This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft File: LI5SR1LthVF1oBQSyzfEqeTbYXA.mft (raw, json) Hash identifier: WYYFCWEjO6i96PRKSgeJD2iKWHnnHpgfXBdKFclZsho= Subject key identifier: 6C:BA:76:D2:37:1A:02:48:48:72:0C:0A:DD:D4:C3:1E:DA:30:A2:D2 Authority key identifier: 2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70 Certificate issuer: /CN=2c8e524752ed855175a01412cb37c4a9e4db6170 Certificate serial: 019AF208B158DFABC27330D4B0BB7B08ADE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: LI5SR1LthVF1oBQSyzfEqeTbYXA.crl (hash: tCiMGTDHThf+JnlfREVceiI0ZpLMSblvkowbB1m3gEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b1:58:df:ab:c2:73:30:d4:b0:bb:7b:08:ad:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c8e524752ed855175a01412cb37c4a9e4db6170 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=6cba76d2371a024848720c0addd4c31eda30a2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:2a:da:64:eb:bf:4c:d0:22:f0:9e:60:c2:87: 89:08:b3:62:ab:e0:fb:50:12:3b:01:27:2c:e7:c5: 54:ab:81:e6:ce:75:2b:b6:f9:f9:1b:51:90:af:d2: 24:58:34:2e:49:12:1c:e7:33:d6:24:72:9c:e4:65: 68:08:69:4b:70:1a:a7:73:f1:4b:f4:2b:2b:2c:be: 2c:1e:27:b4:fe:43:d8:8e:a0:4f:03:1c:ee:55:d5: 9e:46:8f:51:66:85:5f:d5:ca:7d:ed:9c:e1:eb:44: ec:2a:32:75:f8:01:75:d3:f5:f6:0f:f1:96:02:10: e3:33:fa:52:aa:c3:b2:18:47:c1:20:13:b8:4a:69: ae:e7:e5:75:02:eb:9f:d4:1a:57:a1:4c:f2:88:b5: 5f:ae:bb:96:12:3f:a1:97:55:a4:35:52:f1:42:f4: e0:8f:50:51:09:8e:4c:df:17:ba:5a:33:da:6d:ad: f3:1b:cd:53:26:b3:1a:f9:d2:ea:99:ee:cc:db:a2: 41:8e:f6:9b:fe:a4:aa:2d:0c:a5:6b:8e:7d:53:0f: 9b:66:5d:8d:ca:f8:f0:a4:b0:8e:9c:6c:0c:fa:45: d5:25:f2:bd:13:19:19:f6:53:42:4a:38:23:5f:fd: 27:9d:5d:4b:4f:e0:f6:f9:1f:f6:c0:73:6e:b0:db: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BA:76:D2:37:1A:02:48:48:72:0C:0A:DD:D4:C3:1E:DA:30:A2:D2 X509v3 Authority Key Identifier: keyid:2C:8E:52:47:52:ED:85:51:75:A0:14:12:CB:37:C4:A9:E4:DB:61:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI5SR1LthVF1oBQSyzfEqeTbYXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4111a6-b4cd-4415-84bd-593b774fb030/1/LI5SR1LthVF1oBQSyzfEqeTbYXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f5:39:3d:20:e1:a0:9f:e2:e9:3d:69:84:b2:b6:a9:62:5b: 73:f5:74:e3:2c:23:b0:4b:5e:a9:c2:3a:91:17:06:f6:56:1b: d1:ca:0d:b7:7e:97:db:09:23:ab:ac:f7:1b:94:66:6a:54:9c: dc:89:83:d9:c2:dd:3b:b7:a6:ba:aa:3c:14:ad:d4:eb:74:ae: 0e:0b:e1:22:db:0e:09:aa:fd:58:e7:12:ea:1c:b5:e6:69:f5: 51:a5:36:75:e9:f0:f3:44:89:46:34:37:8c:2f:91:68:04:ee: b8:b0:5b:0f:16:b8:2c:1d:2f:ca:1a:c8:67:f2:22:f0:14:b1: 36:f2:64:14:e6:11:4b:f4:b9:87:8f:2f:47:10:a2:0b:44:41: f9:52:0e:f4:88:9e:80:2c:14:1c:0c:17:48:cc:c4:55:c8:f8: 84:37:f1:f5:f9:94:48:d4:1a:b7:b1:7b:67:a4:aa:ce:c7:79: 98:bd:43:2f:18:77:f2:ee:ef:4a:9b:e0:4d:aa:78:f9:9e:08: b1:49:82:68:fd:16:d2:c3:42:8a:b5:8a:1d:e9:5e:a9:1d:84: 5e:4b:a3:f4:04:10:54:0f:d5:60:37:4d:69:c2:67:d0:d7:06: 31:c4:66:ff:76:b5:c6:f7:11:dc:bd:15:5a:5e:66:dc:6c:6a: 60:9f:10:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLFY36vCczDUsLt7CK3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOGU1MjQ3NTJlZDg1NTE3NWEwMTQxMmNiMzdjNGE5ZTRk YjYxNzAwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg2Y2JhNzZkMjM3MWEwMjQ4NDg3MjBjMGFkZGQ0YzMxZWRhMzBhMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/SraZOu/TNAi8J5gwoeJCLNiq+D7 UBI7AScs58VUq4HmznUrtvn5G1GQr9IkWDQuSRIc5zPWJHKc5GVoCGlLcBqnc/FL 9CsrLL4sHie0/kPYjqBPAxzuVdWeRo9RZoVf1cp97Zzh60TsKjJ1+AF10/X2D/GW AhDjM/pSqsOyGEfBIBO4Smmu5+V1Auuf1BpXoUzyiLVfrruWEj+hl1WkNVLxQvTg j1BRCY5M3xe6WjPaba3zG81TJrMa+dLqme7M26JBjvab/qSqLQyla459Uw+bZl2N yvjwpLCOnGwM+kXVJfK9ExkZ9lNCSjgjX/0nnV1LT+D2+R/2wHNusNsq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGy6dtI3GgJISHIMCt3Uwx7aMKLSMB8GA1UdIwQY MBaAFCyOUkdS7YVRdaAUEss3xKnk22FwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQt NTkzYjc3NGZiMDMwLzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC80MTExYTYtYjRjZC00NDE1LTg0YmQtNTkzYjc3NGZiMDMw LzEvTEk1U1IxTHRoVkYxb0JRU3l6ZkVxZVRiWVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvU5PSDh oJ/i6T1phLK2qWJbc/V04ywjsEteqcI6kRcG9lYb0coNt36X2wkjq6z3G5RmalSc 3ImD2cLdO7emuqo8FK3U63SuDgvhItsOCar9WOcS6hy15mn1UaU2denw80SJRjQ3 jC+RaATuuLBbDxa4LB0vyhrIZ/Ii8BSxNvJkFOYRS/S5h48vRxCiC0RB+VIO9Iie gCwUHAwXSMzEVcj4hDfx9fmUSNQat7F7Z6Sqzsd5mL1DLxh38u7vSpvgTap4+Z4I sUmCaP0W0sNCirWKHeleqR2EXkuj9AQQVA/VYDdNacJn0NcGMcRm/3a1xvcR3L0V Wl5m3GxqYJ8QmA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:20 2025 by rpki-client