This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json) Hash identifier: SXT1hUx6Y0Nu9xTsMv7czXgaGtrPPGQ9PFF+eNYMuFs= Subject key identifier: 37:0B:3F:F1:C3:F1:6E:3C:24:BC:41:75:7C:20:99:3E:03:3D:49:B2 Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae Certificate serial: 019B2EFA6C913D1F33DDE78EE525A0EC48F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft Manifest number: 120C Signing time: Thu 18 Dec 2025 01:02:02 +0000 Manifest this update: Thu 18 Dec 2025 01:02:02 +0000 Manifest next update: Fri 19 Dec 2025 01:02:02 +0000 Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=) 2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: 71Iw/X6BL3COnWzy8LhqIL0VzvHAoJ0ko4UJ9kd47kQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:6c:91:3d:1f:33:dd:e7:8e:e5:25:a0:ec:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae Validity Not Before: Dec 18 01:02:02 2025 GMT Not After : Dec 19 01:02:02 2025 GMT Subject: CN=370b3ff1c3f16e3c24bc41757c20993e033d49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:bb:26:e2:7d:10:35:17:3d:48:1d:81:27: e0:26:f9:cd:2b:cd:e7:fc:06:e1:63:2f:d4:cd:3b: b5:41:95:d7:16:c1:e2:6f:f1:ed:7d:db:ef:70:ee: de:fd:23:ba:05:b8:ef:5c:33:8c:e8:72:5a:c9:18: e1:87:4a:d2:af:29:31:8c:f4:db:b5:35:ef:1c:bb: fe:d8:6f:aa:78:fb:0f:1a:4e:c2:97:53:f9:21:be: f0:53:c4:52:b5:ee:4b:b0:29:14:1a:ed:10:02:c3: 00:b5:af:e5:fd:3a:35:7f:a3:05:46:9d:f0:56:48: 27:fb:d4:36:97:d4:cd:a2:00:66:69:04:c1:c7:31: 01:82:7a:df:20:d4:a9:c7:be:b8:f0:d2:bc:f4:e6: 10:65:45:63:63:c5:78:10:8f:2f:94:e0:d5:de:0d: f5:e2:cc:d5:84:80:c6:26:fd:b0:ee:1f:b8:46:7c: 60:9a:8e:29:2f:1b:53:02:f3:04:7b:1e:1f:3f:4d: a3:80:9f:87:7c:70:ab:5f:ae:4c:7b:a1:f8:7c:b0: 22:e8:72:ed:e5:ba:7a:f4:b6:8b:eb:cd:c9:a2:29: 82:e9:27:f0:d7:3c:46:c7:82:e7:2b:6d:08:ba:ac: 8e:af:39:ef:24:45:4f:33:d8:0a:f8:a2:af:ea:24: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0B:3F:F1:C3:F1:6E:3C:24:BC:41:75:7C:20:99:3E:03:3D:49:B2 X509v3 Authority Key Identifier: keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:7f:9e:e3:13:7d:34:34:dc:20:21:ec:ff:05:ca:c9:4d:c5: a9:f0:38:4d:f1:59:42:cb:bc:ae:26:a1:c2:22:5b:4f:95:30: 46:89:e2:82:10:bf:e5:56:00:2f:b9:c2:a7:45:8e:ae:ec:4d: fe:b9:b5:ed:72:e1:54:cf:11:31:b2:c7:b6:90:0c:22:33:72: 2e:17:2a:be:ff:e6:f6:27:75:b9:0d:6d:4e:2d:a6:0c:80:d2: 3e:a6:23:e9:a1:f8:43:2f:63:f8:de:2b:ae:69:f3:7d:95:fd: 9f:c7:71:e4:86:32:e5:5f:ae:a5:14:3c:f6:b4:cd:9f:38:9d: e3:60:bc:2c:d7:ed:f7:93:bb:b1:05:a1:6c:ee:01:cf:19:c7: e1:8d:99:87:b7:21:57:5e:2d:fa:f7:1d:2f:52:f8:e9:93:b8: 2c:b5:53:99:f0:e8:1d:f2:0b:e2:4f:d5:a1:78:12:6b:cb:8b: 4f:d1:65:bb:45:c1:bb:49:61:80:f9:ed:f3:3e:99:04:36:1b: 68:9d:09:4c:46:31:a2:7f:6e:38:c2:00:e5:61:62:9f:37:e7: 41:57:c7:58:a8:f1:b7:4b:da:08:74:17:2c:5b:57:5c:53:f1: af:eb:11:07:49:a7:51:f3:91:4b:41:b5:88:06:7e:9c:b7:98: 6c:38:e9:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+myRPR8z3eeO5SWg7Ej5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjhhY2ZhMTdhZjkzYmVkYmVmYzZmZWI0Njg4Zjk4NjA0 YjhhYWUwHhcNMjUxMjE4MDEwMjAyWhcNMjUxMjE5MDEwMjAyWjAzMTEwLwYDVQQD EygzNzBiM2ZmMWMzZjE2ZTNjMjRiYzQxNzU3YzIwOTkzZTAzM2Q0OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSy7JuJ9EDUXPUgdgSfgJvnNK83n /AbhYy/UzTu1QZXXFsHib/HtfdvvcO7e/SO6BbjvXDOM6HJayRjhh0rSrykxjPTb tTXvHLv+2G+qePsPGk7Cl1P5Ib7wU8RSte5LsCkUGu0QAsMAta/l/To1f6MFRp3w Vkgn+9Q2l9TNogBmaQTBxzEBgnrfINSpx7648NK89OYQZUVjY8V4EI8vlODV3g31 4szVhIDGJv2w7h+4Rnxgmo4pLxtTAvMEex4fP02jgJ+HfHCrX65Me6H4fLAi6HLt 5bp69LaL683JoimC6Sfw1zxGx4LnK20IuqyOrznvJEVPM9gK+KKv6iT8ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcLP/HD8W48JLxBdXwgmT4DPUmyMB8GA1UdIwQY MBaAFJa4rPoXr5O+2+/G/rRoj5hgS4quMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUt YmRkZmYxOTdjMjlkLzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUtYmRkZmYxOTdjMjlk LzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuH+e4xN9 NDTcICHs/wXKyU3FqfA4TfFZQsu8riahwiJbT5UwRonighC/5VYAL7nCp0WOruxN /rm17XLhVM8RMbLHtpAMIjNyLhcqvv/m9id1uQ1tTi2mDIDSPqYj6aH4Qy9j+N4r rmnzfZX9n8dx5IYy5V+upRQ89rTNnzid42C8LNft95O7sQWhbO4BzxnH4Y2Zh7ch V14t+vcdL1L46ZO4LLVTmfDoHfIL4k/VoXgSa8uLT9Flu0XBu0lhgPnt8z6ZBDYb aJ0JTEYxon9uOMIA5WFinzfnQVfHWKjxt0vaCHQXLFtXXFPxr+sRB0mnUfORS0G1 iAZ+nLeYbDjphQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:04 2025 by rpki-client