This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json) Hash identifier: QBBNFBCFqcE6UPyrFCJHOAIheo9SNSYA48bKUKhCx18= Subject key identifier: 73:A4:E4:57:79:77:2E:76:02:42:2D:81:1D:69:3E:DD:55:A2:EA:65 Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Certificate serial: 019B262DE6A61B0660A8383C26E2E73106E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft Manifest number: 097D Signing time: Tue 16 Dec 2025 08:01:40 +0000 Manifest this update: Tue 16 Dec 2025 08:01:40 +0000 Manifest next update: Wed 17 Dec 2025 08:01:40 +0000 Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: TsJulttUdw0ehmzaCpn4xRauG3RtyVzrT783TcYWCQI=) 2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=) 3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:e6:a6:1b:06:60:a8:38:3c:26:e2:e7:31:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Validity Not Before: Dec 16 08:01:40 2025 GMT Not After : Dec 17 08:01:40 2025 GMT Subject: CN=73a4e45779772e7602422d811d693edd55a2ea65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:94:14:75:cf:e7:63:a8:d6:17:9f:00:58: 01:ed:97:c0:61:97:bd:17:c7:a1:e2:da:71:8c:a6: e4:44:a8:12:d3:ef:82:a4:48:f7:79:15:31:12:c8: b1:1b:f8:67:61:4c:44:f3:23:fc:22:ff:42:1f:bb: c7:0b:d8:0d:a8:5e:ad:68:ec:a2:ad:1e:a9:1a:54: 97:44:27:10:0c:20:23:64:6a:7c:67:a6:e9:1e:b8: 71:19:75:af:d8:4c:43:bb:38:80:a4:d2:12:6e:98: cc:ba:3e:03:70:dd:50:f1:be:9c:e7:e1:36:72:4f: 98:bd:ca:68:15:fe:db:c3:ba:cd:a0:0b:17:50:13: ca:68:57:a9:dd:6f:2b:68:cb:cf:e9:ae:d4:de:b4: 3b:c1:24:8f:27:21:38:ba:9c:b3:41:3e:ef:3f:72: 8e:13:49:17:91:f4:39:ca:81:7b:f5:1f:ef:0a:5c: 35:f9:d3:be:25:3b:0e:79:27:64:64:ce:e8:af:8d: 06:70:cf:f9:dd:79:4a:5c:d6:11:e0:55:45:1e:ef: f4:67:03:94:37:08:46:22:09:18:91:f7:6b:af:19: 8b:84:0e:a4:af:3e:71:47:fa:f3:85:79:e6:07:20: f8:bf:ab:81:15:d4:50:a7:02:9d:4f:ca:b6:9b:0b: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:E4:57:79:77:2E:76:02:42:2D:81:1D:69:3E:DD:55:A2:EA:65 X509v3 Authority Key Identifier: keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8b:5d:af:ea:37:38:56:4d:df:f0:f3:70:c9:cc:ce:2a:2b: 3f:3d:49:d4:a5:0c:be:59:73:59:50:dc:45:ce:90:86:b1:69: a5:48:e0:e6:a2:8b:25:c9:83:a0:9e:e0:5f:2d:7b:6c:a0:94: 15:ae:54:bf:b1:8c:a3:b2:eb:d2:a0:26:87:26:38:33:6f:97: 01:ed:b9:71:8b:93:cf:14:f1:38:ae:03:a3:a5:1f:cc:9f:63: 06:32:64:f4:1c:ae:1a:51:aa:b1:0e:61:3c:82:36:d0:a4:d5: 49:5e:e9:d9:8c:64:15:c9:83:44:29:d0:34:9e:99:55:18:77: e5:ef:1a:9a:fa:ee:4a:43:13:0e:95:34:06:03:8b:da:73:1b: 5a:40:a5:08:e8:04:02:24:53:8f:e0:eb:22:00:13:71:24:ad: 2f:f1:59:95:7b:4a:4f:15:5c:b9:a6:9d:52:ad:9e:4c:02:37: 46:8e:d5:e2:7c:8a:e1:d0:53:07:a4:6a:5d:bd:72:28:b5:0f: 2d:b4:88:cc:bd:47:e7:b2:ba:b2:24:0c:1b:8d:29:c4:b3:23: 64:78:3a:48:dc:a3:19:65:29:0b:cb:d6:65:3d:f6:a4:89:1d: 84:c0:da:ec:90:83:21:49:23:d6:34:2d:52:d7:2e:df:3a:b6: d7:94:86:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLeamGwZgqDg8JuLnMQbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1 MzFkYjkwHhcNMjUxMjE2MDgwMTQwWhcNMjUxMjE3MDgwMTQwWjAzMTEwLwYDVQQD Eyg3M2E0ZTQ1Nzc5NzcyZTc2MDI0MjJkODExZDY5M2VkZDU1YTJlYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtGUFHXP52Oo1hefAFgB7ZfAYZe9 F8eh4tpxjKbkRKgS0++CpEj3eRUxEsixG/hnYUxE8yP8Iv9CH7vHC9gNqF6taOyi rR6pGlSXRCcQDCAjZGp8Z6bpHrhxGXWv2ExDuziApNISbpjMuj4DcN1Q8b6c5+E2 ck+YvcpoFf7bw7rNoAsXUBPKaFep3W8raMvP6a7U3rQ7wSSPJyE4upyzQT7vP3KO E0kXkfQ5yoF79R/vClw1+dO+JTsOeSdkZM7or40GcM/53XlKXNYR4FVFHu/0ZwOU NwhGIgkYkfdrrxmLhA6krz5xR/rzhXnmByD4v6uBFdRQpwKdT8q2mwtGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOk5Fd5dy52AkItgR1pPt1VouplMB8GA1UdIwQY MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et OWU5NmFmNmQ2YThmLzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWItdr+o3 OFZN3/DzcMnMziorPz1J1KUMvllzWVDcRc6QhrFppUjg5qKLJcmDoJ7gXy17bKCU Fa5Uv7GMo7Lr0qAmhyY4M2+XAe25cYuTzxTxOK4Do6UfzJ9jBjJk9ByuGlGqsQ5h PII20KTVSV7p2YxkFcmDRCnQNJ6ZVRh35e8amvruSkMTDpU0BgOL2nMbWkClCOgE AiRTj+DrIgATcSStL/FZlXtKTxVcuaadUq2eTAI3Ro7V4nyK4dBTB6RqXb1yKLUP LbSIzL1H57K6siQMG40pxLMjZHg6SNyjGWUpC8vWZT32pIkdhMDa7JCDIUkj1jQt Utcu3zq215SGKg== -----END CERTIFICATE-----Generated at Tue Dec 16 17:21:38 2025 by rpki-client