This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft File: Li9t2XmfpOoIT9VJ1xDGiW364pE.mft (raw, json) Hash identifier: 9bRLl8BBdetAmvW/vRd1gBL2cF0Z8lz457N7hkroWGE= Subject key identifier: 40:BA:9A:03:10:F9:D6:75:5D:05:DE:28:D9:97:40:7D:7E:98:BB:51 Authority key identifier: 2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 Certificate issuer: /CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Certificate serial: 019B43250A46E5FD91824DDA71AE9101B741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft Manifest number: 09D8 Signing time: Sun 21 Dec 2025 23:00:59 +0000 Manifest this update: Sun 21 Dec 2025 23:00:59 +0000 Manifest next update: Mon 22 Dec 2025 23:00:59 +0000 Files and hashes: 1: 1KuevLKOXin1b0wgf0GWz0r6nwg.roa (hash: ASw2YdXHtzStc1C+SsPAtANeLSe13bWPdtXsO3TzYqc=) 2: Li9t2XmfpOoIT9VJ1xDGiW364pE.crl (hash: nqxtRbouI137ne+ZClATGsQE+Y4XYs530ByKllyEGrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:0a:46:e5:fd:91:82:4d:da:71:ae:91:01:b7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f6dd9799fa4ea084fd549d710c6896dfae291 Validity Not Before: Dec 21 23:00:59 2025 GMT Not After : Dec 22 23:00:59 2025 GMT Subject: CN=40ba9a0310f9d6755d05de28d997407d7e98bb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:cb:de:b5:ea:e9:2f:ad:25:79:b4:53:29: 0a:fd:6f:10:b5:18:47:b8:16:61:7b:d8:2b:70:2e: 49:db:ed:53:85:a9:5f:9f:6c:3a:2f:57:10:38:f3: 27:6c:d1:68:97:6e:3d:d0:56:a8:21:39:f2:91:85: a8:52:7c:d6:d3:cf:51:73:3c:b2:6b:13:4d:69:9f: 99:cc:00:83:52:28:ba:e5:4f:b3:49:8d:a0:10:1e: 21:1b:74:5a:af:fb:bc:cb:52:e0:9a:fe:fd:d9:a7: 67:e3:19:ff:34:12:20:e2:d5:4a:33:07:99:0c:a5: 74:47:70:0d:56:37:28:5c:a2:e6:06:c6:d0:ac:84: 1d:0b:77:04:a3:47:34:34:27:03:ba:5f:7e:2a:4b: b6:95:51:74:94:58:4c:fa:01:f9:dc:27:de:4d:74: dd:0b:b2:84:d8:89:5a:93:fe:86:cd:59:6a:b1:a2: 18:9b:68:44:09:2e:ec:a5:36:3b:b1:a0:59:0c:c9: 91:97:ca:b2:4c:fe:cc:b3:3e:42:b3:b6:40:19:f2: a8:e3:87:96:79:9a:1f:5a:46:27:85:06:e0:e5:32: fa:87:e0:16:41:e5:7d:37:88:a1:f3:c8:c8:c4:04: 2a:7d:31:6b:69:e6:fb:3f:30:6c:d7:60:bb:5a:76: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BA:9A:03:10:F9:D6:75:5D:05:DE:28:D9:97:40:7D:7E:98:BB:51 X509v3 Authority Key Identifier: keyid:2E:2F:6D:D9:79:9F:A4:EA:08:4F:D5:49:D7:10:C6:89:6D:FA:E2:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li9t2XmfpOoIT9VJ1xDGiW364pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1a4cc0-da92-4596-b123-561ced5bbf92/1/Li9t2XmfpOoIT9VJ1xDGiW364pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:26:82:44:a3:98:6b:0c:82:de:27:20:5b:ad:47:b2:c2:53: 3b:ac:90:ce:2b:3f:58:cf:f8:a2:af:71:c2:0f:8b:c2:15:47: 63:ab:16:7d:7f:06:0c:5f:db:62:d4:e8:f9:7c:ff:b9:2e:fd: 53:af:05:3f:71:67:f5:f0:40:51:c1:f5:b0:76:6f:77:7e:c4: e6:2c:bb:a0:a0:4f:63:4f:8c:3e:20:12:37:e9:17:01:b4:be: bc:61:d5:86:b6:e5:91:38:60:e2:d6:47:20:8b:2b:5a:17:f6: a7:0c:f0:ed:fa:50:7e:a8:2b:3a:84:1a:11:94:2a:db:7a:62: 65:9a:6f:e2:57:c8:81:de:e2:34:35:ce:73:ef:e9:56:1a:f7: 70:75:e8:8b:f4:ff:1b:cc:37:da:5a:d5:7a:c7:b0:9c:62:96: 08:8b:31:5b:d1:9c:9c:56:73:7c:1b:4d:d1:50:cb:ec:04:9d: 64:12:b4:20:05:aa:3f:8b:3a:10:bf:ea:9f:98:11:a2:f0:93: 7c:42:1f:f9:b5:21:2d:c1:9e:24:2c:ed:50:b2:0e:40:f1:62: e4:0e:33:91:5f:c9:87:00:57:18:4c:46:5b:96:87:71:bc:a8: 3e:95:8d:53:2f:93:fc:e5:b6:21:45:87:e2:58:64:a1:7e:b1: ff:16:cf:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQpG5f2Rgk3aca6RAbdBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY2ZGQ5Nzk5ZmE0ZWEwODRmZDU0OWQ3MTBjNjg5NmRm YWUyOTEwHhcNMjUxMjIxMjMwMDU5WhcNMjUxMjIyMjMwMDU5WjAzMTEwLwYDVQQD Eyg0MGJhOWEwMzEwZjlkNjc1NWQwNWRlMjhkOTk3NDA3ZDdlOThiYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o3L3rXq6S+tJXm0UykK/W8QtRhH uBZhe9grcC5J2+1Thalfn2w6L1cQOPMnbNFol2490FaoITnykYWoUnzW089Rczyy axNNaZ+ZzACDUii65U+zSY2gEB4hG3Rar/u8y1Lgmv792adn4xn/NBIg4tVKMweZ DKV0R3ANVjcoXKLmBsbQrIQdC3cEo0c0NCcDul9+Kku2lVF0lFhM+gH53CfeTXTd C7KE2Ilak/6GzVlqsaIYm2hECS7spTY7saBZDMmRl8qyTP7Msz5Cs7ZAGfKo44eW eZofWkYnhQbg5TL6h+AWQeV9N4ih88jIxAQqfTFraeb7PzBs12C7Wnak5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC6mgMQ+dZ1XQXeKNmXQH1+mLtRMB8GA1UdIwQY MBaAFC4vbdl5n6TqCE/VSdcQxolt+uKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMt NTYxY2VkNWJiZjkyLzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8xYTRjYzAtZGE5Mi00NTk2LWIxMjMtNTYxY2VkNWJiZjky LzEvTGk5dDJYbWZwT29JVDlWSjF4REdpVzM2NHBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSaCRKOY awyC3icgW61HssJTO6yQzis/WM/4oq9xwg+LwhVHY6sWfX8GDF/bYtTo+Xz/uS79 U68FP3Fn9fBAUcH1sHZvd37E5iy7oKBPY0+MPiASN+kXAbS+vGHVhrblkThg4tZH IIsrWhf2pwzw7fpQfqgrOoQaEZQq23piZZpv4lfIgd7iNDXOc+/pVhr3cHXoi/T/ G8w32lrVesewnGKWCIsxW9GcnFZzfBtN0VDL7ASdZBK0IAWqP4s6EL/qn5gRovCT fEIf+bUhLcGeJCztULIOQPFi5A4zkV/JhwBXGExGW5aHcbyoPpWNUy+T/OW2IUWH 4lhkoX6x/xbPzw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:51:44 2025 by rpki-client