This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json) Hash identifier: g6Vt3a/npyvzTE38sBD6VSRR9bArlFeJrICHzUPXJdw= Subject key identifier: DB:59:9F:4F:DA:88:7A:7D:0A:84:5D:CD:8F:0F:6E:A3:FC:8F:C8:8E Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Certificate serial: 019AF208AB535671C7BA15E90C22C520F9DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft Manifest number: 01B2 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: r885mn/DytKor5JQQmeTy7CkOA7AsihU6yE67ocf/ng=) 2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ab:53:56:71:c7:ba:15:e9:0c:22:c5:20:f9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=db599f4fda887a7d0a845dcd8f0f6ea3fc8fc88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a6:9c:75:0d:2c:bc:21:08:95:6c:df:5e:7d: 6b:a8:96:73:1c:05:f5:af:62:14:b4:85:0a:5f:c8: f8:5e:26:49:63:94:71:26:86:ea:7c:2e:1f:05:0b: 5c:8b:1b:6f:9f:df:b6:ae:19:68:be:a7:83:15:2b: 7f:fc:cd:df:04:b0:c8:3f:91:58:07:55:84:ad:57: 67:5d:c3:a2:fb:f6:42:a1:8d:26:d5:63:2b:b6:a8: 87:de:a6:e4:91:db:20:80:2b:2f:ad:4a:59:86:99: 24:48:a4:be:55:31:fb:32:b9:b0:c1:d9:00:26:db: 09:ac:95:1e:b6:49:d5:06:ec:2d:99:dc:c8:31:19: 62:52:a9:76:d5:df:5e:25:a2:e1:93:7a:20:6c:0a: c0:b0:a4:9a:54:5c:e9:28:cf:60:b9:23:d7:b4:aa: 11:32:c6:73:d1:c4:10:b3:43:c8:53:63:df:bd:b0: 43:0c:d5:ea:1e:c8:5a:c6:4f:b3:0f:c3:61:4c:99: 87:fe:90:ff:20:e8:ea:b7:6b:44:03:aa:b5:25:22: 90:32:5f:2b:9d:f7:fc:4b:f8:9b:85:c8:89:59:58: ef:f1:54:39:6e:b9:56:09:4e:4b:8f:2c:cd:67:7f: 83:de:eb:3b:e4:a2:bd:57:48:72:d6:85:10:7f:93: 55:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:9F:4F:DA:88:7A:7D:0A:84:5D:CD:8F:0F:6E:A3:FC:8F:C8:8E X509v3 Authority Key Identifier: keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:eb:b0:3f:ef:0b:b3:44:b6:7b:2a:77:fd:b1:e8:15:26:e2: cf:d7:d5:bf:bd:fe:ef:0f:0f:66:bd:97:ef:93:93:c4:4a:72: 01:df:4a:7b:22:44:ab:96:ee:6a:b3:2a:cd:c0:29:2e:2e:9e: 66:74:7c:77:5e:af:28:21:b2:19:79:34:d7:a5:09:14:4f:db: 57:5a:f9:ed:a6:57:7b:b4:61:94:f7:43:09:9a:66:45:1f:49: e6:64:49:7b:d6:be:84:c0:ff:a7:eb:86:78:d7:76:02:fc:b4: 07:24:1f:7d:6a:28:0a:18:00:29:fd:6d:41:42:6c:84:d6:a9: 2b:4a:9b:24:c4:04:99:73:b7:f4:26:b7:52:92:d9:34:bc:3e: 3c:29:44:cd:4e:76:7d:c2:c8:7e:49:b1:2d:fd:96:03:04:3d: 08:a8:38:37:1a:5c:af:46:a9:fe:c3:e8:f4:f6:9b:ec:b5:b5: c8:d3:97:c3:28:1b:a9:83:ed:91:ed:3f:b9:57:58:10:b1:6f: ba:cb:df:0d:3b:4e:59:57:b2:88:0a:5b:0f:a8:3a:40:59:6d: c8:05:89:5f:b6:51:3c:2b:52:aa:fc:40:83:a1:c3:49:7a:94: 9b:dc:a1:ae:2c:e6:2b:97:f2:4c:5c:fa:3a:7d:24:a6:a3:c0: 07:2a:2a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKtTVnHHuhXpDCLFIPnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5 ZTM4MDYwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EyhkYjU5OWY0ZmRhODg3YTdkMGE4NDVkY2Q4ZjBmNmVhM2ZjOGZjODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6acdQ0svCEIlWzfXn1rqJZzHAX1 r2IUtIUKX8j4XiZJY5RxJobqfC4fBQtcixtvn9+2rhlovqeDFSt//M3fBLDIP5FY B1WErVdnXcOi+/ZCoY0m1WMrtqiH3qbkkdsggCsvrUpZhpkkSKS+VTH7MrmwwdkA JtsJrJUetknVBuwtmdzIMRliUql21d9eJaLhk3ogbArAsKSaVFzpKM9guSPXtKoR MsZz0cQQs0PIU2PfvbBDDNXqHshaxk+zD8NhTJmH/pD/IOjqt2tEA6q1JSKQMl8r nff8S/ibhciJWVjv8VQ5brlWCU5LjyzNZ3+D3us75KK9V0hy1oUQf5NVCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtZn0/aiHp9CoRdzY8PbqP8j8iOMB8GA1UdIwQY MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5 LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOuwP+8L s0S2eyp3/bHoFSbiz9fVv73+7w8PZr2X75OTxEpyAd9KeyJEq5buarMqzcApLi6e ZnR8d16vKCGyGXk016UJFE/bV1r57aZXe7RhlPdDCZpmRR9J5mRJe9a+hMD/p+uG eNd2Avy0ByQffWooChgAKf1tQUJshNapK0qbJMQEmXO39Ca3UpLZNLw+PClEzU52 fcLIfkmxLf2WAwQ9CKg4Nxpcr0ap/sPo9Pab7LW1yNOXwygbqYPtke0/uVdYELFv usvfDTtOWVeyiApbD6g6QFltyAWJX7ZRPCtSqvxAg6HDSXqUm9yhrizmK5fyTFz6 On0kpqPAByoqeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:48 2025 by rpki-client