This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json) Hash identifier: j7iYBP8y6V9gdb00ixZmJZdBzURUG+msu3c2blgHcJU= Subject key identifier: 18:AE:99:39:29:AA:DD:F9:E1:E5:49:E9:10:AC:7A:88:E1:74:FB:46 Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Certificate serial: 019B38A18AE2A2E4209F2525510B89424090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft Manifest number: 129D Signing time: Fri 19 Dec 2025 22:01:09 +0000 Manifest this update: Fri 19 Dec 2025 22:01:09 +0000 Manifest next update: Sat 20 Dec 2025 22:01:09 +0000 Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=) 2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: GBkVikt6woU7EJRJfEJshZgXn3d5I7nJq8zvt2s1s14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:8a:e2:a2:e4:20:9f:25:25:51:0b:89:42:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Validity Not Before: Dec 19 22:01:09 2025 GMT Not After : Dec 20 22:01:09 2025 GMT Subject: CN=18ae993929aaddf9e1e549e910ac7a88e174fb46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:0d:0b:54:d0:7c:b6:52:7c:98:73:30:f6: 55:10:69:a2:e1:0a:77:20:38:66:5b:06:4d:c5:8e: 9a:1a:58:c8:93:bf:d2:7a:8d:1c:00:37:3a:f3:f3: c0:83:2e:43:f7:16:24:88:c9:02:91:d2:6b:e3:7b: 33:0a:f7:99:6e:b5:85:82:d7:ff:ab:c7:63:8d:b0: 1c:f5:95:8f:a2:6d:c4:28:f4:ee:62:89:3c:67:05: 50:c6:a8:bd:30:a6:7b:1e:96:e5:49:f3:03:05:1c: 7d:d8:2e:ff:ef:37:c5:47:94:af:76:d3:5b:d5:1d: e6:fc:d4:0d:b2:78:f0:be:19:0a:f4:98:e3:1b:8b: e8:32:7a:3e:4f:01:22:3a:ea:ad:4d:79:4d:a1:9f: cb:16:db:4b:3f:c4:f8:c7:b2:f6:b4:cf:36:a1:84: ea:5e:62:9f:99:d5:5e:0e:bf:3f:c4:0c:e5:b1:3f: 0b:4e:ba:45:8d:b9:e4:82:e6:a7:07:09:17:0e:34: b2:1d:2c:83:26:35:af:d4:f9:74:85:fa:0e:67:98: d8:f2:64:90:d8:9d:bd:b4:95:4d:9c:4b:14:d8:b1: 75:fd:69:37:3b:dd:1d:73:00:3e:d0:4b:84:62:27: c5:e3:8b:69:53:c1:fe:b4:9e:cb:1a:90:0e:5c:26: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:99:39:29:AA:DD:F9:E1:E5:49:E9:10:AC:7A:88:E1:74:FB:46 X509v3 Authority Key Identifier: keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:65:50:d5:84:c2:79:64:08:48:f6:ed:99:72:99:12:5d:67: 5b:c8:f2:37:5d:c4:25:58:4c:01:03:54:e6:15:1f:08:89:99: fc:5a:5c:42:aa:fa:a4:5d:41:92:23:f0:a5:d5:9f:fd:68:7c: 6e:ef:a5:96:b8:92:b2:9e:56:e8:7e:ad:08:70:28:dc:e7:e6: 1e:7e:2e:cf:de:29:23:e8:2d:81:54:8f:38:11:75:2f:41:32: 6a:02:26:0d:49:03:95:2c:9a:e7:bc:75:11:5b:af:d9:e0:2a: f0:ee:8f:01:f6:03:ce:ce:99:34:1b:f3:ac:ba:14:5d:5d:12: 2b:dc:bd:50:c8:3f:6f:a2:5b:1b:6c:d6:ec:a3:23:2c:43:d3: af:c9:48:4b:14:83:41:2a:50:c3:29:ba:45:29:54:fb:03:20: 1f:fe:c9:33:13:ba:da:75:f1:4d:e0:61:ce:16:0a:d8:23:ca: 3c:5d:38:e4:a2:29:31:45:4d:ee:c4:a5:ea:cd:de:a2:99:3b: a2:48:15:3b:04:29:b8:95:ff:0e:55:ff:0e:0f:61:ad:bb:3a: 36:cc:dd:13:4a:71:a1:d1:97:51:b9:29:a3:5a:98:38:68:50: 3f:83:54:89:78:d9:6a:1c:c6:1f:f9:98:f2:96:f9:71:cf:a3: 4d:f0:ab:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oYriouQgnyUlUQuJQkCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGU4NWM2ODRmY2ZmODNlYzQxNDhhYjVmNmY2N2NkMTUw NGY5M2QwHhcNMjUxMjE5MjIwMTA5WhcNMjUxMjIwMjIwMTA5WjAzMTEwLwYDVQQD EygxOGFlOTkzOTI5YWFkZGY5ZTFlNTQ5ZTkxMGFjN2E4OGUxNzRmYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm78NC1TQfLZSfJhzMPZVEGmi4Qp3 IDhmWwZNxY6aGljIk7/Seo0cADc68/PAgy5D9xYkiMkCkdJr43szCveZbrWFgtf/ q8djjbAc9ZWPom3EKPTuYok8ZwVQxqi9MKZ7HpblSfMDBRx92C7/7zfFR5SvdtNb 1R3m/NQNsnjwvhkK9JjjG4voMno+TwEiOuqtTXlNoZ/LFttLP8T4x7L2tM82oYTq XmKfmdVeDr8/xAzlsT8LTrpFjbnkguanBwkXDjSyHSyDJjWv1Pl0hfoOZ5jY8mSQ 2J29tJVNnEsU2LF1/Wk3O90dcwA+0EuEYifF44tpU8H+tJ7LGpAOXCaCpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiumTkpqt354eVJ6RCseojhdPtGMB8GA1UdIwQY MBaAFJfehcaE/P+D7EFIq19vZ80VBPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjkt NTAzMGQwYWU2ZWJjLzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjktNTAzMGQwYWU2ZWJj LzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWVQ1YTC eWQISPbtmXKZEl1nW8jyN13EJVhMAQNU5hUfCImZ/FpcQqr6pF1BkiPwpdWf/Wh8 bu+llriSsp5W6H6tCHAo3OfmHn4uz94pI+gtgVSPOBF1L0EyagImDUkDlSya57x1 EVuv2eAq8O6PAfYDzs6ZNBvzrLoUXV0SK9y9UMg/b6JbG2zW7KMjLEPTr8lISxSD QSpQwym6RSlU+wMgH/7JMxO62nXxTeBhzhYK2CPKPF045KIpMUVN7sSl6s3eopk7 okgVOwQpuJX/DlX/Dg9hrbs6NszdE0pxodGXUbkpo1qYOGhQP4NUiXjZahzGH/mY 8pb5cc+jTfCryg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:24 2025 by rpki-client