This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft File: lris-hevk77b78b-tGiPmGBLiq4.mft (raw, json) Hash identifier: Gl+IpSKwgaSTrMX/Tm9jE868H6+0+Jxl4iHowwatwDc= Subject key identifier: 16:EC:19:9E:EE:B4:77:57:28:18:84:68:5A:90:5D:FA:39:9C:F3:0F Authority key identifier: 96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE Certificate issuer: /CN=96b8acfa17af93bedbefc6feb4688f98604b8aae Certificate serial: 019AF12DF29AA2821DC61A60BA003E72F27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft Manifest number: 11EC Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: lCUgvhyBp0UKbHxKxUYkrgGL2EY.roa (hash: kCJqfKEC/8AcT5Dn8+T0849c1Ido/6VgqldxnSwXqNg=) 2: lris-hevk77b78b-tGiPmGBLiq4.crl (hash: /+amvyZFErtcxdVS3cggHsH9zhoWfSzZUIte1OazIYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f2:9a:a2:82:1d:c6:1a:60:ba:00:3e:72:f2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8acfa17af93bedbefc6feb4688f98604b8aae Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=16ec199eeeb47757281884685a905dfa399cf30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:31:f8:ca:64:3d:a3:cb:ed:e8:8f:fc:34: 8b:a8:ae:2c:31:6f:0c:ce:51:26:15:6c:2b:ae:dd: e5:d8:58:9f:0d:6b:e8:13:e3:a0:95:53:f7:71:79: a4:2b:ec:c1:79:b2:97:ed:b0:a9:18:e4:f3:54:e8: b1:e9:48:fa:22:b4:a6:43:5e:86:44:0c:f8:6a:b9: 0f:b9:11:6d:e5:01:1b:f2:3c:bb:fd:78:f9:d2:a8: 6a:9f:83:e1:79:dd:62:61:91:91:48:db:a0:ed:a9: bd:d0:c5:c0:16:81:b2:1f:2a:6e:12:e1:98:91:f7: 67:de:f6:75:f0:bf:e7:8e:a1:72:7b:03:a5:cc:17: 74:94:9f:de:17:f3:71:77:e9:06:d9:45:97:53:da: 25:d1:29:a4:8c:4e:be:f4:51:77:a0:9f:56:ca:93: 10:f0:0a:6d:d1:2c:8b:70:57:9e:ae:6c:83:ae:ea: 94:a0:b5:8b:12:82:2d:dc:a4:08:7f:14:e6:a8:9f: 7a:42:02:dc:92:30:e4:67:e9:e0:e7:46:28:ea:39: e5:fd:b0:d9:07:42:43:1c:77:54:60:e7:2c:1a:83: 5a:99:d3:85:1f:b6:50:ea:e0:b7:16:17:a7:41:ce: 7c:f8:d6:09:48:05:d4:30:f3:37:22:da:9a:dc:1c: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EC:19:9E:EE:B4:77:57:28:18:84:68:5A:90:5D:FA:39:9C:F3:0F X509v3 Authority Key Identifier: keyid:96:B8:AC:FA:17:AF:93:BE:DB:EF:C6:FE:B4:68:8F:98:60:4B:8A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lris-hevk77b78b-tGiPmGBLiq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c47b46-ccdc-4b5e-862e-bddff197c29d/1/lris-hevk77b78b-tGiPmGBLiq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:43:4e:43:7e:bd:63:96:a5:45:df:2e:eb:d3:94:25:a9:34: ec:ab:c6:01:13:8b:e6:0a:8f:72:5e:da:ec:ff:ce:e3:07:a6: 26:1c:7a:bc:7c:d5:f3:6d:04:4a:9d:6a:a8:46:ba:1e:85:9f: 0a:66:fd:bc:4d:85:58:56:cc:2a:19:69:4a:73:35:b9:cb:de: 40:e8:1b:c1:2b:ac:56:77:f2:f1:b9:55:b7:5f:84:8f:84:85: 95:c4:d2:b7:bd:19:98:bb:4e:27:99:e5:67:61:ad:a2:2b:3a: 73:e2:25:dd:b3:bf:ca:b3:27:0e:cd:b9:5b:0f:35:ca:d3:7c: 94:bd:d5:43:fd:56:65:21:e4:b0:fe:b9:26:08:78:81:2c:e8: 91:7b:90:27:d5:76:0c:d6:de:bc:8b:3f:a0:e1:2c:30:e0:de: 24:3c:57:e6:c0:45:87:76:6b:37:1e:97:50:c6:8a:a9:76:d5: 54:a1:9c:66:bf:bb:c2:fe:e3:b5:fd:ed:3a:e9:6f:2f:c1:80: 48:e4:b2:20:df:7e:1e:35:6d:92:40:87:80:96:80:cd:cf:5d: 91:5d:33:33:ac:64:10:a4:4b:0d:3c:ad:53:f1:a8:28:5c:01: 34:90:fb:d0:c9:f3:14:af:85:44:41:e0:2e:e1:41:9a:36:d4: 84:d3:e2:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfKaooIdxhpgugA+cvJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjhhY2ZhMTdhZjkzYmVkYmVmYzZmZWI0Njg4Zjk4NjA0 YjhhYWUwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EygxNmVjMTk5ZWVlYjQ3NzU3MjgxODg0Njg1YTkwNWRmYTM5OWNmMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLkx+MpkPaPL7eiP/DSLqK4sMW8M zlEmFWwrrt3l2FifDWvoE+OglVP3cXmkK+zBebKX7bCpGOTzVOix6Uj6IrSmQ16G RAz4arkPuRFt5QEb8jy7/Xj50qhqn4Phed1iYZGRSNug7am90MXAFoGyHypuEuGY kfdn3vZ18L/njqFyewOlzBd0lJ/eF/Nxd+kG2UWXU9ol0SmkjE6+9FF3oJ9WypMQ 8Apt0SyLcFeermyDruqUoLWLEoIt3KQIfxTmqJ96QgLckjDkZ+ng50Yo6jnl/bDZ B0JDHHdUYOcsGoNamdOFH7ZQ6uC3FhenQc58+NYJSAXUMPM3Itqa3BzjLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBbsGZ7utHdXKBiEaFqQXfo5nPMPMB8GA1UdIwQY MBaAFJa4rPoXr5O+2+/G/rRoj5hgS4quMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUt YmRkZmYxOTdjMjlkLzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9jNDdiNDYtY2NkYy00YjVlLTg2MmUtYmRkZmYxOTdjMjlk LzEvbHJpcy1oZXZrNzdiNzhiLXRHaVBtR0JMaXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0NOQ369 Y5alRd8u69OUJak07KvGAROL5gqPcl7a7P/O4wemJhx6vHzV820ESp1qqEa6HoWf Cmb9vE2FWFbMKhlpSnM1ucveQOgbwSusVnfy8blVt1+Ej4SFlcTSt70ZmLtOJ5nl Z2Gtois6c+Il3bO/yrMnDs25Ww81ytN8lL3VQ/1WZSHksP65Jgh4gSzokXuQJ9V2 DNbevIs/oOEsMODeJDxX5sBFh3ZrNx6XUMaKqXbVVKGcZr+7wv7jtf3tOulvL8GA SOSyIN9+HjVtkkCHgJaAzc9dkV0zM6xkEKRLDTytU/GoKFwBNJD70MnzFK+FREHg LuFBmjbUhNPiVg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:41 2025 by rpki-client