This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json) Hash identifier: EDwe8UADekXZmS032jkxVsjRRocz2LyWuK+CxbR3STw= Subject key identifier: DF:12:1A:0E:D4:96:BC:E2:BC:65:7B:BA:46:92:C3:C0:45:00:24:5C Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Certificate serial: 019AF27677A43EFE654C071F828F5902E7F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=) 2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: 0wuf4MthOibaK/NHbdvvaTyEqTGTeJVzgzfW6SIq6fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:77:a4:3e:fe:65:4c:07:1f:82:8f:59:02:e7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=df121a0ed496bce2bc657bba4692c3c04500245c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:16:95:4b:26:d1:c6:9a:4c:34:e8:8c:ad: e2:36:26:67:45:5f:26:fd:82:d7:f6:4c:8d:04:ac: f4:18:6b:2e:c8:e2:ec:3d:a3:12:c2:3e:b4:58:12: a6:78:63:b9:6e:61:d8:a5:78:ce:d3:9c:01:1d:c8: 12:df:7c:19:20:76:3a:b4:69:9f:02:3b:e0:81:61: b4:2a:54:a0:43:9b:22:1f:e3:47:aa:57:87:77:b2: aa:d9:17:f1:ec:1e:31:0f:9d:d9:12:2a:ba:7a:5a: 37:6e:16:be:24:79:a7:90:27:ad:b9:2f:4f:22:76: b0:8c:73:53:c4:cf:cf:3f:db:2b:83:6c:fc:ec:4c: 12:79:6e:78:6f:13:91:64:5f:39:fc:89:2f:6b:37: d7:a7:62:f0:b2:18:5c:23:42:fd:58:4b:16:16:1b: 4f:c4:67:7b:78:ba:dc:89:48:cd:b5:a3:f8:62:d8: fb:dd:95:05:ea:8e:e3:a1:15:b9:6d:8d:9e:e3:d9: 4a:b0:2d:f4:5b:67:0b:de:bf:c2:40:81:99:e0:e8: 9e:63:e9:dd:0a:c2:16:9a:fa:ac:2f:2a:5a:90:78: 8f:47:fe:8a:8c:c2:63:f0:9b:36:de:03:4c:72:d8: fe:82:09:5f:aa:db:fc:2e:89:ac:82:9e:f3:f9:49: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:1A:0E:D4:96:BC:E2:BC:65:7B:BA:46:92:C3:C0:45:00:24:5C X509v3 Authority Key Identifier: keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:91:75:92:02:3d:37:c2:9f:24:0a:2d:15:c2:0b:b6:ff:ab: 28:7f:1e:73:8f:7d:e0:51:d7:54:50:2c:03:d5:53:c8:e4:ed: f4:86:01:9f:3c:95:2b:cf:89:d8:69:cc:56:77:00:bc:04:30: ed:61:c4:70:fb:f4:5a:7c:3b:05:02:f0:ca:bb:03:14:c3:cc: 99:1a:80:a1:de:c8:95:77:96:4c:89:4d:dc:2b:5b:11:6e:38: 56:67:2b:5b:19:10:10:bf:e2:7c:7a:4a:c0:e1:32:8d:d0:35: 71:e5:64:d3:f8:ac:51:14:85:f6:9f:ea:a9:4c:82:6b:15:60: 8b:d7:cc:42:93:61:d1:d0:2f:68:7a:1e:d6:18:62:9a:35:9a: 3f:93:c7:74:40:8d:f7:c3:65:56:97:c0:f3:44:a9:2c:e9:13: 04:8a:37:ee:60:c9:3b:90:6b:18:ed:81:8c:b0:94:17:c4:d7: 66:4f:2f:ed:aa:31:c3:6e:62:04:84:e9:c1:eb:41:b1:0a:45: 70:6b:5b:0b:dc:12:bb:92:8d:b6:1f:69:f3:39:a3:e1:54:23: ca:b3:ce:61:37:a0:5b:57:32:4b:70:91:ca:f7:3c:9d:74:96: 2a:94:97:a9:4a:89:f4:b5:35:0c:fd:cf:57:69:83:6f:e4:73: 5a:ed:6e:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnekPv5lTAcfgo9ZAuf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx NWE0ZWIwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EyhkZjEyMWEwZWQ0OTZiY2UyYmM2NTdiYmE0NjkyYzNjMDQ1MDAyNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTMWlUsm0caaTDTojK3iNiZnRV8m /YLX9kyNBKz0GGsuyOLsPaMSwj60WBKmeGO5bmHYpXjO05wBHcgS33wZIHY6tGmf AjvggWG0KlSgQ5siH+NHqleHd7Kq2Rfx7B4xD53ZEiq6elo3bha+JHmnkCetuS9P InawjHNTxM/PP9srg2z87EwSeW54bxORZF85/IkvazfXp2LwshhcI0L9WEsWFhtP xGd7eLrciUjNtaP4Ytj73ZUF6o7joRW5bY2e49lKsC30W2cL3r/CQIGZ4OieY+nd CsIWmvqsLypakHiPR/6KjMJj8Js23gNMctj+gglfqtv8Lomsgp7z+UmaOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8SGg7UlrzivGV7ukaSw8BFACRcMB8GA1UdIwQY MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5F1kgI9 N8KfJAotFcILtv+rKH8ec4994FHXVFAsA9VTyOTt9IYBnzyVK8+J2GnMVncAvAQw 7WHEcPv0Wnw7BQLwyrsDFMPMmRqAod7IlXeWTIlN3CtbEW44VmcrWxkQEL/ifHpK wOEyjdA1ceVk0/isURSF9p/qqUyCaxVgi9fMQpNh0dAvaHoe1hhimjWaP5PHdECN 98NlVpfA80SpLOkTBIo37mDJO5BrGO2BjLCUF8TXZk8v7aoxw25iBITpwetBsQpF cGtbC9wSu5KNth9p8zmj4VQjyrPOYTegW1cyS3CRyvc8nXSWKpSXqUqJ9LU1DP3P V2mDb+RzWu1uww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:35 2025 by rpki-client