This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft File: LArI02kFESA6Me94Xm0cRDksoos.mft (raw, json) Hash identifier: HpaGRrwjeUX2gZBAUN+eixhyiukNlP26aHPX7dUUTws= Subject key identifier: E9:B0:A1:37:C0:5C:E1:8D:5B:C4:85:7E:92:BD:51:61:EE:9A:62:66 Authority key identifier: 2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B Certificate issuer: /CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Certificate serial: 019B0DB6BADE226799F3925FA62364E25AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft Manifest number: 1517 Signing time: Thu 11 Dec 2025 14:00:37 +0000 Manifest this update: Thu 11 Dec 2025 14:00:37 +0000 Manifest next update: Fri 12 Dec 2025 14:00:37 +0000 Files and hashes: 1: GB5yxI4ByHznh8BVy7-0wKqCL9o.roa (hash: uNiZ21GMmhqlbkGeCw3XR4SWt0bm2+3p2g+5iqS1414=) 2: LArI02kFESA6Me94Xm0cRDksoos.crl (hash: zsmBGpPNMpXy4wRRfaQDlXK/foCZVABssu6WvsTp5eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ba:de:22:67:99:f3:92:5f:a6:23:64:e2:5a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c0ac8d3690511203a31ef785e6d1c44392ca28b Validity Not Before: Dec 11 14:00:37 2025 GMT Not After : Dec 12 14:00:37 2025 GMT Subject: CN=e9b0a137c05ce18d5bc4857e92bd5161ee9a6266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:70:dd:1e:16:ba:45:39:e9:b9:3e:1f:95: ba:bb:d4:77:50:da:a5:da:cb:96:eb:79:79:ff:0a: c4:31:18:51:59:78:2f:3a:91:1a:d2:9e:4a:8a:df: b0:56:e0:d0:b1:3a:50:53:97:fa:dd:36:07:8b:6b: 33:86:03:d3:34:0b:1b:34:44:33:27:c8:44:74:66: 84:a5:da:27:29:bf:51:3a:7b:a1:81:64:72:0a:6f: a7:66:40:6f:e4:88:15:48:6a:45:b5:09:f4:f4:a0: d9:ae:83:5b:45:18:90:cd:62:35:59:53:96:66:df: 2d:5b:7a:79:5b:9f:4e:3b:27:01:0a:18:94:7d:c4: 8e:c2:2b:0e:81:f1:58:01:57:c9:fd:9b:db:b9:74: b3:0b:41:92:56:72:9a:fb:44:78:8c:8a:d7:a6:d2: d2:9f:02:a1:33:24:72:86:03:ac:c8:2c:d1:31:6c: 0b:2d:28:1b:c9:c9:e9:67:a1:6b:23:5d:a1:bb:1f: 49:79:4e:87:fa:f6:89:7d:a1:49:b5:7a:9d:ae:e2: f0:8c:a8:3e:bb:06:e2:62:fc:68:17:d3:65:c5:cc: d6:93:48:20:39:e1:61:d7:c2:5e:a5:a9:f3:44:65: 77:a5:69:3e:92:10:12:a2:ed:94:13:fc:66:b7:34: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:A1:37:C0:5C:E1:8D:5B:C4:85:7E:92:BD:51:61:EE:9A:62:66 X509v3 Authority Key Identifier: keyid:2C:0A:C8:D3:69:05:11:20:3A:31:EF:78:5E:6D:1C:44:39:2C:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LArI02kFESA6Me94Xm0cRDksoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8efd2e-692c-4f47-b749-4f36c6a20c0e/1/LArI02kFESA6Me94Xm0cRDksoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ee:2f:98:d6:3e:c1:1b:c7:60:77:96:96:eb:c2:85:de:eb: 07:df:08:a7:6f:c7:a8:31:81:15:b5:ee:13:82:67:a6:f4:7b: f0:06:d9:a1:f5:ef:69:b4:42:1c:5a:8a:dd:d8:14:09:85:cb: 1f:3d:d9:fb:43:26:13:9c:f2:14:18:b3:ff:cc:70:85:a3:65: 72:2f:1c:ea:1e:d8:db:76:42:cb:ff:f8:65:0a:e4:55:7e:e0: 6e:50:24:71:b1:ad:58:f2:a7:0b:05:49:14:95:16:28:f7:7f: 3b:ba:e4:ce:d7:26:37:97:ea:9f:ff:03:0e:c6:36:b5:40:11: 18:75:6e:a2:a1:22:a2:a8:9a:09:53:0b:86:a7:2a:13:3a:a3: c1:44:2b:38:89:77:33:08:70:fb:ed:9c:96:90:dc:86:49:e7: 47:75:7d:99:a9:af:ea:04:46:d2:ad:88:5b:34:bc:1d:49:a4: 98:3d:4f:fa:08:fd:bf:a3:fd:fe:64:cb:68:f7:f0:04:a0:a0: 4d:da:3e:c9:0d:c8:85:32:4a:d9:7d:c1:4c:95:e3:ce:f5:35: 65:c5:d7:19:15:5e:71:ae:18:95:2f:a7:81:58:7d:1b:3d:60: db:d6:2e:a4:45:45:00:a1:aa:57:9d:3e:eb:c5:46:02:31:d7: 06:a8:22:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtrreImeZ85JfpiNk4lqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMGFjOGQzNjkwNTExMjAzYTMxZWY3ODVlNmQxYzQ0Mzky Y2EyOGIwHhcNMjUxMjExMTQwMDM3WhcNMjUxMjEyMTQwMDM3WjAzMTEwLwYDVQQD EyhlOWIwYTEzN2MwNWNlMThkNWJjNDg1N2U5MmJkNTE2MWVlOWE2MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq9w3R4WukU56bk+H5W6u9R3UNql 2suW63l5/wrEMRhRWXgvOpEa0p5Kit+wVuDQsTpQU5f63TYHi2szhgPTNAsbNEQz J8hEdGaEpdonKb9ROnuhgWRyCm+nZkBv5IgVSGpFtQn09KDZroNbRRiQzWI1WVOW Zt8tW3p5W59OOycBChiUfcSOwisOgfFYAVfJ/ZvbuXSzC0GSVnKa+0R4jIrXptLS nwKhMyRyhgOsyCzRMWwLLSgbycnpZ6FrI12hux9JeU6H+vaJfaFJtXqdruLwjKg+ uwbiYvxoF9NlxczWk0ggOeFh18JepanzRGV3pWk+khASou2UE/xmtzRp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmwoTfAXOGNW8SFfpK9UWHummJmMB8GA1UdIwQY MBaAFCwKyNNpBREgOjHveF5tHEQ5LKKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDkt NGYzNmM2YTIwYzBlLzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84ZWZkMmUtNjkyYy00ZjQ3LWI3NDktNGYzNmM2YTIwYzBl LzEvTEFySTAya0ZFU0E2TWU5NFhtMGNSRGtzb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+4vmNY+ wRvHYHeWluvChd7rB98Ip2/HqDGBFbXuE4JnpvR78AbZofXvabRCHFqK3dgUCYXL Hz3Z+0MmE5zyFBiz/8xwhaNlci8c6h7Y23ZCy//4ZQrkVX7gblAkcbGtWPKnCwVJ FJUWKPd/O7rkztcmN5fqn/8DDsY2tUARGHVuoqEioqiaCVMLhqcqEzqjwUQrOIl3 Mwhw++2clpDchknnR3V9mamv6gRG0q2IWzS8HUmkmD1P+gj9v6P9/mTLaPfwBKCg Tdo+yQ3IhTJK2X3BTJXjzvU1ZcXXGRVeca4YlS+ngVh9Gz1g29YupEVFAKGqV50+ 68VGAjHXBqgi3A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:22 2025 by rpki-client