This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft File: LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json) Hash identifier: YCJuspZPHA7d1Z2daYnDwW4c+MsMj8Iyi3OSiKQGGHU= Subject key identifier: 68:24:91:76:D3:9E:08:B9:30:36:CC:5A:59:11:AC:14:08:F6:05:23 Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Certificate serial: 019B3E6C18D254A508D6F490588C2A907235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft Manifest number: 1761 Signing time: Sun 21 Dec 2025 01:00:30 +0000 Manifest this update: Sun 21 Dec 2025 01:00:30 +0000 Manifest next update: Mon 22 Dec 2025 01:00:30 +0000 Files and hashes: 1: FP9KPtAPudwifvNA1yXNkNCFOFY.roa (hash: ocGzp/8Fhd1lCI2svcm4GtNlcaUMkqz9rj4sgodMzFo=) 2: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: SXUjFij8yLzWmhK3fqypLNQ0ncbcDJ+J7fVLXysP+ps=) 3: gzJT4-cX5kiA_JxRqpqJmyeN7rM.roa (hash: j7soth2EwPp+uzVpjpNq3DRnu+ZloTBjkFjkTsLwX1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:18:d2:54:a5:08:d6:f4:90:58:8c:2a:90:72:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2 Validity Not Before: Dec 21 01:00:30 2025 GMT Not After : Dec 22 01:00:30 2025 GMT Subject: CN=68249176d39e08b93036cc5a5911ac1408f60523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7f:24:d0:d5:40:b1:35:6c:c2:3c:ef:79:35: bd:18:99:23:f0:b1:95:55:ad:0c:28:e2:84:03:29: 25:59:bd:22:f8:1b:8c:08:df:f5:78:63:74:f0:08: 71:66:af:16:69:cf:06:eb:a1:94:57:88:94:24:7b: 28:9f:36:f2:a3:43:c3:c1:cc:46:fd:9e:57:0c:ef: 7b:15:f6:3c:1d:3f:4c:cb:36:71:8c:92:7c:f0:db: 0a:0f:dd:ab:cd:3c:2e:29:8e:8a:e2:c3:ac:e3:f9: 4d:75:f5:b7:a8:b3:f0:0a:a3:b5:87:a4:2f:38:db: 35:35:46:ca:95:d2:8f:86:48:95:9d:43:8b:cc:8e: c7:c0:0e:25:73:fe:d5:62:41:be:aa:f7:b1:51:68: ac:d1:44:46:9b:08:2c:99:34:e0:ca:9a:44:13:1f: 56:73:85:ba:3d:38:c4:b3:8b:a0:db:54:df:4c:c7: 2a:24:a1:de:63:13:5e:66:91:93:86:c7:87:e7:60: db:1f:89:3d:3d:20:34:94:f1:ec:14:c0:8c:a2:d2: 27:37:16:e9:ca:a3:97:a8:37:ad:2f:ef:05:42:34: bf:64:db:0b:eb:d7:3d:ef:f5:53:43:e7:0c:e7:52: f8:b8:75:a1:e2:29:c7:bc:46:5c:6b:a5:d4:97:49: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:24:91:76:D3:9E:08:B9:30:36:CC:5A:59:11:AC:14:08:F6:05:23 X509v3 Authority Key Identifier: keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:aa:0d:3a:7b:e1:fb:76:46:f4:7a:a5:01:d0:b4:de:db:0b: 3f:ae:1b:e5:0c:9d:ed:26:92:10:93:fb:97:92:e5:de:8b:3b: 3e:51:61:58:c6:ad:8c:41:bb:e9:29:08:08:6d:e1:f5:b5:2b: e0:29:76:ab:1c:65:a3:97:64:7c:d3:d7:d5:a5:1d:a5:f3:03: 1e:fe:51:32:3c:f3:93:2e:3e:6e:c4:cd:5c:0b:48:9d:75:30: a0:17:8f:1c:7b:78:49:aa:26:8a:4c:8b:13:b5:7c:f5:0f:e8: 49:00:ce:9d:9f:0e:38:48:b4:96:59:f6:04:5a:e8:85:fd:65: 3b:e3:0e:16:b3:05:82:e1:c6:11:a2:56:8b:c9:76:c7:9b:42: e0:ef:75:7d:28:e7:54:db:8e:7b:71:64:54:a1:94:a2:bb:64: c4:b8:21:ba:0c:3e:ca:22:89:b0:9c:a3:56:d5:5b:d9:b1:7a: 59:a4:9d:b0:ac:e6:12:88:24:54:2f:44:d9:26:ab:cf:8c:0e: 2f:46:5b:24:7b:a1:6f:e2:81:4e:9c:73:e1:04:11:25:3e:99: 96:87:43:98:35:76:ce:d7:f4:7f:16:6d:1a:d5:49:ac:89:26: 15:2f:cb:c0:53:6c:61:fc:5b:e7:f8:18:e4:e9:ad:2d:54:c2: c3:f8:8e:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bBjSVKUI1vSQWIwqkHI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi OTM3ZDIwHhcNMjUxMjIxMDEwMDMwWhcNMjUxMjIyMDEwMDMwWjAzMTEwLwYDVQQD Eyg2ODI0OTE3NmQzOWUwOGI5MzAzNmNjNWE1OTExYWMxNDA4ZjYwNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H8k0NVAsTVswjzveTW9GJkj8LGV Va0MKOKEAyklWb0i+BuMCN/1eGN08AhxZq8Wac8G66GUV4iUJHsonzbyo0PDwcxG /Z5XDO97FfY8HT9MyzZxjJJ88NsKD92rzTwuKY6K4sOs4/lNdfW3qLPwCqO1h6Qv ONs1NUbKldKPhkiVnUOLzI7HwA4lc/7VYkG+qvexUWis0URGmwgsmTTgyppEEx9W c4W6PTjEs4ug21TfTMcqJKHeYxNeZpGThseH52DbH4k9PSA0lPHsFMCMotInNxbp yqOXqDetL+8FQjS/ZNsL69c97/VTQ+cM51L4uHWh4inHvEZca6XUl0n+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgkkXbTngi5MDbMWlkRrBQI9gUjMB8GA1UdIwQY MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqoNOnvh +3ZG9HqlAdC03tsLP64b5Qyd7SaSEJP7l5Ll3os7PlFhWMatjEG76SkICG3h9bUr 4Cl2qxxlo5dkfNPX1aUdpfMDHv5RMjzzky4+bsTNXAtInXUwoBePHHt4SaomikyL E7V89Q/oSQDOnZ8OOEi0lln2BFrohf1lO+MOFrMFguHGEaJWi8l2x5tC4O91fSjn VNuOe3FkVKGUortkxLghugw+yiKJsJyjVtVb2bF6WaSdsKzmEogkVC9E2Sarz4wO L0ZbJHuhb+KBTpxz4QQRJT6ZlodDmDV2ztf0fxZtGtVJrIkmFS/LwFNsYfxb5/gY 5OmtLVTCw/iO3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:46 2025 by rpki-client