This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json) Hash identifier: 72wydjao9Hfjkx8BvyQDyM8mgJcKPIqPVucad4zhfxg= Subject key identifier: ED:78:DC:AB:7D:DE:28:DB:55:78:5E:38:2B:0E:4F:50:C2:89:1E:D7 Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213 Certificate serial: 019AF19AAF1F62B4C981F7247CB116D04D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft Manifest number: 09E1 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: 8CQgFO9jwRZuqdSAz5gfoIzA0eM3zFTK7IX+K/suAJA=) 2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:af:1f:62:b4:c9:81:f7:24:7c:b1:16:d0:4d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=ed78dcab7dde28db55785e382b0e4f50c2891ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:93:77:65:20:51:4b:cc:c4:e0:43:f2:5f: 89:b9:9d:68:f4:9d:ac:10:2f:f0:bc:00:c2:00:60: c7:bd:ca:85:00:ad:65:c2:d0:a5:b5:60:35:f4:14: d6:cf:ff:49:2e:f9:2b:fe:18:0b:1f:0c:fb:7e:54: 98:00:6a:88:21:73:5a:46:53:89:a8:6b:b2:6f:ac: c7:0b:96:8c:a3:74:9d:01:bd:7d:17:45:97:f6:c0: d1:cd:56:80:a7:38:9d:4a:dd:16:f8:b9:4b:0b:5f: 42:df:9a:83:42:77:66:6e:dc:f3:a9:6a:69:16:2b: 2b:53:af:f2:dc:ca:03:ca:2b:db:40:ed:38:66:52: 75:59:6e:12:24:09:37:ec:43:69:e4:44:42:1c:77: 1d:1c:8f:32:14:0c:f4:7f:49:db:f8:24:fd:b0:7c: 53:29:c3:72:49:83:59:62:a5:0c:f9:62:09:67:c6: 03:93:ef:74:d7:52:2f:da:34:a8:c7:4f:a1:d0:1f: 27:81:db:2f:06:08:a4:42:f2:74:8c:53:77:0f:b8: b6:26:8a:1c:af:6c:4e:15:5d:f6:b3:19:ed:ba:0b: 16:e0:a5:30:69:31:2f:5d:be:d1:75:bc:4a:a6:01: 6f:ae:af:e8:55:7e:a1:8a:64:7e:9d:56:f0:0f:22: 36:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:78:DC:AB:7D:DE:28:DB:55:78:5E:38:2B:0E:4F:50:C2:89:1E:D7 X509v3 Authority Key Identifier: keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:57:31:0d:7d:f9:c5:00:36:48:32:06:ae:ac:6d:68:6d:76: 8d:49:56:eb:7d:9b:92:da:10:b0:da:2c:0b:e9:15:a8:2f:0b: 8e:d1:dc:f0:2f:f6:68:42:38:b0:80:1d:52:d6:01:9b:53:ef: e4:06:16:10:5b:41:d5:5b:40:0d:ea:99:e0:91:2c:66:16:e1: 18:df:29:39:41:58:02:2b:9d:12:35:3d:25:60:ce:7d:0a:ea: 14:57:23:91:b4:7e:69:f1:80:37:2f:e5:84:e1:30:11:d5:30: ae:e5:ee:02:d4:d0:9c:93:a1:91:a2:2a:73:85:aa:47:8d:ed: b7:70:92:19:38:21:81:ba:51:a9:10:75:38:25:1f:80:b0:48: b5:70:75:5d:46:f3:bc:16:a8:80:89:d2:97:9a:6a:c1:02:14: be:ea:da:7e:08:39:74:4e:25:0c:f6:63:aa:d7:0d:84:6b:91: 0f:ce:22:88:b2:d1:3c:64:31:57:49:93:cc:00:c8:9b:42:8b: dc:fb:09:df:1e:00:40:33:48:d8:74:75:78:b5:18:9c:27:1c: 3e:e8:26:fd:11:d0:71:c9:78:b8:66:e8:4e:99:b3:28:88:7b: 3d:0b:b7:33:99:d0:8f:3d:43:f4:30:3a:91:96:20:24:15:8a: fd:c2:00:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmq8fYrTJgfckfLEW0E2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj ZGQyMTMwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhlZDc4ZGNhYjdkZGUyOGRiNTU3ODVlMzgyYjBlNGY1MGMyODkxZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGTd2UgUUvMxOBD8l+JuZ1o9J2s EC/wvADCAGDHvcqFAK1lwtCltWA19BTWz/9JLvkr/hgLHwz7flSYAGqIIXNaRlOJ qGuyb6zHC5aMo3SdAb19F0WX9sDRzVaApzidSt0W+LlLC19C35qDQndmbtzzqWpp FisrU6/y3MoDyivbQO04ZlJ1WW4SJAk37ENp5ERCHHcdHI8yFAz0f0nb+CT9sHxT KcNySYNZYqUM+WIJZ8YDk+9011Iv2jSox0+h0B8ngdsvBgikQvJ0jFN3D7i2Jooc r2xOFV32sxntugsW4KUwaTEvXb7RdbxKpgFvrq/oVX6himR+nVbwDyI26QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO143Kt93ijbVXheOCsOT1DCiR7XMB8GA1UdIwQY MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVcxDX35 xQA2SDIGrqxtaG12jUlW632bktoQsNosC+kVqC8LjtHc8C/2aEI4sIAdUtYBm1Pv 5AYWEFtB1VtADeqZ4JEsZhbhGN8pOUFYAiudEjU9JWDOfQrqFFcjkbR+afGANy/l hOEwEdUwruXuAtTQnJOhkaIqc4WqR43tt3CSGTghgbpRqRB1OCUfgLBItXB1XUbz vBaogInSl5pqwQIUvurafgg5dE4lDPZjqtcNhGuRD84iiLLRPGQxV0mTzADIm0KL 3PsJ3x4AQDNI2HR1eLUYnCccPugm/RHQccl4uGboTpmzKIh7PQu3M5nQjz1D9DA6 kZYgJBWK/cIAUw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:50 2025 by rpki-client