This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json) Hash identifier: 4DPaz5FfWcJndiEvLnEbN+nZmVJ7ZUWti5OAq6ujSnA= Subject key identifier: 7C:29:11:A7:90:B0:C1:C5:89:21:F6:82:E0:71:7B:E7:E6:2F:65:63 Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Certificate serial: 019B405B0A6256CBCB039914A1C5E052976D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft Manifest number: 1762 Signing time: Sun 21 Dec 2025 10:01:06 +0000 Manifest this update: Sun 21 Dec 2025 10:01:06 +0000 Manifest next update: Mon 22 Dec 2025 10:01:06 +0000 Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=) 2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: LeoM5EfLmUQg6qh7WM3FxrKh7dBO4d27IpGSK6BoSgI=) 3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:0a:62:56:cb:cb:03:99:14:a1:c5:e0:52:97:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Validity Not Before: Dec 21 10:01:06 2025 GMT Not After : Dec 22 10:01:06 2025 GMT Subject: CN=7c2911a790b0c1c58921f682e0717be7e62f6563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:85:9f:ea:23:9a:4a:76:a6:27:a1:82:40: 25:bf:b8:21:7c:45:48:be:53:74:10:13:d5:58:85: 23:89:a3:09:ee:1c:88:45:47:25:df:40:86:f9:61: 2e:13:c5:36:f7:11:9c:63:36:02:c3:ca:81:f6:11: c9:6f:10:16:8a:fc:24:92:f4:d0:d4:ce:9b:cf:1a: 65:87:f1:1e:e1:74:42:ec:d8:3a:85:e2:d1:5b:5f: 45:6c:5d:26:49:64:f3:8b:dc:fb:29:9b:6f:ca:ad: d5:ce:8d:9d:a3:e0:b8:ec:c9:76:0b:8e:29:b1:0b: a2:8d:39:b8:68:bd:c6:94:60:ff:4a:40:a2:20:75: ac:c0:b1:9a:4f:f8:b1:ff:20:8f:2a:1d:f0:de:7a: f8:72:ad:5f:20:34:ac:d1:d6:91:2d:da:33:d0:72: a1:05:e6:c5:d7:e3:b7:53:4e:8f:5d:75:dd:3e:03: fb:8f:27:15:d2:59:00:09:03:f8:27:3b:4f:f2:0a: 8a:0e:16:8a:67:7d:de:2b:8d:3a:99:bf:91:6b:eb: dc:d7:de:77:9c:db:e6:84:59:d6:91:6f:6d:43:a3: 1c:45:27:a5:90:2b:a4:27:d6:c9:3a:bd:aa:6f:ca: ed:1f:bf:8e:4c:00:86:35:6a:1e:4a:62:d5:9c:d7: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:29:11:A7:90:B0:C1:C5:89:21:F6:82:E0:71:7B:E7:E6:2F:65:63 X509v3 Authority Key Identifier: keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:97:8b:87:6b:ea:77:06:04:76:a8:9d:96:02:3e:7a:8f:59: f6:8a:a1:e4:d1:cf:16:e7:05:50:e9:65:f3:eb:86:5f:8a:25: 7e:9e:91:ac:7c:a5:a0:87:dd:11:f5:9e:4d:b7:6c:a6:bc:30: 2a:e2:3e:5d:f7:6c:1f:43:5c:eb:36:0c:8f:26:20:fd:6f:dc: 01:4e:aa:3e:79:c1:32:de:ff:5f:9d:d4:66:f8:4d:b3:84:c8: 1f:42:d4:2b:34:2c:64:5c:39:c7:c6:35:7b:56:6b:30:ac:13: 36:c0:22:21:ee:c0:97:78:74:40:9d:b9:47:6a:e1:0b:d0:8b: 67:1d:70:05:64:10:5b:e6:8d:27:5c:13:36:1a:e8:a3:bf:a8: 6b:0b:79:d8:09:7e:57:f4:1f:01:8b:d7:e2:56:3a:6a:23:8c: a3:0e:8b:1c:b9:22:1f:d9:c8:24:6c:73:4c:68:24:c3:bc:7a: 5b:cf:e5:62:7b:a9:72:5a:b9:83:b0:9c:af:8b:ed:49:a3:33: 0f:fd:e9:91:7c:9a:6d:83:db:08:a9:68:71:9f:a7:65:d1:07: 90:9f:de:ae:22:72:3a:95:1f:ef:0d:e6:8e:8e:f8:a5:05:b5: 90:4f:9a:93:28:c9:00:2c:9a:1c:38:f2:6a:31:b6:50:7f:3f: f6:3a:f8:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWwpiVsvLA5kUocXgUpdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi OTM3ZDIwHhcNMjUxMjIxMTAwMTA2WhcNMjUxMjIyMTAwMTA2WjAzMTEwLwYDVQQD Eyg3YzI5MTFhNzkwYjBjMWM1ODkyMWY2ODJlMDcxN2JlN2U2MmY2NTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq+Fn+ojmkp2piehgkAlv7ghfEVI vlN0EBPVWIUjiaMJ7hyIRUcl30CG+WEuE8U29xGcYzYCw8qB9hHJbxAWivwkkvTQ 1M6bzxplh/Ee4XRC7Ng6heLRW19FbF0mSWTzi9z7KZtvyq3Vzo2do+C47Ml2C44p sQuijTm4aL3GlGD/SkCiIHWswLGaT/ix/yCPKh3w3nr4cq1fIDSs0daRLdoz0HKh BebF1+O3U06PXXXdPgP7jycV0lkACQP4JztP8gqKDhaKZ33eK406mb+Ra+vc1953 nNvmhFnWkW9tQ6McRSelkCukJ9bJOr2qb8rtH7+OTACGNWoeSmLVnNf14wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwpEaeQsMHFiSH2guBxe+fmL2VjMB8GA1UdIwQY MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpeLh2vq dwYEdqidlgI+eo9Z9oqh5NHPFucFUOll8+uGX4olfp6RrHyloIfdEfWeTbdsprww KuI+XfdsH0Nc6zYMjyYg/W/cAU6qPnnBMt7/X53UZvhNs4TIH0LUKzQsZFw5x8Y1 e1ZrMKwTNsAiIe7Al3h0QJ25R2rhC9CLZx1wBWQQW+aNJ1wTNhroo7+oawt52Al+ V/QfAYvX4lY6aiOMow6LHLkiH9nIJGxzTGgkw7x6W8/lYnupclq5g7Ccr4vtSaMz D/3pkXyabYPbCKlocZ+nZdEHkJ/eriJyOpUf7w3mjo74pQW1kE+akyjJACyaHDjy ajG2UH8/9jr4uA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:02 2025 by rpki-client