This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft File: rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json) Hash identifier: TaFi1nwLQi5kh479Rhg0p6LqMt4UuRzATuv/CDDGxZY= Subject key identifier: 59:A6:DA:7A:FE:D7:AB:63:C2:2F:87:22:35:44:1D:02:9B:B6:DB:2E Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01 Certificate issuer: /CN=acb20250d4cdd366719b969d6f412301c13eb901 Certificate serial: 019AF12DDE6C936CF00718FDE1FF08258927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:46 +0000 Manifest this update: Sat 06 Dec 2025 01:01:46 +0000 Manifest next update: Sun 07 Dec 2025 01:01:46 +0000 Files and hashes: 1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=) 2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: 6W0EVrxaIWHjNiYNkVh/daeYCtHz7pES3yUbEcUDJE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:de:6c:93:6c:f0:07:18:fd:e1:ff:08:25:89:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901 Validity Not Before: Dec 6 01:01:46 2025 GMT Not After : Dec 7 01:01:46 2025 GMT Subject: CN=59a6da7afed7ab63c22f872235441d029bb6db2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:e3:fb:28:bb:fd:f9:e6:30:5a:93:a3:0a: f6:f2:d2:0c:63:0c:c6:49:02:15:d4:77:f9:c2:93: e5:ce:1c:51:6c:07:b4:c6:6d:9e:ff:ee:7b:8f:a0: 6f:29:99:32:2f:b6:3f:29:e0:ad:c1:97:49:b8:c3: 33:e4:b1:ff:f6:c6:77:04:bd:45:ca:bf:6a:1b:8e: 16:c4:eb:40:ae:39:71:2b:f0:1f:57:75:4a:31:05: 94:40:46:13:5a:7b:10:f9:f9:c4:eb:df:e5:42:5f: 3d:ba:52:ff:0c:f1:fd:60:14:12:e5:b2:32:a8:b6: 7e:c8:91:a2:c0:38:3b:67:a8:dd:47:5f:30:36:74: bb:73:3f:a3:15:63:0c:9b:0b:6f:71:87:04:5a:aa: 57:c1:0c:00:66:2e:44:97:70:0f:55:9a:5a:7f:8c: b1:51:25:b1:f5:c6:e0:18:26:7f:9c:66:93:a3:da: e8:ce:dd:df:d7:39:ca:7a:3c:13:12:96:e4:54:c0: 30:31:14:5f:b3:50:f0:49:ad:3d:29:c2:36:f5:4b: a4:cc:f4:4d:5b:25:73:62:fb:65:7e:81:4c:cf:39: dc:24:6d:a0:e4:09:4e:88:b7:49:9f:ba:e5:d0:72: 24:97:2c:26:f2:32:68:a1:91:e7:86:73:23:47:84: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A6:DA:7A:FE:D7:AB:63:C2:2F:87:22:35:44:1D:02:9B:B6:DB:2E X509v3 Authority Key Identifier: keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d7:08:db:c0:51:80:ce:28:90:43:87:ca:1f:8e:d4:6c:05: e3:4d:4a:5d:c6:d7:e5:c0:91:37:21:0f:de:c8:85:fd:51:c9: 3d:20:26:8d:d9:42:04:6a:a4:83:7d:20:c6:a6:e5:e9:6d:48: 9c:ca:26:55:03:f8:2c:aa:41:23:9b:7b:27:7b:1a:9c:78:e4: d8:19:c8:ac:0d:5f:24:ac:08:05:73:3d:31:e2:6d:e1:9e:33: 93:df:e6:73:35:43:d4:4a:89:55:fa:20:8b:ab:95:e7:c4:f2: 31:c6:27:70:92:9e:d6:9d:38:52:f9:ab:cb:f7:b5:1f:96:40: 29:3f:05:cc:2c:6b:ba:b4:0d:4b:02:7a:0d:a9:f2:a0:a3:b5: fe:43:83:79:a4:34:c5:27:b8:e7:24:e9:e4:a3:03:b1:e0:ae: e2:91:0b:82:5d:c8:59:2d:bb:dd:b8:0c:ed:06:c8:86:c6:f4: 71:8b:76:6b:b6:50:0f:09:02:5d:e4:d9:47:23:23:df:68:2b: ed:37:f4:0e:87:04:f3:ee:f7:24:b5:2e:30:24:d5:8d:d8:80: 53:4d:cc:c2:f7:4e:b6:78:e9:fb:f6:ac:08:61:25:62:7d:eb: cb:f1:55:5f:ed:6e:32:27:3d:31:1a:51:f1:3e:3d:47:83:11: fc:27:83:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLd5sk2zwBxj94f8IJYknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYjIwMjUwZDRjZGQzNjY3MTliOTY5ZDZmNDEyMzAxYzEz ZWI5MDEwHhcNMjUxMjA2MDEwMTQ2WhcNMjUxMjA3MDEwMTQ2WjAzMTEwLwYDVQQD Eyg1OWE2ZGE3YWZlZDdhYjYzYzIyZjg3MjIzNTQ0MWQwMjliYjZkYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXLj+yi7/fnmMFqTowr28tIMYwzG SQIV1Hf5wpPlzhxRbAe0xm2e/+57j6BvKZkyL7Y/KeCtwZdJuMMz5LH/9sZ3BL1F yr9qG44WxOtArjlxK/AfV3VKMQWUQEYTWnsQ+fnE69/lQl89ulL/DPH9YBQS5bIy qLZ+yJGiwDg7Z6jdR18wNnS7cz+jFWMMmwtvcYcEWqpXwQwAZi5El3APVZpaf4yx USWx9cbgGCZ/nGaTo9rozt3f1znKejwTEpbkVMAwMRRfs1DwSa09KcI29UukzPRN WyVzYvtlfoFMzzncJG2g5AlOiLdJn7rl0HIklywm8jJooZHnhnMjR4RtGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmm2nr+16tjwi+HIjVEHQKbttsuMB8GA1UdIwQY MBaAFKyyAlDUzdNmcZuWnW9BIwHBPrkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQt NmY0ZjAzMWVlYWUyLzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zZTllM2UtOTQxNi00MmM4LWEzNWQtNmY0ZjAzMWVlYWUy LzEvckxJQ1VOVE4wMlp4bTVhZGIwRWpBY0UtdVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdcI28BR gM4okEOHyh+O1GwF401KXcbX5cCRNyEP3siF/VHJPSAmjdlCBGqkg30gxqbl6W1I nMomVQP4LKpBI5t7J3sanHjk2BnIrA1fJKwIBXM9MeJt4Z4zk9/mczVD1EqJVfog i6uV58TyMcYncJKe1p04Uvmry/e1H5ZAKT8FzCxrurQNSwJ6DanyoKO1/kODeaQ0 xSe45yTp5KMDseCu4pELgl3IWS273bgM7QbIhsb0cYt2a7ZQDwkCXeTZRyMj32gr 7Tf0DocE8+73JLUuMCTVjdiAU03MwvdOtnjp+/asCGElYn3ry/FVX+1uMic9MRpR 8T49R4MR/CeD0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:40 2025 by rpki-client