This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json) Hash identifier: JGlJKyOZMe3vNJYbBGhJYcPayzMcPqxOjhJWtnRbfxM= Subject key identifier: FE:7C:F7:32:44:A1:E1:B1:64:A0:EC:8D:FF:44:FC:C3:B7:60:8D:7C Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019B416DC8882DDC69050B7594633623DEC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 15:01:12 +0000 Manifest this update: Sun 21 Dec 2025 15:01:12 +0000 Manifest next update: Mon 22 Dec 2025 15:01:12 +0000 Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: RvxqG2tEs2opI3KtUkZnoSILG1FtLWG/0rmVuuPGKA4=) 2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:c8:88:2d:dc:69:05:0b:75:94:63:36:23:de:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Dec 21 15:01:12 2025 GMT Not After : Dec 22 15:01:12 2025 GMT Subject: CN=fe7cf73244a1e1b164a0ec8dff44fcc3b7608d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f2:bc:ac:f2:bd:9f:98:31:88:d7:d9:52:05: cc:f6:9e:08:f7:a0:56:d6:22:13:4f:3f:3a:fc:17: ee:39:2c:08:9c:df:63:24:f2:80:1e:6d:13:57:33: eb:a6:15:bc:1f:f1:8f:88:4a:d0:95:1b:f4:44:51: 3f:2c:41:dc:c7:2d:ce:3a:86:d5:c0:7c:86:16:2d: 63:b3:8d:7a:c1:03:b8:9a:d8:ad:46:06:39:a8:b3: 6c:b8:97:9a:93:e8:98:4c:67:e8:bc:ad:ef:9a:07: 54:69:99:a6:16:d6:dc:c4:f4:72:b3:fe:7d:29:fa: e2:27:fc:fc:eb:d0:b3:02:17:ae:ac:2f:ae:42:60: f0:33:84:11:39:93:2f:94:fc:82:7a:d4:77:32:e4: 86:a4:74:ff:8b:06:ad:29:dd:62:6b:07:99:13:ec: d1:c5:0e:63:2a:1f:9b:de:4e:ac:5b:b3:fc:e3:21: 7f:6c:0a:18:f7:95:3e:f1:be:b2:17:38:b1:8f:68: 63:31:46:17:0b:d1:10:8f:f8:1b:ed:f6:df:a8:7d: f8:a8:12:4b:87:d2:7d:46:2c:5a:f3:ce:a9:5a:a1: f2:ad:f0:77:a1:2e:5b:c0:3b:07:74:fb:17:75:a2: 7d:87:79:1b:21:75:83:e2:2e:a1:4e:bb:9f:4f:7f: 54:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:F7:32:44:A1:E1:B1:64:A0:EC:8D:FF:44:FC:C3:B7:60:8D:7C X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:a9:71:a9:38:0b:65:ed:29:3b:81:63:a8:cf:46:62:bd:b5: ee:c8:0e:97:dc:0c:ce:51:33:90:f2:97:60:cc:79:f4:ad:ce: 60:d4:86:3e:2d:13:84:dd:ca:f5:14:e2:6e:22:fe:05:17:97: a9:02:c5:d0:03:d6:54:bb:7b:82:ec:64:94:7f:01:df:36:df: e5:a2:93:13:a7:4a:94:68:8c:e2:c0:e5:89:5a:7d:3c:68:cb: d9:fa:46:78:48:c7:06:51:c4:08:f1:8b:fa:1b:ff:2f:3a:27: 26:e8:dc:30:63:31:71:51:34:5a:43:2a:83:29:04:19:de:68: c7:f3:68:34:5f:0b:29:86:d7:ec:84:d8:ba:78:eb:a2:ed:20: e6:6f:26:d1:75:c1:e7:20:41:52:7e:fd:08:ac:42:8d:ed:31: fb:47:83:d4:31:97:50:c4:ab:00:26:53:f0:37:92:40:4a:c6: 06:a2:5b:c1:75:54:33:ff:62:9d:bc:af:18:d6:1c:95:39:c4: 29:c7:e9:d0:5c:1b:8a:da:57:cf:76:94:50:9d:13:88:0b:a6: 54:f0:43:4a:e8:65:9f:7b:fc:86:ae:34:c5:88:b5:0c:62:e1: 31:94:23:2c:64:65:cd:71:f7:83:39:c5:dd:8b:50:6a:b5:7b: e5:87:79:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbciILdxpBQt1lGM2I97HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjUxMjIxMTUwMTEyWhcNMjUxMjIyMTUwMTEyWjAzMTEwLwYDVQQD EyhmZTdjZjczMjQ0YTFlMWIxNjRhMGVjOGRmZjQ0ZmNjM2I3NjA4ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfK8rPK9n5gxiNfZUgXM9p4I96BW 1iITTz86/BfuOSwInN9jJPKAHm0TVzPrphW8H/GPiErQlRv0RFE/LEHcxy3OOobV wHyGFi1js416wQO4mtitRgY5qLNsuJeak+iYTGfovK3vmgdUaZmmFtbcxPRys/59 KfriJ/z869CzAheurC+uQmDwM4QROZMvlPyCetR3MuSGpHT/iwatKd1iaweZE+zR xQ5jKh+b3k6sW7P84yF/bAoY95U+8b6yFzixj2hjMUYXC9EQj/gb7fbfqH34qBJL h9J9Rixa886pWqHyrfB3oS5bwDsHdPsXdaJ9h3kbIXWD4i6hTrufT39UnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP589zJEoeGxZKDsjf9E/MO3YI18MB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJalxqTgL Ze0pO4FjqM9GYr217sgOl9wMzlEzkPKXYMx59K3OYNSGPi0ThN3K9RTibiL+BReX qQLF0APWVLt7guxklH8B3zbf5aKTE6dKlGiM4sDliVp9PGjL2fpGeEjHBlHECPGL +hv/LzonJujcMGMxcVE0WkMqgykEGd5ox/NoNF8LKYbX7ITYunjrou0g5m8m0XXB 5yBBUn79CKxCje0x+0eD1DGXUMSrACZT8DeSQErGBqJbwXVUM/9inbyvGNYclTnE Kcfp0FwbitpXz3aUUJ0TiAumVPBDSuhln3v8hq40xYi1DGLhMZQjLGRlzXH3gznF 3YtQarV75Yd58g== -----END CERTIFICATE-----Generated at Sun Dec 21 19:48:46 2025 by rpki-client