This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json) Hash identifier: BIksXo44Z2WwUBdK+QCrxsg9HQZ1YWM9gWtXIhRHGVo= Subject key identifier: 4D:17:54:84:AC:66:A9:30:D6:A2:29:2D:91:74:56:6F:C5:88:E1:07 Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Certificate serial: 019AF68A2403836CCCC68E6A7EC9B69E20DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft Manifest number: 13F2 Signing time: Sun 07 Dec 2025 02:00:39 +0000 Manifest this update: Sun 07 Dec 2025 02:00:39 +0000 Manifest next update: Mon 08 Dec 2025 02:00:39 +0000 Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=) 2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: TbVyHwBdMb6500w/sjZMs2SwZqACE+jxJQSmHfltKzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:24:03:83:6c:cc:c6:8e:6a:7e:c9:b6:9e:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Validity Not Before: Dec 7 02:00:39 2025 GMT Not After : Dec 8 02:00:39 2025 GMT Subject: CN=4d175484ac66a930d6a2292d9174566fc588e107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e3:a0:f1:07:5b:a1:b1:92:29:22:bd:32:e6: ca:9d:2e:cd:6c:3c:e1:96:9a:85:16:76:59:fe:56: 10:30:2f:89:1e:53:58:8c:3b:13:26:3a:d2:48:4d: 4b:37:31:4a:45:c5:da:e2:fb:2e:24:70:99:68:f9: a7:b1:48:9c:12:46:61:1b:67:db:ef:26:ff:91:73: c7:43:32:14:3b:e3:ce:38:ef:19:4b:3b:05:bf:1e: 1c:55:b4:db:08:19:63:fa:7f:be:f1:2f:e8:19:41: 36:73:b4:a9:b3:2d:b4:67:3a:c0:83:5e:b0:ab:77: 83:96:2b:8c:25:75:35:82:45:c0:3e:c0:7c:2d:b2: eb:23:38:ab:f1:81:3b:18:b1:1f:60:cc:c2:c3:c9: 02:04:e3:08:46:e1:49:64:bb:99:e8:e0:14:57:dc: 65:31:aa:4d:05:2b:5a:66:31:b0:27:d8:4d:91:06: f5:60:7a:65:72:d1:e8:41:58:03:7a:36:f7:f2:54: 06:05:53:81:e0:7f:8e:53:76:da:0a:99:b7:49:c6: 5b:6d:f6:ff:63:3e:8d:f0:2a:a2:7e:ba:68:fb:73: 55:ed:0c:f6:f2:c1:28:e4:5c:73:88:39:22:ee:dc: c6:5c:bf:da:62:05:8e:62:5c:d8:4c:f1:ef:b3:2f: 71:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:54:84:AC:66:A9:30:D6:A2:29:2D:91:74:56:6F:C5:88:E1:07 X509v3 Authority Key Identifier: keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fb:7e:ed:e6:ce:38:06:61:fb:38:63:75:93:e2:72:37:7c: 34:a1:51:06:cb:fd:af:f0:7e:65:39:a9:0d:17:cb:a0:b7:8a: e2:b1:32:6a:a8:21:13:c1:a6:92:7f:58:dc:0e:f1:6e:36:65: c2:c6:70:d5:fb:c5:c7:cd:e2:62:f7:aa:8c:e5:5d:5b:17:e1: aa:04:ab:0f:58:77:24:f1:5f:a4:a0:0f:de:fd:2e:6b:78:cd: ac:35:98:72:1e:e6:18:e5:32:c3:fd:28:04:9f:cf:d0:59:6a: 19:96:73:b6:08:6e:50:a9:21:e0:4c:0e:a3:1f:9a:bc:ed:aa: d0:25:de:26:ba:69:d9:15:cf:f8:0a:58:62:58:72:58:b9:25: 11:42:bb:59:64:61:c7:c8:f2:1f:b5:cc:cd:c5:0d:16:d4:a3: 8b:41:f1:b1:07:aa:3c:35:07:a3:93:ad:88:e8:32:8c:6f:5c: 1d:d9:b8:a0:98:44:04:b8:ce:c6:67:26:30:b0:40:c1:82:2e: fd:a4:5c:27:f5:bf:f5:17:e7:96:fb:c9:ed:86:1f:c7:ca:4d: d8:ad:ba:08:4d:b0:ed:47:aa:93:fa:56:03:b2:e9:b7:b9:4e: be:1f:84:d8:c5:1b:c0:82:f9:b0:3f:39:07:82:03:eb:4c:5b: ae:a5:be:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iiQDg2zMxo5qfsm2niDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODk0OGYwZGQ1ZTJmYjBhOTAyYjk3OWNhOWM1YzFhNDRm OThmYTEwHhcNMjUxMjA3MDIwMDM5WhcNMjUxMjA4MDIwMDM5WjAzMTEwLwYDVQQD Eyg0ZDE3NTQ4NGFjNjZhOTMwZDZhMjI5MmQ5MTc0NTY2ZmM1ODhlMTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouOg8QdbobGSKSK9MubKnS7NbDzh lpqFFnZZ/lYQMC+JHlNYjDsTJjrSSE1LNzFKRcXa4vsuJHCZaPmnsUicEkZhG2fb 7yb/kXPHQzIUO+POOO8ZSzsFvx4cVbTbCBlj+n++8S/oGUE2c7Spsy20ZzrAg16w q3eDliuMJXU1gkXAPsB8LbLrIzir8YE7GLEfYMzCw8kCBOMIRuFJZLuZ6OAUV9xl MapNBStaZjGwJ9hNkQb1YHplctHoQVgDejb38lQGBVOB4H+OU3baCpm3ScZbbfb/ Yz6N8Cqifrpo+3NV7Qz28sEo5FxziDki7tzGXL/aYgWOYlzYTPHvsy9x5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0XVISsZqkw1qIpLZF0Vm/FiOEHMB8GA1UdIwQY MBaAFJSJSPDdXi+wqQK5ecqcXBpE+Y+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUt ODk2MWM3YTNiYmFiLzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUtODk2MWM3YTNiYmFi LzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavt+7ebO OAZh+zhjdZPicjd8NKFRBsv9r/B+ZTmpDRfLoLeK4rEyaqghE8Gmkn9Y3A7xbjZl wsZw1fvFx83iYveqjOVdWxfhqgSrD1h3JPFfpKAP3v0ua3jNrDWYch7mGOUyw/0o BJ/P0FlqGZZztghuUKkh4EwOox+avO2q0CXeJrpp2RXP+ApYYlhyWLklEUK7WWRh x8jyH7XMzcUNFtSji0HxsQeqPDUHo5OtiOgyjG9cHdm4oJhEBLjOxmcmMLBAwYIu /aRcJ/W/9RfnlvvJ7YYfx8pN2K26CE2w7Ueqk/pWA7Lpt7lOvh+E2MUbwIL5sD85 B4ID60xbrqW+VA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:12 2025 by rpki-client