This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json) Hash identifier: +35paYSBSqm9gQC/SuAzAxvOY3ZhlR6wSS4aSfP3Clk= Subject key identifier: E8:76:F2:5D:BB:D4:DA:7B:3B:47:37:3F:1F:97:63:39:5D:EF:CF:3C Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Certificate serial: 019B0E25F00920AB1D19F49DD037FABF9A44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 16:02:05 +0000 Manifest this update: Thu 11 Dec 2025 16:02:05 +0000 Manifest next update: Fri 12 Dec 2025 16:02:05 +0000 Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: dPiy/Q7AVa39p+PhQF0axdWS7NBbeO4ANa6LR89T7YA=) 2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:f0:09:20:ab:1d:19:f4:9d:d0:37:fa:bf:9a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Validity Not Before: Dec 11 16:02:05 2025 GMT Not After : Dec 12 16:02:05 2025 GMT Subject: CN=e876f25dbbd4da7b3b47373f1f9763395defcf3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:5e:4b:6a:63:f8:1a:9c:5c:82:54:78:e2: f8:9d:95:e4:a6:c6:93:22:e5:fc:15:3d:a1:f4:7b: a9:8f:da:89:c2:54:41:ce:1d:f5:c3:3a:cf:41:ae: af:d1:21:28:38:1d:92:45:f5:72:76:5e:35:eb:e6: fd:94:98:0d:b5:e1:83:c9:69:16:93:08:d4:5e:80: c2:62:61:31:2e:b5:a3:97:dc:ab:90:ee:13:73:15: 26:ef:7d:fa:17:bb:f8:4c:49:35:cc:e9:71:b0:50: 32:12:5c:69:3a:20:56:2a:d7:8e:fe:ce:03:d6:5b: c6:5b:81:58:e5:0b:7d:d3:7c:de:c4:0e:22:aa:96: 02:c8:57:85:5b:ce:34:53:fa:67:e8:2c:32:24:a6: d7:ed:ab:9d:cd:ed:7a:06:af:2b:bb:b0:9f:1d:f4: 99:ad:f4:e0:79:d1:ed:91:61:c4:e6:5c:4b:79:5a: b2:d6:69:ab:5c:50:28:b6:dd:97:f5:4b:de:36:40: da:0e:fc:00:2e:78:f9:30:dd:4c:08:6a:e5:ea:f4: 31:77:6e:3f:95:f5:2e:79:a6:f0:aa:7d:30:a1:e3: 1f:89:dc:95:81:1e:99:0b:21:bf:f9:84:4c:6a:14: eb:93:18:95:b3:38:ac:99:7b:5b:c1:11:73:5d:dc: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:76:F2:5D:BB:D4:DA:7B:3B:47:37:3F:1F:97:63:39:5D:EF:CF:3C X509v3 Authority Key Identifier: keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c8:cc:85:a5:2a:c4:69:03:1e:5c:6b:83:23:e1:62:7f:17: 2b:1c:83:02:3d:f6:97:23:92:c2:55:0e:b7:6e:b0:68:1f:59: 40:63:82:83:58:09:28:05:1a:5e:9d:66:97:00:09:12:86:5e: 91:be:59:b6:88:9b:65:0e:3e:4b:ec:f6:fa:60:f2:e5:3d:e5: 3d:59:f1:f7:87:95:48:20:a9:a5:9c:29:ae:95:d6:75:4c:18: 9d:4e:82:d2:03:bf:b9:14:0f:fb:4b:2f:ff:cb:f1:e2:26:ed: ad:3e:f7:91:f1:ce:fd:31:00:09:ed:26:94:fc:86:2d:fd:5e: be:45:d5:0e:25:98:5d:1d:8b:99:20:ba:e9:e6:e5:53:24:f9: 76:db:a2:49:b3:a7:ce:d6:89:3f:b8:5b:5f:f1:0c:2a:21:87: 5a:79:0d:ef:40:34:ca:ce:86:a2:58:44:a9:46:16:63:9b:a9: 06:fd:30:ec:5b:21:d5:c2:a0:94:0e:5d:d9:68:8e:d1:2a:17: 1f:1f:e9:65:1d:48:14:b6:fa:68:f3:03:da:74:e9:df:98:e1: 59:6b:73:fa:d2:c9:28:0a:8f:8f:93:73:6c:14:ac:0a:35:a8: 94:0a:b9:85:28:ff:00:15:86:c1:bf:a2:44:e9:a2:cd:29:d7: 2d:5e:89:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJfAJIKsdGfSd0Df6v5pEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1 ZDk5NmIwHhcNMjUxMjExMTYwMjA1WhcNMjUxMjEyMTYwMjA1WjAzMTEwLwYDVQQD EyhlODc2ZjI1ZGJiZDRkYTdiM2I0NzM3M2YxZjk3NjMzOTVkZWZjZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZleS2pj+BqcXIJUeOL4nZXkpsaT IuX8FT2h9Hupj9qJwlRBzh31wzrPQa6v0SEoOB2SRfVydl416+b9lJgNteGDyWkW kwjUXoDCYmExLrWjl9yrkO4TcxUm7336F7v4TEk1zOlxsFAyElxpOiBWKteO/s4D 1lvGW4FY5Qt903zexA4iqpYCyFeFW840U/pn6CwyJKbX7audze16Bq8ru7CfHfSZ rfTgedHtkWHE5lxLeVqy1mmrXFAott2X9UveNkDaDvwALnj5MN1MCGrl6vQxd24/ lfUueabwqn0woeMfidyVgR6ZCyG/+YRMahTrkxiVszismXtbwRFzXdzwTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOh28l271Np7O0c3Px+XYzld7888MB8GA1UdIwQY MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1 LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsjMhaUq xGkDHlxrgyPhYn8XKxyDAj32lyOSwlUOt26waB9ZQGOCg1gJKAUaXp1mlwAJEoZe kb5ZtoibZQ4+S+z2+mDy5T3lPVnx94eVSCCppZwprpXWdUwYnU6C0gO/uRQP+0sv /8vx4ibtrT73kfHO/TEACe0mlPyGLf1evkXVDiWYXR2LmSC66eblUyT5dtuiSbOn ztaJP7hbX/EMKiGHWnkN70A0ys6GolhEqUYWY5upBv0w7Fsh1cKglA5d2WiO0SoX Hx/pZR1IFLb6aPMD2nTp35jhWWtz+tLJKAqPj5NzbBSsCjWolAq5hSj/ABWGwb+i ROmizSnXLV6JDQ== -----END CERTIFICATE-----Generated at Thu Dec 11 20:02:01 2025 by rpki-client