This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: jt29ylIpB35KmC8LDY4jpdyLjgDCoBxiNRf6XHceXUk= Subject key identifier: 10:AB:65:F6:01:1F:50:25:DB:84:AB:9C:03:38:0F:BA:24:CF:38:BC Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019B44A62258811EA585939BE64BB9F9B18F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 170D Signing time: Mon 22 Dec 2025 06:01:36 +0000 Manifest this update: Mon 22 Dec 2025 06:01:36 +0000 Manifest next update: Tue 23 Dec 2025 06:01:36 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: CUZz/iCL6+kJjKfRzyG40ApP9+Bzlea2tRcIUSKlBDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:22:58:81:1e:a5:85:93:9b:e6:4b:b9:f9:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 22 06:01:36 2025 GMT Not After : Dec 23 06:01:36 2025 GMT Subject: CN=10ab65f6011f5025db84ab9c03380fba24cf38bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:5d:42:c3:f9:e7:57:e8:89:ed:b0:f3:3d: 48:6c:48:6a:40:6d:72:8c:9c:69:7e:4b:df:02:59: 22:9e:1c:7b:92:99:ec:78:81:f6:29:15:33:12:83: a4:21:b6:fb:b1:ad:72:58:3f:14:36:c8:3e:b9:44: be:61:ec:95:b5:9a:65:51:c3:f6:1c:7b:24:9d:3e: d0:e9:e9:b2:33:11:2a:11:76:ae:cd:e5:6c:60:9e: 4f:ff:6d:1a:a4:c4:3e:5c:40:7d:0f:9b:cd:a1:a6: 21:cd:97:01:a4:0b:40:ca:5b:64:da:c4:1b:9b:c6: 94:38:c9:3a:81:0f:4c:a6:bd:1e:de:94:2d:2f:0b: e8:27:34:a0:2d:a8:6f:86:7e:bf:52:3c:69:9b:96: 8d:27:97:37:5f:9a:f4:e6:d6:6c:9f:bf:3c:ac:6b: fa:e8:23:2e:af:12:e4:2b:9b:7d:d3:9a:cc:0f:fb: 0c:82:63:90:df:eb:05:ac:df:89:ca:56:82:69:a9: f5:df:53:62:20:14:99:5e:7c:12:c4:d2:6c:59:a9: 75:47:e7:d2:e9:9d:05:b3:f3:2a:a5:35:2e:b9:bf: c8:45:b6:5a:98:b4:ca:75:26:a6:38:a2:09:db:29: 31:0f:c8:8a:00:57:ca:8a:2f:a4:e9:ee:8b:00:14: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:65:F6:01:1F:50:25:DB:84:AB:9C:03:38:0F:BA:24:CF:38:BC X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:be:75:4f:97:78:e9:01:18:c9:3d:ed:bb:57:db:d9:ae:0c: c3:1f:30:65:24:fe:92:3b:29:ae:52:47:d3:c9:38:9c:fe:da: 5d:81:d2:7b:ed:cf:31:ba:b5:dd:f4:e8:5c:83:8e:09:b0:e7: f5:85:5a:b4:f8:da:fb:11:7b:63:9a:af:7e:49:96:71:8e:25: 77:7a:dd:14:67:53:7e:db:5b:1f:a1:55:5e:14:f8:7e:ff:64: 96:01:59:d2:53:c4:68:f3:1b:02:ad:b2:17:44:2c:37:fd:ba: 8d:d6:0b:c9:fa:fc:9a:15:a5:63:45:b1:88:13:15:fd:bc:1e: 2c:2b:3e:46:46:f6:53:92:3e:b1:19:5e:60:ca:28:6f:de:1a: c5:12:cc:b8:48:1b:c1:1a:30:ae:1a:d7:c7:b5:48:9b:55:27: bc:ff:3a:5e:62:41:7f:48:4c:f5:a4:d3:a5:44:c8:46:ff:8b: 28:d2:21:1e:ce:bf:8a:31:27:51:f3:3e:12:dd:f3:d3:0f:9b: 79:3d:97:33:7e:72:72:74:57:01:f3:1d:aa:99:fe:d7:5b:ad: b0:94:66:b4:b3:87:7f:53:99:d0:dd:e5:ed:82:6c:8c:24:4d: fe:c7:5e:32:77:61:72:fb:fd:34:14:48:f7:d0:a4:41:64:2f: 83:cf:38:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpiJYgR6lhZOb5ku5+bGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjIyMDYwMTM2WhcNMjUxMjIzMDYwMTM2WjAzMTEwLwYDVQQD EygxMGFiNjVmNjAxMWY1MDI1ZGI4NGFiOWMwMzM4MGZiYTI0Y2YzOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M1dQsP551foie2w8z1IbEhqQG1y jJxpfkvfAlkinhx7kpnseIH2KRUzEoOkIbb7sa1yWD8UNsg+uUS+YeyVtZplUcP2 HHsknT7Q6emyMxEqEXauzeVsYJ5P/20apMQ+XEB9D5vNoaYhzZcBpAtAyltk2sQb m8aUOMk6gQ9Mpr0e3pQtLwvoJzSgLahvhn6/Ujxpm5aNJ5c3X5r05tZsn788rGv6 6CMurxLkK5t905rMD/sMgmOQ3+sFrN+JylaCaan131NiIBSZXnwSxNJsWal1R+fS 6Z0Fs/MqpTUuub/IRbZamLTKdSamOKIJ2ykxD8iKAFfKii+k6e6LABSJqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCrZfYBH1Al24SrnAM4D7okzzi8MB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA751T5d4 6QEYyT3tu1fb2a4Mwx8wZST+kjsprlJH08k4nP7aXYHSe+3PMbq13fToXIOOCbDn 9YVatPja+xF7Y5qvfkmWcY4ld3rdFGdTfttbH6FVXhT4fv9klgFZ0lPEaPMbAq2y F0QsN/26jdYLyfr8mhWlY0WxiBMV/bweLCs+Rkb2U5I+sRleYMoob94axRLMuEgb wRowrhrXx7VIm1UnvP86XmJBf0hM9aTTpUTIRv+LKNIhHs6/ijEnUfM+Et3z0w+b eT2XM35ycnRXAfMdqpn+11utsJRmtLOHf1OZ0N3l7YJsjCRN/sdeMndhcvv9NBRI 99CkQWQvg8840A== -----END CERTIFICATE-----Generated at Mon Dec 22 10:41:34 2025 by rpki-client