This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft File: lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json) Hash identifier: vhXg8bYZNA/bCYetrXDSTWfNTRgYYfv001q9rSNOSIE= Subject key identifier: B0:92:74:A5:A7:87:AE:44:1B:0F:82:37:B1:B5:B4:59:8F:80:26:0D Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Certificate serial: 019B03D8665A86E9E197F6634B17220EDF40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft Manifest number: 1774 Signing time: Tue 09 Dec 2025 16:01:12 +0000 Manifest this update: Tue 09 Dec 2025 16:01:12 +0000 Manifest next update: Wed 10 Dec 2025 16:01:12 +0000 Files and hashes: 1: LF7l95kGKNm3QeT2Qx4rsVG6q2c.roa (hash: jKT9RAPhg+2vhp/aPlK2AWW9oSPYGTYBnXz2ZpVTPS4=) 2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: vJAZfjQ1BDiMV4VPcRgFtMLYcQDFN2Q6Dyb8Rj/s0W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:d8:66:5a:86:e9:e1:97:f6:63:4b:17:22:0e:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb Validity Not Before: Dec 9 16:01:12 2025 GMT Not After : Dec 10 16:01:12 2025 GMT Subject: CN=b09274a5a787ae441b0f8237b1b5b4598f80260d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:d5:d3:e2:67:47:0f:0d:68:86:34:1c:c6: 0b:3f:2b:a1:0e:78:58:2b:5a:49:82:1c:6a:9f:d7: 06:d9:f2:b0:82:ba:f1:98:15:db:a6:22:77:e0:7b: f6:30:a6:ef:34:ae:55:04:bf:1e:d0:67:ad:33:06: 7b:ca:dd:44:43:dd:6e:1e:3a:cd:5a:37:eb:49:f2: 33:34:03:7a:59:91:fb:a8:14:fc:d1:ef:f3:98:6e: 08:4c:32:56:71:cc:bf:6e:e9:f7:4d:52:05:bc:c4: b5:f6:79:6e:92:42:ba:be:c5:26:e9:f8:fa:62:da: 93:6d:a9:dc:ce:d9:8c:41:3f:40:34:3c:1d:eb:fb: f1:13:15:06:ac:57:9d:88:27:b7:cb:05:d3:95:d5: 9c:b8:17:a4:44:a3:4d:e1:a3:e1:ca:5a:e3:8b:7f: 26:09:7f:f8:74:51:2d:dd:67:b1:e5:37:2a:69:84: de:dd:9e:b4:54:7e:a8:4e:eb:e4:82:ba:2b:22:85: ed:4c:0a:f1:9a:d2:60:e7:32:27:86:f6:37:ef:fd: ce:96:ed:fb:86:c9:b8:88:30:ab:f6:38:97:27:a9: 2e:33:87:75:f8:4c:5e:23:3d:a3:c5:e8:1c:f7:79: 0b:f4:0c:e3:95:fa:ae:ab:66:50:62:ce:3b:32:ff: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:92:74:A5:A7:87:AE:44:1B:0F:82:37:B1:B5:B4:59:8F:80:26:0D X509v3 Authority Key Identifier: keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:4a:21:bc:77:f9:7d:84:94:57:c7:a0:df:20:1f:5b:f8:10: 2e:03:c2:5d:e7:e0:2e:3d:cb:41:d1:c3:2a:f7:d8:df:8e:61: 02:9f:ed:ba:47:ff:b1:de:cd:8a:8a:c1:74:40:a9:62:39:84: 8d:d0:51:3a:13:61:8c:f7:6f:06:bf:03:7a:5d:2f:40:64:98: 46:91:6a:03:1e:9f:ab:25:16:0d:37:3d:89:f2:78:67:d7:8f: dc:0a:47:7d:07:e9:30:2f:1d:93:ca:b7:ff:f5:64:7b:8e:56: e5:b8:3e:72:9f:3c:5c:c3:24:89:62:41:a4:97:6a:cd:a6:5e: c4:e1:88:17:e4:d7:a3:95:58:29:f4:13:db:ed:bc:6e:14:78: 62:3f:75:32:0a:09:1c:69:0d:64:c5:8a:6b:ae:63:a3:3d:b3: e7:a7:b7:09:a0:20:3b:72:24:63:c0:e7:99:df:b5:b0:09:bf: 7c:70:45:5a:08:2d:a7:90:9a:29:4e:4d:23:fb:aa:32:db:d2: c5:00:96:ed:15:45:9d:65:6b:9f:34:d7:64:6f:3d:8e:c4:d5: d7:88:eb:70:e0:1e:8a:aa:6e:b0:e2:93:b8:2a:f1:4e:a0:4f: c1:e9:6f:b6:20:e9:1e:45:11:b7:0f:cf:86:f7:42:a8:db:d4: e8:00:d2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsD2GZahunhl/ZjSxciDt9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFlMzQ2MzkzOGIyNmY4M2I3NmYwYzRkZjgxZGZhYmIx NWE0ZWIwHhcNMjUxMjA5MTYwMTEyWhcNMjUxMjEwMTYwMTEyWjAzMTEwLwYDVQQD EyhiMDkyNzRhNWE3ODdhZTQ0MWIwZjgyMzdiMWI1YjQ1OThmODAyNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3V0+JnRw8NaIY0HMYLPyuhDnhY K1pJghxqn9cG2fKwgrrxmBXbpiJ34Hv2MKbvNK5VBL8e0GetMwZ7yt1EQ91uHjrN WjfrSfIzNAN6WZH7qBT80e/zmG4ITDJWccy/bun3TVIFvMS19nlukkK6vsUm6fj6 YtqTbancztmMQT9ANDwd6/vxExUGrFediCe3ywXTldWcuBekRKNN4aPhylrji38m CX/4dFEt3Wex5TcqaYTe3Z60VH6oTuvkgrorIoXtTArxmtJg5zInhvY37/3Olu37 hsm4iDCr9jiXJ6kuM4d1+ExeIz2jxegc93kL9Azjlfquq2ZQYs47Mv9rkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCSdKWnh65EGw+CN7G1tFmPgCYNMB8GA1UdIwQY MBaAFJYq40Y5OLJvg7dvDE34Hfq7FaTrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMt OWVkZjBkMTdmYjkxLzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iYjBmYzMtZDVmOS00YmY1LTk2ODMtOWVkZjBkMTdmYjkx LzEvbGlyalJqazRzbS1EdDI4TVRmZ2QtcnNWcE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUohvHf5 fYSUV8eg3yAfW/gQLgPCXefgLj3LQdHDKvfY345hAp/tukf/sd7NiorBdECpYjmE jdBROhNhjPdvBr8Del0vQGSYRpFqAx6fqyUWDTc9ifJ4Z9eP3ApHfQfpMC8dk8q3 //Vke45W5bg+cp88XMMkiWJBpJdqzaZexOGIF+TXo5VYKfQT2+28bhR4Yj91MgoJ HGkNZMWKa65joz2z56e3CaAgO3IkY8Dnmd+1sAm/fHBFWggtp5CaKU5NI/uqMtvS xQCW7RVFnWVrnzTXZG89jsTV14jrcOAeiqpusOKTuCrxTqBPwelvtiDpHkURtw/P hvdCqNvU6ADSug== -----END CERTIFICATE-----Generated at Wed Dec 10 02:21:25 2025 by rpki-client