This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft File: _LiYPlKfyUm4n6s3A7eVt4sah1w.mft (raw, json) Hash identifier: mgdVSpe+bnHP/MtpWATXvKAqkS5+trp7WsZk6krDuak= Subject key identifier: 8F:BD:AB:C2:64:A1:4A:61:80:66:73:19:5C:52:AA:CD:5C:3F:8A:E1 Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019B4BF20698E77C70999F1A85A5EF9590BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft Manifest number: 0BFC Signing time: Tue 23 Dec 2025 16:01:51 +0000 Manifest this update: Tue 23 Dec 2025 16:01:51 +0000 Manifest next update: Wed 24 Dec 2025 16:01:51 +0000 Files and hashes: 1: DiB_b1f0zlqZ4Y9RlICgbOGMJ7o.roa (hash: bx7gORpYBo75Iq/H/h1fyR0wOXDdKfLfUPEbvglKOL4=) 2: _LiYPlKfyUm4n6s3A7eVt4sah1w.crl (hash: O3T4sth3Y7Kh6/Jew+Wzmas92rXpeJkT+7tMQwYLI/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 16:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:06:98:e7:7c:70:99:9f:1a:85:a5:ef:95:90:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Dec 23 16:01:51 2025 GMT Not After : Dec 24 16:01:51 2025 GMT Subject: CN=8fbdabc264a14a61806673195c52aacd5c3f8ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:30:7b:28:7a:2c:c4:87:90:62:af:b5:e9: 62:b1:49:bf:6a:fe:92:b7:aa:32:23:01:2f:fc:7b: 6c:c7:d0:4b:a5:87:82:7e:27:15:cf:3d:71:94:fc: 62:0b:5c:14:4a:0c:4c:15:95:09:46:49:d3:e7:a5: 69:af:2d:c5:28:19:84:ce:af:67:51:8e:a6:1f:d1: 6e:4a:98:02:eb:77:f6:db:3c:4e:7d:da:47:5c:a7: b7:af:d5:16:5f:eb:87:e7:9b:03:00:64:f5:3b:7c: b0:0f:15:3b:fb:6c:ad:f4:f0:81:a8:9e:30:c8:6e: 2c:59:8e:d5:0e:b8:70:b0:cb:67:a9:18:0e:08:07: 2d:43:4f:f9:a6:71:61:da:d3:81:ad:7a:8a:e6:4c: 3d:eb:ee:50:a6:88:43:f1:56:58:58:1d:32:24:b4: c9:d5:ce:3d:dd:ac:f3:e5:ed:e3:07:96:4b:52:10: fc:eb:e0:36:ea:28:35:e8:65:1d:d3:dc:48:07:b0: 11:ee:37:ea:bd:18:d5:d3:d9:24:eb:f7:c5:8d:54: 3f:fe:25:17:ff:13:12:a3:ae:af:e1:17:5f:59:8b: 5d:05:0c:67:aa:4f:f5:46:83:a4:e4:f5:f8:61:05: 4d:14:f9:5b:20:36:0f:49:35:0c:c3:78:cb:e7:cd: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BD:AB:C2:64:A1:4A:61:80:66:73:19:5C:52:AA:CD:5C:3F:8A:E1 X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:99:26:5f:07:10:41:ff:c5:07:28:22:3d:ef:62:e9:0c:69: 80:df:24:18:02:6c:36:28:43:55:90:a8:95:08:db:3b:23:cb: 40:f5:08:8c:cc:9c:1d:89:91:e2:0f:da:e0:d4:12:b9:b1:12: ec:f9:e0:b1:04:21:a7:f5:d1:07:29:7b:fa:b2:6a:44:82:f1: 06:c4:2a:62:d2:d0:57:34:32:bb:39:24:6b:9c:29:9b:87:e3: 3a:fe:5f:70:d2:d7:06:e5:45:ec:fe:ff:3e:c8:d8:db:c7:88: e3:2e:67:42:3c:23:92:16:79:bd:0b:e5:0b:5b:6f:71:f7:1a: e2:98:9c:d4:cc:90:49:64:64:8a:1f:b5:02:26:59:b6:be:84: bd:0d:94:ed:e9:03:d0:a3:02:26:5b:8d:61:7e:0b:b9:95:9b: 18:90:01:69:e4:72:7d:eb:2e:8c:15:7c:4f:53:89:b9:9d:b8: 34:fb:a8:7a:a0:d5:b7:1b:00:be:ed:65:45:4e:ae:b9:fb:80: 1a:be:da:5c:80:e9:61:fe:6b:21:0a:f3:0d:24:8c:a2:34:d2: bf:25:01:1d:9d:8e:66:8c:73:1a:4b:6a:4c:54:13:63:b0:d4: 2e:be:b5:13:71:3b:e5:85:9a:78:97:e8:7e:c4:d6:6a:3c:69: b5:0d:22:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8gaY53xwmZ8ahaXvlZC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjUxMjIzMTYwMTUxWhcNMjUxMjI0MTYwMTUxWjAzMTEwLwYDVQQD Eyg4ZmJkYWJjMjY0YTE0YTYxODA2NjczMTk1YzUyYWFjZDVjM2Y4YWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA054weyh6LMSHkGKvtelisUm/av6S t6oyIwEv/Htsx9BLpYeCficVzz1xlPxiC1wUSgxMFZUJRknT56Vpry3FKBmEzq9n UY6mH9FuSpgC63f22zxOfdpHXKe3r9UWX+uH55sDAGT1O3ywDxU7+2yt9PCBqJ4w yG4sWY7VDrhwsMtnqRgOCActQ0/5pnFh2tOBrXqK5kw96+5QpohD8VZYWB0yJLTJ 1c493azz5e3jB5ZLUhD86+A26ig16GUd09xIB7AR7jfqvRjV09kk6/fFjVQ//iUX /xMSo66v4RdfWYtdBQxnqk/1RoOk5PX4YQVNFPlbIDYPSTUMw3jL582MlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+9q8JkoUphgGZzGVxSqs1cP4rhMB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJkmXwcQ Qf/FBygiPe9i6QxpgN8kGAJsNihDVZColQjbOyPLQPUIjMycHYmR4g/a4NQSubES 7PngsQQhp/XRByl7+rJqRILxBsQqYtLQVzQyuzkka5wpm4fjOv5fcNLXBuVF7P7/ PsjY28eI4y5nQjwjkhZ5vQvlC1tvcfca4pic1MyQSWRkih+1AiZZtr6EvQ2U7ekD 0KMCJluNYX4LuZWbGJABaeRyfesujBV8T1OJuZ24NPuoeqDVtxsAvu1lRU6uufuA Gr7aXIDpYf5rIQrzDSSMojTSvyUBHZ2OZoxzGktqTFQTY7DULr61E3E75YWaeJfo fsTWajxptQ0i3w== -----END CERTIFICATE-----Generated at Wed Dec 24 02:15:58 2025 by rpki-client