This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json) Hash identifier: UMPPbWx5n1pLtEKhg3Pi8BLteHWIW2JGd/etaDDhuKo= Subject key identifier: 7D:4F:1A:1A:87:FF:A1:65:E6:F4:E8:3A:32:F1:05:B0:D7:C0:51:26 Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019AF23FDCDEDB6B5C0A9AF2A2C6B90BADAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: O/k118lMivk245F0KPMF4ldCYObjEN0oYl2kWnuW6Rw=) 2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dc:de:db:6b:5c:0a:9a:f2:a2:c6:b9:0b:ad:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=7d4f1a1a87ffa165e6f4e83a32f105b0d7c05126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:7a:52:2f:dd:b5:3c:5b:ce:5d:54:aa:c5: b6:66:2e:c8:c1:1a:dd:58:a6:ae:87:b9:10:6d:2a: ce:ea:0b:66:fc:5c:d1:97:1a:78:e6:7f:94:c8:6c: 26:d0:29:67:aa:09:c2:a0:83:92:c7:a4:01:0b:dc: 3a:e9:3c:d7:dc:3a:1e:fc:a1:41:22:79:c2:ae:ce: 44:68:cc:d4:d9:15:3e:9d:c3:26:ce:63:53:28:b6: 1b:a7:a3:f8:e2:eb:29:0e:cb:83:e3:e0:3b:a8:d0: cd:d3:53:43:fc:d2:aa:b9:16:28:0d:66:c0:1e:26: 2a:0e:a6:40:dd:86:f4:bf:af:ee:e7:e0:76:6d:ba: e2:10:e9:43:d9:51:c5:9a:38:19:aa:11:66:20:34: 4f:ba:d8:c0:0c:35:d0:25:76:86:99:33:7e:18:88: 07:24:5a:20:b6:2c:37:fa:84:90:bf:6b:18:a7:59: 7f:0d:69:c4:ff:bb:4e:77:23:be:56:80:df:e7:09: 96:1f:ad:e1:27:a0:de:c8:68:ac:9a:dc:2c:65:91: 3d:e6:fa:0a:e6:90:c4:6d:2c:49:98:0c:2b:0c:9f: b1:19:de:72:b1:6c:05:77:df:05:58:74:f8:41:20: ba:99:e0:06:b9:20:99:9f:b8:c4:cd:12:46:ea:49: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4F:1A:1A:87:FF:A1:65:E6:F4:E8:3A:32:F1:05:B0:D7:C0:51:26 X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:49:c8:14:e3:b1:1e:28:63:ca:7d:81:8b:2b:16:a8:a7:08: 09:3c:41:cf:fe:3c:b1:64:a3:d8:75:82:0d:f9:e8:fc:2a:7f: dc:e5:6b:d3:fa:34:bf:0a:53:d8:3a:f7:59:82:17:8a:1c:b1: 38:2a:6a:47:bb:0b:03:24:b1:00:bd:7c:3e:f8:30:a5:05:89: 3c:f6:3a:3e:27:57:1a:99:7d:66:ea:65:57:cd:9f:d6:9d:f9: a6:63:29:d7:71:17:a5:48:66:99:43:1f:6c:81:73:98:80:3e: 59:78:e0:eb:6a:c1:de:e1:0a:ad:89:3b:51:71:86:bf:9b:56: ce:36:48:db:33:2c:1d:ff:c1:d8:e9:9d:c5:71:0f:8d:b6:fd: d1:63:3c:c7:bd:b9:58:e0:c9:8b:70:50:fb:f0:c8:e1:d6:fb: 72:4c:f6:ed:50:d0:7b:32:dc:17:40:43:6b:47:96:42:18:ab: 53:da:cf:df:e4:f2:95:c6:d7:50:90:a2:be:45:6c:37:b7:18: 33:32:24:57:7c:60:12:ad:e9:0d:85:2d:ee:db:85:36:6c:e4: a9:ff:f6:bf:ff:31:bb:73:4f:09:d2:b8:ba:ed:d5:1e:30:e8: 51:ad:e4:7e:e8:6b:d6:90:73:f1:f9:a4:7e:f0:aa:20:22:c0: 75:f5:d6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9ze22tcCpryosa5C62vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD Eyg3ZDRmMWExYTg3ZmZhMTY1ZTZmNGU4M2EzMmYxMDViMGQ3YzA1MTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk496Ui/dtTxbzl1UqsW2Zi7IwRrd WKauh7kQbSrO6gtm/FzRlxp45n+UyGwm0ClnqgnCoIOSx6QBC9w66TzX3Doe/KFB InnCrs5EaMzU2RU+ncMmzmNTKLYbp6P44uspDsuD4+A7qNDN01ND/NKquRYoDWbA HiYqDqZA3Yb0v6/u5+B2bbriEOlD2VHFmjgZqhFmIDRPutjADDXQJXaGmTN+GIgH JFogtiw3+oSQv2sYp1l/DWnE/7tOdyO+VoDf5wmWH63hJ6DeyGismtwsZZE95voK 5pDEbSxJmAwrDJ+xGd5ysWwFd98FWHT4QSC6meAGuSCZn7jEzRJG6kkLgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1PGhqH/6Fl5vToOjLxBbDXwFEmMB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUnIFOOx Hihjyn2BiysWqKcICTxBz/48sWSj2HWCDfno/Cp/3OVr0/o0vwpT2Dr3WYIXihyx OCpqR7sLAySxAL18PvgwpQWJPPY6PidXGpl9ZuplV82f1p35pmMp13EXpUhmmUMf bIFzmIA+WXjg62rB3uEKrYk7UXGGv5tWzjZI2zMsHf/B2OmdxXEPjbb90WM8x725 WODJi3BQ+/DI4db7ckz27VDQezLcF0BDa0eWQhirU9rP3+TylcbXUJCivkVsN7cY MzIkV3xgEq3pDYUt7tuFNmzkqf/2v/8xu3NPCdK4uu3VHjDoUa3kfuhr1pBz8fmk fvCqICLAdfXWRA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:07 2025 by rpki-client