This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json) Hash identifier: nI2TMCokPK8VHDYjFYDCX8G1kJSWV+GcQ38ZgtXF9Kg= Subject key identifier: 66:F4:5C:51:29:6B:B7:FF:B8:B2:1C:BB:60:D3:74:53:32:47:EA:80 Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Certificate serial: 019AF0BF54A563333E54AD275A5D1A9B75F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft Manifest number: 1508 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=) 2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: eFSE4TffpFgOUagq1LWLewVppC0XpFnKW+ZicZc5aU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:54:a5:63:33:3e:54:ad:27:5a:5d:1a:9b:75:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=66f45c51296bb7ffb8b21cbb60d374533247ea80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:26:56:e8:c6:65:ed:22:5e:62:85:d6:94:eb: 53:a0:93:80:d5:bd:f7:7e:33:d7:cc:1a:d3:5b:21: 25:92:b8:5a:19:92:df:23:2a:93:6a:a4:fb:92:d1: 11:b1:30:9a:9e:55:87:e5:9c:97:cf:9e:e5:b4:d3: 7a:6e:d6:0b:a8:78:34:ef:1a:bb:8c:a7:cf:c1:c4: 17:94:0b:bf:89:bd:e8:ae:e8:76:92:61:4e:55:c8: 82:dd:fa:35:71:7a:9d:78:14:86:62:e9:78:6f:94: 68:e2:c9:ed:03:9e:87:38:3d:d2:dc:53:e2:ff:8e: 5f:be:62:43:95:49:22:37:a0:05:bb:19:cb:e0:28: 38:98:82:54:5f:cd:d8:77:fa:9b:39:ce:ec:1a:d9: 08:54:d4:e1:68:65:fb:1f:da:1e:ce:d3:9e:c2:63: 71:f3:99:d1:d9:e4:75:d0:d5:8d:8b:74:24:55:27: 47:51:6b:17:4a:87:ea:f5:3a:64:8d:67:f9:ff:ca: 11:9f:e3:74:44:fc:b3:c9:1d:ae:16:40:c1:74:6c: 0b:72:da:f4:ec:cf:08:42:2b:62:31:37:54:2f:1e: 23:26:90:26:8d:bc:d2:ad:fe:27:c8:cc:78:fa:45: a8:8b:b2:9f:47:84:99:07:5d:6e:6a:69:e9:25:a1: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:5C:51:29:6B:B7:FF:B8:B2:1C:BB:60:D3:74:53:32:47:EA:80 X509v3 Authority Key Identifier: keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:43:02:11:f2:0d:88:cb:16:9b:d8:27:b6:e3:60:58:17:59: 4e:28:2e:fb:42:95:20:1b:ff:40:66:8a:99:7d:d1:fa:28:9c: 5c:80:56:d5:f1:8f:cd:38:7c:f1:a0:04:f4:da:2c:00:be:de: 9f:09:fb:5a:b6:dd:ec:b0:ee:18:94:36:64:17:ba:62:34:82: 7d:69:f0:25:e3:b6:ad:61:70:30:1e:9a:e7:00:81:af:8e:c3: f2:e1:44:60:96:7e:8a:7c:b5:ad:11:48:4f:fe:fb:39:44:8a: e9:db:64:a6:af:3f:4c:ed:c4:11:60:da:8c:f3:36:f8:34:ee: 50:7d:88:f8:6f:9e:ab:d4:0d:4d:5f:63:be:33:9a:a3:df:81: bd:4a:31:f2:57:87:2f:85:28:6e:74:ea:4d:3f:86:87:9e:1e: dd:db:cf:8d:3f:a7:d0:c7:05:aa:b1:e9:a6:4a:f5:20:08:3c: 62:19:ce:5c:89:1a:e9:82:9e:4e:ee:2d:29:a1:c4:44:09:67: 52:1d:27:8e:35:7d:10:20:46:0c:e0:e5:fe:e0:28:df:23:0b: 39:21:a2:d5:e8:f3:25:92:28:6a:f8:d6:a3:79:84:2e:84:fe: cd:92:8c:63:24:36:80:31:7e:68:ec:17:fc:ce:6b:48:23:c0: 4a:af:bd:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1SlYzM+VK0nWl0am3X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGFjOGQzNjkwNTExMjAzYTMxZWY3ODVlNmQxYzQ0Mzky Y2EyOGIwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD Eyg2NmY0NWM1MTI5NmJiN2ZmYjhiMjFjYmI2MGQzNzQ1MzMyNDdlYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSZW6MZl7SJeYoXWlOtToJOA1b33 fjPXzBrTWyElkrhaGZLfIyqTaqT7ktERsTCanlWH5ZyXz57ltNN6btYLqHg07xq7 jKfPwcQXlAu/ib3oruh2kmFOVciC3fo1cXqdeBSGYul4b5Ro4sntA56HOD3S3FPi /45fvmJDlUkiN6AFuxnL4Cg4mIJUX83Yd/qbOc7sGtkIVNThaGX7H9oeztOewmNx 85nR2eR10NWNi3QkVSdHUWsXSofq9TpkjWf5/8oRn+N0RPyzyR2uFkDBdGwLctr0 7M8IQitiMTdULx4jJpAmjbzSrf4nyMx4+kWoi7KfR4SZB11uamnpJaG7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGb0XFEpa7f/uLIcu2DTdFMyR+qAMB8GA1UdIwQY MBaAFCwKyNNpBREgOjHveF5tHEQ5LKKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDkt NGYzNmM2YTIwYzBlLzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDktNGYzNmM2YTIwYzBl LzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0MCEfIN iMsWm9gntuNgWBdZTigu+0KVIBv/QGaKmX3R+iicXIBW1fGPzTh88aAE9NosAL7e nwn7Wrbd7LDuGJQ2ZBe6YjSCfWnwJeO2rWFwMB6a5wCBr47D8uFEYJZ+iny1rRFI T/77OUSK6dtkpq8/TO3EEWDajPM2+DTuUH2I+G+eq9QNTV9jvjOao9+BvUox8leH L4UobnTqTT+Gh54e3dvPjT+n0McFqrHppkr1IAg8YhnOXIka6YKeTu4tKaHERAln Uh0njjV9ECBGDODl/uAo3yMLOSGi1ejzJZIoavjWo3mELoT+zZKMYyQ2gDF+aOwX /M5rSCPASq+9lQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:20 2025 by rpki-client