This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json) Hash identifier: zY3FLWviLTJJVCWvKfbe1Z3Helln+mSL2nZ60tYi34E= Subject key identifier: 4B:B3:9E:9B:34:31:5D:22:57:F5:96:A5:35:AD:62:61:AD:29:1F:DD Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Certificate serial: 019AF20927A47517CE2561D53715A089AE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft Manifest number: 09AE Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=) 2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: q923GJKrYhZ1YejmdaemE1j5OVbv4ZzJQ7/mmtPDJFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:27:a4:75:17:ce:25:61:d5:37:15:a0:89:ae:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=4bb39e9b34315d2257f596a535ad6261ad291fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:f5:ec:1f:0a:d0:86:a7:05:b4:2b:65:61: 7c:2c:82:fe:ab:af:a9:cb:21:89:14:58:0d:4f:b6: c5:ae:bd:d9:a1:cd:32:fa:41:3e:9d:c1:8e:77:c1: 8b:f3:8d:53:82:60:70:6a:dd:a3:51:ab:3f:ab:ff: 8f:af:82:7b:44:dc:ff:ec:5e:90:0c:6a:d2:45:4a: c4:32:c9:0c:5f:51:c5:6f:91:3b:03:f1:52:e7:ff: 95:76:3f:66:b1:74:fc:1e:5c:7a:d0:25:b8:6b:3f: 58:dc:81:fd:13:57:17:51:6d:bf:88:6f:0c:26:c5: bc:04:f6:f6:90:c4:dd:99:c6:30:b2:42:0f:43:b5: 01:6d:ea:ca:a5:68:38:3b:77:e3:ad:a3:35:c6:8f: ef:40:2d:39:96:4b:b4:f5:bf:6b:a6:1f:0b:a4:48: 98:d9:49:86:66:ca:9f:a7:83:9d:e0:b8:40:79:85: cb:f9:4d:6a:04:d6:3a:d7:fd:de:e3:65:51:90:48: b0:b5:d3:b3:7a:da:d2:65:cc:db:38:4e:79:27:bd: 9a:2b:a9:60:3a:0d:5c:78:0f:d2:64:b2:26:c3:3e: 64:4d:23:56:72:3f:c5:01:40:94:c5:12:53:ea:a6: 7f:14:64:f3:86:43:6e:16:53:f6:04:6c:f7:1c:1a: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B3:9E:9B:34:31:5D:22:57:F5:96:A5:35:AD:62:61:AD:29:1F:DD X509v3 Authority Key Identifier: keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:35:bc:fb:99:ae:5d:a8:1c:a7:8b:0c:1c:34:77:e0:94:99: 67:18:6e:bb:3e:78:76:af:97:7d:d9:f4:51:e8:6c:d6:8e:23: 6e:0b:50:af:6d:f3:5b:fa:44:00:90:92:22:59:5e:a8:96:71: c1:e4:48:87:bf:9c:5a:4c:8f:02:58:7b:c4:af:23:d9:cd:8f: d7:44:95:ed:26:06:b2:ef:1e:6e:db:cb:94:69:8a:49:34:69: 8a:71:8f:c1:d5:24:0a:d2:0c:80:53:d6:7b:2d:ca:c5:1c:a7: 5b:49:63:1b:fe:40:0a:e8:6e:7d:59:c1:c7:4d:74:34:0a:36: c0:31:22:3c:86:34:27:42:56:ef:5c:48:70:b2:93:27:6b:72: 69:e2:2b:ff:f5:f5:24:5f:c2:78:1c:a7:e6:ab:a4:75:97:4b: 33:f7:b8:79:70:ad:22:27:cc:36:f2:50:87:ab:d1:2d:0f:23: 1d:b3:1e:92:5a:66:3d:e2:21:04:ec:13:6f:af:6b:18:ed:17: 5e:b4:de:7a:db:c7:40:9a:ee:95:82:3a:98:83:6f:1d:26:5c: 14:ab:5b:ca:ff:fb:06:04:a9:64:19:17:44:6e:a2:13:f0:f7: d6:d7:13:53:e2:87:6f:30:67:e7:d7:72:b8:b5:48:f7:7d:b8: 32:83:76:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSekdRfOJWHVNxWgia5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm YWUyOTEwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg0YmIzOWU5YjM0MzE1ZDIyNTdmNTk2YTUzNWFkNjI2MWFkMjkxZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1n17B8K0IanBbQrZWF8LIL+q6+p yyGJFFgNT7bFrr3Zoc0y+kE+ncGOd8GL841TgmBwat2jUas/q/+Pr4J7RNz/7F6Q DGrSRUrEMskMX1HFb5E7A/FS5/+Vdj9msXT8Hlx60CW4az9Y3IH9E1cXUW2/iG8M JsW8BPb2kMTdmcYwskIPQ7UBberKpWg4O3fjraM1xo/vQC05lku09b9rph8LpEiY 2UmGZsqfp4Od4LhAeYXL+U1qBNY61/3e42VRkEiwtdOzetrSZczbOE55J72aK6lg Og1ceA/SZLImwz5kTSNWcj/FAUCUxRJT6qZ/FGTzhkNuFlP2BGz3HBp3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuznps0MV0iV/WWpTWtYmGtKR/dMB8GA1UdIwQY MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzW8+5mu Xagcp4sMHDR34JSZZxhuuz54dq+Xfdn0Uehs1o4jbgtQr23zW/pEAJCSIlleqJZx weRIh7+cWkyPAlh7xK8j2c2P10SV7SYGsu8ebtvLlGmKSTRpinGPwdUkCtIMgFPW ey3KxRynW0ljG/5ACuhufVnBx010NAo2wDEiPIY0J0JW71xIcLKTJ2tyaeIr//X1 JF/CeByn5qukdZdLM/e4eXCtIifMNvJQh6vRLQ8jHbMeklpmPeIhBOwTb69rGO0X XrTeetvHQJrulYI6mINvHSZcFKtbyv/7BgSpZBkXRG6iE/D31tcTU+KHbzBn59dy uLVI9324MoN2PQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:52 2025 by rpki-client