This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
File: lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft (raw, json)
Hash identifier: El/I+K2Vzf7m0B9r6ZhVNSNKCoNy1q/WrUHdU920Fjs=
Subject key identifier: D6:EF:EA:B6:01:72:B2:AC:3B:39:E2:7B:B4:7A:09:12:62:DC:AE:B9
Authority key identifier: 96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
Certificate issuer: /CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Certificate serial: 019AF23F893E09967EA1B737FA700768BD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
Manifest number: 176C
Signing time: Sat 06 Dec 2025 06:00:41 +0000
Manifest this update: Sat 06 Dec 2025 06:00:41 +0000
Manifest next update: Sun 07 Dec 2025 06:00:41 +0000
Files and hashes: 1: Hn6t5wN5CzL2TppRa9ysCpUxEJ4.roa (hash: K5S02B/Gi2bHkxhJ8aF28VCnMZBi3s2rFauNCvnOiEw=)
2: UIdIZEUaxJjlUmS0DfjMepB-HoU.roa (hash: 7c/wtDjgeQptynstoYum4n7aAfpOsb4reHajWBMyT4A=)
3: bk2E2MwznVO9fyeEdSNKPr5qf4g.roa (hash: koJYcFmVjppjNe30QYkPLjnztCXTOqE8zj4CJBsH3wk=)
4: lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl (hash: p59Fsna/QcbX1kgXZIg5CAPMPexZITAfm0GRz8V0TEE=)
5: ti67mfJ02xdUJebE8kVITWH-K94.roa (hash: mNTROQB2r5DCdwCoKjtHCnrpF/RYqwhzp7iVZ86dAsQ=)
6: wciPWRp0S7jDGsgBUMCQv3rtcf0.roa (hash: nUbkTnm2+bif0gS51JkC+xvx+yRO0T+FclDoI4aytYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:3f:89:3e:09:96:7e:a1:b7:37:fa:70:07:68:bd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96bfc5a172654dd6009db1d82d92ffaf71234120
Validity
Not Before: Dec 6 06:00:41 2025 GMT
Not After : Dec 7 06:00:41 2025 GMT
Subject: CN=d6efeab60172b2ac3b39e27bb47a091262dcaeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:cc:0b:f9:8d:ba:3c:a5:71:0f:4f:21:67:
77:1c:0e:d9:74:99:c1:d9:a3:46:52:ef:55:91:73:
9d:98:3e:80:f4:01:e3:3d:7e:6f:cc:86:49:cd:33:
96:ff:7b:fd:d3:ae:0e:e6:fa:b4:9f:12:2c:e7:19:
e2:2e:76:86:72:49:5c:19:9f:b9:04:17:be:5b:fb:
27:d8:82:3b:ba:24:89:2a:35:3d:46:11:da:b9:1c:
78:b4:ea:92:83:35:bb:1d:4c:26:5a:70:30:15:6b:
69:60:64:e3:bf:d5:66:d8:c2:fc:c4:e8:a7:5f:e8:
cb:43:ba:47:a9:11:d3:88:44:6b:55:08:2b:d4:f6:
5d:f0:36:4a:dd:d4:dc:ca:fa:bc:c5:55:d8:96:98:
89:07:4f:4d:25:5e:b2:74:1d:38:0c:f6:53:81:ec:
fd:6a:0c:b3:c8:d4:16:13:01:52:80:45:4d:5b:18:
e2:d5:05:81:c3:e5:3b:42:ad:06:a7:4d:af:8a:ae:
b3:f2:31:7d:b7:5a:c1:c4:a8:3c:f3:46:07:ff:7b:
ca:20:a1:f8:26:4f:bd:1f:95:38:88:c9:e9:91:d6:
e9:82:47:4f:a9:19:de:38:e0:f7:e2:d1:48:6b:89:
47:bf:cd:a8:e5:f4:32:c0:8a:9e:4a:88:1a:23:82:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:EA:B6:01:72:B2:AC:3B:39:E2:7B:B4:7A:09:12:62:DC:AE:B9
X509v3 Authority Key Identifier:
keyid:96:BF:C5:A1:72:65:4D:D6:00:9D:B1:D8:2D:92:FF:AF:71:23:41:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lr_FoXJlTdYAnbHYLZL_r3EjQSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3630cb-ebec-4d86-b12b-bffb757c3134/1/lr_FoXJlTdYAnbHYLZL_r3EjQSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:83:14:4e:46:9a:44:1d:3a:68:8d:0f:54:ec:68:82:9c:
cb:91:ce:36:aa:df:8e:46:d9:56:fd:35:08:40:89:60:25:a9:
1a:e7:0a:8b:c0:66:22:eb:97:66:53:89:2b:9b:bc:a0:a0:c1:
45:d0:9a:ed:c6:12:18:d1:55:af:9c:fa:c8:33:22:b3:47:f2:
a1:2e:9c:1a:37:0a:af:fd:83:75:82:11:58:b8:61:0c:82:80:
4f:6b:51:69:61:64:a1:d5:63:06:08:ea:d5:62:b9:68:f5:4a:
6a:64:03:d6:f6:c5:6f:62:2e:64:a6:ad:46:db:e9:f9:36:b6:
65:37:a3:76:51:c4:2b:05:e8:5c:fc:7f:f7:07:f6:af:7c:22:
fc:06:49:ee:af:94:f5:cd:c6:36:98:74:e5:77:be:1b:b0:ae:
2a:84:b7:ff:69:01:e8:e9:14:52:51:a2:c4:df:50:a7:f8:86:
69:0f:44:71:49:7c:81:dc:22:a3:02:7f:0a:10:04:e2:26:bd:
6e:a8:13:ed:e8:f5:f2:e6:d4:95:4f:d7:c2:44:7c:15:1f:c2:
3a:0f:91:3a:13:35:4a:ac:5f:8b:24:5d:59:6e:08:6e:f2:3c:
d4:86:17:b0:e6:88:8c:51:7b:a8:d9:17:76:b4:c8:f6:7e:d6:
f7:c5:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:15:04 2025 by rpki-client