This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json) Hash identifier: HFlz8L2ZGT8JUbkORp5cv+AHgTZUKcrA6Wd8KEFftkI= Subject key identifier: 84:66:64:F8:5D:8F:CD:B7:EB:3E:FB:09:2D:FB:7E:77:16:90:C7:EC Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Certificate serial: 019B5A519D369C2DDB4986AA38E0009BDDC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft Manifest number: 01E8 Signing time: Fri 26 Dec 2025 11:00:56 +0000 Manifest this update: Fri 26 Dec 2025 11:00:56 +0000 Manifest next update: Sat 27 Dec 2025 11:00:56 +0000 Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: /HVE+XFeK48/CMkxSnmV4MD86VKH0tGaA7H7JDWySqo=) 2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:9d:36:9c:2d:db:49:86:aa:38:e0:00:9b:dd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Validity Not Before: Dec 26 11:00:56 2025 GMT Not After : Dec 27 11:00:56 2025 GMT Subject: CN=846664f85d8fcdb7eb3efb092dfb7e771690c7ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:f4:ba:5f:13:b7:68:4e:99:f6:f1:b7:84: c5:87:8b:ab:b5:26:4d:7f:23:40:81:ce:34:06:ed: a5:bc:c5:60:65:15:54:b3:b4:8a:85:13:72:ff:ad: d1:e9:4a:3c:85:a4:60:62:cb:cd:ac:bc:eb:e3:f7: c9:ac:cd:ac:1a:e0:e5:5e:0d:ce:f5:13:d3:aa:e8: 0f:e1:bc:c7:f8:39:dd:7b:c9:f4:de:24:0e:ba:c1: 35:cc:dd:61:f0:03:11:15:9b:1e:82:8d:6a:47:31: d6:dd:8b:02:0a:5e:a4:82:31:d9:32:b0:0f:2b:30: 1a:4e:48:3a:83:97:c1:0a:54:c3:15:d1:18:e5:c9: c5:c9:ba:8d:cf:08:e3:ce:97:6b:12:5f:0f:c8:65: f2:d6:6a:08:a6:18:b8:6c:45:2f:59:5d:1a:3f:6d: 7b:67:5a:cb:b6:c8:de:91:19:6a:53:b6:1b:64:f9: 6d:cb:e2:98:ca:6f:da:4d:66:6e:55:23:78:52:96: d6:a6:8a:93:13:a7:27:75:30:e9:4e:00:10:a8:be: be:06:90:f8:81:b2:77:9e:71:50:0b:ee:48:c1:2c: b7:07:bb:b8:aa:b5:37:6f:97:10:7a:3c:6a:e6:3f: bc:94:50:5d:74:d6:54:1c:43:05:b3:74:20:c5:23: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:64:F8:5D:8F:CD:B7:EB:3E:FB:09:2D:FB:7E:77:16:90:C7:EC X509v3 Authority Key Identifier: keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6d:d8:d6:94:73:c8:25:e8:8e:53:23:2a:18:15:b8:4a:dc: 80:ee:a7:94:d2:b3:ce:65:64:9b:a8:e3:5c:9f:dc:cb:f1:86: c3:d0:e6:a4:67:94:80:b5:2e:fa:a9:3f:bc:8f:27:6a:8a:25: e0:6b:48:cd:b8:4c:fd:b3:f3:5f:fe:e5:58:73:a5:ce:7c:55: 69:77:a3:3e:a8:75:34:54:bb:2d:a5:73:d7:e2:8c:e0:ef:19: 88:32:e8:2e:df:d5:9a:84:e7:6b:5a:1f:de:30:2f:19:af:6c: 88:70:7a:55:71:38:21:6b:c5:95:49:5b:de:93:13:36:82:73: 49:94:ae:bc:19:4f:a8:44:55:25:f3:5f:0a:48:99:72:53:e8: 5e:2a:f3:81:3d:0c:9b:78:33:94:90:0b:00:2d:4b:e5:df:09: 39:88:f6:9f:f3:09:de:e0:81:dc:d6:8c:c8:51:56:c8:4a:ba: 01:0b:75:11:6b:12:9c:a9:0b:56:7c:12:94:27:f1:62:5e:0c: 92:f1:c9:87:23:0f:a2:27:e2:60:c4:42:62:7b:82:09:f0:4f: 04:77:c7:8f:84:c3:1f:ce:4d:1a:bb:00:fa:a0:d6:cb:f7:9e: b6:d4:5c:07:f5:22:b6:d1:5f:3a:c3:1f:8c:56:31:f4:f4:a0: 33:ec:6a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZ02nC3bSYaqOOAAm93CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5 ZTM4MDYwHhcNMjUxMjI2MTEwMDU2WhcNMjUxMjI3MTEwMDU2WjAzMTEwLwYDVQQD Eyg4NDY2NjRmODVkOGZjZGI3ZWIzZWZiMDkyZGZiN2U3NzE2OTBjN2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3v0ul8Tt2hOmfbxt4TFh4urtSZN fyNAgc40Bu2lvMVgZRVUs7SKhRNy/63R6Uo8haRgYsvNrLzr4/fJrM2sGuDlXg3O 9RPTqugP4bzH+Dnde8n03iQOusE1zN1h8AMRFZsego1qRzHW3YsCCl6kgjHZMrAP KzAaTkg6g5fBClTDFdEY5cnFybqNzwjjzpdrEl8PyGXy1moIphi4bEUvWV0aP217 Z1rLtsjekRlqU7YbZPlty+KYym/aTWZuVSN4UpbWpoqTE6cndTDpTgAQqL6+BpD4 gbJ3nnFQC+5IwSy3B7u4qrU3b5cQejxq5j+8lFBddNZUHEMFs3QgxSPm8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRmZPhdj8236z77CS37fncWkMfsMB8GA1UdIwQY MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5 LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh23Y1pRz yCXojlMjKhgVuErcgO6nlNKzzmVkm6jjXJ/cy/GGw9DmpGeUgLUu+qk/vI8naool 4GtIzbhM/bPzX/7lWHOlznxVaXejPqh1NFS7LaVz1+KM4O8ZiDLoLt/VmoTna1of 3jAvGa9siHB6VXE4IWvFlUlb3pMTNoJzSZSuvBlPqERVJfNfCkiZclPoXirzgT0M m3gzlJALAC1L5d8JOYj2n/MJ3uCB3NaMyFFWyEq6AQt1EWsSnKkLVnwSlCfxYl4M kvHJhyMPoifiYMRCYnuCCfBPBHfHj4TDH85NGrsA+qDWy/eettRcB/UittFfOsMf jFYx9PSgM+xq3g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client