This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json) Hash identifier: Q5XC/iywspuBLE9fbWCA86/PBGHtEKov820YXL+5lEw= Subject key identifier: 87:48:06:04:D0:2B:46:D4:48:4E:E5:91:E1:63:71:92:4D:AA:06:CC Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38 Certificate serial: 019AF465B3B141AF094CAF4B6FFA802E0DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 16:01:37 +0000 Manifest this update: Sat 06 Dec 2025 16:01:37 +0000 Manifest next update: Sun 07 Dec 2025 16:01:37 +0000 Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: Sfm4BRoJwaAa9xNNJLixTo3UfnZA/TBT2m9bmcqTaII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b3:b1:41:af:09:4c:af:4b:6f:fa:80:2e:0d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38 Validity Not Before: Dec 6 16:01:37 2025 GMT Not After : Dec 7 16:01:37 2025 GMT Subject: CN=87480604d02b46d4484ee591e16371924daa06cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:54:5d:19:82:b3:be:1f:9a:36:48:05:0e:1c: fc:b7:88:dd:f4:0b:7a:ad:38:b6:b3:56:fe:41:4f: 27:0a:e5:ac:1f:85:a5:f9:3d:a9:52:f4:70:99:1c: 1f:6c:35:6e:e9:26:18:66:25:a2:5e:ea:0c:ca:77: 69:01:3e:ad:02:55:d6:83:c8:3e:44:6a:e6:4a:07: 17:75:4b:14:4c:d8:27:c4:d2:41:92:9e:e9:3e:af: 71:47:b4:24:38:f2:ea:85:44:05:ae:bf:e9:43:cd: 9f:f8:92:05:45:a9:c4:7a:fe:0f:60:07:58:35:60: 44:83:1e:ff:11:79:b3:dd:e6:27:57:be:05:36:4d: 89:24:b1:5d:a7:2d:99:fa:97:44:b6:dc:e0:1b:ec: fa:f0:28:2b:b8:e0:17:83:a6:a1:d4:94:dd:9d:f1: 73:fc:b3:d8:e6:07:ee:97:21:a9:b7:8d:c8:fe:db: 56:c2:ad:4b:69:be:7b:46:34:1f:c4:bb:e6:72:a8: 35:88:35:47:3d:e6:11:2b:4b:79:52:d6:ec:8a:03: a9:de:8e:a0:36:d7:14:48:2c:fc:ea:02:79:d8:2d: 70:59:ad:a3:aa:b7:3e:f2:25:08:e5:e9:b4:da:7f: e1:93:2a:c7:20:c1:1a:5e:bc:f7:e7:a3:56:29:0a: 07:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:06:04:D0:2B:46:D4:48:4E:E5:91:E1:63:71:92:4D:AA:06:CC X509v3 Authority Key Identifier: keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:09:19:b3:a7:52:8d:b5:98:17:05:95:20:fd:2a:40:db:9e: 2d:0a:d3:ed:69:02:cc:f3:87:69:34:3e:55:e2:9f:ff:05:a1: 39:5b:c0:e8:fe:12:0c:fd:da:37:66:79:a3:09:f6:ff:d9:39: 63:f9:f4:52:7f:74:ba:17:76:9f:a8:76:30:bc:9f:a2:29:a5: 36:2a:7b:30:3c:b0:54:d1:d5:34:8c:2b:30:b3:9d:c5:10:66: 24:e0:fb:a3:af:56:0f:1c:57:5c:44:5d:d4:05:fd:36:4a:3b: 22:cc:76:14:1f:ca:b4:d1:5f:e1:b9:68:79:1e:9c:39:40:a5: 29:bf:ae:43:22:32:cc:9d:71:08:0e:1d:ae:50:c6:96:eb:e3: fc:26:95:89:96:be:41:01:5b:a5:97:a8:0d:c2:4e:fe:e5:68: db:50:7a:57:cd:a4:34:68:84:cc:60:8d:32:ab:40:f1:2b:2f: db:b3:9c:1a:c8:ec:4f:7a:0d:44:36:9d:d9:c7:77:c1:33:24: 4b:18:43:21:62:cf:d2:75:11:d9:2c:11:ea:30:1a:06:e1:01: df:f1:e5:45:9b:71:16:93:4f:37:84:6a:7c:14:96:79:00:84: 71:ce:db:27:4d:46:e5:87:cb:ad:57:bc:04:e2:28:b1:18:6e: e1:88:ca:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbOxQa8JTK9Lb/qALg3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmYwMTFhZGFhZWVjNDY1YjE4MmFlZTcwOWMzNjdjODdl NThmMzgwHhcNMjUxMjA2MTYwMTM3WhcNMjUxMjA3MTYwMTM3WjAzMTEwLwYDVQQD Eyg4NzQ4MDYwNGQwMmI0NmQ0NDg0ZWU1OTFlMTYzNzE5MjRkYWEwNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RdGYKzvh+aNkgFDhz8t4jd9At6 rTi2s1b+QU8nCuWsH4Wl+T2pUvRwmRwfbDVu6SYYZiWiXuoMyndpAT6tAlXWg8g+ RGrmSgcXdUsUTNgnxNJBkp7pPq9xR7QkOPLqhUQFrr/pQ82f+JIFRanEev4PYAdY NWBEgx7/EXmz3eYnV74FNk2JJLFdpy2Z+pdEttzgG+z68CgruOAXg6ah1JTdnfFz /LPY5gfulyGpt43I/ttWwq1Lab57RjQfxLvmcqg1iDVHPeYRK0t5UtbsigOp3o6g NtcUSCz86gJ52C1wWa2jqrc+8iUI5em02n/hkyrHIMEaXrz356NWKQoHxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdIBgTQK0bUSE7lkeFjcZJNqgbMMB8GA1UdIwQY MBaAFC4vARraruxGWxgq7nCcNnyH5Y84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQt MjIyYmFmOTUzYjQ0LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQtMjIyYmFmOTUzYjQ0 LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwkZs6dS jbWYFwWVIP0qQNueLQrT7WkCzPOHaTQ+VeKf/wWhOVvA6P4SDP3aN2Z5own2/9k5 Y/n0Un90uhd2n6h2MLyfoimlNip7MDywVNHVNIwrMLOdxRBmJOD7o69WDxxXXERd 1AX9Nko7Isx2FB/KtNFf4bloeR6cOUClKb+uQyIyzJ1xCA4drlDGluvj/CaViZa+ QQFbpZeoDcJO/uVo21B6V82kNGiEzGCNMqtA8Ssv27OcGsjsT3oNRDad2cd3wTMk SxhDIWLP0nUR2SwR6jAaBuEB3/HlRZtxFpNPN4RqfBSWeQCEcc7bJ01G5YfLrVe8 BOIosRhu4YjKRw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:33 2025 by rpki-client