This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft File: Li8BGtqu7EZbGCrucJw2fIfljzg.mft (raw, json) Hash identifier: 5KKy7c8bIccBlI4A0sXDbwDGduMXdndE8N1GuI0Ws8g= Subject key identifier: FB:28:7A:11:7A:31:68:4A:D5:A5:36:E2:19:A8:24:82:20:3D:AE:07 Authority key identifier: 2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 Certificate issuer: /CN=2e2f011adaaeec465b182aee709c367c87e58f38 Certificate serial: 019B288A0D521F3C879364B54BFF24E1DD35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft Manifest number: 0B8A Signing time: Tue 16 Dec 2025 19:01:34 +0000 Manifest this update: Tue 16 Dec 2025 19:01:34 +0000 Manifest next update: Wed 17 Dec 2025 19:01:34 +0000 Files and hashes: 1: Li8BGtqu7EZbGCrucJw2fIfljzg.crl (hash: LLtqyHvOMXGRD8RQr/XMxisbv/BpHVFWwwHjMOzWiTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:8a:0d:52:1f:3c:87:93:64:b5:4b:ff:24:e1:dd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f011adaaeec465b182aee709c367c87e58f38 Validity Not Before: Dec 16 19:01:34 2025 GMT Not After : Dec 17 19:01:34 2025 GMT Subject: CN=fb287a117a31684ad5a536e219a82482203dae07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:69:20:27:17:69:6d:d3:00:09:8d:99:bf: 18:49:fd:61:50:c3:db:73:64:e8:43:4b:1e:d9:41: 8f:00:50:0d:ae:3a:0a:74:5d:21:08:53:dd:bb:11: cb:a3:2f:e2:c9:f8:3e:23:0c:88:05:22:c2:d7:8f: ce:d4:1f:21:f3:e3:10:54:2d:60:ec:6f:08:04:45: 0a:72:45:e4:df:88:62:4b:25:05:78:53:64:10:06: f1:f0:05:0f:2a:79:e9:e7:9e:d1:2a:3d:bd:22:83: e8:05:41:c7:e7:c0:8a:8e:ba:28:26:cb:29:e6:24: b9:87:b0:10:9c:38:bf:2e:39:a6:09:dd:bb:34:a5: e4:6b:b1:63:11:35:b4:ea:dd:50:15:b8:1e:cf:83: 6f:46:46:3f:7c:e8:29:91:18:9a:a2:7d:d6:95:80: 38:71:ff:dc:77:7f:39:a6:49:ba:c6:cf:e0:11:52: 5f:bb:d0:03:01:e9:1b:4b:02:70:7d:b0:ab:2d:bd: c8:a4:5d:1a:96:72:1d:b2:60:88:e1:4b:7a:ab:34: 46:a6:8c:6c:7b:66:fc:57:ce:78:00:f7:40:04:59: 3f:44:02:c0:b6:c2:e5:12:5c:a6:48:62:eb:ce:61: cb:b6:32:5d:05:22:8b:0c:74:65:57:20:a8:22:41: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:28:7A:11:7A:31:68:4A:D5:A5:36:E2:19:A8:24:82:20:3D:AE:07 X509v3 Authority Key Identifier: keyid:2E:2F:01:1A:DA:AE:EC:46:5B:18:2A:EE:70:9C:36:7C:87:E5:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li8BGtqu7EZbGCrucJw2fIfljzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ed5452-39e2-43bb-9644-222baf953b44/1/Li8BGtqu7EZbGCrucJw2fIfljzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:70:a1:4f:9d:61:9f:bb:4d:41:98:b3:99:16:f6:0b:8d:49: ea:61:13:48:82:05:58:c9:58:46:70:7a:99:4a:23:63:64:b9: 47:22:6e:03:31:1e:13:b0:df:9f:5e:01:3c:75:2e:49:3d:f3: 15:2f:ab:5f:b0:ae:0b:a3:99:c3:b2:8f:72:35:64:fc:1c:b8: 1b:0a:cf:c5:d3:db:1f:6f:a5:80:ed:5a:57:df:b0:8d:31:29: d4:17:f8:79:3f:39:38:31:55:9c:72:9a:03:f1:74:1d:54:f2: 2d:a2:35:05:1a:fa:0f:89:bd:03:03:91:b2:7e:a8:b1:9a:b6: 70:e5:51:ce:85:8e:de:30:6b:0f:d9:ab:20:2f:e9:21:bd:4e: 35:ff:07:79:ff:ab:ce:f3:5b:b4:66:40:8a:c1:b0:31:09:0e: 4f:4d:6f:71:36:83:d5:7b:73:35:7f:fd:e2:1c:e1:85:d7:b2: d8:47:78:c5:d9:0a:e8:bd:20:ff:d3:39:c9:4a:20:02:fe:0f: af:8c:ef:1c:a3:86:63:bd:7a:49:4f:dd:09:d6:8f:f5:94:0a: ba:c7:9f:8b:8d:d3:df:ff:54:20:90:c2:86:b4:d4:d3:97:dd: 74:10:f9:46:29:d9:0e:71:ed:2e:64:45:60:62:fb:b1:ec:fb: c8:40:da:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoig1SHzyHk2S1S/8k4d01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmYwMTFhZGFhZWVjNDY1YjE4MmFlZTcwOWMzNjdjODdl NThmMzgwHhcNMjUxMjE2MTkwMTM0WhcNMjUxMjE3MTkwMTM0WjAzMTEwLwYDVQQD EyhmYjI4N2ExMTdhMzE2ODRhZDVhNTM2ZTIxOWE4MjQ4MjIwM2RhZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hpICcXaW3TAAmNmb8YSf1hUMPb c2ToQ0se2UGPAFANrjoKdF0hCFPduxHLoy/iyfg+IwyIBSLC14/O1B8h8+MQVC1g 7G8IBEUKckXk34hiSyUFeFNkEAbx8AUPKnnp557RKj29IoPoBUHH58CKjrooJssp 5iS5h7AQnDi/LjmmCd27NKXka7FjETW06t1QFbgez4NvRkY/fOgpkRiaon3WlYA4 cf/cd385pkm6xs/gEVJfu9ADAekbSwJwfbCrLb3IpF0alnIdsmCI4Ut6qzRGpoxs e2b8V854APdABFk/RALAtsLlElymSGLrzmHLtjJdBSKLDHRlVyCoIkHlAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsoehF6MWhK1aU24hmoJIIgPa4HMB8GA1UdIwQY MBaAFC4vARraruxGWxgq7nCcNnyH5Y84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQt MjIyYmFmOTUzYjQ0LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lZDU0NTItMzllMi00M2JiLTk2NDQtMjIyYmFmOTUzYjQ0 LzEvTGk4Qkd0cXU3RVpiR0NydWNKdzJmSWZsanpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnChT51h n7tNQZizmRb2C41J6mETSIIFWMlYRnB6mUojY2S5RyJuAzEeE7Dfn14BPHUuST3z FS+rX7CuC6OZw7KPcjVk/By4GwrPxdPbH2+lgO1aV9+wjTEp1Bf4eT85ODFVnHKa A/F0HVTyLaI1BRr6D4m9AwORsn6osZq2cOVRzoWO3jBrD9mrIC/pIb1ONf8Hef+r zvNbtGZAisGwMQkOT01vcTaD1XtzNX/94hzhhdey2Ed4xdkK6L0g/9M5yUogAv4P r4zvHKOGY716SU/dCdaP9ZQKusefi43T3/9UIJDChrTU05fddBD5RinZDnHtLmRF YGL7sez7yEDa1A== -----END CERTIFICATE-----Generated at Tue Dec 16 22:30:19 2025 by rpki-client