This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: S6S0YuteYWzWGe+pL2F9eAXwYHmDA7F3xuBAyMVBHOs= Subject key identifier: F6:B3:6A:1C:A4:B5:42:E7:75:42:DD:CC:E8:C9:4C:42:78:9B:92:DD Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019B503CA652D16E729E8E1AEA6FFBDC6266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 1713 Signing time: Wed 24 Dec 2025 12:01:50 +0000 Manifest this update: Wed 24 Dec 2025 12:01:50 +0000 Manifest next update: Thu 25 Dec 2025 12:01:50 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: UCu1B+0AxYECQkSUBu6oOTeUCKTs5QfcNPOTT4oyPfg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:a6:52:d1:6e:72:9e:8e:1a:ea:6f:fb:dc:62:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 24 12:01:50 2025 GMT Not After : Dec 25 12:01:50 2025 GMT Subject: CN=f6b36a1ca4b542e77542ddcce8c94c42789b92dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:9b:37:40:be:00:e3:87:69:ab:2e:d9:c9: b4:32:69:1e:f9:a3:72:27:4c:93:d6:ea:ff:67:1d: 18:a2:d6:04:46:dc:7d:73:88:cd:b0:53:d5:a9:44: db:e2:4b:26:e9:75:40:5a:25:97:0c:b9:91:bf:41: 92:56:d4:e5:50:9c:b5:c3:af:7e:0a:ed:17:9b:07: 94:17:7e:ff:37:86:f3:b3:a8:df:cb:2d:ce:e1:38: 6b:00:f3:0f:c8:57:f9:3a:b8:6d:77:78:3d:3a:ec: 05:87:b3:b1:cc:ed:b8:04:e2:f9:63:a2:d6:62:80: e9:66:46:74:fd:b8:09:e7:7a:4b:29:46:03:b7:3d: 74:2b:17:5f:63:26:3f:27:a1:f8:87:f1:a7:5c:d0: cb:2f:a3:84:fd:2e:ae:c8:f0:43:1c:02:bb:1b:62: d1:01:ee:5d:12:0f:7f:48:d3:2b:24:8c:f9:4b:3c: 78:5c:ad:d2:62:76:eb:7c:f5:07:ce:df:05:4d:cd: e6:89:cc:c8:40:76:3f:d1:65:9d:d9:34:24:83:15: e8:78:1c:ed:ba:fa:b8:6b:96:10:85:0e:c3:da:3a: f1:0d:05:9f:cd:39:70:2e:86:38:90:bb:72:47:5b: 68:33:51:b4:07:0c:51:5c:a7:d6:25:66:83:74:56: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B3:6A:1C:A4:B5:42:E7:75:42:DD:CC:E8:C9:4C:42:78:9B:92:DD X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:74:b8:a6:d1:83:60:2a:ae:cd:33:9a:df:e2:2c:b3:cf:8f: 0a:78:02:a3:55:44:0b:88:14:94:b8:84:ad:c8:6a:51:fc:0c: 56:98:45:9c:03:12:c7:be:d3:49:d0:13:da:1b:a5:e2:1a:f0: 88:83:e3:fa:8e:06:82:45:7f:78:db:2d:db:37:52:fb:0f:fe: 3b:61:a9:34:f4:06:ac:a1:d3:b5:44:91:c1:26:77:31:30:86: a5:29:be:8d:ab:0f:dc:d9:b9:9f:7a:c8:1b:8a:27:51:95:cf: 53:eb:33:69:ce:15:12:da:e1:5a:e1:f3:83:50:8c:e3:cd:9e: eb:2e:9c:11:c2:e9:1f:cd:4e:43:c8:35:d2:1c:5b:0b:da:65: 76:7d:c6:c8:a4:b1:70:c2:9c:2f:84:02:e6:1a:8c:2a:07:e6: 4c:8f:4d:7c:4d:e8:d5:f6:79:e1:f2:86:56:4e:0f:82:4a:c2: e2:9a:b3:46:95:f7:95:06:60:89:74:ab:bd:7f:8d:f9:cd:8a: b8:a1:76:ff:51:ce:44:a9:99:d5:a8:7f:b7:ae:4b:e7:79:de: 17:64:2e:f5:c4:39:49:d3:6d:ad:7c:96:4d:4e:8b:97:c5:90: 08:62:77:a0:e9:41:ef:20:c3:42:93:63:49:2a:c9:2d:be:48: 6b:3d:77:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPKZS0W5yno4a6m/73GJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjI0MTIwMTUwWhcNMjUxMjI1MTIwMTUwWjAzMTEwLwYDVQQD EyhmNmIzNmExY2E0YjU0MmU3NzU0MmRkY2NlOGM5NGM0Mjc4OWI5MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRKbN0C+AOOHaasu2cm0Mmke+aNy J0yT1ur/Zx0YotYERtx9c4jNsFPVqUTb4ksm6XVAWiWXDLmRv0GSVtTlUJy1w69+ Cu0XmweUF37/N4bzs6jfyy3O4ThrAPMPyFf5Orhtd3g9OuwFh7OxzO24BOL5Y6LW YoDpZkZ0/bgJ53pLKUYDtz10KxdfYyY/J6H4h/GnXNDLL6OE/S6uyPBDHAK7G2LR Ae5dEg9/SNMrJIz5Szx4XK3SYnbrfPUHzt8FTc3miczIQHY/0WWd2TQkgxXoeBzt uvq4a5YQhQ7D2jrxDQWfzTlwLoY4kLtyR1toM1G0BwxRXKfWJWaDdFagIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPazahyktULndULdzOjJTEJ4m5LdMB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnS4ptGD YCquzTOa3+Iss8+PCngCo1VEC4gUlLiErchqUfwMVphFnAMSx77TSdAT2hul4hrw iIPj+o4GgkV/eNst2zdS+w/+O2GpNPQGrKHTtUSRwSZ3MTCGpSm+jasP3Nm5n3rI G4onUZXPU+szac4VEtrhWuHzg1CM482e6y6cEcLpH81OQ8g10hxbC9pldn3GyKSx cMKcL4QC5hqMKgfmTI9NfE3o1fZ54fKGVk4PgkrC4pqzRpX3lQZgiXSrvX+N+c2K uKF2/1HORKmZ1ah/t65L53neF2Qu9cQ5SdNtrXyWTU6Ll8WQCGJ3oOlB7yDDQpNj SSrJLb5Iaz13vA== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:31 2025 by rpki-client