G6HY/CJThI/gSxTf6nrB1tdkuUAty 1UE4FLkwR1bNv8WuZM2Z/rN18R6Rhkyjc81Bg6BZfm4dtFEWMcFHc+tOvP+yqthy jwWUeJTkFPDS2BIwhZ8DGetGVbuTIFnDiGGJEWdUfO4wNjJdXUZL7d2e7YJ+FLZL j9h0meNM7kbji64ITO3F35CZazZcO0sPCQRn8K1jNU3VQjOH1fH/SL5yhoEKTAD1 hgcbl45qW/AYWw== -----END CERTIFICATE-----Generated at Tue Dec 30 04:38:06 2025 by rpki-client