This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json) Hash identifier: MRtBW2uNBwfu+LZyYvqbjLdzn0raEfdCQsFKU3cQBw8= Subject key identifier: BD:A7:51:F5:80:76:F4:4A:84:39:26:1C:BD:0C:27:94:66:1A:06:83 Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Certificate serial: 019B4D716617116CA22D6B11ACDE9041B6C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft Manifest number: 0C46 Signing time: Tue 23 Dec 2025 23:00:35 +0000 Manifest this update: Tue 23 Dec 2025 23:00:35 +0000 Manifest next update: Wed 24 Dec 2025 23:00:35 +0000 Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=) 2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=) 3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: D0nWqMYdIr2/OTSRxD+PTUD/9GhIsVeusDKrytX3/WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:71:66:17:11:6c:a2:2d:6b:11:ac:de:90:41:b6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6 Validity Not Before: Dec 23 23:00:35 2025 GMT Not After : Dec 24 23:00:35 2025 GMT Subject: CN=bda751f58076f44a8439261cbd0c2794661a0683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:58:53:9a:13:cf:90:03:e6:a2:28:53:75: da:69:0f:d8:81:23:e8:dd:9c:f5:b6:0a:3e:20:0a: 24:63:b8:fe:0f:64:ca:88:0c:e8:95:e7:b5:ae:81: 59:1f:57:ac:00:d9:d5:32:d8:f1:32:36:70:a2:fc: c9:be:6f:20:e1:fd:d9:7c:94:ea:40:7f:f4:18:18: a2:d6:d3:b1:42:f8:90:28:0a:3f:d3:f4:01:df:5f: a0:5d:d7:f4:ae:d6:5a:ff:18:51:f0:56:02:78:67: f4:be:37:f3:ed:c0:8e:93:e1:83:94:72:d4:f7:ca: 8a:85:0d:b7:57:da:9b:ca:04:cd:94:50:58:7b:7f: 23:dc:f1:37:55:79:37:5f:cc:0c:b8:54:54:51:1b: f4:b1:52:89:15:09:52:71:46:7e:2f:95:f5:dc:a4: 50:74:31:59:fb:92:ef:b3:2f:73:0b:1e:eb:6d:b2: 8e:61:d0:d6:33:57:e5:17:6e:75:33:c5:70:5f:3e: c5:1f:91:81:05:84:8d:60:26:59:99:5a:7d:f7:c0: 5c:4f:6e:8f:9d:59:0e:8e:a8:93:bf:94:4e:0c:2b: b5:8f:00:30:9c:28:a2:12:51:cc:5a:f1:33:d9:20: f6:e8:39:3b:4e:0c:69:3a:b0:5e:fc:80:dc:27:d3: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A7:51:F5:80:76:F4:4A:84:39:26:1C:BD:0C:27:94:66:1A:06:83 X509v3 Authority Key Identifier: keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:f9:5f:d5:51:0c:18:9b:a1:05:c6:4a:34:e9:9d:10:8b: 26:77:39:f0:b5:aa:45:ad:ab:13:8c:ff:54:ed:91:15:42:a7: b8:2d:bb:26:73:a7:95:ed:60:bf:ae:d9:c1:d3:44:e7:f5:cc: 4b:7b:5e:9e:9f:ef:dc:23:a4:e5:61:b2:a0:ba:2a:0a:d7:3f: 74:2d:e7:99:e7:15:76:40:1d:fd:c2:85:60:0c:52:12:c7:a6: f4:e9:96:33:af:29:07:2b:f9:fc:cc:15:81:7f:6c:11:d1:f7: ba:79:73:0c:c0:8a:c8:bb:c7:fb:6e:41:0c:f1:b6:d1:8f:ca: bc:40:20:82:5e:04:4c:f5:bb:08:83:f9:eb:f2:59:3f:86:94: 42:d3:3d:3c:a1:42:db:11:5a:54:49:97:02:8b:70:07:43:f7: 57:a1:c4:1e:31:30:da:8f:46:17:2a:d9:7e:fb:24:d0:26:21: d1:63:9a:d6:e5:75:39:10:b4:43:81:cd:d7:5e:6c:ad:08:cf: c4:19:7f:92:5b:a6:4b:ad:ad:ed:38:b2:05:3d:31:1f:fc:36: 8c:9f:da:9f:d8:d2:69:20:ea:d5:0f:48:1a:13:8a:97:55:17: 46:bf:51:14:1a:d7:6b:21:ba:67:c9:b3:2a:ff:b2:48:c8:63: 45:4f:0b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNcWYXEWyiLWsRrN6QQbbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk MGU5YjYwHhcNMjUxMjIzMjMwMDM1WhcNMjUxMjI0MjMwMDM1WjAzMTEwLwYDVQQD EyhiZGE3NTFmNTgwNzZmNDRhODQzOTI2MWNiZDBjMjc5NDY2MWEwNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKlYU5oTz5AD5qIoU3XaaQ/YgSPo 3Zz1tgo+IAokY7j+D2TKiAzolee1roFZH1esANnVMtjxMjZwovzJvm8g4f3ZfJTq QH/0GBii1tOxQviQKAo/0/QB31+gXdf0rtZa/xhR8FYCeGf0vjfz7cCOk+GDlHLU 98qKhQ23V9qbygTNlFBYe38j3PE3VXk3X8wMuFRUURv0sVKJFQlScUZ+L5X13KRQ dDFZ+5Lvsy9zCx7rbbKOYdDWM1flF251M8VwXz7FH5GBBYSNYCZZmVp998BcT26P nVkOjqiTv5RODCu1jwAwnCiiElHMWvEz2SD26Dk7TgxpOrBe/IDcJ9NwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2nUfWAdvRKhDkmHL0MJ5RmGgaDMB8GA1UdIwQY MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqD5X9VR DBiboQXGSjTpnRCLJnc58LWqRa2rE4z/VO2RFUKnuC27JnOnle1gv67ZwdNE5/XM S3tenp/v3COk5WGyoLoqCtc/dC3nmecVdkAd/cKFYAxSEsem9OmWM68pByv5/MwV gX9sEdH3unlzDMCKyLvH+25BDPG20Y/KvEAggl4ETPW7CIP56/JZP4aUQtM9PKFC 2xFaVEmXAotwB0P3V6HEHjEw2o9GFyrZfvsk0CYh0WOa1uV1ORC0Q4HN115srQjP xBl/klumS62t7TiyBT0xH/w2jJ/an9jSaSDq1Q9IGhOKl1UXRr9RFBrXayG6Z8mz Kv+ySMhjRU8LsQ== -----END CERTIFICATE-----Generated at Wed Dec 24 01:58:38 2025 by rpki-client