This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json) Hash identifier: oWQbvoJuwcWcx6ZRXtb4HLmvg65HUuNztke9j8aP+uU= Subject key identifier: CE:23:D9:AA:3D:AB:9D:C4:AD:BA:33:24:8A:0C:2E:AF:CC:9A:CE:7D Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019B3C7F87B918407C7AE08FFA34E2C0064B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft Manifest number: 0BF4 Signing time: Sat 20 Dec 2025 16:02:29 +0000 Manifest this update: Sat 20 Dec 2025 16:02:29 +0000 Manifest next update: Sun 21 Dec 2025 16:02:29 +0000 Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=) 2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: Sh/zWeL4YmimUQL7sdYwF+J4KYagHseXKoGOw3lNkes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:87:b9:18:40:7c:7a:e0:8f:fa:34:e2:c0:06:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Dec 20 16:02:29 2025 GMT Not After : Dec 21 16:02:29 2025 GMT Subject: CN=ce23d9aa3dab9dc4adba33248a0c2eafcc9ace7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fe:86:ab:49:34:e9:67:4f:b3:af:d2:75:33: de:f4:b7:33:45:7a:d8:27:38:33:33:29:33:09:28: 48:1b:7f:40:18:d9:3e:f1:50:46:52:73:2f:d0:1f: 18:af:74:ca:be:0e:23:29:3f:ec:9c:53:ad:9c:fc: 67:3d:d9:21:97:bc:1b:cb:8a:ee:90:e7:90:ed:11: d6:75:67:a8:5c:09:61:e6:de:47:ca:b6:39:fc:9d: 1d:d1:4a:90:52:d0:21:7e:a0:05:29:76:23:2f:b0: 46:ea:7a:a9:b0:eb:a7:c9:da:10:be:87:3a:67:64: d6:96:89:da:e6:ac:0c:e7:ac:4b:9c:b6:25:18:f9: 48:f2:58:dd:65:f8:0f:a2:a1:90:08:2a:9b:a3:92: 8c:1f:d1:0d:ae:3e:73:72:4e:3b:22:86:05:6d:c0: f5:94:6c:7e:5f:34:d6:95:79:0e:5f:54:ad:d4:5b: 19:ab:a2:3c:e4:6b:4c:d6:fb:b6:96:29:d7:eb:f4: a0:20:50:99:b3:26:75:e1:01:09:29:4d:3c:28:5d: 45:bf:4d:f2:d1:9c:15:1a:57:0c:9b:21:7f:7f:67: 75:9c:46:35:ba:43:87:6b:0c:04:10:c1:d5:f4:14: ec:4f:1f:b9:35:0f:d1:39:5c:2c:d6:fe:be:85:1d: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:23:D9:AA:3D:AB:9D:C4:AD:BA:33:24:8A:0C:2E:AF:CC:9A:CE:7D X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2f:46:2b:2a:90:c1:14:a0:26:53:3c:04:e8:aa:b0:d5:a1: e1:13:62:a2:c5:e8:b1:3f:12:13:81:30:50:43:40:b1:7a:86: ec:ae:ec:2a:1c:20:b6:a1:af:ba:cd:92:be:8c:83:dd:db:9a: a3:b5:59:2e:2a:8c:d6:c7:92:a2:b7:1b:90:cb:d6:0b:2b:e1: bf:ed:9d:be:25:d1:65:35:c8:69:78:a5:27:bd:4a:9b:f2:ed: d9:52:82:a5:8f:6a:76:a9:2e:3b:3f:d6:48:aa:fa:d9:83:71: 79:ab:56:9f:e2:90:e2:0c:ec:79:e5:8f:f9:1e:e9:48:ba:a7: 91:4a:b5:6c:e9:fc:36:b3:d0:e1:19:01:9b:03:07:4f:40:12: 9b:49:68:63:a0:8f:7d:21:e0:01:f2:0d:e1:3e:11:cb:72:e1: c2:74:2d:cd:19:d8:a2:62:6f:5d:6b:6b:03:c9:4e:2f:1c:24: eb:fd:e6:59:90:e7:83:13:02:7f:b2:82:68:98:98:5e:4e:24: cd:98:4a:af:7f:8a:d6:97:05:94:09:0f:1d:10:51:9d:68:1b: a5:cf:5e:b9:be:b2:51:b3:be:1a:f9:c1:09:57:b8:99:32:b9: 35:0b:78:6a:95:00:66:77:ca:54:0d:56:23:97:33:8a:4f:40: 19:7d:6b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f4e5GEB8euCP+jTiwAZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjUxMjIwMTYwMjI5WhcNMjUxMjIxMTYwMjI5WjAzMTEwLwYDVQQD EyhjZTIzZDlhYTNkYWI5ZGM0YWRiYTMzMjQ4YTBjMmVhZmNjOWFjZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/6Gq0k06WdPs6/SdTPe9LczRXrY JzgzMykzCShIG39AGNk+8VBGUnMv0B8Yr3TKvg4jKT/snFOtnPxnPdkhl7wby4ru kOeQ7RHWdWeoXAlh5t5HyrY5/J0d0UqQUtAhfqAFKXYjL7BG6nqpsOunydoQvoc6 Z2TWlona5qwM56xLnLYlGPlI8ljdZfgPoqGQCCqbo5KMH9ENrj5zck47IoYFbcD1 lGx+XzTWlXkOX1St1FsZq6I85GtM1vu2linX6/SgIFCZsyZ14QEJKU08KF1Fv03y 0ZwVGlcMmyF/f2d1nEY1ukOHawwEEMHV9BTsTx+5NQ/ROVws1v6+hR3epwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4j2ao9q53ErbozJIoMLq/Mms59MB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsS9GKyqQ wRSgJlM8BOiqsNWh4RNiosXosT8SE4EwUENAsXqG7K7sKhwgtqGvus2SvoyD3dua o7VZLiqM1seSorcbkMvWCyvhv+2dviXRZTXIaXilJ71Km/Lt2VKCpY9qdqkuOz/W SKr62YNxeatWn+KQ4gzseeWP+R7pSLqnkUq1bOn8NrPQ4RkBmwMHT0ASm0loY6CP fSHgAfIN4T4Ry3LhwnQtzRnYomJvXWtrA8lOLxwk6/3mWZDngxMCf7KCaJiYXk4k zZhKr3+K1pcFlAkPHRBRnWgbpc9eub6yUbO+GvnBCVe4mTK5NQt4apUAZnfKVA1W I5czik9AGX1rXg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:55 2025 by rpki-client