This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft File: li68oqtiGOHxrgaHwxREVP1dmWs.mft (raw, json) Hash identifier: OmA5jAXu55Aye999PK9Dkzn8EoHX08E1q+8vdEQBsHg= Subject key identifier: 97:DF:3E:9E:BD:C6:43:4F:0B:3B:A8:18:33:D6:77:11:05:7E:36:B3 Authority key identifier: 96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B Certificate issuer: /CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Certificate serial: 019B7FDE93C84EE622693CE2321BDE366000 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft Manifest number: 173C Signing time: Fri 02 Jan 2026 18:00:51 +0000 Manifest this update: Fri 02 Jan 2026 18:00:51 +0000 Manifest next update: Sat 03 Jan 2026 18:00:51 +0000 Files and hashes: 1: li68oqtiGOHxrgaHwxREVP1dmWs.crl (hash: x8JC9F2Qj9hZBWxwdGpFMu7ar7dlKCpjoAj3OI3cUhI=) 2: oHMS8ZGj-fNJgkWpYzSGR7WlyE0.roa (hash: iagyKqdH+vp6N5HOrboxhsVEDIapiFjNbJ5/XngCFtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:de:93:c8:4e:e6:22:69:3c:e2:32:1b:de:36:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962ebca2ab6218e1f1ae0687c3144454fd5d996b Validity Not Before: Jan 2 18:00:51 2026 GMT Not After : Jan 3 18:00:51 2026 GMT Subject: CN=97df3e9ebdc6434f0b3ba81833d67711057e36b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:2b:a5:69:5a:d9:a7:46:cd:5f:62:1b:83: 68:76:3d:5a:7b:12:59:c6:c6:f8:23:c1:7c:13:b9: 71:e2:0b:ef:ad:76:64:3f:bf:8d:86:72:8f:e7:26: 98:9a:a5:63:59:f4:62:b4:37:9b:1e:3e:40:dc:72: 2d:8f:2e:2d:21:98:8b:34:8d:34:34:31:f6:73:3d: 09:db:9a:73:0e:33:b7:36:1f:84:7d:0e:ce:7c:6f: f3:fe:8a:b6:44:b0:74:e5:88:0d:95:cd:29:ea:8f: da:e3:8f:73:ec:7e:78:01:39:39:25:1b:97:91:bc: 0a:9d:1a:b6:67:dd:48:de:76:d7:d3:53:57:ca:a1: 2d:4f:cb:71:91:ae:77:1d:46:11:e4:dd:42:72:7a: 70:52:00:f3:d9:d6:d2:ec:08:7f:d1:e6:dd:91:a5: c9:6d:e3:67:b9:78:5b:94:eb:7d:05:1f:ca:8a:e2: 36:f2:f8:eb:db:d7:1c:af:52:b0:57:54:bd:93:fb: 43:e9:ba:27:ea:f2:ca:81:39:23:ee:9f:bc:bd:da: 25:84:a3:ac:66:a2:a3:c0:39:a9:c0:7e:19:7c:d4: e0:6c:28:4b:c2:9c:90:76:23:11:7a:15:8a:45:33: ce:8f:c9:e7:40:12:76:16:f0:5d:2d:be:14:35:d4: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DF:3E:9E:BD:C6:43:4F:0B:3B:A8:18:33:D6:77:11:05:7E:36:B3 X509v3 Authority Key Identifier: keyid:96:2E:BC:A2:AB:62:18:E1:F1:AE:06:87:C3:14:44:54:FD:5D:99:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/li68oqtiGOHxrgaHwxREVP1dmWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/560ac6-194f-4b1b-b5ac-fd87b7335955/1/li68oqtiGOHxrgaHwxREVP1dmWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:94:7b:37:e7:9b:18:da:f6:26:c2:69:ad:0e:b4:da:92:8d: 41:6c:07:b9:8e:4f:e6:49:82:32:0d:08:63:c0:d8:04:13:64: b8:21:c6:b9:28:29:c0:10:58:15:80:28:00:a7:f5:e6:68:1c: e4:5f:cd:cf:b1:bd:53:f3:34:1c:eb:36:7b:fc:11:f3:71:33: 19:f8:b7:7b:4d:75:70:dd:17:8d:6b:a4:d2:c0:b0:7a:12:92: 08:af:4e:1b:0e:76:ae:93:0f:71:be:e1:ec:a6:7a:f4:f9:71: 76:28:41:b6:bb:52:45:26:d7:b6:c0:52:14:fb:2c:9f:6f:64: a2:6f:af:3c:f8:0b:80:38:7f:80:7b:9c:18:eb:a7:11:a7:1b: b8:b7:7a:50:e6:6f:1b:18:f3:54:8e:31:92:45:e6:4d:63:2b: bf:41:ad:f5:5c:5b:b0:76:cc:d5:c6:93:22:4a:0d:7f:33:0c: cb:d3:45:bc:2f:af:b0:b5:5c:b7:e9:f5:ff:41:96:cc:50:e1: 62:91:c5:12:14:a7:af:75:a8:df:9b:0e:48:97:da:6c:35:36: cc:09:01:bc:30:1a:68:36:a9:60:22:3d:78:02:6c:be:83:50: b9:a5:0b:f7:d9:d6:aa:ec:51:55:1c:35:c6:82:01:32:46:ec: 0f:b9:7c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt/3pPITuYiaTziMhveNmAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmViY2EyYWI2MjE4ZTFmMWFlMDY4N2MzMTQ0NDU0ZmQ1 ZDk5NmIwHhcNMjYwMTAyMTgwMDUxWhcNMjYwMTAzMTgwMDUxWjAzMTEwLwYDVQQD Eyg5N2RmM2U5ZWJkYzY0MzRmMGIzYmE4MTgzM2Q2NzcxMTA1N2UzNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL4rpWla2adGzV9iG4Nodj1aexJZ xsb4I8F8E7lx4gvvrXZkP7+NhnKP5yaYmqVjWfRitDebHj5A3HItjy4tIZiLNI00 NDH2cz0J25pzDjO3Nh+EfQ7OfG/z/oq2RLB05YgNlc0p6o/a449z7H54ATk5JRuX kbwKnRq2Z91I3nbX01NXyqEtT8txka53HUYR5N1CcnpwUgDz2dbS7Ah/0ebdkaXJ beNnuXhblOt9BR/KiuI28vjr29ccr1KwV1S9k/tD6bon6vLKgTkj7p+8vdolhKOs ZqKjwDmpwH4ZfNTgbChLwpyQdiMRehWKRTPOj8nnQBJ2FvBdLb4UNdRHswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJffPp69xkNPCzuoGDPWdxEFfjazMB8GA1UdIwQY MBaAFJYuvKKrYhjh8a4Gh8MURFT9XZlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMt ZmQ4N2I3MzM1OTU1LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NjBhYzYtMTk0Zi00YjFiLWI1YWMtZmQ4N2I3MzM1OTU1 LzEvbGk2OG9xdGlHT0h4cmdhSHd4UkVWUDFkbVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJR7N+eb GNr2JsJprQ602pKNQWwHuY5P5kmCMg0IY8DYBBNkuCHGuSgpwBBYFYAoAKf15mgc 5F/Nz7G9U/M0HOs2e/wR83EzGfi3e011cN0XjWuk0sCwehKSCK9OGw52rpMPcb7h 7KZ69PlxdihBtrtSRSbXtsBSFPssn29kom+vPPgLgDh/gHucGOunEacbuLd6UOZv GxjzVI4xkkXmTWMrv0Gt9VxbsHbM1caTIkoNfzMMy9NFvC+vsLVct+n1/0GWzFDh YpHFEhSnr3Wo35sOSJfabDU2zAkBvDAaaDapYCI9eAJsvoNQuaUL99nWquxRVRw1 xoIBMkbsD7l8lw== -----END CERTIFICATE-----Generated at Fri Jan 2 23:26:48 2026 by rpki-client