This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft File: lIlI8N1eL7CpArl5ypxcGkT5j6E.mft (raw, json) Hash identifier: oYWA5F1wiBPN8EH+lc0jgwmcHH7KAhILdoMsA9VtE2U= Subject key identifier: 2A:2E:DD:CF:76:F7:4F:D7:42:CF:C3:29:DD:E1:04:AA:89:83:75:EC Authority key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 Certificate issuer: /CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Certificate serial: 019B364502BE026CC499A0B6A46596A7C87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft Manifest number: 1413 Signing time: Fri 19 Dec 2025 11:00:50 +0000 Manifest this update: Fri 19 Dec 2025 11:00:50 +0000 Manifest next update: Sat 20 Dec 2025 11:00:50 +0000 Files and hashes: 1: PqIFggzIk_ANiqqFNJr1_Xaymmc.roa (hash: EhtNg//JemmQlKzA50IitdtWxLjPUBVE2aJwJpTUs+g=) 2: lIlI8N1eL7CpArl5ypxcGkT5j6E.crl (hash: q4cB/DRbxVSWPQThUm6f45Oq4O3y7ahQVd+pSK4uh3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:02:be:02:6c:c4:99:a0:b6:a4:65:96:a7:c8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1 Validity Not Before: Dec 19 11:00:50 2025 GMT Not After : Dec 20 11:00:50 2025 GMT Subject: CN=2a2eddcf76f74fd742cfc329dde104aa898375ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:5d:b5:be:e8:ab:26:2e:6f:0a:8c:25:c6: 5d:9c:e9:c3:4d:be:d6:81:b8:15:3a:0f:96:c2:7c: 78:de:10:25:84:3d:97:f2:8b:55:14:67:1c:f5:04: 1b:87:1d:00:07:76:1f:7f:d5:db:d1:52:4d:25:ed: f3:6e:af:9b:54:6a:63:9b:cf:4e:ef:a0:5f:b2:b2: 27:d5:40:79:09:53:20:83:d1:82:04:60:9f:63:97: da:c1:79:97:07:da:f4:77:75:5c:91:17:c4:77:5f: 7c:ba:8b:19:49:d6:8e:a8:33:1f:f9:17:78:87:78: 3f:2c:d0:ed:da:a1:58:eb:c3:89:92:e1:cd:9e:a3: b1:24:17:39:d7:10:c0:7a:4b:31:bb:17:fd:f6:f5: 24:4b:5d:83:6e:66:b7:6b:cc:24:d6:60:77:74:24: 8c:f5:87:b0:e6:17:48:c6:71:4f:2e:1f:a5:ad:79: 76:cf:b0:74:aa:75:f4:0b:13:76:b5:b9:72:f7:c3: 9f:6d:5f:6f:17:bf:94:41:00:49:e3:63:81:53:ab: a0:e3:59:a5:fe:15:02:8b:c5:b6:d0:c0:43:84:16: 5d:e2:13:9e:d5:6a:1a:d0:8b:93:95:aa:55:36:bb: 46:ef:08:18:d8:3f:c7:66:fd:b6:49:c7:b0:0b:8a: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2E:DD:CF:76:F7:4F:D7:42:CF:C3:29:DD:E1:04:AA:89:83:75:EC X509v3 Authority Key Identifier: keyid:94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:28:c6:49:46:3f:f0:0a:65:fc:77:e6:16:b8:3d:e5:4c: de:4f:8d:86:c2:c6:f0:47:f2:b1:36:81:9f:84:e0:61:96:74: f2:82:87:84:3b:1f:66:ba:ac:e5:61:3e:c5:b5:10:2b:53:aa: 76:01:ee:d8:32:a1:9c:9a:da:e9:ca:d6:e1:63:ee:2f:16:24: 35:d7:7b:5d:a9:65:6d:56:6c:70:01:70:70:f5:b8:77:80:f7: d5:e1:8b:3d:18:ac:7d:f5:1e:ed:9d:0f:03:14:17:81:32:34: 57:7b:dd:64:6f:5b:4c:98:45:76:26:f4:ba:76:71:90:e4:55: f5:aa:50:0b:c2:08:ad:f6:75:53:dd:05:41:f3:75:99:19:3a: 0f:9b:50:4d:bb:f3:ea:0f:10:5b:43:dc:8a:16:72:52:99:7a: 70:ea:e9:11:b5:43:1b:53:a5:c6:5b:b2:5a:1e:26:61:12:fb: d1:22:ac:65:42:e1:47:1b:5e:26:c6:19:49:2b:fe:23:d2:cf: 4d:51:f1:25:b2:5a:f0:66:97:d2:a4:67:e2:da:46:26:aa:ae: 6b:dd:b8:97:a0:25:3e:51:5c:24:38:3a:f0:85:f6:cc:b9:f6: 4a:d8:43:0a:48:3b:a8:0c:b8:be:55:99:8c:e0:4c:98:96:53: 06:4a:75:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RQK+AmzEmaC2pGWWp8h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ODk0OGYwZGQ1ZTJmYjBhOTAyYjk3OWNhOWM1YzFhNDRm OThmYTEwHhcNMjUxMjE5MTEwMDUwWhcNMjUxMjIwMTEwMDUwWjAzMTEwLwYDVQQD EygyYTJlZGRjZjc2Zjc0ZmQ3NDJjZmMzMjlkZGUxMDRhYTg5ODM3NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWddtb7oqyYubwqMJcZdnOnDTb7W gbgVOg+Wwnx43hAlhD2X8otVFGcc9QQbhx0AB3Yff9Xb0VJNJe3zbq+bVGpjm89O 76BfsrIn1UB5CVMgg9GCBGCfY5fawXmXB9r0d3VckRfEd198uosZSdaOqDMf+Rd4 h3g/LNDt2qFY68OJkuHNnqOxJBc51xDAeksxuxf99vUkS12Dbma3a8wk1mB3dCSM 9Yew5hdIxnFPLh+lrXl2z7B0qnX0CxN2tbly98OfbV9vF7+UQQBJ42OBU6ug41ml /hUCi8W20MBDhBZd4hOe1Woa0IuTlapVNrtG7wgY2D/HZv22ScewC4rhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCou3c9290/XQs/DKd3hBKqJg3XsMB8GA1UdIwQY MBaAFJSJSPDdXi+wqQK5ecqcXBpE+Y+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUt ODk2MWM3YTNiYmFiLzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hYmI4ODUtYTc5NC00YmQ1LTg2MWUtODk2MWM3YTNiYmFi LzEvbElsSThOMWVMN0NwQXJsNXlweGNHa1Q1ajZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQUoxklG P/AKZfx35ha4PeVM3k+NhsLG8EfysTaBn4TgYZZ08oKHhDsfZrqs5WE+xbUQK1Oq dgHu2DKhnJra6crW4WPuLxYkNdd7XallbVZscAFwcPW4d4D31eGLPRisffUe7Z0P AxQXgTI0V3vdZG9bTJhFdib0unZxkORV9apQC8IIrfZ1U90FQfN1mRk6D5tQTbvz 6g8QW0PcihZyUpl6cOrpEbVDG1OlxluyWh4mYRL70SKsZULhRxteJsYZSSv+I9LP TVHxJbJa8GaX0qRn4tpGJqqua924l6AlPlFcJDg68IX2zLn2SthDCkg7qAy4vlWZ jOBMmJZTBkp17A== -----END CERTIFICATE-----Generated at Fri Dec 19 12:06:12 2025 by rpki-client