This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft File: lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft (raw, json) Hash identifier: zdAgVNpdIHNd7PukEO+b/RpEsL2OO1YOJsw4hPgphXA= Subject key identifier: 15:10:1B:C5:08:27:DD:B8:A9:70:19:AF:89:58:75:83:F8:BC:F7:DB Authority key identifier: 96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 Certificate issuer: /CN=96b8121d556df453456553dcb45c4143f4cdd213 Certificate serial: 019B42B6D95CE4FF58F871ADC982D8DB25AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft Manifest number: 0A0B Signing time: Sun 21 Dec 2025 21:00:38 +0000 Manifest this update: Sun 21 Dec 2025 21:00:38 +0000 Manifest next update: Mon 22 Dec 2025 21:00:38 +0000 Files and hashes: 1: lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl (hash: OeeRUZNPRqMfyJYYLPH0lu9r9nM6gCZoD08jtXRLML4=) 2: qP3YU_S4LUHGi-PUyOS9YdXOrOg.roa (hash: 86gRYjmoaW5iHjfh3rXQG4yuY8yHQt9SBONVBj8bSuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:d9:5c:e4:ff:58:f8:71:ad:c9:82:d8:db:25:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b8121d556df453456553dcb45c4143f4cdd213 Validity Not Before: Dec 21 21:00:38 2025 GMT Not After : Dec 22 21:00:38 2025 GMT Subject: CN=15101bc50827ddb8a97019af89587583f8bcf7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:46:fc:59:e6:cc:bf:36:91:35:e7:20:60: d5:81:c7:16:55:8a:2e:04:46:ee:f8:7f:ee:ff:36: 06:a4:bf:42:d9:be:c0:4a:55:f6:23:eb:60:80:72: b9:87:80:f1:57:b9:f1:bb:ef:b0:ec:c3:8e:6e:62: 90:a4:57:c5:88:97:fe:28:85:a6:fc:32:f7:9f:f3: 13:cd:71:2c:73:ea:42:ed:d8:90:44:97:38:33:02: 64:ca:f5:2a:ac:b9:89:84:d5:f1:ca:93:c2:74:a2: ef:89:00:66:48:7c:96:c5:99:a8:6c:09:70:24:f7: d5:5b:8d:d7:ec:cd:f8:0a:e0:6d:ad:fe:3e:dd:9b: d3:ea:36:a0:e3:d5:9c:ad:24:fd:d9:c8:9d:bd:99: 5f:96:3a:9e:8d:63:71:9a:31:71:31:45:96:14:f6: f1:64:27:3d:5f:86:86:3e:e3:cc:53:e2:b2:7b:bc: 94:6d:d5:01:c0:36:d7:2a:30:a4:aa:8e:ef:3f:05: 6d:ee:39:01:ac:e2:1f:82:c5:2e:e9:20:42:ea:d9: e9:3e:9b:e7:05:61:5b:36:11:33:ae:12:bf:48:2d: 96:82:28:e4:fe:aa:3e:34:25:bc:7b:4e:84:86:3c: 2f:dd:96:d1:c1:c0:5b:af:89:ca:72:0b:c1:7c:bf: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:10:1B:C5:08:27:DD:B8:A9:70:19:AF:89:58:75:83:F8:BC:F7:DB X509v3 Authority Key Identifier: keyid:96:B8:12:1D:55:6D:F4:53:45:65:53:DC:B4:5C:41:43:F4:CD:D2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrgSHVVt9FNFZVPctFxBQ_TN0hM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d665e6-f95d-4347-8565-d4f5317c5830/1/lrgSHVVt9FNFZVPctFxBQ_TN0hM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0a:6b:d8:6d:e5:f4:a4:09:5d:0c:c1:4a:38:9c:e6:21:94: dd:83:56:4f:e3:e8:5c:2c:07:62:c2:99:00:0b:aa:27:aa:4d: 61:be:3e:46:f4:55:7f:cf:e5:2b:fd:ea:5a:97:f2:80:e7:9a: 57:aa:8c:0c:0c:f4:b1:5c:31:c7:87:71:ad:02:66:68:f6:af: d3:ec:e7:12:9b:8d:51:ab:60:5c:dc:a9:b0:c9:da:c8:a0:54: e9:c5:bb:83:28:88:66:6a:63:cc:af:5e:94:e6:01:9b:a2:ef: e9:0e:7d:b7:af:a1:19:0b:42:a2:32:9c:88:4a:65:fa:87:f5: 47:62:f1:3a:86:0c:a3:a6:fe:08:20:18:54:5a:3d:ce:0f:81: 13:7d:b7:07:01:98:60:ac:91:9e:85:92:0c:b8:9e:a8:70:c4: 93:4f:a4:ff:32:c8:b7:a5:14:d0:d8:48:54:56:5d:c9:95:c9: 5c:f8:47:78:69:5d:68:b5:5d:d8:a7:53:7e:4b:59:32:4a:95: 7a:a1:ac:df:91:d0:3f:a1:0f:66:23:24:1c:80:2f:9c:91:9a: 8b:24:75:90:0d:9a:98:f1:ce:16:23:3d:92:83:01:c7:52:69: a2:12:f1:5f:8f:7a:7b:71:19:ff:36:1e:b8:a4:55:9f:ae:ad: 7a:b3:df:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCttlc5P9Y+HGtyYLY2yWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjgxMjFkNTU2ZGY0NTM0NTY1NTNkY2I0NWM0MTQzZjRj ZGQyMTMwHhcNMjUxMjIxMjEwMDM4WhcNMjUxMjIyMjEwMDM4WjAzMTEwLwYDVQQD EygxNTEwMWJjNTA4MjdkZGI4YTk3MDE5YWY4OTU4NzU4M2Y4YmNmN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBhG/FnmzL82kTXnIGDVgccWVYou BEbu+H/u/zYGpL9C2b7ASlX2I+tggHK5h4DxV7nxu++w7MOObmKQpFfFiJf+KIWm /DL3n/MTzXEsc+pC7diQRJc4MwJkyvUqrLmJhNXxypPCdKLviQBmSHyWxZmobAlw JPfVW43X7M34CuBtrf4+3ZvT6jag49WcrST92cidvZlfljqejWNxmjFxMUWWFPbx ZCc9X4aGPuPMU+Kye7yUbdUBwDbXKjCkqo7vPwVt7jkBrOIfgsUu6SBC6tnpPpvn BWFbNhEzrhK/SC2Wgijk/qo+NCW8e06Ehjwv3ZbRwcBbr4nKcgvBfL9TCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUQG8UIJ924qXAZr4lYdYP4vPfbMB8GA1UdIwQY MBaAFJa4Eh1VbfRTRWVT3LRcQUP0zdITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUt ZDRmNTMxN2M1ODMwLzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9kNjY1ZTYtZjk1ZC00MzQ3LTg1NjUtZDRmNTMxN2M1ODMw LzEvbHJnU0hWVnQ5Rk5GWlZQY3RGeEJRX1ROMGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASApr2G3l 9KQJXQzBSjic5iGU3YNWT+PoXCwHYsKZAAuqJ6pNYb4+RvRVf8/lK/3qWpfygOea V6qMDAz0sVwxx4dxrQJmaPav0+znEpuNUatgXNypsMnayKBU6cW7gyiIZmpjzK9e lOYBm6Lv6Q59t6+hGQtCojKciEpl+of1R2LxOoYMo6b+CCAYVFo9zg+BE323BwGY YKyRnoWSDLieqHDEk0+k/zLIt6UU0NhIVFZdyZXJXPhHeGldaLVd2KdTfktZMkqV eqGs35HQP6EPZiMkHIAvnJGaiyR1kA2amPHOFiM9koMBx1JpohLxX496e3EZ/zYe uKRVn66terPfUA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:06:00 2025 by rpki-client