This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft File: LIjbgf377M7nX0qfaYo8GzqEYm4.mft (raw, json) Hash identifier: DXa4qid0fwF4y/PHsBY06CQmH4CAE5paCFySbolch4U= Subject key identifier: 71:9B:C0:7D:1F:2A:06:FB:C3:48:24:87:6F:1A:96:29:36:E9:A4:21 Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Certificate serial: 019B1F18E6B7D04AA76AD539486F0079DA1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft Manifest number: 14C3 Signing time: Sun 14 Dec 2025 23:01:24 +0000 Manifest this update: Sun 14 Dec 2025 23:01:24 +0000 Manifest next update: Mon 15 Dec 2025 23:01:24 +0000 Files and hashes: 1: LIjbgf377M7nX0qfaYo8GzqEYm4.crl (hash: RosBnFNgXfMnFkjhn4sM2AexuQgq1qMWr2/l7XxTul4=) 2: i6n7cabzcI74U852jgXuOHMBOJA.roa (hash: pEATekddwJoHDO52qVW77elDRZN916X3bk1BDKu0ZPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:e6:b7:d0:4a:a7:6a:d5:39:48:6f:00:79:da:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e Validity Not Before: Dec 14 23:01:24 2025 GMT Not After : Dec 15 23:01:24 2025 GMT Subject: CN=719bc07d1f2a06fbc34824876f1a962936e9a421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:70:16:6f:d6:99:a5:36:10:6a:c6:4c:bc: e5:71:3c:b1:5d:08:c9:24:b1:4b:e0:52:4a:2b:8e: d6:ba:64:2b:88:fe:2b:1b:27:74:4e:7a:06:b8:d8: 6e:d4:2a:b0:36:7a:4f:ff:e9:06:0b:0b:6a:96:d4: ab:b2:0a:ed:f7:ea:42:2c:dd:d1:82:6c:b8:58:ca: bf:9d:75:9a:6b:db:35:ec:27:ee:13:f6:32:ba:86: 78:90:6b:55:8e:f4:df:cc:99:8f:3c:22:7f:32:9c: 7a:84:ca:9f:76:19:d9:e8:af:89:d5:59:8e:a9:e7: af:e0:40:60:5c:20:f3:c3:e6:ce:7e:e3:2b:35:92: 9f:42:a4:07:12:2d:80:a7:5d:16:6c:04:01:c0:fe: 3a:68:01:3f:73:28:26:f0:95:02:14:b9:ef:a9:66: 80:a2:90:1c:f2:df:02:ba:9b:b9:d3:7c:89:00:8e: b6:bc:f6:ff:fb:69:ba:b6:b6:bc:23:9b:13:ce:45: 87:18:ea:0d:a2:56:76:ab:c8:79:24:0f:4b:0f:6d: 63:6c:73:55:89:78:56:b9:9a:eb:0b:6e:ea:7a:14: 84:a2:ca:0e:83:bc:ab:f1:1d:f0:c0:35:bf:ab:4f: a5:a1:65:4c:fd:8c:35:4d:3a:60:83:ca:38:0a:09: 18:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:C0:7D:1F:2A:06:FB:C3:48:24:87:6F:1A:96:29:36:E9:A4:21 X509v3 Authority Key Identifier: keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:1f:93:4e:85:79:3d:7a:83:d7:85:1f:f7:1d:3a:85:64: b0:ab:5e:44:9c:f8:b0:b5:c2:f0:04:0d:3e:fa:cb:bb:2d:aa: d9:b1:b2:ff:e9:8d:76:98:58:58:44:ba:39:31:1c:d2:fa:36: 9d:43:c1:65:fe:06:74:38:23:ba:be:16:76:b1:c1:eb:ca:81: c9:46:92:c7:bf:63:1e:83:6e:57:e0:a0:d0:78:51:6d:9f:29: 91:84:cb:68:99:a9:15:d2:7d:d2:6a:a2:57:83:a2:7e:9b:be: 21:49:0b:8d:f0:63:31:28:75:06:d1:ca:b1:79:4d:ca:87:44: 31:2a:0e:f8:5e:d1:5d:3a:ed:46:09:0e:19:31:5c:06:3d:01: c1:b1:ae:e8:b4:73:cf:62:24:d6:a1:88:5d:d2:58:4d:4f:e5: c3:ca:cb:f5:f2:a0:33:5d:1b:81:07:6d:08:14:66:c1:d6:20: 9c:22:13:aa:93:6c:aa:38:50:9e:5c:a6:4e:75:4b:21:9c:22: a8:0a:c9:d7:19:01:5a:41:4f:9b:de:74:2f:f6:66:ad:10:71: f8:b8:5d:54:fc:93:12:53:4a:86:ce:ee:31:87:d9:72:e4:05: 01:d8:6e:c9:91:42:81:97:44:ad:05:aa:ea:33:b8:be:92:c0: a8:82:6d:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGOa30EqnatU5SG8AedobMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODhkYjgxZmRmYmVjY2VlNzVmNGE5ZjY5OGEzYzFiM2E4 NDYyNmUwHhcNMjUxMjE0MjMwMTI0WhcNMjUxMjE1MjMwMTI0WjAzMTEwLwYDVQQD Eyg3MTliYzA3ZDFmMmEwNmZiYzM0ODI0ODc2ZjFhOTYyOTM2ZTlhNDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltxwFm/WmaU2EGrGTLzlcTyxXQjJ JLFL4FJKK47WumQriP4rGyd0TnoGuNhu1CqwNnpP/+kGCwtqltSrsgrt9+pCLN3R gmy4WMq/nXWaa9s17CfuE/YyuoZ4kGtVjvTfzJmPPCJ/Mpx6hMqfdhnZ6K+J1VmO qeev4EBgXCDzw+bOfuMrNZKfQqQHEi2Ap10WbAQBwP46aAE/cygm8JUCFLnvqWaA opAc8t8Cupu503yJAI62vPb/+2m6tra8I5sTzkWHGOoNolZ2q8h5JA9LD21jbHNV iXhWuZrrC27qehSEosoOg7yr8R3wwDW/q0+loWVM/Yw1TTpgg8o4CgkYHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGbwH0fKgb7w0gkh28alik26aQhMB8GA1UdIwQY MBaAFCyI24H9++zO519Kn2mKPBs6hGJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt ZjQ1N2Q0MDRhZTJmLzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm LzEvTElqYmdmMzc3TTduWDBxZmFZbzhHenFFWW00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArcfk06F eT16g9eFH/cdOoVksKteRJz4sLXC8AQNPvrLuy2q2bGy/+mNdphYWES6OTEc0vo2 nUPBZf4GdDgjur4WdrHB68qByUaSx79jHoNuV+Cg0HhRbZ8pkYTLaJmpFdJ90mqi V4Oifpu+IUkLjfBjMSh1BtHKsXlNyodEMSoO+F7RXTrtRgkOGTFcBj0BwbGu6LRz z2Ik1qGIXdJYTU/lw8rL9fKgM10bgQdtCBRmwdYgnCITqpNsqjhQnlymTnVLIZwi qArJ1xkBWkFPm950L/ZmrRBx+LhdVPyTElNKhs7uMYfZcuQFAdhuyZFCgZdErQWq 6jO4vpLAqIJtYg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:31 2025 by rpki-client