This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json) Hash identifier: kYcGNsIVYP3fDaPDOoe2PqIr1QxD+enz9uFNeuUBFLk= Subject key identifier: 77:09:8A:E8:B4:06:61:9D:E6:88:C6:9F:A4:4E:A5:8D:1B:E1:8B:C6 Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Certificate serial: 019B3AC6B6DD117626C0E49EECEE42660903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft Manifest number: 0B49 Signing time: Sat 20 Dec 2025 08:00:59 +0000 Manifest this update: Sat 20 Dec 2025 08:00:59 +0000 Manifest next update: Sun 21 Dec 2025 08:00:59 +0000 Files and hashes: 1: 40yNe5drs03KBqTPteFk6f_6lOI.roa (hash: +9sbecufhXxr3UfhY0K/1Ke1i8FJRZHe8knUxyECWgU=) 2: NTRuSteXMEXLvayahODmi046fpw.roa (hash: f1MFdssa3cdYy5ca/ZRwnxiIjLIP7jvC8Sw0s1pkpF8=) 3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: vA6FgrAUysWcyevmMdj7jnv0EMXmdyslmp75hZ9VTVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:b6:dd:11:76:26:c0:e4:9e:ec:ee:42:66:09:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92 Validity Not Before: Dec 20 08:00:59 2025 GMT Not After : Dec 21 08:00:59 2025 GMT Subject: CN=77098ae8b406619de688c69fa44ea58d1be18bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3d:b0:c9:79:d1:58:88:d3:9f:7b:44:2a:b6: 75:23:f3:44:ba:04:0c:53:c0:e6:6f:dc:9b:52:88: e7:64:05:ac:d9:cf:27:22:c6:63:40:e4:85:99:72: 98:cb:57:07:2f:8e:fb:a7:d6:2e:c9:ba:80:a9:95: b8:63:c9:45:ec:df:2d:a5:e2:79:a9:eb:75:bc:2a: 3d:25:01:2f:e2:04:c2:2b:da:de:9a:c2:1f:73:5b: a8:99:dd:98:af:05:fb:b5:07:d0:ff:98:18:8b:f7: cb:36:95:78:87:6d:4f:f8:79:b3:97:21:0b:de:36: 72:03:15:04:66:a7:c0:f7:ba:67:85:f6:65:4b:45: 94:6f:47:d3:25:a2:31:99:1f:c9:d5:c4:8a:be:37: c7:28:08:69:50:00:d3:d0:87:ee:a8:e3:1e:96:f2: 18:16:49:8d:12:bc:57:a0:c4:6d:42:8f:62:90:e2: 84:6b:c1:a0:62:14:a3:9e:38:93:3a:5d:7d:f3:a2: c0:53:e6:ce:8a:b2:bc:14:cf:17:91:0f:30:2e:30: 07:7d:78:18:0d:c1:7f:fd:7f:1f:d7:b4:5c:2b:8b: af:0a:30:e9:4b:f6:df:d3:d1:89:27:8b:c8:b9:8b: f0:13:14:fc:0a:01:f5:72:bc:05:62:96:ac:1b:7c: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:09:8A:E8:B4:06:61:9D:E6:88:C6:9F:A4:4E:A5:8D:1B:E1:8B:C6 X509v3 Authority Key Identifier: keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:07:cc:46:d5:92:13:1b:91:cd:df:19:9a:d2:57:16:cf: 54:85:66:ac:04:c1:a9:17:9b:51:0c:d7:41:94:6c:98:cc:0e: 56:78:ec:10:d8:2e:33:ec:9a:11:b7:b6:65:ce:55:4a:c3:ba: 02:04:ef:ea:22:94:43:a8:6f:9c:79:7b:e0:55:73:c4:fd:5b: a8:1f:fe:61:ab:4c:7a:5e:da:19:9d:b2:be:dd:e7:93:ab:30: 75:e3:f9:d2:02:e0:d6:6d:7a:00:dd:b2:86:9b:36:f2:fb:5a: d0:b0:45:5c:d6:b9:ff:70:aa:89:0e:96:e4:fa:8f:c3:35:15: 32:ee:6f:12:06:84:cf:52:52:fa:30:df:6d:f9:51:e5:23:57: bd:09:04:5b:33:76:86:65:d1:63:e0:5d:d3:25:87:62:01:66: cc:63:96:36:5a:22:41:13:05:d9:ae:17:70:27:a3:c9:3a:1a: 06:09:c7:55:ae:11:68:91:00:f9:22:58:89:7e:31:c2:01:8c: 06:bb:4f:26:db:c8:01:3b:0b:29:46:9a:2b:96:ea:84:b0:b5: 0d:53:fd:60:60:22:3e:31:38:7c:51:e6:4e:e2:07:07:70:ee: 39:63:a4:57:04:1b:56:71:9a:17:92:4e:d3:39:db:82:72:28: ac:dd:e6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xrbdEXYmwOSe7O5CZgkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MmFhMzJlYmVjOWNlYTFjOTNjNGJkNTVmODVlZjdlMGE1 ZDRmOTIwHhcNMjUxMjIwMDgwMDU5WhcNMjUxMjIxMDgwMDU5WjAzMTEwLwYDVQQD Eyg3NzA5OGFlOGI0MDY2MTlkZTY4OGM2OWZhNDRlYTU4ZDFiZTE4YmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D2wyXnRWIjTn3tEKrZ1I/NEugQM U8Dmb9ybUojnZAWs2c8nIsZjQOSFmXKYy1cHL477p9YuybqAqZW4Y8lF7N8tpeJ5 qet1vCo9JQEv4gTCK9remsIfc1uomd2YrwX7tQfQ/5gYi/fLNpV4h21P+HmzlyEL 3jZyAxUEZqfA97pnhfZlS0WUb0fTJaIxmR/J1cSKvjfHKAhpUADT0IfuqOMelvIY FkmNErxXoMRtQo9ikOKEa8GgYhSjnjiTOl1986LAU+bOirK8FM8XkQ8wLjAHfXgY DcF//X8f17RcK4uvCjDpS/bf09GJJ4vIuYvwExT8CgH1crwFYpasG3y47wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcJiui0BmGd5ojGn6ROpY0b4YvGMB8GA1UdIwQY MBaAFJYqoy6+yc6hyTxL1V+F734KXU+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMt ODU4YzZmODgyOWViLzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZTM4ZWEtYzlmYS00MDEzLTlmZDMtODU4YzZmODgyOWVi LzEvbGlxakxyN0p6cUhKUEV2Vlg0WHZmZ3BkVDVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6EHzEbV khMbkc3fGZrSVxbPVIVmrATBqRebUQzXQZRsmMwOVnjsENguM+yaEbe2Zc5VSsO6 AgTv6iKUQ6hvnHl74FVzxP1bqB/+YatMel7aGZ2yvt3nk6swdeP50gLg1m16AN2y hps28vta0LBFXNa5/3CqiQ6W5PqPwzUVMu5vEgaEz1JS+jDfbflR5SNXvQkEWzN2 hmXRY+Bd0yWHYgFmzGOWNloiQRMF2a4XcCejyToaBgnHVa4RaJEA+SJYiX4xwgGM BrtPJtvIATsLKUaaK5bqhLC1DVP9YGAiPjE4fFHmTuIHB3DuOWOkVwQbVnGaF5JO 0znbgnIorN3mkg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:29 2025 by rpki-client