This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft File: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft (raw, json) Hash identifier: oVH9bAxWX1R7MoHr6Gl495vdOVngmy718RWjGkmAVK8= Subject key identifier: 46:FB:DE:9A:57:7D:2C:F0:FB:D6:24:A2:30:D3:C0:BE:95:53:0F:F3 Authority key identifier: 2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 Certificate issuer: /CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Certificate serial: 019B3F4806904032056589F63956EF29CE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft Manifest number: 01DA Signing time: Sun 21 Dec 2025 05:00:43 +0000 Manifest this update: Sun 21 Dec 2025 05:00:43 +0000 Manifest next update: Mon 22 Dec 2025 05:00:43 +0000 Files and hashes: 1: Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl (hash: 2I9tCAbLfxI6rLhmVpJNIVqjMTmcKW+933j8Nok1b4s=) 2: pVxf2e-xXwl1rZX1zVVA_Ka27c0.roa (hash: m1jkKDlY5+ECl2f4JHhtoP/Ki/oGbIcrd56LGmNPcjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:06:90:40:32:05:65:89:f6:39:56:ef:29:ce:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2fb4446b97f4e0c2a9558dd99daccbf29e3806 Validity Not Before: Dec 21 05:00:43 2025 GMT Not After : Dec 22 05:00:43 2025 GMT Subject: CN=46fbde9a577d2cf0fbd624a230d3c0be95530ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:f6:e1:53:d9:d6:36:f0:58:81:ce:09:dc: 50:e8:6a:ea:9f:8a:a8:43:f3:d4:0e:87:d8:1e:d1: 83:b7:02:33:b5:a8:c3:47:f2:de:d1:b2:59:ac:81: 2b:c7:10:ff:6c:e6:86:51:9e:ef:c6:3b:06:b7:c4: 90:46:23:93:03:a0:5d:31:05:a8:2e:9d:14:1f:00: 90:94:5d:04:b0:ca:ef:84:7f:09:04:21:65:07:77: 8d:74:c7:ab:51:de:f7:90:54:d4:78:f1:42:fb:2b: bb:34:d4:18:a0:9d:78:de:94:c0:20:6e:2f:75:b5: f0:fb:7d:42:eb:bd:52:ce:f2:ec:bb:94:db:e4:9e: 72:cb:6d:55:dd:f2:ed:d0:31:80:70:50:c4:b5:1e: 01:04:9c:b9:37:c8:36:4f:ad:e8:9c:98:ef:c8:06: 40:d2:8c:e7:99:a6:b5:de:9b:9d:5f:52:33:64:c9: 57:94:ef:24:be:a5:dd:a3:e7:d5:b1:0a:0e:36:1f: 43:4c:1b:fd:85:9b:d7:77:3b:0e:ca:cf:b8:5d:2a: 3c:02:70:14:c1:56:38:cf:cf:0e:23:df:de:ba:48: c8:ef:95:c1:70:04:92:54:d6:bd:37:3c:fd:e3:d6: 7b:f7:5e:ac:4d:c3:25:89:04:fa:37:b8:5f:87:ca: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:DE:9A:57:7D:2C:F0:FB:D6:24:A2:30:D3:C0:BE:95:53:0F:F3 X509v3 Authority Key Identifier: keyid:2E:2F:B4:44:6B:97:F4:E0:C2:A9:55:8D:D9:9D:AC:CB:F2:9E:38:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/055bbb-a50a-4396-af29-d3d522e57929/1/Li-0RGuX9ODCqVWN2Z2sy_KeOAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:49:93:62:d4:ec:4d:9d:d1:e2:0f:6e:94:03:18:14:0e:cb: 7c:f9:2d:dc:a4:b6:fb:f4:54:4b:02:64:2c:38:b2:19:08:4d: 6c:5d:dd:d4:ed:17:5e:dc:96:bb:54:09:d9:6c:2b:51:45:b8: 34:02:5e:b3:a6:00:74:4e:2e:eb:1d:3f:6f:ed:6e:e4:dc:8f: 79:1f:3e:fe:1e:3d:8c:1c:3e:00:5c:b2:71:a7:c6:d7:0f:51: f7:98:ed:70:5d:e5:43:6a:d4:07:2e:a4:e8:e1:02:49:29:63: 3f:3a:75:2c:b6:b0:09:58:f7:7d:09:d2:8e:62:3e:b9:97:78: 7e:3b:f8:52:82:0b:b8:33:2e:54:81:d7:02:21:22:85:23:bd: fc:10:41:04:61:f2:95:84:37:c2:33:8d:4d:7a:c7:38:a8:fd: 27:9f:11:4b:4e:4e:be:1c:16:36:6a:8e:8f:1a:61:82:11:8d: bd:50:c9:14:9e:4e:f7:0e:7a:8d:76:7f:9b:f2:1c:48:33:d6: a1:58:35:35:fb:dd:44:ab:83:f0:6b:48:07:5c:58:90:63:18: ba:73:5d:cf:4b:cd:09:4f:34:5f:fd:19:b0:8d:be:70:27:1a: c0:18:0c:ff:0d:af:63:1d:86:be:27:6f:bd:a8:02:45:2d:65: c0:50:e1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAaQQDIFZYn2OVbvKc6JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmZiNDQ0NmI5N2Y0ZTBjMmE5NTU4ZGQ5OWRhY2NiZjI5 ZTM4MDYwHhcNMjUxMjIxMDUwMDQzWhcNMjUxMjIyMDUwMDQzWjAzMTEwLwYDVQQD Eyg0NmZiZGU5YTU3N2QyY2YwZmJkNjI0YTIzMGQzYzBiZTk1NTMwZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtej24VPZ1jbwWIHOCdxQ6Grqn4qo Q/PUDofYHtGDtwIztajDR/Le0bJZrIErxxD/bOaGUZ7vxjsGt8SQRiOTA6BdMQWo Lp0UHwCQlF0EsMrvhH8JBCFlB3eNdMerUd73kFTUePFC+yu7NNQYoJ143pTAIG4v dbXw+31C671SzvLsu5Tb5J5yy21V3fLt0DGAcFDEtR4BBJy5N8g2T63onJjvyAZA 0oznmaa13pudX1IzZMlXlO8kvqXdo+fVsQoONh9DTBv9hZvXdzsOys+4XSo8AnAU wVY4z88OI9/eukjI75XBcASSVNa9Nzz949Z7916sTcMliQT6N7hfh8reNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb73ppXfSzw+9YkojDTwL6VUw/zMB8GA1UdIwQY MBaAFC4vtERrl/TgwqlVjdmdrMvynjgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjkt ZDNkNTIyZTU3OTI5LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wNTViYmItYTUwYS00Mzk2LWFmMjktZDNkNTIyZTU3OTI5 LzEvTGktMFJHdVg5T0RDcVZXTjJaMnN5X0tlT0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkmTYtTs TZ3R4g9ulAMYFA7LfPkt3KS2+/RUSwJkLDiyGQhNbF3d1O0XXtyWu1QJ2WwrUUW4 NAJes6YAdE4u6x0/b+1u5NyPeR8+/h49jBw+AFyycafG1w9R95jtcF3lQ2rUBy6k 6OECSSljPzp1LLawCVj3fQnSjmI+uZd4fjv4UoILuDMuVIHXAiEihSO9/BBBBGHy lYQ3wjONTXrHOKj9J58RS05OvhwWNmqOjxphghGNvVDJFJ5O9w56jXZ/m/IcSDPW oVg1NfvdRKuD8GtIB1xYkGMYunNdz0vNCU80X/0ZsI2+cCcawBgM/w2vYx2Gvidv vagCRS1lwFDhrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:25 2025 by rpki-client