This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json) Hash identifier: Q1faFKgIyPw80fUVo/2A/yQFku6fOyajWMx+CrvwbdU= Subject key identifier: 70:A0:BF:98:B9:DB:89:02:D4:AE:8A:57:50:39:F7:23:3C:4B:50:F7 Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Certificate serial: 019AF16439580BFD2E4400C9EFC07409BD22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft Manifest number: 0B23 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=) 2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=) 3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: /7U9fl08EZ8X7CLxkq7Ww0vwAe9W6+ZYi8r6POpjAjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:39:58:0b:fd:2e:44:00:c9:ef:c0:74:09:bd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=70a0bf98b9db8902d4ae8a575039f7233c4b50f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:b5:b0:a5:16:62:26:6d:a6:4d:d6:16:6a: 04:3a:2e:14:75:cb:d9:39:cb:2e:23:dd:89:a1:a7: 1c:c1:0a:9d:95:93:7f:87:73:6c:b6:45:3d:f7:bf: cd:6f:65:b8:be:40:36:31:63:6b:f9:2a:16:b5:80: c4:f4:cc:5a:10:ad:79:43:97:af:a3:44:41:a6:7b: 5e:5a:79:6a:49:71:9e:f4:16:25:86:e2:d0:10:52: d0:60:3f:3c:76:c7:62:84:2e:4d:c6:30:d4:b1:30: 35:03:46:7a:3c:87:12:34:d1:76:b6:bd:1a:d4:db: 24:68:90:7f:c6:cd:f1:77:b6:af:b8:55:c2:b5:22: a0:eb:81:30:86:b1:33:b0:3d:2e:66:36:a3:ae:a9: e1:93:a9:6e:a4:32:5e:8e:3c:79:0e:d8:b7:90:35: 05:89:38:76:0b:36:2b:07:a6:c7:ae:9a:03:82:9f: ec:a5:73:f8:85:72:b0:48:1b:3b:c7:f2:b1:d3:54: 3d:c2:b2:52:58:7e:21:5e:c6:ab:bb:85:0f:ac:0c: eb:c5:5f:fc:7a:36:8b:20:d5:25:30:68:79:55:d8: b8:d6:cf:68:3b:f4:57:fe:1c:00:98:a4:d2:74:19: ff:66:6c:67:68:02:df:05:77:f8:e8:1b:3f:68:78: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A0:BF:98:B9:DB:89:02:D4:AE:8A:57:50:39:F7:23:3C:4B:50:F7 X509v3 Authority Key Identifier: keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4f:49:ca:6e:dd:95:99:89:b1:9c:7e:83:34:7b:ba:f4:05: bf:74:17:21:89:fe:f3:8d:d3:8f:1b:45:4f:95:62:8c:d9:6f: e7:c0:4c:42:bc:4b:0e:2a:9e:c3:6a:7f:15:ef:18:08:bb:ce: 57:d1:76:56:b3:fb:b9:30:8f:95:9a:2f:4e:47:d2:7a:d5:8e: 54:1d:0e:c7:dc:f9:11:66:72:1a:dd:f7:bb:c6:15:af:3b:3c: 98:08:88:21:16:bf:21:e2:06:55:da:1d:fd:18:db:07:5b:f4: 47:5a:1a:c3:d7:40:af:c6:37:6c:69:3c:fa:df:2d:ec:44:04: 7e:55:6b:6d:c2:dc:d3:2a:2e:c5:da:40:e0:19:87:46:82:c0: f5:d1:42:df:77:0d:ef:25:9d:fb:c1:e6:0a:a6:dd:56:26:aa: d6:6f:ea:aa:36:a2:ca:87:57:c4:f6:30:71:bd:6e:63:45:14: 14:42:fd:e1:87:b5:f9:6e:3b:fd:fd:5d:05:8b:ae:d9:15:5d: 96:12:d1:c2:d5:c3:0e:bf:2c:99:88:5a:0c:44:6c:e8:45:2c: a9:87:95:d0:67:65:66:3f:62:6f:a3:8b:57:6b:4c:06:3a:62: a1:e7:f2:53:8f:75:12:0b:e0:71:53:64:41:ef:ff:56:84:ae: f9:2c:3c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDlYC/0uRADJ78B0Cb0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1 ZDRmOTIwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg3MGEwYmY5OGI5ZGI4OTAyZDRhZThhNTc1MDM5ZjcyMzNjNGI1MGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqm1sKUWYiZtpk3WFmoEOi4UdcvZ OcsuI92JoaccwQqdlZN/h3NstkU997/Nb2W4vkA2MWNr+SoWtYDE9MxaEK15Q5ev o0RBpnteWnlqSXGe9BYlhuLQEFLQYD88dsdihC5NxjDUsTA1A0Z6PIcSNNF2tr0a 1NskaJB/xs3xd7avuFXCtSKg64EwhrEzsD0uZjajrqnhk6lupDJejjx5Dti3kDUF iTh2CzYrB6bHrpoDgp/spXP4hXKwSBs7x/Kx01Q9wrJSWH4hXsaru4UPrAzrxV/8 ejaLINUlMGh5Vdi41s9oO/RX/hwAmKTSdBn/ZmxnaALfBXf46Bs/aHjf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCgv5i524kC1K6KV1A59yM8S1D3MB8GA1UdIwQY MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATE9Jym7d lZmJsZx+gzR7uvQFv3QXIYn+843TjxtFT5VijNlv58BMQrxLDiqew2p/Fe8YCLvO V9F2VrP7uTCPlZovTkfSetWOVB0Ox9z5EWZyGt33u8YVrzs8mAiIIRa/IeIGVdod /RjbB1v0R1oaw9dAr8Y3bGk8+t8t7EQEflVrbcLc0youxdpA4BmHRoLA9dFC33cN 7yWd+8HmCqbdViaq1m/qqjaiyodXxPYwcb1uY0UUFEL94Ye1+W47/f1dBYuu2RVd lhLRwtXDDr8smYhaDERs6EUsqYeV0GdlZj9ib6OLV2tMBjpioefyU491EgvgcVNk Qe//VoSu+Sw8fw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:26 2025 by rpki-client