This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft File: LI-oUz3MgguhrW-ysvAWEBBTHbk.mft (raw, json) Hash identifier: RJhJ5TLk8G7feUmXJayBEMcnLWEytKedzu7FzlVohMk= Subject key identifier: A9:A0:A3:74:17:3D:E3:41:6C:D3:B9:38:89:A5:26:02:72:31:AC:35 Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Certificate serial: 019B3F47D2075BEC4DC46C8758054CAA9796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft Manifest number: 098A Signing time: Sun 21 Dec 2025 05:00:29 +0000 Manifest this update: Sun 21 Dec 2025 05:00:29 +0000 Manifest next update: Mon 22 Dec 2025 05:00:29 +0000 Files and hashes: 1: LI-oUz3MgguhrW-ysvAWEBBTHbk.crl (hash: QLydKB+1CKz45tarYKZaOnfERgz+xErVJl9DQv9/y10=) 2: LoUtlaJ5mypaBQZ7Vl2VxjfI8z8.roa (hash: mjZMaLb9m8sq6wgkMHrxy81dzJq4evg/mUOP+NJvNIc=) 3: hwLQQhvfkTPO9tfiU3xWDktqf98.roa (hash: ARLJwTBnOck1jpPDB5YSuCoDfjoyKgo2AkGDb71eUiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:d2:07:5b:ec:4d:c4:6c:87:58:05:4c:aa:97:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Validity Not Before: Dec 21 05:00:29 2025 GMT Not After : Dec 22 05:00:29 2025 GMT Subject: CN=a9a0a374173de3416cd3b93889a526027231ac35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0b:3a:49:e8:92:79:bd:cb:dc:17:02:2e:8f: c3:98:39:67:95:f9:08:69:e9:a6:6b:24:ec:1f:6c: 97:dd:44:71:82:fc:fe:82:04:ed:b9:2b:33:2d:6f: cc:47:7d:55:b1:4b:b7:b1:ff:81:f2:ad:86:9e:21: e1:c8:af:19:8f:4a:7a:d5:0c:4f:a1:d5:1a:6a:b9: ec:a4:0a:f1:53:a1:a0:d6:47:61:2f:e4:e9:4f:ec: a0:23:30:ec:4a:8a:d1:ad:2f:68:31:ea:cd:bc:0e: ee:44:e4:af:f8:6a:9a:96:1e:12:eb:13:49:97:8f: e3:a7:45:a5:39:7f:4c:76:8a:35:c3:99:52:1f:63: e6:64:28:72:f9:44:e4:92:af:29:0b:2d:bc:d1:4e: 42:a4:22:de:74:19:73:08:77:b5:95:31:e9:93:7e: 94:92:ee:34:76:78:e7:6c:4b:75:43:f5:32:b2:b7: eb:0e:7b:f8:36:51:4b:8e:b4:59:b3:55:22:8a:15: 59:73:62:ca:6f:1a:42:f3:e8:b7:75:b3:7c:1f:ea: 26:77:3a:43:be:44:cc:ad:56:19:35:a4:59:dd:83: d3:37:34:3a:ab:e2:6c:4d:f2:2a:d6:1b:c9:86:fc: d8:42:ed:91:96:4e:84:72:a5:79:e3:46:1f:41:c9: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:A3:74:17:3D:E3:41:6C:D3:B9:38:89:A5:26:02:72:31:AC:35 X509v3 Authority Key Identifier: keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:08:1b:a1:f3:97:79:20:16:2d:96:82:2d:3a:cd:45:03: a6:65:5b:b4:8c:ce:06:26:07:18:6a:d2:ae:31:de:be:eb:76: 02:31:7f:a3:56:d5:24:7e:23:6a:4a:ce:07:27:1b:fe:0f:94: 06:65:d0:80:46:5c:24:1a:92:16:bc:d3:65:da:8e:45:22:8b: ba:7d:f1:49:e0:bf:b2:1a:1e:b1:c1:bb:38:a6:c6:e6:ef:75: 5a:bd:d9:12:61:d9:93:9f:ed:e6:8c:16:34:dc:3c:67:5c:2a: 89:07:6a:83:ec:cf:38:16:3a:23:f8:0e:ab:34:52:42:9b:a8: 6a:82:16:ba:ec:e3:6a:10:00:d7:2e:13:f9:fc:14:30:f3:80: 4c:ed:f4:b4:10:43:ae:ba:b6:6d:ae:6d:f1:a8:dd:a1:02:9d: b0:62:da:7c:5a:27:1c:b9:87:be:cf:26:69:20:8a:e8:04:d5: 3d:f2:89:7c:a9:69:6b:67:d0:d6:9c:73:49:50:bf:da:5c:a6: 55:5d:09:ee:5e:9c:9a:eb:8e:b6:1d:2c:a1:f3:d6:f8:06:73: 0b:70:b2:3e:28:13:7e:fa:42:8e:00:97:46:16:0e:c1:7d:75: 98:d7:44:8c:dd:0f:d4:fb:ad:76:89:a4:3e:2d:f1:dc:fe:ab: 38:47:52:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R9IHW+xNxGyHWAVMqpeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1 MzFkYjkwHhcNMjUxMjIxMDUwMDI5WhcNMjUxMjIyMDUwMDI5WjAzMTEwLwYDVQQD EyhhOWEwYTM3NDE3M2RlMzQxNmNkM2I5Mzg4OWE1MjYwMjcyMzFhYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsws6SeiSeb3L3BcCLo/DmDlnlfkI aemmayTsH2yX3URxgvz+ggTtuSszLW/MR31VsUu3sf+B8q2GniHhyK8Zj0p61QxP odUaarnspArxU6Gg1kdhL+TpT+ygIzDsSorRrS9oMerNvA7uROSv+Gqalh4S6xNJ l4/jp0WlOX9Mdoo1w5lSH2PmZChy+UTkkq8pCy280U5CpCLedBlzCHe1lTHpk36U ku40dnjnbEt1Q/UysrfrDnv4NlFLjrRZs1UiihVZc2LKbxpC8+i3dbN8H+omdzpD vkTMrVYZNaRZ3YPTNzQ6q+JsTfIq1hvJhvzYQu2Rlk6EcqV540YfQclP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmgo3QXPeNBbNO5OImlJgJyMaw1MB8GA1UdIwQY MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et OWU5NmFmNmQ2YThmLzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldwIG6Hz l3kgFi2Wgi06zUUDpmVbtIzOBiYHGGrSrjHevut2AjF/o1bVJH4jakrOBycb/g+U BmXQgEZcJBqSFrzTZdqORSKLun3xSeC/shoescG7OKbG5u91Wr3ZEmHZk5/t5owW NNw8Z1wqiQdqg+zPOBY6I/gOqzRSQpuoaoIWuuzjahAA1y4T+fwUMPOATO30tBBD rrq2ba5t8ajdoQKdsGLafFonHLmHvs8maSCK6ATVPfKJfKlpa2fQ1pxzSVC/2lym VV0J7l6cmuuOth0sofPW+AZzC3CyPigTfvpCjgCXRhYOwX11mNdEjN0P1Putdomk Pi3x3P6rOEdSKQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:54:10 2025 by rpki-client