This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json) Hash identifier: P7ZEhsTb92Ez+nVFOqCLO4dvT9O8qNyTeVZI6mSA70E= Subject key identifier: 11:45:84:23:F6:39:5D:C3:88:99:85:A0:C5:56:CC:EA:83:06:6C:3C Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Certificate serial: 019B3E6C87632C4314D2D531FE2A1EE898CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft Manifest number: 1388 Signing time: Sun 21 Dec 2025 01:00:58 +0000 Manifest this update: Sun 21 Dec 2025 01:00:58 +0000 Manifest next update: Mon 22 Dec 2025 01:00:58 +0000 Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=) 2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: Tyjpv7y0Nm7IVfn3D5OKwhiN1x2wjgFS/dHyf9upri0=) 3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=) 4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:87:63:2c:43:14:d2:d5:31:fe:2a:1e:e8:98:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Validity Not Before: Dec 21 01:00:58 2025 GMT Not After : Dec 22 01:00:58 2025 GMT Subject: CN=11458423f6395dc3889985a0c556ccea83066c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:5f:30:e9:03:ba:4c:8d:16:8c:b0:eb:96: de:4d:e6:8a:ae:2f:d5:b9:74:12:27:a3:61:6b:d6: 24:4d:a5:54:a5:69:14:6a:ab:bf:ed:f9:8a:98:64: 46:e1:c4:42:68:ea:9f:91:91:86:71:ed:62:bb:6f: 12:aa:de:dc:7d:72:2f:87:b2:2d:99:37:34:b9:dc: 60:22:bd:68:79:f1:4e:eb:6d:ca:39:7e:88:7c:3d: 90:a7:4d:9f:6e:ea:71:d1:f2:c2:38:ee:e8:0b:aa: e2:98:90:e1:5b:f9:90:85:2f:ef:7d:95:61:65:84: c8:ee:08:30:9c:b4:50:5f:29:2e:7c:7a:01:1b:03: ed:51:56:89:ec:1f:e9:9e:9d:d1:d7:31:ee:7e:91: 52:be:80:f0:74:49:b0:bd:58:ac:2f:39:83:1e:af: a1:94:98:6c:66:c9:c2:3f:b5:57:f3:7c:b8:a8:58: 7e:88:14:15:84:ee:bf:7a:e7:ca:04:62:68:66:f8: a5:ac:95:da:2a:a0:13:00:52:d8:ee:c4:46:be:cf: ed:72:5b:ef:7b:3b:89:f3:b4:e7:50:61:f1:ac:a0: 1f:9e:c9:5f:f5:ba:19:55:8c:3e:f2:47:f7:c4:18: eb:a5:67:cf:6e:16:de:6f:00:47:98:21:95:ec:e8: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:45:84:23:F6:39:5D:C3:88:99:85:A0:C5:56:CC:EA:83:06:6C:3C X509v3 Authority Key Identifier: keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:de:2b:40:25:cb:a5:b1:e9:95:b4:6d:ab:b9:1e:ac:47: 02:de:44:db:55:67:9e:98:60:f2:d6:e9:0b:d6:2a:d5:a9:be: 48:14:13:f2:fd:68:5d:80:1b:89:a3:4e:c5:90:e4:18:ea:2b: 8b:2a:e0:02:51:2d:73:d9:f1:0a:0f:a1:4e:4b:a0:51:87:0d: 62:41:3f:c7:0e:b8:07:fa:39:a8:e8:82:6d:9b:bf:73:af:49: cc:55:29:4f:48:be:87:41:d9:89:e3:45:45:be:9b:3d:3c:05: 32:19:64:22:c6:77:96:13:a9:bb:98:79:bd:f0:d4:5c:bd:50: 22:38:0c:e6:cb:56:93:79:4e:db:e3:b5:ed:cf:4d:92:be:b3: 7f:2f:b8:59:88:42:8e:1f:b8:95:1a:d1:df:99:c1:a7:2d:1d: e8:b6:3f:96:c3:26:05:40:49:57:c7:0a:cb:a0:3d:3b:87:2b: bf:d9:00:06:d3:b1:31:ba:44:14:97:e7:19:fe:62:91:84:bc: 16:cd:f5:62:81:c8:07:c0:c4:ab:79:50:ff:86:59:c8:ce:2b: 9a:c0:fe:9b:fb:a5:d2:39:46:9d:50:ed:d7:d8:42:a8:2f:d7: 52:1b:2f:e0:45:31:d3:57:6d:d6:33:06:3a:97:1e:96:38:dd: 4e:0b:c3:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bIdjLEMU0tUx/ioe6JjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh MTI4MzQwHhcNMjUxMjIxMDEwMDU4WhcNMjUxMjIyMDEwMDU4WjAzMTEwLwYDVQQD EygxMTQ1ODQyM2Y2Mzk1ZGMzODg5OTg1YTBjNTU2Y2NlYTgzMDY2YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG9fMOkDukyNFoyw65beTeaKri/V uXQSJ6Nha9YkTaVUpWkUaqu/7fmKmGRG4cRCaOqfkZGGce1iu28Sqt7cfXIvh7It mTc0udxgIr1oefFO623KOX6IfD2Qp02fbupx0fLCOO7oC6rimJDhW/mQhS/vfZVh ZYTI7ggwnLRQXykufHoBGwPtUVaJ7B/pnp3R1zHufpFSvoDwdEmwvVisLzmDHq+h lJhsZsnCP7VX83y4qFh+iBQVhO6/eufKBGJoZvilrJXaKqATAFLY7sRGvs/tclvv ezuJ87TnUGHxrKAfnslf9boZVYw+8kf3xBjrpWfPbhbebwBHmCGV7Oh1GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFFhCP2OV3DiJmFoMVWzOqDBmw8MB8GA1UdIwQY MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt OWQwNzQzMzcwNDk1LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1 LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLDeK0Al y6Wx6ZW0bau5HqxHAt5E21Vnnphg8tbpC9Yq1am+SBQT8v1oXYAbiaNOxZDkGOor iyrgAlEtc9nxCg+hTkugUYcNYkE/xw64B/o5qOiCbZu/c69JzFUpT0i+h0HZieNF Rb6bPTwFMhlkIsZ3lhOpu5h5vfDUXL1QIjgM5stWk3lO2+O17c9Nkr6zfy+4WYhC jh+4lRrR35nBpy0d6LY/lsMmBUBJV8cKy6A9O4crv9kABtOxMbpEFJfnGf5ikYS8 Fs31YoHIB8DEq3lQ/4ZZyM4rmsD+m/ul0jlGnVDt19hCqC/XUhsv4EUx01dt1jMG OpceljjdTgvDUw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:57 2025 by rpki-client