This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json) Hash identifier: XQGnEodC8oCcR9Ph53JHM4odEHMpth5LF+70BqqnTfo= Subject key identifier: 31:B1:BD:1A:A7:3C:A1:C4:C2:ED:36:7A:DA:46:DF:BC:32:82:DF:47 Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Certificate serial: 019B3C7F4995278467EB6E31250732D4D22E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft Manifest number: 129F Signing time: Sat 20 Dec 2025 16:02:13 +0000 Manifest this update: Sat 20 Dec 2025 16:02:13 +0000 Manifest next update: Sun 21 Dec 2025 16:02:13 +0000 Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=) 2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: Wcu9YfsW6Y8hTMH4tKZMkzuRmWFNeIEP7QZjSiG/rqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:49:95:27:84:67:eb:6e:31:25:07:32:d4:d2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Validity Not Before: Dec 20 16:02:13 2025 GMT Not After : Dec 21 16:02:13 2025 GMT Subject: CN=31b1bd1aa73ca1c4c2ed367ada46dfbc3282df47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:21:bd:e7:de:a6:55:cc:55:64:5a:29:ba: 72:54:ba:7a:e8:e6:3f:df:e3:a9:cf:bc:8c:8f:b7: b6:e5:a8:78:3f:df:c4:33:44:3b:fb:d3:23:a0:bd: 85:e0:a8:98:00:07:cf:20:99:47:8c:33:0f:f0:03: 47:dd:1b:92:30:31:bc:1e:e8:8a:92:65:3e:db:c7: 32:61:94:a1:17:60:a8:da:b0:fc:b9:40:2e:b6:97: 31:c9:5b:cc:4d:88:bd:61:22:a8:45:f5:c7:fa:19: 6c:8f:29:1d:35:46:41:2a:80:55:0f:f2:1a:0a:4b: 88:e3:ea:71:21:90:1f:8b:90:cb:fd:51:1f:2d:15: 2a:bf:09:f9:7d:dc:97:5d:6b:d5:fa:10:4e:b8:f5: 26:45:a6:31:81:19:d1:1a:1f:ea:7d:26:7c:93:23: c2:8d:7d:63:44:74:1c:25:b7:5b:80:77:22:40:0b: 23:ca:6c:2f:e1:01:34:71:8e:8d:b1:a9:a2:9e:9d: 9e:67:d5:b5:e4:02:07:2c:0f:95:a8:ea:08:af:47: c1:84:42:fe:38:eb:eb:90:42:1d:05:a8:a1:b3:b1: 7c:a6:be:c3:12:1e:b7:2a:6c:dd:bf:28:a0:4b:69: e0:fd:d1:36:98:eb:ee:64:aa:f7:95:cc:e1:6f:19: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B1:BD:1A:A7:3C:A1:C4:C2:ED:36:7A:DA:46:DF:BC:32:82:DF:47 X509v3 Authority Key Identifier: keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:49:a8:1c:28:04:31:43:da:70:62:98:d1:69:37:66:ef: ce:26:6b:73:4d:37:1b:b0:bd:82:30:54:5d:cd:ce:f7:b3:bd: f7:07:dd:15:75:b9:2f:b6:af:ec:35:9b:f2:e4:cf:09:03:05: 8a:96:5c:14:51:90:46:7a:75:18:32:39:1f:a0:eb:67:0e:ea: 3e:eb:6c:a7:f3:21:7a:92:37:e5:c5:51:ad:eb:d8:3e:cf:f0: a6:31:ec:cf:9d:02:06:b5:c3:ad:4c:9f:a4:87:9a:33:fe:28: dc:74:b5:d1:a7:c3:b8:3a:10:f9:10:a5:bb:7e:42:05:27:0e: cb:eb:a1:02:2c:bf:4c:e3:8b:2e:1f:8e:f5:27:41:af:99:93: 0e:08:6d:9b:b6:e8:06:0a:8c:51:83:a3:a3:21:91:53:59:05: ad:27:e6:b6:9b:d3:7f:c2:ea:36:f8:5f:1c:57:4a:25:e0:57: ac:50:51:8b:75:fb:ae:31:5b:18:46:ef:3a:1b:76:d0:ab:44: 2b:39:4d:d0:47:74:fd:cc:04:15:b6:db:3b:93:5b:63:1d:55: eb:60:9e:ac:30:f4:d3:1c:ad:95:54:fd:51:78:5a:3a:31:c7: ec:a1:bd:37:30:1f:81:97:ab:69:ef:b3:8b:b9:08:a7:4e:b4: b1:7f:ab:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0mVJ4Rn624xJQcy1NIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGU4NWM2ODRmY2ZmODNlYzQxNDhhYjVmNmY2N2NkMTUw NGY5M2QwHhcNMjUxMjIwMTYwMjEzWhcNMjUxMjIxMTYwMjEzWjAzMTEwLwYDVQQD EygzMWIxYmQxYWE3M2NhMWM0YzJlZDM2N2FkYTQ2ZGZiYzMyODJkZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB8hvefeplXMVWRaKbpyVLp66OY/ 3+Opz7yMj7e25ah4P9/EM0Q7+9MjoL2F4KiYAAfPIJlHjDMP8ANH3RuSMDG8HuiK kmU+28cyYZShF2Co2rD8uUAutpcxyVvMTYi9YSKoRfXH+hlsjykdNUZBKoBVD/Ia CkuI4+pxIZAfi5DL/VEfLRUqvwn5fdyXXWvV+hBOuPUmRaYxgRnRGh/qfSZ8kyPC jX1jRHQcJbdbgHciQAsjymwv4QE0cY6Nsaminp2eZ9W15AIHLA+VqOoIr0fBhEL+ OOvrkEIdBaihs7F8pr7DEh63KmzdvyigS2ng/dE2mOvuZKr3lczhbxkYOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGxvRqnPKHEwu02etpG37wygt9HMB8GA1UdIwQY MBaAFJfehcaE/P+D7EFIq19vZ80VBPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjkt NTAzMGQwYWU2ZWJjLzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjktNTAzMGQwYWU2ZWJj LzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrhJqBwo BDFD2nBimNFpN2bvziZrc003G7C9gjBUXc3O97O99wfdFXW5L7av7DWb8uTPCQMF ipZcFFGQRnp1GDI5H6DrZw7qPutsp/MhepI35cVRrevYPs/wpjHsz50CBrXDrUyf pIeaM/4o3HS10afDuDoQ+RClu35CBScOy+uhAiy/TOOLLh+O9SdBr5mTDghtm7bo BgqMUYOjoyGRU1kFrSfmtpvTf8LqNvhfHFdKJeBXrFBRi3X7rjFbGEbvOht20KtE KzlN0Ed0/cwEFbbbO5NbYx1V62CerDD00xytlVT9UXhaOjHH7KG9NzAfgZerae+z i7kIp060sX+r/A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:04:42 2025 by rpki-client