This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json) Hash identifier: 718x50Jq+auuHvU22x+KH/70Pmhd6NcmXPtDBAwOqlU= Subject key identifier: 26:F9:72:CC:57:35:C4:93:A8:EF:0E:74:F2:48:70:0E:81:BF:C4:84 Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019B35D78F9061944C0E29B49C36082BF1B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 09:01:17 +0000 Manifest this update: Fri 19 Dec 2025 09:01:17 +0000 Manifest next update: Sat 20 Dec 2025 09:01:17 +0000 Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: LIV3CIqgmdPrxisIp9e7DopyjQzH4H2m+wXvLMdouTk=) 2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:8f:90:61:94:4c:0e:29:b4:9c:36:08:2b:f1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Dec 19 09:01:17 2025 GMT Not After : Dec 20 09:01:17 2025 GMT Subject: CN=26f972cc5735c493a8ef0e74f248700e81bfc484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:73:b7:56:40:0d:e7:26:34:8f:33:ed:7e: 5c:1e:f0:94:5a:3f:56:aa:7b:a3:43:34:d3:2d:5b: 8e:64:8f:b6:68:d5:17:95:1a:e2:93:24:62:a9:23: 11:61:24:19:13:0b:2c:3d:d4:9c:5b:5b:91:1a:46: b3:d2:60:4b:3b:ef:07:ee:05:48:8e:8a:f3:e9:71: 99:c4:5b:db:5c:db:20:02:9e:0a:0a:4e:4c:e4:9f: 7f:30:09:75:ec:c3:28:41:a0:00:27:58:ca:3a:e0: dd:29:f2:6c:07:91:8b:cc:f2:43:e6:53:21:60:04: 0b:40:27:c3:68:b0:6e:35:3b:7e:20:86:e2:44:2a: e7:20:31:7e:f9:c9:27:a2:2e:d7:5e:5a:8b:d3:3c: 35:a2:a5:f0:bc:62:1b:3e:6a:6a:85:d9:c9:1f:34: f7:14:7f:ff:9a:03:b0:e0:88:10:21:bc:a3:a5:82: f5:2c:34:5a:b4:a5:5c:ee:72:d1:46:70:2c:7c:7c: 35:9a:de:f4:b6:41:97:a7:94:cf:bd:b9:75:8e:33: f8:c7:b2:1c:9b:40:be:44:1c:c1:d8:86:df:68:a4: e4:51:38:6b:3d:5d:e3:d5:16:88:48:a0:16:42:a7: 4e:0a:61:eb:93:11:c7:68:23:5c:6a:2e:51:3e:8c: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F9:72:CC:57:35:C4:93:A8:EF:0E:74:F2:48:70:0E:81:BF:C4:84 X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:41:69:cf:1a:47:75:35:eb:e7:76:c8:39:ca:f3:99:71: 45:d6:c9:aa:21:ee:73:85:23:7e:71:89:1d:95:ff:32:4b:48: f7:8d:0f:c8:36:ec:98:9e:59:92:42:bf:03:98:dd:f4:53:31: 71:03:c6:a7:68:c2:99:6b:39:35:aa:f2:33:96:5e:43:90:0b: 6b:75:ef:75:d0:ac:cc:7c:b2:ba:28:d2:f7:dd:86:20:f9:a4: 81:a7:f1:3d:79:d4:17:36:0b:ed:d9:4f:d7:6f:24:70:f4:b9: 74:5c:7b:89:63:1d:dc:15:e1:b4:fd:db:9b:b0:16:cf:ec:f0: 24:d6:0d:54:a6:94:c0:f9:83:80:b7:51:88:ce:cc:7b:48:50: d8:aa:1e:21:27:01:d0:53:f5:79:f6:ce:49:c6:91:bc:c9:be: 69:f5:9d:31:20:3e:2e:08:b7:08:6f:54:da:f4:a4:d9:47:0b: 90:40:4a:ed:a9:68:56:a8:86:a1:b3:0d:11:31:e0:52:15:79: 0f:44:6d:85:de:ac:c3:f5:e6:0a:fd:88:59:b7:b2:97:e2:3b: 08:31:c1:42:0d:b8:60:47:39:ba:cd:15:72:e1:9c:b3:4c:26: aa:3b:eb:ed:86:7a:de:17:e1:eb:22:3a:de:2a:54:fa:ca:4b: 35:92:5f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs114+QYZRMDim0nDYIK/G1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjUxMjE5MDkwMTE3WhcNMjUxMjIwMDkwMTE3WjAzMTEwLwYDVQQD EygyNmY5NzJjYzU3MzVjNDkzYThlZjBlNzRmMjQ4NzAwZTgxYmZjNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lhzt1ZADecmNI8z7X5cHvCUWj9W qnujQzTTLVuOZI+2aNUXlRrikyRiqSMRYSQZEwssPdScW1uRGkaz0mBLO+8H7gVI jorz6XGZxFvbXNsgAp4KCk5M5J9/MAl17MMoQaAAJ1jKOuDdKfJsB5GLzPJD5lMh YAQLQCfDaLBuNTt+IIbiRCrnIDF++cknoi7XXlqL0zw1oqXwvGIbPmpqhdnJHzT3 FH//mgOw4IgQIbyjpYL1LDRatKVc7nLRRnAsfHw1mt70tkGXp5TPvbl1jjP4x7Ic m0C+RBzB2IbfaKTkUThrPV3j1RaISKAWQqdOCmHrkxHHaCNcai5RPoxzEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb5csxXNcSTqO8OdPJIcA6Bv8SEMB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcdBac8a R3U16+d2yDnK85lxRdbJqiHuc4UjfnGJHZX/MktI940PyDbsmJ5ZkkK/A5jd9FMx cQPGp2jCmWs5NaryM5ZeQ5ALa3XvddCszHyyuijS992GIPmkgafxPXnUFzYL7dlP 128kcPS5dFx7iWMd3BXhtP3bm7AWz+zwJNYNVKaUwPmDgLdRiM7Me0hQ2KoeIScB 0FP1efbOScaRvMm+afWdMSA+Lgi3CG9U2vSk2UcLkEBK7aloVqiGobMNETHgUhV5 D0Rthd6sw/XmCv2IWbeyl+I7CDHBQg24YEc5us0VcuGcs0wmqjvr7YZ63hfh6yI6 3ipU+spLNZJf3A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:54:49 2025 by rpki-client