This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft File: Li-E9VWmZqoMBKj759wZEAdfVlg.mft (raw, json) Hash identifier: C2IxrI+j/elINlcYCUutZIEy4hbyS7J7q0M/fizWSVk= Subject key identifier: 92:75:A0:6D:08:70:FF:D4:52:55:CC:B4:CB:D8:02:C9:97:EC:D3:01 Authority key identifier: 2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 Certificate issuer: /CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Certificate serial: 019B454ABFD25058BE2C76FA005D201536C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 09:01:25 +0000 Manifest this update: Mon 22 Dec 2025 09:01:25 +0000 Manifest next update: Tue 23 Dec 2025 09:01:25 +0000 Files and hashes: 1: Li-E9VWmZqoMBKj759wZEAdfVlg.crl (hash: n453XEVYm442B+2YCnnGCYyXZbMAnDeoVX/I3Ia4y5Q=) 2: pFH6DHW2s5KsXhoSMia6hZQZzt0.roa (hash: eNJrzW8rXB10B8GQwblM7wVFPW8bxQ19CVHU34yh2No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:bf:d2:50:58:be:2c:76:fa:00:5d:20:15:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e2f84f555a666aa0c04a8fbe7dc1910075f5658 Validity Not Before: Dec 22 09:01:25 2025 GMT Not After : Dec 23 09:01:25 2025 GMT Subject: CN=9275a06d0870ffd45255ccb4cbd802c997ecd301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:50:5a:8f:ed:78:99:a9:f9:19:41:1d:8f: f5:c8:cb:f5:b2:58:f3:58:d7:f1:de:9f:a0:b8:cf: 03:a6:8f:08:d0:18:76:8b:c0:c5:57:71:77:ce:bb: 6d:34:d7:47:84:f8:03:6e:13:aa:2a:c2:d8:85:dd: b2:c0:af:7c:5e:0f:e0:df:6c:88:d4:92:dc:7c:b6: 86:77:38:7a:54:45:45:d9:51:c7:60:bf:5b:59:8e: b9:4b:c3:f9:92:a8:14:c5:c1:e7:c5:df:a6:d3:c0: 92:49:61:6e:41:90:06:77:b0:85:b4:cf:66:15:3d: fa:8b:ac:a9:65:67:c9:23:10:46:4d:6f:84:4e:8b: 3c:54:66:53:30:f5:a6:a9:ea:60:f8:78:b2:3c:cc: 57:e0:1a:41:52:d0:a5:20:3b:5c:5d:e7:7c:fa:29: e2:1d:e9:9a:10:dc:33:05:77:26:70:96:6d:ed:f2: 36:c7:04:be:ae:17:be:f5:a8:36:8a:bf:1a:df:37: b2:91:ca:84:92:ca:c6:ba:30:93:89:ca:95:e1:b8: 77:5d:ab:ae:d9:aa:26:52:c0:67:24:a0:97:5c:b1: ad:ae:9a:5f:d5:f6:6f:f1:6e:4d:97:17:5a:8f:0a: e4:93:83:9a:03:f5:3b:f6:b3:11:0e:6f:f6:cf:67: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:75:A0:6D:08:70:FF:D4:52:55:CC:B4:CB:D8:02:C9:97:EC:D3:01 X509v3 Authority Key Identifier: keyid:2E:2F:84:F5:55:A6:66:AA:0C:04:A8:FB:E7:DC:19:10:07:5F:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Li-E9VWmZqoMBKj759wZEAdfVlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/248e6f-b1fb-4da7-97dd-954372965c5e/1/Li-E9VWmZqoMBKj759wZEAdfVlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:35:4c:7a:b1:a8:e0:94:41:ff:fc:de:2e:ac:e9:b0:dc:b1: ba:eb:fd:1e:89:d9:c4:13:55:48:a8:f0:2d:71:d8:81:60:a9: ac:4a:f0:13:d7:66:78:18:3c:67:31:aa:32:3c:ac:2d:f1:c6: f6:e9:83:20:e3:59:3b:62:5f:4f:f3:ba:a1:29:55:e8:55:c4: 10:e9:2b:24:87:6a:d5:06:54:97:9b:dc:1f:4a:91:f2:2e:7a: 0e:1b:0a:c6:b8:16:56:2d:51:77:6a:11:ad:63:95:23:a1:3b: 36:71:dd:15:6b:50:95:c4:86:53:cb:a3:e1:73:f3:30:67:2c: 61:e8:a7:77:44:de:b9:60:eb:87:1a:3a:7e:25:c0:be:c1:7a: 82:1e:0f:2b:a8:af:a7:33:9e:de:86:81:32:7e:9a:3c:8d:2a: 21:f9:31:00:3e:10:dd:bb:58:f1:46:70:20:9c:19:99:d2:87: 25:cd:cc:21:45:17:f6:1c:d0:9d:b5:fc:b4:81:5c:6e:33:75: 48:7c:94:d0:56:12:d8:3c:01:59:5a:18:60:a8:cc:4a:90:b6: cb:54:09:c4:ad:26:74:a1:d5:98:f0:b3:32:06:9d:39:ed:d4: b3:d0:d5:fb:1f:de:77:35:8a:96:fd:e7:26:1b:1e:53:d9:88: 00:7c:8d:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSr/SUFi+LHb6AF0gFTbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMmY4NGY1NTVhNjY2YWEwYzA0YThmYmU3ZGMxOTEwMDc1 ZjU2NTgwHhcNMjUxMjIyMDkwMTI1WhcNMjUxMjIzMDkwMTI1WjAzMTEwLwYDVQQD Eyg5Mjc1YTA2ZDA4NzBmZmQ0NTI1NWNjYjRjYmQ4MDJjOTk3ZWNkMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13VQWo/teJmp+RlBHY/1yMv1sljz WNfx3p+guM8Dpo8I0Bh2i8DFV3F3zrttNNdHhPgDbhOqKsLYhd2ywK98Xg/g32yI 1JLcfLaGdzh6VEVF2VHHYL9bWY65S8P5kqgUxcHnxd+m08CSSWFuQZAGd7CFtM9m FT36i6ypZWfJIxBGTW+ETos8VGZTMPWmqepg+HiyPMxX4BpBUtClIDtcXed8+ini HemaENwzBXcmcJZt7fI2xwS+rhe+9ag2ir8a3zeykcqEksrGujCTicqV4bh3Xauu 2aomUsBnJKCXXLGtrppf1fZv8W5Nlxdajwrkk4OaA/U79rMRDm/2z2e9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ1oG0IcP/UUlXMtMvYAsmX7NMBMB8GA1UdIwQY MBaAFC4vhPVVpmaqDASo++fcGRAHX1ZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQt OTU0MzcyOTY1YzVlLzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDhlNmYtYjFmYi00ZGE3LTk3ZGQtOTU0MzcyOTY1YzVl LzEvTGktRTlWV21acW9NQktqNzU5d1pFQWRmVmxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTVMerGo 4JRB//zeLqzpsNyxuuv9HonZxBNVSKjwLXHYgWCprErwE9dmeBg8ZzGqMjysLfHG 9umDIONZO2JfT/O6oSlV6FXEEOkrJIdq1QZUl5vcH0qR8i56DhsKxrgWVi1Rd2oR rWOVI6E7NnHdFWtQlcSGU8uj4XPzMGcsYeind0TeuWDrhxo6fiXAvsF6gh4PK6iv pzOe3oaBMn6aPI0qIfkxAD4Q3btY8UZwIJwZmdKHJc3MIUUX9hzQnbX8tIFcbjN1 SHyU0FYS2DwBWVoYYKjMSpC2y1QJxK0mdKHVmPCzMgadOe3Us9DV+x/edzWKlv3n JhseU9mIAHyNGA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:18 2025 by rpki-client