This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json) Hash identifier: lDo2vchCnLDF47G6B1HUczKcSpFXUVLzmHD4Cpkrnlc= Subject key identifier: 3C:E3:85:84:A2:24:99:BD:11:6B:65:03:FB:B7:8E:BE:85:19:CC:C2 Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Certificate serial: 019B0E2544F915598EEFC511EAF7288619FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft Manifest number: 1748 Signing time: Thu 11 Dec 2025 16:01:22 +0000 Manifest this update: Thu 11 Dec 2025 16:01:22 +0000 Manifest next update: Fri 12 Dec 2025 16:01:22 +0000 Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=) 2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: D0DWUDySe/6kgZwLuxq2LSx8S3G+RaOkWm4gwWxBSUc=) 3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:44:f9:15:59:8e:ef:c5:11:ea:f7:28:86:19:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Validity Not Before: Dec 11 16:01:22 2025 GMT Not After : Dec 12 16:01:22 2025 GMT Subject: CN=3ce38584a22499bd116b6503fbb78ebe8519ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:60:06:8e:ab:d5:74:b3:d1:76:e0:90:d6: 32:6d:c0:95:6b:84:0e:92:19:1b:0e:e7:76:5c:e7: 30:83:c2:ba:94:35:6f:f8:be:fd:01:cb:08:a1:77: 42:34:e0:2f:f6:c5:b7:30:5d:e2:4b:39:93:65:ef: ff:ac:33:92:3b:77:97:62:af:2e:59:78:24:90:0c: 2c:78:52:0f:7c:56:a1:f7:79:b8:62:84:0e:cf:dc: b9:33:65:c4:b4:18:3e:f9:6b:1a:2e:bb:dd:13:d2: 44:65:c7:bc:3d:f4:2c:2f:c5:9e:2f:61:db:f4:f7: 40:01:08:e9:3b:f2:61:a5:fd:5f:a0:1d:3d:bc:cc: 99:05:66:e9:cc:c6:17:f8:54:35:66:df:a7:c6:e9: 2b:74:08:6a:3a:0c:47:f4:a9:8c:98:a2:7f:58:cf: 01:c3:24:48:87:f4:36:1a:c1:6a:22:6d:ef:72:6f: f1:99:e3:fd:5c:ee:3d:86:59:b0:f2:6b:6c:ca:ea: 18:ce:e3:e2:0a:8f:3b:fa:96:55:ca:4b:40:c8:05: 9a:f3:ee:c0:04:32:cc:4b:6c:e3:5e:e0:76:d1:45: d4:8e:ec:43:83:03:94:6d:fd:e6:6a:22:04:42:da: 1c:43:8c:76:b0:07:ad:92:ac:4b:3d:09:34:15:64: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E3:85:84:A2:24:99:BD:11:6B:65:03:FB:B7:8E:BE:85:19:CC:C2 X509v3 Authority Key Identifier: keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:83:ee:7e:15:c2:8d:c8:69:cb:14:58:fc:17:f3:a7:20:72: 45:9e:ba:90:19:fd:6b:ab:c1:e4:05:db:47:0c:11:05:53:ba: 08:98:1c:ac:c9:72:fc:46:a6:29:ed:0e:59:c7:3e:01:2a:87: 82:1a:23:7c:68:9b:30:cc:2b:dd:2c:6b:08:c2:0b:c7:eb:0e: bb:c4:30:61:8b:8d:3b:07:c9:46:24:37:8c:14:05:f9:0e:d5: 58:d4:4d:16:be:e4:f7:15:d8:74:df:ec:ae:81:b0:09:42:00: 5c:d9:ea:c9:50:3e:c8:af:ee:82:48:3b:2b:a7:75:b5:45:b2: 97:9b:79:52:60:1a:17:8c:50:66:6c:88:ce:3c:34:6a:11:62: e5:9f:1e:64:c2:bc:be:b2:86:d0:62:e0:ef:ff:07:40:9d:a3: fe:6c:d8:a0:b9:84:48:0f:5d:c1:9d:52:79:6f:05:1f:78:72: fa:49:7d:19:d3:58:86:1d:72:66:16:f9:26:ac:f0:a2:4a:ab: f5:d9:34:90:4e:2e:b0:7a:bd:7a:43:0e:5c:3f:e3:fb:b9:e5: 60:54:31:99:9f:94:c8:2b:d7:64:c1:77:72:02:06:46:5b:3f: e7:5b:9d:ea:e0:ef:39:d2:ab:fc:c0:05:7f:67:e6:e1:d3:02: f6:16:0e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJUT5FVmO78UR6vcohhn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi OTM3ZDIwHhcNMjUxMjExMTYwMTIyWhcNMjUxMjEyMTYwMTIyWjAzMTEwLwYDVQQD EygzY2UzODU4NGEyMjQ5OWJkMTE2YjY1MDNmYmI3OGViZTg1MTljY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraFgBo6r1XSz0XbgkNYybcCVa4QO khkbDud2XOcwg8K6lDVv+L79AcsIoXdCNOAv9sW3MF3iSzmTZe//rDOSO3eXYq8u WXgkkAwseFIPfFah93m4YoQOz9y5M2XEtBg++WsaLrvdE9JEZce8PfQsL8WeL2Hb 9PdAAQjpO/Jhpf1foB09vMyZBWbpzMYX+FQ1Zt+nxukrdAhqOgxH9KmMmKJ/WM8B wyRIh/Q2GsFqIm3vcm/xmeP9XO49hlmw8mtsyuoYzuPiCo87+pZVyktAyAWa8+7A BDLMS2zjXuB20UXUjuxDgwOUbf3maiIEQtocQ4x2sAetkqxLPQk0FWS9vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzjhYSiJJm9EWtlA/u3jr6FGczCMB8GA1UdIwQY MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYPufhXC jchpyxRY/BfzpyByRZ66kBn9a6vB5AXbRwwRBVO6CJgcrMly/EamKe0OWcc+ASqH ghojfGibMMwr3SxrCMILx+sOu8QwYYuNOwfJRiQ3jBQF+Q7VWNRNFr7k9xXYdN/s roGwCUIAXNnqyVA+yK/ugkg7K6d1tUWyl5t5UmAaF4xQZmyIzjw0ahFi5Z8eZMK8 vrKG0GLg7/8HQJ2j/mzYoLmESA9dwZ1SeW8FH3hy+kl9GdNYhh1yZhb5Jqzwokqr 9dk0kE4usHq9ekMOXD/j+7nlYFQxmZ+UyCvXZMF3cgIGRls/51ud6uDvOdKr/MAF f2fm4dMC9hYOaA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:22:54 2025 by rpki-client