This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json) Hash identifier: H0bBqrM3dDdO+3u5cBBcnYfk1sapueZJsCMHZSldUIw= Subject key identifier: 7E:3D:5F:DF:60:62:C1:E6:16:EF:DE:C2:D1:60:DE:AF:F0:CB:E9:95 Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def Certificate serial: 019B3C7DCD44039E4930B3D78A1233F26609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:00:35 +0000 Manifest this update: Sat 20 Dec 2025 16:00:35 +0000 Manifest next update: Sun 21 Dec 2025 16:00:35 +0000 Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: E/jy3NSdg36COl1x2/KCdBng/656y0Nvj3X1ptfrs58=) 2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cd:44:03:9e:49:30:b3:d7:8a:12:33:f2:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def Validity Not Before: Dec 20 16:00:35 2025 GMT Not After : Dec 21 16:00:35 2025 GMT Subject: CN=7e3d5fdf6062c1e616efdec2d160deaff0cbe995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:e5:b6:04:37:cf:65:99:e1:4c:c3:5e:33: ff:3f:17:0b:0c:69:cc:7d:dd:da:5a:c2:5a:d2:38: fa:1f:7c:4b:fe:df:f5:94:08:6a:c7:e6:1e:73:5a: dd:c9:da:5c:38:b7:5a:28:e4:b6:b6:57:59:8a:5a: 12:30:e1:c7:e5:30:7a:81:65:a5:d8:11:09:fd:7e: b3:bc:c5:6e:fb:1a:d5:10:71:b4:b5:78:77:08:fe: 3d:e1:90:3c:be:95:94:3c:f5:ae:2d:91:9a:32:ab: a5:12:e2:9c:9f:42:30:9d:93:11:7d:f1:1e:c1:86: 4f:0e:a2:75:8d:5f:30:78:e8:a0:ea:6f:c8:00:af: 64:11:09:58:4f:93:34:22:31:75:3e:42:58:1d:89: 48:85:a2:a8:f4:31:cd:25:50:68:54:39:32:ce:e7: ee:6e:08:75:e1:f7:ab:6e:4a:f9:8a:77:0a:45:55: 70:14:89:23:fb:38:73:b7:e2:45:be:fe:30:95:95: eb:c6:8b:a6:da:b0:e4:b0:91:5a:b4:29:a1:b4:a4: dd:cc:6c:0e:c9:3f:04:b8:af:7d:fb:75:3d:dd:95: 28:e0:6f:2e:76:62:1d:3d:b4:1a:36:73:14:c7:b7: ab:6b:45:e6:8f:91:1c:01:ae:9c:7b:8b:f9:41:34: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3D:5F:DF:60:62:C1:E6:16:EF:DE:C2:D1:60:DE:AF:F0:CB:E9:95 X509v3 Authority Key Identifier: keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5f:bd:c9:aa:3c:a0:25:2f:dd:93:87:eb:b4:0f:00:4c:c6: b1:96:0c:0e:c4:00:2f:06:91:02:f5:89:54:cf:32:79:6b:ed: 2b:3f:b0:37:e6:29:bc:58:bd:d4:9e:cf:23:68:c3:86:d0:4a: bb:86:34:12:7b:a4:e1:95:0a:eb:57:04:cf:0f:17:f3:20:a7: 1b:d3:15:5a:c3:71:a3:ad:a7:d7:73:42:b7:e1:c6:96:53:58: 01:6a:5c:4a:1f:6e:0f:44:b1:97:83:5b:18:12:fb:f6:22:c3: 54:6b:18:00:ce:ee:b2:96:86:ed:0d:dc:e0:64:d6:1a:3b:61: 25:d6:cf:7c:88:83:91:c0:03:12:11:9a:80:01:5c:57:b7:74: 06:8b:73:fc:f8:d7:e9:88:34:11:c8:27:89:ab:b9:7e:72:d9: 87:1a:f7:4b:67:42:33:55:5f:80:ae:a3:e5:8c:eb:8e:38:d8: 48:ab:9f:e9:1d:38:0f:98:a7:03:f1:58:7e:bf:d9:46:c1:3c: bf:96:f3:08:38:d6:14:dd:e4:04:1a:01:37:16:92:1b:64:fd: 53:2c:69:f4:83:00:ad:62:05:88:af:b6:a7:a5:3a:46:c8:23: 1f:24:38:2d:43:1c:a9:55:f6:6a:0b:55:7e:9c:45:8d:93:5d: 04:80:06:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fc1EA55JMLPXihIz8mYJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi YjFkZWYwHhcNMjUxMjIwMTYwMDM1WhcNMjUxMjIxMTYwMDM1WjAzMTEwLwYDVQQD Eyg3ZTNkNWZkZjYwNjJjMWU2MTZlZmRlYzJkMTYwZGVhZmYwY2JlOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5TltgQ3z2WZ4UzDXjP/PxcLDGnM fd3aWsJa0jj6H3xL/t/1lAhqx+Yec1rdydpcOLdaKOS2tldZiloSMOHH5TB6gWWl 2BEJ/X6zvMVu+xrVEHG0tXh3CP494ZA8vpWUPPWuLZGaMqulEuKcn0IwnZMRffEe wYZPDqJ1jV8weOig6m/IAK9kEQlYT5M0IjF1PkJYHYlIhaKo9DHNJVBoVDkyzufu bgh14ferbkr5incKRVVwFIkj+zhzt+JFvv4wlZXrxoum2rDksJFatCmhtKTdzGwO yT8EuK99+3U93ZUo4G8udmIdPbQaNnMUx7era0Xmj5EcAa6ce4v5QTTZ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH49X99gYsHmFu/ewtFg3q/wy+mVMB8GA1UdIwQY MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl+9yao8 oCUv3ZOH67QPAEzGsZYMDsQALwaRAvWJVM8yeWvtKz+wN+YpvFi91J7PI2jDhtBK u4Y0Enuk4ZUK61cEzw8X8yCnG9MVWsNxo62n13NCt+HGllNYAWpcSh9uD0Sxl4Nb GBL79iLDVGsYAM7uspaG7Q3c4GTWGjthJdbPfIiDkcADEhGagAFcV7d0Botz/PjX 6Yg0Ecgniau5fnLZhxr3S2dCM1VfgK6j5YzrjjjYSKuf6R04D5inA/FYfr/ZRsE8 v5bzCDjWFN3kBBoBNxaSG2T9Uyxp9IMArWIFiK+2p6U6RsgjHyQ4LUMcqVX2agtV fpxFjZNdBIAGqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:57 2025 by rpki-client