This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json) Hash identifier: 4ED47Zhq7ZbUYs68DdNhm2TPSLgHfwj3rG/7rvC6GJI= Subject key identifier: 6E:3F:C3:82:2D:40:EA:81:F7:93:F7:E1:B4:BD:F2:96:5B:EF:0F:1D Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Certificate serial: 019BF7638CAAE6949FE13C8B79702FB04642 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft Manifest number: 023A Signing time: Sun 25 Jan 2026 23:00:54 +0000 Manifest this update: Sun 25 Jan 2026 23:00:54 +0000 Manifest next update: Mon 26 Jan 2026 23:00:54 +0000 Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: qSNOcKYD668+RZRZ1RPLQo7ABTTvNCksRT6d3m4pQf0=) 2: aeKNaD6uMJiw1mInBrVnH3hu2rM.roa (hash: 2dAhInK00WGRR5RlwdxiRxeThK0keHj6GNSl0+Y8Gsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:8c:aa:e6:94:9f:e1:3c:8b:79:70:2f:b0:46:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Validity Not Before: Jan 25 23:00:54 2026 GMT Not After : Jan 26 23:00:54 2026 GMT Subject: CN=6e3fc3822d40ea81f793f7e1b4bdf2965bef0f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:0a:a5:81:8b:ba:31:4b:56:ef:a7:55:e6: 3a:96:60:b9:12:6b:60:28:3d:fa:35:c7:76:3d:26: f3:a5:c0:d9:18:66:44:91:0e:0c:99:28:f3:80:c2: 3d:be:b0:6e:40:53:95:d8:e3:84:08:5b:9a:2b:a9: bd:b1:12:d4:42:ac:41:51:04:92:f2:ef:e2:11:01: 63:24:49:91:0b:42:43:cd:53:1e:c8:25:11:6c:b4: e8:60:aa:0e:3c:b0:17:47:7c:12:27:37:16:3b:20: 5b:1c:8a:c8:a3:39:b8:81:f5:02:c9:bf:1c:2b:4f: a6:9f:f8:d4:60:7c:3e:3b:7e:be:ba:5f:43:10:ca: e7:9e:c7:76:7c:cf:1c:29:63:1c:98:4a:07:f2:ea: 92:f0:3c:0e:81:4a:a1:9c:3b:9f:54:2e:64:d0:b6: 6c:ff:e1:d1:64:2a:92:3a:be:0c:76:95:f5:85:b3: 32:1b:dc:1d:04:ae:21:54:d1:e4:e9:77:e3:b9:c0: c2:fc:c1:21:18:94:39:8b:f9:d1:93:33:8a:b5:53: 97:0d:bc:f1:40:d4:e7:4b:c3:15:e4:01:db:06:d9: 75:0f:cd:2e:b8:99:24:48:30:11:9d:be:cf:68:ca: 02:89:55:a2:8f:04:1a:a0:17:e2:22:34:36:81:9b: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3F:C3:82:2D:40:EA:81:F7:93:F7:E1:B4:BD:F2:96:5B:EF:0F:1D X509v3 Authority Key Identifier: keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:56:08:71:d0:88:7b:44:5b:d9:c3:08:a7:f1:50:04:2b:ed: 47:04:af:30:96:b2:12:9d:f1:de:c9:64:70:ca:b0:b1:c3:c5: 78:bb:0c:72:f1:2d:3f:f0:14:bc:3d:77:20:c5:08:c8:e0:89: 71:47:45:4f:cd:af:32:af:df:fe:49:9c:df:0f:40:c8:74:ad: 02:59:33:87:4a:4a:a2:35:83:45:6c:68:a4:d7:8a:0f:e9:b4: 05:44:11:1c:5e:22:cf:5d:48:aa:81:01:f4:7e:1f:5c:f8:49: e4:5d:6e:55:ec:22:37:53:54:eb:dd:6a:dd:96:41:f4:3f:0e: 9a:29:e2:bd:92:4c:cc:ba:7e:8e:37:93:17:67:0a:01:bc:fd: c7:3f:1b:c3:71:6b:da:3e:d9:a4:a7:f7:e7:b6:a7:de:2f:d4: ca:85:bc:3b:84:6c:91:87:36:85:4c:3f:39:0a:05:0d:36:6f: 18:6b:48:39:09:68:12:90:f8:05:7e:af:be:5c:f3:8c:d1:2c: 95:e4:de:92:9a:5b:4c:b0:73:e6:f9:ce:b4:fe:5d:12:00:6c: c8:04:86:5f:a7:0c:69:61:c1:09:11:bf:3e:c0:d4:10:64:77: a4:08:98:0a:26:4c:01:3e:15:29:a9:be:a1:89:10:4f:22:e5: 82:b6:bb:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4yq5pSf4TyLeXAvsEZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5 ZTM4MDYwHhcNMjYwMTI1MjMwMDU0WhcNMjYwMTI2MjMwMDU0WjAzMTEwLwYDVQQD Eyg2ZTNmYzM4MjJkNDBlYTgxZjc5M2Y3ZTFiNGJkZjI5NjViZWYwZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo0KpYGLujFLVu+nVeY6lmC5Emtg KD36Ncd2PSbzpcDZGGZEkQ4MmSjzgMI9vrBuQFOV2OOECFuaK6m9sRLUQqxBUQSS 8u/iEQFjJEmRC0JDzVMeyCURbLToYKoOPLAXR3wSJzcWOyBbHIrIozm4gfUCyb8c K0+mn/jUYHw+O36+ul9DEMrnnsd2fM8cKWMcmEoH8uqS8DwOgUqhnDufVC5k0LZs /+HRZCqSOr4MdpX1hbMyG9wdBK4hVNHk6XfjucDC/MEhGJQ5i/nRkzOKtVOXDbzx QNTnS8MV5AHbBtl1D80uuJkkSDARnb7PaMoCiVWijwQaoBfiIjQ2gZtmkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4/w4ItQOqB95P34bS98pZb7w8dMB8GA1UdIwQY MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5 LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlYIcdCI e0Rb2cMIp/FQBCvtRwSvMJayEp3x3slkcMqwscPFeLsMcvEtP/AUvD13IMUIyOCJ cUdFT82vMq/f/kmc3w9AyHStAlkzh0pKojWDRWxopNeKD+m0BUQRHF4iz11IqoEB 9H4fXPhJ5F1uVewiN1NU691q3ZZB9D8OminivZJMzLp+jjeTF2cKAbz9xz8bw3Fr 2j7ZpKf357an3i/UyoW8O4RskYc2hUw/OQoFDTZvGGtIOQloEpD4BX6vvlzzjNEs leTekppbTLBz5vnOtP5dEgBsyASGX6cMaWHBCRG/PsDUEGR3pAiYCiZMAT4VKam+ oYkQTyLlgra7Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:04:08 2026 by rpki-client