This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json) Hash identifier: QMkjB1COekL5J/MxQV46oye+uxz10iI7VxQLBSFQ79U= Subject key identifier: 01:EE:30:86:FE:67:B3:2D:5B:4A:67:B6:AD:2A:F1:01:F9:5C:11:C2 Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Certificate serial: 019B42497F82972DD3D5D2938320F837BF35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft Manifest number: 171C Signing time: Sun 21 Dec 2025 19:01:11 +0000 Manifest this update: Sun 21 Dec 2025 19:01:11 +0000 Manifest next update: Mon 22 Dec 2025 19:01:11 +0000 Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: GFPVBV2s7KXoHslbAebr+A8vw1vsW4UDkjAPYoNXn00=) 2: o2GAlRjqrWRT3XBGB9RwTDs_Ew0.roa (hash: HIy6rjCdEt9bpDveV9D2228Lv0B3K1QWnfoHF9Amb5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:7f:82:97:2d:d3:d5:d2:93:83:20:f8:37:bf:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Validity Not Before: Dec 21 19:01:11 2025 GMT Not After : Dec 22 19:01:11 2025 GMT Subject: CN=01ee3086fe67b32d5b4a67b6ad2af101f95c11c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:d2:aa:fe:94:d8:34:1a:22:26:71:34:df: 4f:31:40:6b:36:00:3d:a9:c3:53:bc:7d:22:6d:35: 86:1b:97:93:55:eb:21:92:23:34:60:fa:79:14:b5: 79:b8:0d:ca:b9:5c:c2:35:0d:fd:3e:55:57:c3:6c: ca:86:87:c3:88:58:3a:44:52:e9:14:4d:d1:db:a9: 31:9f:fe:ee:63:ea:91:4d:62:2c:9d:c4:b7:bb:90: 76:2f:08:86:cc:62:c6:34:aa:d3:f6:19:74:f8:83: fd:5a:a3:40:63:dd:91:1e:d6:04:27:05:d8:fe:c4: fc:d1:94:bd:3a:f6:ec:b0:23:bc:54:ac:db:b3:6b: 1f:2f:17:65:b4:a5:55:26:09:69:03:ed:92:90:df: 96:16:5a:9e:94:1b:eb:e0:25:4e:96:37:88:03:46: b8:ea:82:f4:b9:93:01:e1:ea:d9:c1:ce:86:48:95: dd:ef:10:7b:88:09:56:04:e9:29:b3:23:29:4c:58: 23:e1:c7:85:0c:ed:6a:27:1c:7c:a7:b1:35:96:25: 7d:97:64:2d:40:ec:33:94:cc:b4:20:81:a3:54:60: ea:a4:3c:58:b0:d4:ed:e6:79:10:14:64:63:ee:09: b6:03:09:65:ca:4f:16:8f:47:85:26:1d:db:39:cd: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:30:86:FE:67:B3:2D:5B:4A:67:B6:AD:2A:F1:01:F9:5C:11:C2 X509v3 Authority Key Identifier: keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c8:2b:61:59:29:e3:a7:75:f5:9b:40:30:b4:94:a6:4e:fa: a4:02:cf:1c:aa:0c:4b:60:9c:e9:e1:2e:28:48:7b:b0:d5:b1: b8:4b:56:47:ac:e5:4d:ee:11:de:d9:50:ec:b2:f7:89:75:9a: 07:9b:ad:f4:a6:f5:0e:75:4e:df:3d:58:1c:78:5e:60:1a:bc: 24:7e:5f:99:4a:56:b4:cb:fb:17:a7:49:ae:3e:16:b8:86:b3: 34:13:7f:43:f2:21:7a:bb:cd:be:a3:8c:40:17:75:f8:c3:ac: 7c:30:0c:91:77:6a:36:de:4d:82:77:a8:a5:3b:d5:6d:72:32: 2b:e2:80:fc:ef:f2:02:bf:a1:0a:6b:17:21:45:76:fb:d9:ab: 51:5b:fc:ad:49:7d:63:68:6c:7d:3e:e6:74:ad:38:26:0e:b1: 04:8c:b4:87:05:ae:6b:62:5b:f8:ac:fd:b1:87:53:cc:9c:a5: d2:23:43:16:63:3a:f2:10:9b:bc:7f:93:0c:28:69:f4:0f:2e: 39:1b:1c:3f:fa:2f:07:6a:1f:4c:3e:78:f5:16:fd:09:e0:76: d5:d5:8c:07:b7:0b:94:4d:b4:a5:2f:24:ff:c9:fa:7f:1b:99: 08:da:6f:5f:67:46:08:1c:8f:62:99:d8:78:9b:ca:b2:06:e8: a8:de:0b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSX+Cly3T1dKTgyD4N781MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1 ZDk5NmIwHhcNMjUxMjIxMTkwMTExWhcNMjUxMjIyMTkwMTExWjAzMTEwLwYDVQQD EygwMWVlMzA4NmZlNjdiMzJkNWI0YTY3YjZhZDJhZjEwMWY5NWMxMWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAPSqv6U2DQaIiZxNN9PMUBrNgA9 qcNTvH0ibTWGG5eTVeshkiM0YPp5FLV5uA3KuVzCNQ39PlVXw2zKhofDiFg6RFLp FE3R26kxn/7uY+qRTWIsncS3u5B2LwiGzGLGNKrT9hl0+IP9WqNAY92RHtYEJwXY /sT80ZS9OvbssCO8VKzbs2sfLxdltKVVJglpA+2SkN+WFlqelBvr4CVOljeIA0a4 6oL0uZMB4erZwc6GSJXd7xB7iAlWBOkpsyMpTFgj4ceFDO1qJxx8p7E1liV9l2Qt QOwzlMy0IIGjVGDqpDxYsNTt5nkQFGRj7gm2Awllyk8Wj0eFJh3bOc0djwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHuMIb+Z7MtW0pntq0q8QH5XBHCMB8GA1UdIwQY MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1 LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcgrYVkp 46d19ZtAMLSUpk76pALPHKoMS2Cc6eEuKEh7sNWxuEtWR6zlTe4R3tlQ7LL3iXWa B5ut9Kb1DnVO3z1YHHheYBq8JH5fmUpWtMv7F6dJrj4WuIazNBN/Q/IhervNvqOM QBd1+MOsfDAMkXdqNt5NgneopTvVbXIyK+KA/O/yAr+hCmsXIUV2+9mrUVv8rUl9 Y2hsfT7mdK04Jg6xBIy0hwWua2Jb+Kz9sYdTzJyl0iNDFmM68hCbvH+TDChp9A8u ORscP/ovB2ofTD549Rb9CeB21dWMB7cLlE20pS8k/8n6fxuZCNpvX2dGCByPYpnY eJvKsgboqN4LAQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:20:04 2025 by rpki-client