This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json) Hash identifier: 9Flh72xNP2YQnjr5sKa9sClbxkGUInQsTl4PtBKNuC4= Subject key identifier: DB:0E:CB:7A:BF:A0:8F:56:84:8D:A3:FF:9D:19:38:21:63:2F:FC:D1 Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019AF50A5AFD099F16EC9CCF0F1955727608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft Manifest number: 0BCF Signing time: Sat 06 Dec 2025 19:01:27 +0000 Manifest this update: Sat 06 Dec 2025 19:01:27 +0000 Manifest next update: Sun 07 Dec 2025 19:01:27 +0000 Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=) 2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: UsnsT2lTwqrnW5V8pzidoN5W+Im5RAskSBtGq0i4Mkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:5a:fd:09:9f:16:ec:9c:cf:0f:19:55:72:76:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Dec 6 19:01:27 2025 GMT Not After : Dec 7 19:01:27 2025 GMT Subject: CN=db0ecb7abfa08f56848da3ff9d193821632ffcd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:34:81:4e:2e:c3:84:84:98:8b:84:24:08: 5b:fd:a5:8e:0d:0d:7b:81:e7:70:9e:7a:52:9c:40: 46:59:24:c2:3b:c6:9b:3e:ca:09:c2:d3:ae:db:5c: f0:53:5f:af:46:69:54:41:d4:1b:0f:a5:22:f4:4a: 6a:a9:0f:3a:d4:26:33:43:b2:65:58:33:8b:71:5b: 0b:bd:e4:3c:97:5f:c7:7c:3a:cc:7a:e3:f9:e3:ee: 09:d4:87:f1:12:91:f0:d5:03:77:b9:8f:9c:0f:4b: aa:24:a5:ba:ae:50:be:f0:31:0a:0b:bb:55:69:2b: a6:ce:d7:31:42:fe:49:a9:9a:ef:62:9b:f2:36:8d: 50:d7:11:e6:bb:b5:e0:d3:ad:30:27:cb:44:25:6f: 90:c9:dd:05:25:41:cb:2d:97:20:a9:cd:a2:f4:06: 87:f0:69:41:82:56:ec:89:8d:83:60:70:36:0b:7a: 65:1a:8a:b7:a5:a1:a9:07:08:07:1b:e5:87:17:fe: fb:c7:a2:df:9f:1b:b8:7e:96:f0:58:b9:16:91:c8: 27:47:b6:c7:74:c6:22:b4:27:b3:17:5f:5d:88:8c: 33:fe:81:50:b1:0c:a1:92:0a:55:87:da:d5:81:c1: 4a:f1:65:a5:31:9a:9f:f4:6a:51:a2:40:fd:32:04: 9c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0E:CB:7A:BF:A0:8F:56:84:8D:A3:FF:9D:19:38:21:63:2F:FC:D1 X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ac:aa:1c:13:2e:48:7c:42:8f:47:f6:e2:07:aa:c5:98:53: a8:0f:6b:55:77:dc:6c:a0:66:0e:05:ee:de:15:23:1b:71:0f: 15:5d:ef:96:aa:bc:d7:28:85:da:e7:69:f0:3c:91:9f:ab:a6: 29:f0:8b:8f:1e:0b:76:29:6c:53:3e:86:dc:ef:71:98:d0:07: af:c3:54:60:bf:b5:49:65:47:c5:d6:6c:0e:89:a4:ab:21:bf: b6:09:97:de:d9:1e:fb:1d:01:cf:ec:db:ca:1f:4c:91:31:8e: bc:bb:bf:fa:02:ba:a4:92:82:fa:b7:0e:0d:60:10:19:1a:4c: eb:e6:55:5e:d7:44:fc:2e:77:dc:3a:e5:2e:a6:b7:60:3f:02: 43:e2:f0:29:7c:07:ce:d0:cd:07:16:0a:9c:86:54:c1:bb:b4: c7:ef:f6:5b:e9:f4:33:10:7e:da:fd:e7:fe:75:89:0a:a4:81: 16:76:9b:3d:63:f4:90:e3:68:5a:dd:b2:aa:93:e0:e0:48:2e: db:9f:7c:d2:c0:ea:48:86:42:dc:36:4f:48:1d:52:4f:8e:3e: 7b:79:19:a8:ab:85:6c:78:56:1b:ee:85:a5:49:8f:58:61:5e: 27:fa:6e:36:b6:64:4c:87:7f:81:80:c7:b1:76:1f:07:56:2b: 33:78:9b:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Clr9CZ8W7JzPDxlVcnYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjUxMjA2MTkwMTI3WhcNMjUxMjA3MTkwMTI3WjAzMTEwLwYDVQQD EyhkYjBlY2I3YWJmYTA4ZjU2ODQ4ZGEzZmY5ZDE5MzgyMTYzMmZmY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxI0gU4uw4SEmIuEJAhb/aWODQ17 gedwnnpSnEBGWSTCO8abPsoJwtOu21zwU1+vRmlUQdQbD6Ui9EpqqQ861CYzQ7Jl WDOLcVsLveQ8l1/HfDrMeuP54+4J1IfxEpHw1QN3uY+cD0uqJKW6rlC+8DEKC7tV aSumztcxQv5JqZrvYpvyNo1Q1xHmu7Xg060wJ8tEJW+Qyd0FJUHLLZcgqc2i9AaH 8GlBglbsiY2DYHA2C3plGoq3paGpBwgHG+WHF/77x6Lfnxu4fpbwWLkWkcgnR7bH dMYitCezF19diIwz/oFQsQyhkgpVh9rVgcFK8WWlMZqf9GpRokD9MgSc0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsOy3q/oI9WhI2j/50ZOCFjL/zRMB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqyqHBMu SHxCj0f24geqxZhTqA9rVXfcbKBmDgXu3hUjG3EPFV3vlqq81yiF2udp8DyRn6um KfCLjx4LdilsUz6G3O9xmNAHr8NUYL+1SWVHxdZsDomkqyG/tgmX3tke+x0Bz+zb yh9MkTGOvLu/+gK6pJKC+rcODWAQGRpM6+ZVXtdE/C533DrlLqa3YD8CQ+LwKXwH ztDNBxYKnIZUwbu0x+/2W+n0MxB+2v3n/nWJCqSBFnabPWP0kONoWt2yqpPg4Egu 25980sDqSIZC3DZPSB1ST44+e3kZqKuFbHhWG+6FpUmPWGFeJ/puNrZkTId/gYDH sXYfB1YrM3ibaw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:48:16 2025 by rpki-client