This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: 61QmG1DyYMAC0nQUhDl6LDi9Zkwv5gvc/9umGl7RBRs= Subject key identifier: 7C:75:3C:A5:40:30:BA:22:20:9E:45:B7:2E:44:5A:02:6F:2A:C5:5B Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019B3AFE3E8B698DB66AB840CC46FF5D2577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 1708 Signing time: Sat 20 Dec 2025 09:01:39 +0000 Manifest this update: Sat 20 Dec 2025 09:01:39 +0000 Manifest next update: Sun 21 Dec 2025 09:01:39 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: oK+u+c9Q070X94R1RY1WiZKzYmwo0fo5s34OIBqI+n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3e:8b:69:8d:b6:6a:b8:40:cc:46:ff:5d:25:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 20 09:01:39 2025 GMT Not After : Dec 21 09:01:39 2025 GMT Subject: CN=7c753ca54030ba22209e45b72e445a026f2ac55b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:6d:1b:a1:16:7e:dd:01:e9:11:f5:ab:6e: 89:ce:39:f6:26:6e:50:a5:f7:8b:d7:9f:c8:71:86: 5d:cf:79:df:64:80:08:4d:0d:2e:41:cc:97:63:cc: 82:1a:a7:14:60:90:94:31:7c:54:7a:a3:05:63:a1: 6c:ae:4f:e4:ef:70:f0:1b:a5:9b:fb:3d:52:64:86: 60:4d:c8:93:76:3b:70:c0:84:50:bb:96:f1:85:ea: 4e:b2:ee:a9:1f:c9:80:06:9b:1f:6e:eb:32:0b:46: f7:95:53:88:66:99:d2:a6:2b:1b:50:65:b7:59:aa: 68:df:eb:5a:0e:dc:41:29:df:88:97:25:b8:2d:39: 05:2c:ff:13:8d:f2:1e:81:ac:db:80:94:13:13:11: d2:22:30:e9:c5:3a:cf:69:ff:90:86:43:a1:2f:2e: 45:3d:20:8e:b5:db:5e:a1:4d:21:31:5e:70:63:79: 96:0c:fa:23:e3:8e:f9:98:43:5b:eb:ae:cc:ec:c6: 96:e1:d7:81:9b:2b:95:e4:bd:f9:d1:62:3b:a8:52: 6a:49:40:11:27:62:48:11:9d:3d:fd:8a:4c:7e:4a: 91:94:84:aa:a0:be:2e:54:1a:b1:bf:76:30:39:b9: ce:43:a2:4e:d0:36:cc:58:9f:16:87:5d:5b:06:35: ee:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:75:3C:A5:40:30:BA:22:20:9E:45:B7:2E:44:5A:02:6F:2A:C5:5B X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:07:09:c6:38:c0:9a:4f:b7:c1:89:a5:0c:54:69:1e:61:cd: e4:7b:7c:1b:ce:cc:c4:c5:fe:6b:9a:7b:ee:78:a5:2d:c5:0a: 9a:32:cf:c5:fd:9b:46:f7:61:2c:b6:a8:2e:31:9e:b5:39:07: 4f:93:23:62:f6:43:c2:14:d4:b2:e5:d4:4b:a1:66:e8:ca:7e: 49:1a:5f:c2:cc:c6:98:13:25:2e:7d:ff:ee:82:29:8f:07:f3: 03:7d:ab:14:30:cf:02:cb:42:69:51:81:ab:54:d0:83:0c:55: 4f:73:03:25:ba:41:6e:66:33:3e:d6:23:52:bf:45:7e:7d:03: 27:81:e7:de:50:11:a3:a6:eb:cb:05:1b:47:eb:f2:8a:13:13: d7:c7:f4:c8:54:33:09:a1:bb:05:57:c2:06:d1:44:bd:9d:49: 64:a2:0d:bb:0d:a3:f7:17:d7:3e:d6:a0:9d:c5:2a:f3:0d:18: aa:db:e6:da:1f:7e:85:26:c0:03:9f:25:c0:da:4d:1c:99:9d: 81:49:fc:08:ee:bd:96:38:40:09:6f:06:14:3f:4f:e6:33:c7: dd:a0:46:a8:39:9a:ee:3d:ab:ef:d4:aa:f9:3f:c4:5d:97:72: 90:1d:0a:16:ee:ca:11:03:de:22:d0:71:5c:f4:8c:75:69:3a: 7b:99:92:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/j6LaY22arhAzEb/XSV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjIwMDkwMTM5WhcNMjUxMjIxMDkwMTM5WjAzMTEwLwYDVQQD Eyg3Yzc1M2NhNTQwMzBiYTIyMjA5ZTQ1YjcyZTQ0NWEwMjZmMmFjNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrltG6EWft0B6RH1q26Jzjn2Jm5Q pfeL15/IcYZdz3nfZIAITQ0uQcyXY8yCGqcUYJCUMXxUeqMFY6Fsrk/k73DwG6Wb +z1SZIZgTciTdjtwwIRQu5bxhepOsu6pH8mABpsfbusyC0b3lVOIZpnSpisbUGW3 Wapo3+taDtxBKd+IlyW4LTkFLP8TjfIegazbgJQTExHSIjDpxTrPaf+QhkOhLy5F PSCOtdteoU0hMV5wY3mWDPoj4475mENb667M7MaW4deBmyuV5L350WI7qFJqSUAR J2JIEZ09/YpMfkqRlISqoL4uVBqxv3YwObnOQ6JO0DbMWJ8Wh11bBjXuAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHx1PKVAMLoiIJ5Fty5EWgJvKsVbMB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQcJxjjA mk+3wYmlDFRpHmHN5Ht8G87MxMX+a5p77nilLcUKmjLPxf2bRvdhLLaoLjGetTkH T5MjYvZDwhTUsuXUS6Fm6Mp+SRpfwszGmBMlLn3/7oIpjwfzA32rFDDPAstCaVGB q1TQgwxVT3MDJbpBbmYzPtYjUr9Ffn0DJ4Hn3lARo6brywUbR+vyihMT18f0yFQz CaG7BVfCBtFEvZ1JZKINuw2j9xfXPtagncUq8w0Yqtvm2h9+hSbAA58lwNpNHJmd gUn8CO69ljhACW8GFD9P5jPH3aBGqDma7j2r79Sq+T/EXZdykB0KFu7KEQPeItBx XPSMdWk6e5mSuQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:16:51 2025 by rpki-client