This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json) Hash identifier: PiTjlv0C6NegWfOGTo3jUAr8EPRIIKDRHNxTaAavmBY= Subject key identifier: 0F:5B:D5:14:3F:AB:58:ED:E2:31:17:32:78:6E:FD:93:CD:A8:6F:7A Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019B37C5F8717DD9DA70EAC904A35FF07FFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 18:01:19 +0000 Manifest this update: Fri 19 Dec 2025 18:01:19 +0000 Manifest next update: Sat 20 Dec 2025 18:01:19 +0000 Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: REfQ2/GyRCKTJ3nnqYWeqApUbcZ55svvUygq5pseNdE=) 2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:f8:71:7d:d9:da:70:ea:c9:04:a3:5f:f0:7f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Dec 19 18:01:19 2025 GMT Not After : Dec 20 18:01:19 2025 GMT Subject: CN=0f5bd5143fab58ede2311732786efd93cda86f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3d:e6:a5:1b:a7:63:c1:a2:a8:4f:7a:27:77: 5f:a0:85:d2:38:69:ea:2c:68:cc:2a:d9:0f:b7:e1: 9f:f1:1f:86:b6:e0:f3:f7:db:17:3b:c7:87:0b:cd: 58:18:4b:50:1b:92:55:89:2a:d2:ec:a7:ce:fc:66: 1e:09:95:3d:37:35:02:c3:57:16:9f:ee:f3:27:97: 42:16:f3:9f:0e:09:f8:9c:9e:0e:95:43:c6:16:7f: 84:25:59:be:19:b0:30:8e:1a:59:24:bc:f6:29:ab: 7d:b2:ca:d0:94:b6:3a:61:6d:33:ee:32:52:00:cc: d6:22:7b:f2:be:58:7b:a4:f9:6d:95:b9:65:dd:2c: 05:04:bf:6a:8c:03:bf:ce:0c:ba:e9:de:73:63:6d: 5b:50:45:b7:e2:c0:4c:0e:bf:03:68:7c:9c:8a:05: 02:98:2c:fb:af:3e:07:df:fb:93:c2:35:dd:f3:a0: 1d:b6:8d:17:92:61:ac:ca:70:39:60:8a:3d:e1:0f: 8d:2a:0b:3d:92:16:fa:21:e1:ff:2e:25:04:10:bb: 63:53:52:6c:78:b8:fb:73:48:46:d5:e8:87:92:69: f2:80:54:80:1e:bb:8c:09:64:6e:23:0a:8c:43:f9: e2:92:80:ef:13:eb:ef:da:ca:4f:ac:c7:11:0c:4d: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:D5:14:3F:AB:58:ED:E2:31:17:32:78:6E:FD:93:CD:A8:6F:7A X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8d:8d:22:1b:64:87:5b:ee:56:42:5c:4f:b6:88:15:f0:ea: 15:5b:9a:1b:d4:8d:4c:fc:d1:d4:be:19:ad:c0:ca:f7:11:48: c5:62:a2:10:3c:63:e5:1b:11:9c:2c:60:74:7d:73:9f:2d:76: df:1c:b4:b5:3c:b3:af:6c:18:52:79:97:03:35:5b:bc:27:75: b7:7d:aa:1d:f7:8f:e4:cc:d9:7f:63:dc:39:b9:b0:17:ed:c1: 8f:2d:e9:c5:e7:b2:ce:4e:70:04:c7:93:13:e2:2c:96:b9:07: d0:6f:ca:0f:c0:51:36:bd:ca:3b:0c:10:10:83:02:cf:12:38: ad:19:e3:36:50:c5:a7:3c:42:fc:be:fb:21:ab:6b:22:d2:74: df:42:1c:1b:84:b1:cf:e2:97:7c:1e:0c:67:14:c3:cc:ae:62: 67:be:e4:27:35:25:c1:8b:12:13:48:04:66:54:34:24:c7:20: ee:6f:ab:b0:98:47:42:b5:78:1f:a0:29:83:34:65:24:4a:bf: 48:ed:81:0b:d1:35:83:bb:5b:da:ce:54:12:5d:76:55:bc:31: 26:c2:c4:3c:86:1e:81:ac:d4:41:1b:0f:b4:c4:c8:35:f6:83: 7b:50:92:00:53:da:3c:66:4f:4b:1f:db:38:ff:a6:53:b1:90: 84:bc:de:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xfhxfdnacOrJBKNf8H/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjUxMjE5MTgwMTE5WhcNMjUxMjIwMTgwMTE5WjAzMTEwLwYDVQQD EygwZjViZDUxNDNmYWI1OGVkZTIzMTE3MzI3ODZlZmQ5M2NkYTg2ZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T3mpRunY8GiqE96J3dfoIXSOGnq LGjMKtkPt+Gf8R+GtuDz99sXO8eHC81YGEtQG5JViSrS7KfO/GYeCZU9NzUCw1cW n+7zJ5dCFvOfDgn4nJ4OlUPGFn+EJVm+GbAwjhpZJLz2Kat9ssrQlLY6YW0z7jJS AMzWInvyvlh7pPltlbll3SwFBL9qjAO/zgy66d5zY21bUEW34sBMDr8DaHycigUC mCz7rz4H3/uTwjXd86Adto0XkmGsynA5YIo94Q+NKgs9khb6IeH/LiUEELtjU1Js eLj7c0hG1eiHkmnygFSAHruMCWRuIwqMQ/nikoDvE+vv2spPrMcRDE1cDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9b1RQ/q1jt4jEXMnhu/ZPNqG96MB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI2NIhtk h1vuVkJcT7aIFfDqFVuaG9SNTPzR1L4ZrcDK9xFIxWKiEDxj5RsRnCxgdH1zny12 3xy0tTyzr2wYUnmXAzVbvCd1t32qHfeP5MzZf2PcObmwF+3Bjy3pxeeyzk5wBMeT E+IslrkH0G/KD8BRNr3KOwwQEIMCzxI4rRnjNlDFpzxC/L77IatrItJ030IcG4Sx z+KXfB4MZxTDzK5iZ77kJzUlwYsSE0gEZlQ0JMcg7m+rsJhHQrV4H6ApgzRlJEq/ SO2BC9E1g7tb2s5UEl12VbwxJsLEPIYegazUQRsPtMTINfaDe1CSAFPaPGZPSx/b OP+mU7GQhLzeHA== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:18 2025 by rpki-client