This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json) Hash identifier: eSmY0Z2YqR5Poq4FyOIX24sbrQyWkvyrgpEb9rPBtF4= Subject key identifier: 2D:C2:CB:75:36:7E:33:A5:DE:B3:C8:3A:72:14:64:33:7B:9D:AA:6D Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019B481409CC74931780B51411B2A0107905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft Manifest number: 0BFA Signing time: Mon 22 Dec 2025 22:00:31 +0000 Manifest this update: Mon 22 Dec 2025 22:00:31 +0000 Manifest next update: Tue 23 Dec 2025 22:00:31 +0000 Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=) 2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: Upd0fEMvglSNrIB0AebuqvnNHqmy8ypJT7q2l9jOric=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:09:cc:74:93:17:80:b5:14:11:b2:a0:10:79:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Dec 22 22:00:31 2025 GMT Not After : Dec 23 22:00:31 2025 GMT Subject: CN=2dc2cb75367e33a5deb3c83a721464337b9daa6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:b2:22:bd:aa:49:4d:a6:5e:17:54:bc:1e: 2f:86:28:af:3e:9a:b3:bc:08:d3:27:06:85:0c:b2: 7f:b7:40:57:ca:cf:8f:7d:fd:ee:b9:69:4c:a7:eb: d1:b3:01:85:b8:94:df:1a:a9:65:0e:bb:32:99:33: 80:8c:35:1b:47:26:3f:f0:53:61:c2:d4:f5:02:43: 74:2c:96:aa:7d:62:0e:31:ea:b6:36:1b:8b:21:b5: 5d:3b:3d:b5:ae:29:28:70:c4:55:d4:6a:23:d6:ea: c2:3e:e5:6c:ab:5a:e7:81:46:c5:a1:6f:6f:f1:82: 52:d8:fc:58:19:2b:87:d1:12:31:4a:db:90:56:d9: b6:a9:2f:30:79:8d:af:3a:9b:e6:c0:b2:15:e2:3b: 09:0d:b2:be:08:9a:37:d2:2e:ea:c1:f3:e3:08:9e: 55:67:03:82:38:1b:e3:4f:c5:9c:d7:6c:67:b8:fe: 4e:c6:66:59:97:33:c7:5c:a0:14:2e:87:02:9f:ee: 22:63:d9:3f:d0:90:75:f2:93:63:87:23:00:fd:09: 11:b8:fc:21:75:38:04:58:94:11:49:d3:ec:05:2f: 00:81:a8:f5:e3:f6:c9:56:78:8a:df:5f:ca:93:da: 1f:52:32:54:ee:49:07:31:b7:d2:2b:2f:b8:0a:2c: ad:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C2:CB:75:36:7E:33:A5:DE:B3:C8:3A:72:14:64:33:7B:9D:AA:6D X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:dc:4b:8e:3d:dc:46:39:8c:4b:19:44:13:4f:19:64:e0:79: 8e:98:fa:52:2d:3f:ac:02:f7:a3:16:75:54:bc:97:8e:49:c7: 00:24:0d:dd:d8:3e:f0:1f:64:02:7b:1c:7e:4b:8a:0c:9d:56: 74:33:8d:3a:47:1a:01:f2:02:5e:39:45:04:8d:b5:89:23:91: ba:18:08:13:f5:da:b6:2c:fb:f7:19:c3:d0:4d:24:2a:29:41: b0:85:31:86:96:33:0e:b1:90:10:54:a1:16:ab:08:35:a5:18: ce:04:69:37:5d:79:de:ed:75:91:6e:20:93:32:cf:a2:ea:83: 39:b6:ba:be:dd:30:8e:88:65:9c:e1:5c:08:f2:42:f6:40:63: 64:55:c4:31:ba:d4:9b:ee:dc:ad:be:9b:32:e7:b5:22:35:d3: f1:95:39:85:13:19:5b:9d:67:87:a4:b1:bd:3e:5d:60:f8:46: ea:ce:3a:cf:84:46:bd:77:0c:98:3d:91:39:97:e8:9f:f4:e0: 39:39:0d:d2:20:b6:ef:e2:c9:a0:5a:79:43:9f:9f:c1:d0:0b: 71:ee:42:2d:15:34:da:65:85:10:2e:93:90:50:bf:f4:f6:b2: ed:98:ce:31:8c:20:03:fa:1d:c1:a1:04:4b:4c:1c:ba:72:b7: df:d9:79:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFAnMdJMXgLUUEbKgEHkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjUxMjIyMjIwMDMxWhcNMjUxMjIzMjIwMDMxWjAzMTEwLwYDVQQD EygyZGMyY2I3NTM2N2UzM2E1ZGViM2M4M2E3MjE0NjQzMzdiOWRhYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHmyIr2qSU2mXhdUvB4vhiivPpqz vAjTJwaFDLJ/t0BXys+Pff3uuWlMp+vRswGFuJTfGqllDrsymTOAjDUbRyY/8FNh wtT1AkN0LJaqfWIOMeq2NhuLIbVdOz21rikocMRV1Goj1urCPuVsq1rngUbFoW9v 8YJS2PxYGSuH0RIxStuQVtm2qS8weY2vOpvmwLIV4jsJDbK+CJo30i7qwfPjCJ5V ZwOCOBvjT8Wc12xnuP5OxmZZlzPHXKAULocCn+4iY9k/0JB18pNjhyMA/QkRuPwh dTgEWJQRSdPsBS8Agaj14/bJVniK31/Kk9ofUjJU7kkHMbfSKy+4Ciyt5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3Cy3U2fjOl3rPIOnIUZDN7naptMB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtxLjj3c RjmMSxlEE08ZZOB5jpj6Ui0/rAL3oxZ1VLyXjknHACQN3dg+8B9kAnscfkuKDJ1W dDONOkcaAfICXjlFBI21iSORuhgIE/Xatiz79xnD0E0kKilBsIUxhpYzDrGQEFSh FqsINaUYzgRpN1153u11kW4gkzLPouqDOba6vt0wjohlnOFcCPJC9kBjZFXEMbrU m+7crb6bMue1IjXT8ZU5hRMZW51nh6SxvT5dYPhG6s46z4RGvXcMmD2ROZfon/Tg OTkN0iC27+LJoFp5Q5+fwdALce5CLRU02mWFEC6TkFC/9Pay7ZjOMYwgA/odwaEE S0wcunK339l5dg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:05 2025 by rpki-client