This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json) Hash identifier: MSaIFm2nGlSwAz5zUiW7+QnkH6Qm5/M7aLWZ4ppfQU8= Subject key identifier: E4:6B:EF:0D:83:A4:C8:8C:B5:4E:06:89:E1:73:EF:14:78:12:79:2B Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a Certificate serial: 019B3DFEA2661E0277B36FBEE51CE50C8E93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft Manifest number: 023E Signing time: Sat 20 Dec 2025 23:00:56 +0000 Manifest this update: Sat 20 Dec 2025 23:00:56 +0000 Manifest next update: Sun 21 Dec 2025 23:00:56 +0000 Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: aa1wPqdVY6b/DNb0MjOSPVFgCl4nftEUsePdxZSGPDo=) 2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:a2:66:1e:02:77:b3:6f:be:e5:1c:e5:0c:8e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a Validity Not Before: Dec 20 23:00:56 2025 GMT Not After : Dec 21 23:00:56 2025 GMT Subject: CN=e46bef0d83a4c88cb54e0689e173ef147812792b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b3:96:33:37:1e:07:62:00:23:4e:eb:b1:1b: 5b:dd:b0:e7:dc:76:8e:97:49:6e:91:e0:ee:d2:27: b7:44:f5:26:36:35:5f:db:2a:83:2f:e7:f9:fa:5e: 2f:a8:d1:95:73:aa:56:7c:d7:0e:62:91:da:4d:31: 76:29:be:5b:6b:a1:a6:ff:68:46:73:22:6f:9e:4d: 1b:32:6e:11:c3:3c:8f:00:c9:64:c2:a3:33:8c:d5: b9:00:f3:a5:26:23:d9:73:cc:8c:41:81:e3:88:61: 0b:d7:c1:c4:57:43:47:fa:85:76:bd:3c:ba:9f:c3: ff:95:e3:6e:3e:1e:af:f1:f3:e6:ae:74:49:04:c8: 93:cf:2e:c2:61:9d:dc:c1:d0:f8:da:74:4c:62:2d: 8e:26:14:b1:f3:88:ea:b4:58:fd:60:a1:33:89:21: e4:28:a1:ad:cd:4a:ea:1c:5e:57:33:1f:a7:17:e4: d5:74:7a:68:80:7b:67:0a:bb:a2:71:6d:7a:1c:db: 2c:61:71:84:ed:4e:52:14:bd:a7:b0:e2:fe:0f:76: da:e8:f5:03:41:98:1e:a8:d0:75:f8:22:f1:33:03: 5a:5d:38:3b:22:85:a6:48:56:cc:53:35:d6:b4:ed: a7:a8:ce:22:c3:8d:af:f1:a5:50:9f:91:20:83:be: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6B:EF:0D:83:A4:C8:8C:B5:4E:06:89:E1:73:EF:14:78:12:79:2B X509v3 Authority Key Identifier: keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:96:61:73:38:9a:af:33:5b:61:a0:aa:8e:a5:06:f9:6c:af: b8:7a:4f:4a:f0:ae:13:08:7c:55:9a:88:27:cc:cd:21:ad:f6: 0f:c3:82:fe:28:e2:96:d8:23:46:fa:14:39:06:65:45:bf:01: 0e:cd:f1:30:0d:88:4e:1d:2b:32:e2:a5:b3:a8:7c:8d:17:1a: a2:27:f4:7b:ad:9e:74:b6:94:d4:8b:47:eb:8a:91:79:a8:23: d4:1d:16:85:32:e1:09:33:3d:00:a6:ef:d5:ed:14:a2:8c:bd: 88:4e:a8:6a:a9:cc:0f:8d:01:07:42:d3:9b:45:2c:9a:92:0e: 81:41:73:6c:a1:4e:6e:8f:0d:73:01:85:44:2f:ac:92:89:f8: 16:84:44:7c:73:87:25:44:ee:b8:18:ba:48:ef:a0:e4:7c:64: e7:79:a0:65:6d:97:b1:1a:b4:cb:cd:5a:66:7c:eb:32:73:7f: 8e:b4:95:7a:71:e8:df:29:5c:17:89:3c:cf:69:06:55:28:d8: 76:52:2e:63:e7:4c:98:5f:a5:46:34:cc:b0:da:cb:ca:a7:ec: 90:4f:01:27:db:6d:7a:a4:42:c6:99:bb:9d:96:3b:fb:c1:3c: c0:39:4d:2c:c3:a7:dc:15:68:42:15:30:57:36:af:cc:f3:4d: ae:0f:72:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/qJmHgJ3s2++5RzlDI6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZGVhMmMxNTk5M2Q2ODMxNzUwYWE2MzBlMGU2ODBkOWVl Zjg4OGEwHhcNMjUxMjIwMjMwMDU2WhcNMjUxMjIxMjMwMDU2WjAzMTEwLwYDVQQD EyhlNDZiZWYwZDgzYTRjODhjYjU0ZTA2ODllMTczZWYxNDc4MTI3OTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLOWMzceB2IAI07rsRtb3bDn3HaO l0lukeDu0ie3RPUmNjVf2yqDL+f5+l4vqNGVc6pWfNcOYpHaTTF2Kb5ba6Gm/2hG cyJvnk0bMm4RwzyPAMlkwqMzjNW5APOlJiPZc8yMQYHjiGEL18HEV0NH+oV2vTy6 n8P/leNuPh6v8fPmrnRJBMiTzy7CYZ3cwdD42nRMYi2OJhSx84jqtFj9YKEziSHk KKGtzUrqHF5XMx+nF+TVdHpogHtnCruicW16HNssYXGE7U5SFL2nsOL+D3ba6PUD QZgeqNB1+CLxMwNaXTg7IoWmSFbMUzXWtO2nqM4iw42v8aVQn5Egg75B2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORr7w2DpMiMtU4GieFz7xR4EnkrMB8GA1UdIwQY MBaAFPfeosFZk9aDF1CqYw4OaA2e74iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYt MzhkOTcxYzEzNDQxLzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYtMzhkOTcxYzEzNDQx LzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5Zhczia rzNbYaCqjqUG+WyvuHpPSvCuEwh8VZqIJ8zNIa32D8OC/ijiltgjRvoUOQZlRb8B Ds3xMA2ITh0rMuKls6h8jRcaoif0e62edLaU1ItH64qReagj1B0WhTLhCTM9AKbv 1e0Uooy9iE6oaqnMD40BB0LTm0UsmpIOgUFzbKFObo8NcwGFRC+skon4FoREfHOH JUTuuBi6SO+g5Hxk53mgZW2XsRq0y81aZnzrMnN/jrSVenHo3ylcF4k8z2kGVSjY dlIuY+dMmF+lRjTMsNrLyqfskE8BJ9tteqRCxpm7nZY7+8E8wDlNLMOn3BVoQhUw VzavzPNNrg9yqA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:45:58 2025 by rpki-client