This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json) Hash identifier: +9ZQfpaPshYPTZeqgW4jRO8SCF/0Mn/3NB2OLO01/Rs= Subject key identifier: 69:1A:73:97:67:9F:E7:8D:7D:AE:42:E1:2D:10:33:E5:F9:E0:7E:E1 Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Certificate serial: 019B9554AA995A90A378C04FE7E0A630E598 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft Manifest number: 13B6 Signing time: Tue 06 Jan 2026 22:01:52 +0000 Manifest this update: Tue 06 Jan 2026 22:01:52 +0000 Manifest next update: Wed 07 Jan 2026 22:01:52 +0000 Files and hashes: 1: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: JVv1zbVDgamehYP23f3nOWlrGKwdseC5A/tlmOwsR3g=) 2: g2DbDkvIUX7fbrbq_Ty_SuS7Ivo.roa (hash: ENAgFJa6dqHP3ZHjhcKA/BIcppzlZ/9wq2mVnrsfeV8=) 3: lJb5lAFohzfMydj804z3JPUVnyc.roa (hash: PyjYKIx7mQvs4uA+2fO0dKGHiZ5xO9frfNP8obB2rXI=) 4: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (hash: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:54:aa:99:5a:90:a3:78:c0:4f:e7:e0:a6:30:e5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Validity Not Before: Jan 6 22:01:52 2026 GMT Not After : Jan 7 22:01:52 2026 GMT Subject: CN=691a7397679fe78d7dae42e12d1033e5f9e07ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:2a:55:f7:70:b9:a6:ef:7e:a2:6d:68:2b: d1:4f:0f:06:7c:60:76:bd:9e:28:d8:6e:88:76:f2: 4b:65:7e:7b:17:bf:34:23:30:41:3e:49:57:a6:3c: 8d:c7:d3:11:27:5b:ad:ed:ef:73:ff:7f:e6:d1:05: 61:69:9a:a6:5f:dc:12:ec:17:79:62:66:5d:79:a0: a3:b2:a4:f4:72:ec:00:ee:b7:c6:19:16:e9:d1:85: 10:ce:49:38:8c:db:7d:70:17:57:98:22:20:76:d7: 9d:1d:d2:41:c7:4f:55:90:ad:85:9f:ca:dd:8d:40: 72:62:a4:41:d3:b5:ae:d4:99:b5:88:7a:ca:8f:55: f6:bc:d1:5a:9c:6b:d2:d6:61:7f:b9:40:e3:5d:ab: 39:81:dd:6c:8f:b6:53:2a:01:2c:c0:17:cd:72:fe: 43:e9:d6:72:ab:3a:fe:b9:c1:fb:d0:32:a9:63:d0: 50:98:1f:48:d1:68:02:58:84:e6:d5:34:b7:9d:5c: 80:5a:77:af:cb:1c:e9:4e:4e:2e:39:85:31:2b:95: 40:ed:ff:30:eb:4b:a3:5d:06:27:c4:c3:75:16:73: 06:39:bc:a9:6f:d9:57:c3:0c:2a:e8:33:f0:15:79: d4:ef:55:1b:a5:28:91:25:ba:04:5f:cb:ea:05:ca: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:73:97:67:9F:E7:8D:7D:AE:42:E1:2D:10:33:E5:F9:E0:7E:E1 X509v3 Authority Key Identifier: keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:2a:bb:30:64:a4:51:c2:51:3e:ea:ae:2c:07:99:4e:55:68: a9:0d:38:b0:36:95:7d:13:0d:33:94:01:d8:6c:9d:b4:a3:a9: d3:b6:ed:8c:41:f8:9a:9c:a3:03:4d:e4:50:ec:f1:9c:4e:91: f9:48:36:a2:9a:2d:81:4a:33:a5:4c:50:ec:ce:1a:c6:79:fa: c7:6d:2b:75:6b:78:35:54:03:f0:98:a2:48:73:4b:2b:83:f9: 5a:18:c5:1a:f0:ad:67:3f:ab:1f:68:72:94:ea:0f:5e:03:1c: 87:dd:84:90:65:8f:6b:7a:ce:ac:1a:b1:3b:2e:0c:6e:c8:e2: 5b:b1:9f:0b:89:81:69:a1:37:98:ca:13:b3:12:ad:3d:2f:2a: 89:9f:f5:58:d5:b4:f1:38:3a:7e:ab:d9:f4:22:3c:d1:8a:7d: 4f:50:11:53:61:e7:42:fd:83:ad:6e:05:ca:a2:07:5c:94:a1: d7:ca:4d:fe:6c:ef:60:c0:4b:49:17:2a:92:88:44:d0:45:73: 6a:06:f2:9b:a0:c9:14:55:de:b8:76:df:c1:83:fc:35:bb:e0: 34:ff:ec:c4:23:ab:c4:d6:bf:9a:50:4f:6b:40:2f:8e:ac:63: 1c:42:f1:49:d2:e3:11:d6:97:38:1d:b0:61:a8:4c:05:59:16: 24:1c:e6:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuVVKqZWpCjeMBP5+CmMOWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh MTI4MzQwHhcNMjYwMTA2MjIwMTUyWhcNMjYwMTA3MjIwMTUyWjAzMTEwLwYDVQQD Eyg2OTFhNzM5NzY3OWZlNzhkN2RhZTQyZTEyZDEwMzNlNWY5ZTA3ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQqVfdwuabvfqJtaCvRTw8GfGB2 vZ4o2G6IdvJLZX57F780IzBBPklXpjyNx9MRJ1ut7e9z/3/m0QVhaZqmX9wS7Bd5 YmZdeaCjsqT0cuwA7rfGGRbp0YUQzkk4jNt9cBdXmCIgdtedHdJBx09VkK2Fn8rd jUByYqRB07Wu1Jm1iHrKj1X2vNFanGvS1mF/uUDjXas5gd1sj7ZTKgEswBfNcv5D 6dZyqzr+ucH70DKpY9BQmB9I0WgCWITm1TS3nVyAWnevyxzpTk4uOYUxK5VA7f8w 60ujXQYnxMN1FnMGObypb9lXwwwq6DPwFXnU71UbpSiRJboEX8vqBcoXaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkac5dnn+eNfa5C4S0QM+X54H7hMB8GA1UdIwQY MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt OWQwNzQzMzcwNDk1LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1 LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiq7MGSk UcJRPuquLAeZTlVoqQ04sDaVfRMNM5QB2GydtKOp07btjEH4mpyjA03kUOzxnE6R +Ug2opotgUozpUxQ7M4axnn6x20rdWt4NVQD8JiiSHNLK4P5WhjFGvCtZz+rH2hy lOoPXgMch92EkGWPa3rOrBqxOy4MbsjiW7GfC4mBaaE3mMoTsxKtPS8qiZ/1WNW0 8Tg6fqvZ9CI80Yp9T1ARU2HnQv2DrW4FyqIHXJSh18pN/mzvYMBLSRcqkohE0EVz agbym6DJFFXeuHbfwYP8NbvgNP/sxCOrxNa/mlBPa0AvjqxjHELxSdLjEdaXOB2w YahMBVkWJBzmVQ== -----END CERTIFICATE-----Generated at Wed Jan 7 02:37:50 2026 by rpki-client