This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json) Hash identifier: +9qMe6gNsNxpGFHZGMZAYLHNMarZUdrjWq9wYV4mt48= Subject key identifier: 22:F4:59:70:1E:FF:9F:6D:9A:D4:C6:31:23:6E:60:53:62:F9:10:DA Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Certificate serial: 019AF12D739F71DBC2D3BF534D150ECB92B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft Manifest number: 1739 Signing time: Sat 06 Dec 2025 01:01:19 +0000 Manifest this update: Sat 06 Dec 2025 01:01:19 +0000 Manifest next update: Sun 07 Dec 2025 01:01:19 +0000 Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=) 2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: ubZmc/qC2oDYCLnKqYnQvEaIC8yPzWfAU1yTe+Exh0s=) 3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:73:9f:71:db:c2:d3:bf:53:4d:15:0e:cb:92:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Validity Not Before: Dec 6 01:01:19 2025 GMT Not After : Dec 7 01:01:19 2025 GMT Subject: CN=22f459701eff9f6d9ad4c631236e605362f910da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:12:2d:03:4e:8b:16:79:e9:a3:7d:ea:4d: 67:80:1c:5a:0c:bf:f2:da:98:e9:8d:ff:e5:08:fe: 04:93:4e:62:91:ee:50:1d:9a:90:47:ab:07:ff:2b: 9a:56:11:3e:82:98:c4:30:04:e3:78:0a:79:7f:90: 1b:25:f8:f1:f5:b3:d5:2f:d3:29:06:af:86:5e:84: 30:e3:6a:22:f1:1c:13:ce:74:94:e7:7d:ab:88:ac: ac:da:bf:82:1e:a7:3e:e6:a8:fd:3a:3f:84:3c:54: ca:21:73:59:95:14:8e:de:ff:57:e4:15:14:a8:0e: 0a:ae:b1:39:c2:16:e8:3d:0b:08:a1:79:fd:3c:f9: ec:91:ad:6c:db:c9:12:84:80:d1:26:bb:65:99:80: 67:0d:7a:d0:b2:6e:57:04:16:84:46:6c:34:e9:83: 30:48:f8:42:be:d6:34:d1:e7:8f:1c:06:6e:ed:b7: 00:0f:2b:02:ba:10:4e:a2:45:10:3b:4f:e5:2e:01: 19:08:e4:95:ba:3a:83:1b:9f:bc:b7:86:df:69:08: 5a:60:27:bb:d1:0e:77:e6:34:89:e7:45:58:ac:71: 48:e5:8c:18:55:d4:e1:d9:1d:86:92:4a:48:d3:1b: fa:f8:87:75:b0:c2:a0:ed:bc:39:c5:6d:f5:04:74: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F4:59:70:1E:FF:9F:6D:9A:D4:C6:31:23:6E:60:53:62:F9:10:DA X509v3 Authority Key Identifier: keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9a:9c:e1:28:c4:24:10:27:c4:ed:4b:e0:84:8a:fb:75:97: 85:71:98:79:d2:ca:43:9d:77:78:c4:5d:bb:ac:ef:8e:48:da: 98:35:3c:f3:5d:c4:24:aa:a4:b2:d7:9b:25:15:9e:83:04:83: a9:4b:f6:59:65:0c:9c:31:89:7d:a9:e5:cf:ed:e4:67:aa:03: 9d:01:dc:ec:2e:e0:79:ff:62:70:27:37:61:1f:95:ae:91:4e: 1a:a4:33:78:f8:d4:cc:4d:41:f0:24:91:1e:43:a3:71:59:b3: 12:a0:24:e8:50:01:00:a0:a4:43:36:2d:65:8f:a6:a0:93:c3: 17:88:29:6a:a4:8c:73:78:d9:22:52:40:f9:0f:da:f9:81:5d: 31:24:f9:5c:4f:25:dc:43:7c:af:32:4c:64:4f:3c:c2:ed:85: 34:8b:64:a1:1a:cb:72:e5:93:84:fd:ec:f5:fd:36:45:01:bf: 99:0c:22:a0:1d:9f:28:06:9a:bf:76:cc:f9:3f:e4:a5:f4:d3: 2d:f1:9e:32:79:40:c9:8e:c2:b3:ad:0e:65:f5:e9:02:51:48: 03:d2:42:80:27:e9:b8:4b:a4:79:eb:ac:65:ba:2a:66:de:75: 77:7f:c4:00:ab:63:88:fb:10:8d:e5:90:9a:00:36:98:78:24: 09:19:4f:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXOfcdvC079TTRUOy5KyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi OTM3ZDIwHhcNMjUxMjA2MDEwMTE5WhcNMjUxMjA3MDEwMTE5WjAzMTEwLwYDVQQD EygyMmY0NTk3MDFlZmY5ZjZkOWFkNGM2MzEyMzZlNjA1MzYyZjkxMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIcSLQNOixZ56aN96k1ngBxaDL/y 2pjpjf/lCP4Ek05ike5QHZqQR6sH/yuaVhE+gpjEMATjeAp5f5AbJfjx9bPVL9Mp Bq+GXoQw42oi8RwTznSU532riKys2r+CHqc+5qj9Oj+EPFTKIXNZlRSO3v9X5BUU qA4KrrE5whboPQsIoXn9PPnska1s28kShIDRJrtlmYBnDXrQsm5XBBaERmw06YMw SPhCvtY00eePHAZu7bcADysCuhBOokUQO0/lLgEZCOSVujqDG5+8t4bfaQhaYCe7 0Q535jSJ50VYrHFI5YwYVdTh2R2GkkpI0xv6+Id1sMKg7bw5xW31BHQ2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCL0WXAe/59tmtTGMSNuYFNi+RDaMB8GA1UdIwQY MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5qc4SjE JBAnxO1L4ISK+3WXhXGYedLKQ513eMRdu6zvjkjamDU8813EJKqkstebJRWegwSD qUv2WWUMnDGJfanlz+3kZ6oDnQHc7C7gef9icCc3YR+VrpFOGqQzePjUzE1B8CSR HkOjcVmzEqAk6FABAKCkQzYtZY+moJPDF4gpaqSMc3jZIlJA+Q/a+YFdMST5XE8l 3EN8rzJMZE88wu2FNItkoRrLcuWThP3s9f02RQG/mQwioB2fKAaav3bM+T/kpfTT LfGeMnlAyY7Cs60OZfXpAlFIA9JCgCfpuEukeeusZboqZt51d3/EAKtjiPsQjeWQ mgA2mHgkCRlP+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:06 2025 by rpki-client