This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json) Hash identifier: bPmd7x+EIOHqCELKNHqucSkKkL3wwO0805osRLVBXb0= Subject key identifier: 97:53:31:71:59:10:11:4F:4D:19:E3:EC:40:D2:75:1B:93:39:49:A0 Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Certificate serial: 019B3043670BC26986D5F73CACFD45893DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft Manifest number: 178B Signing time: Thu 18 Dec 2025 07:01:21 +0000 Manifest this update: Thu 18 Dec 2025 07:01:21 +0000 Manifest next update: Fri 19 Dec 2025 07:01:21 +0000 Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=) 2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: NUSk06BfvWce+LqPdKIL630wtq5KBjSO51GDu2En+rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:67:0b:c2:69:86:d5:f7:3c:ac:fd:45:89:3d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Validity Not Before: Dec 18 07:01:21 2025 GMT Not After : Dec 19 07:01:21 2025 GMT Subject: CN=975331715910114f4d19e3ec40d2751b933949a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:6e:f7:a8:ba:ae:e0:e1:63:e5:7c:97:9d: 24:b3:54:a6:20:fd:27:bb:90:9e:99:37:ad:57:14: 9c:51:57:53:65:09:57:eb:69:c8:60:88:bd:e3:f2: 46:73:9d:9a:20:32:62:a9:09:ac:f0:ac:66:08:74: c9:91:ab:7e:24:ab:14:6d:c2:40:ed:f2:5d:c1:55: d2:12:5c:99:9f:76:a3:82:e9:25:57:7a:fd:2f:f9: 96:0e:f8:5f:1d:b6:0a:f9:df:37:6f:24:e3:e2:7f: d9:40:16:f2:8a:50:40:be:44:51:32:cb:b4:37:20: 7a:29:a2:0b:59:ec:a5:52:20:57:ed:be:e8:cd:a4: 44:8d:d0:66:58:6f:6c:ca:7d:4d:19:9a:72:a5:de: 24:8d:c6:d3:94:a1:9d:91:9b:53:de:f5:7d:cb:6d: c8:09:91:7d:51:0d:a1:33:66:54:ba:ca:61:18:6a: a9:29:df:f1:53:df:1a:5f:c7:d3:6d:0c:b2:a5:a5: ed:fc:7f:64:00:93:b2:9f:7a:97:4f:69:30:1f:62: 3b:46:77:95:04:0e:16:ce:a4:d3:5b:a3:9f:a0:09: fe:a0:82:9f:2a:10:ea:6a:90:1c:86:93:ba:2b:59: 83:53:08:94:5b:b8:ff:f7:35:b7:aa:62:ba:65:b1: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:53:31:71:59:10:11:4F:4D:19:E3:EC:40:D2:75:1B:93:39:49:A0 X509v3 Authority Key Identifier: keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:23:8b:8f:b8:d6:58:56:9e:e0:a8:f0:7f:a4:1d:72:bf:a5: 50:89:e6:17:4d:1c:67:1e:fb:a3:1d:76:40:5f:b1:31:7f:c6: 16:45:af:b9:eb:65:0e:25:a2:80:62:4f:3c:f1:fc:16:ab:91: ed:79:31:15:6c:53:94:6a:46:fd:01:b8:66:89:e7:9e:4a:04: 3c:3d:16:9d:04:3f:86:cc:ae:c3:f7:83:19:3e:6c:fc:33:dc: 08:b6:a7:13:b7:1a:84:06:6e:f0:a1:33:39:58:e2:8b:08:f0: d1:83:52:0d:e9:c5:ad:b7:d6:a1:2c:89:0a:b5:d6:03:0f:b9: ee:0d:17:19:18:5e:24:58:c8:55:2e:2e:5b:08:6d:ab:d4:82: 31:97:d8:fe:f1:07:3f:1d:e1:4a:60:fb:00:17:e6:bb:f7:f3: a6:53:bf:65:b2:f3:90:e8:65:13:20:a9:b9:d9:bc:f8:7d:5c: a6:17:1f:84:38:91:d1:63:11:04:34:8a:87:59:c8:da:fb:01: 6e:42:98:5c:99:12:53:60:62:ed:a4:a6:ed:12:0b:d3:53:82: 65:d6:57:91:db:37:5e:35:6b:81:52:2f:cc:5e:52:49:70:27: cc:7f:93:51:7c:a6:00:d5:31:b7:e4:32:e2:cb:b3:97:5c:a9: cb:d1:a7:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ2cLwmmG1fc8rP1FiT24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx NWE0ZWIwHhcNMjUxMjE4MDcwMTIxWhcNMjUxMjE5MDcwMTIxWjAzMTEwLwYDVQQD Eyg5NzUzMzE3MTU5MTAxMTRmNGQxOWUzZWM0MGQyNzUxYjkzMzk0OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjRu96i6ruDhY+V8l50ks1SmIP0n u5CemTetVxScUVdTZQlX62nIYIi94/JGc52aIDJiqQms8KxmCHTJkat+JKsUbcJA 7fJdwVXSElyZn3ajguklV3r9L/mWDvhfHbYK+d83byTj4n/ZQBbyilBAvkRRMsu0 NyB6KaILWeylUiBX7b7ozaREjdBmWG9syn1NGZpypd4kjcbTlKGdkZtT3vV9y23I CZF9UQ2hM2ZUusphGGqpKd/xU98aX8fTbQyypaXt/H9kAJOyn3qXT2kwH2I7RneV BA4WzqTTW6OfoAn+oIKfKhDqapAchpO6K1mDUwiUW7j/9zW3qmK6ZbGhqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdTMXFZEBFPTRnj7EDSdRuTOUmgMB8GA1UdIwQY MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyOLj7jW WFae4Kjwf6Qdcr+lUInmF00cZx77ox12QF+xMX/GFkWvuetlDiWigGJPPPH8FquR 7XkxFWxTlGpG/QG4ZonnnkoEPD0WnQQ/hsyuw/eDGT5s/DPcCLanE7cahAZu8KEz OVjiiwjw0YNSDenFrbfWoSyJCrXWAw+57g0XGRheJFjIVS4uWwhtq9SCMZfY/vEH Px3hSmD7ABfmu/fzplO/ZbLzkOhlEyCpudm8+H1cphcfhDiR0WMRBDSKh1nI2vsB bkKYXJkSU2Bi7aSm7RIL01OCZdZXkds3XjVrgVIvzF5SSXAnzH+TUXymANUxt+Qy 4suzl1ypy9Gnfw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:27 2025 by rpki-client