This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json) Hash identifier: yxm+++0xU0ZFjRGrkSaGNeLvxkKyxP0DjiXHJ+QLtcM= Subject key identifier: BC:60:3A:68:F5:45:33:AC:A1:51:3D:B7:16:01:3E:0C:4E:89:50:CA Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Certificate serial: 019B3BD911AF57608EF52354FFFA15DC22E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 13:00:40 +0000 Manifest this update: Sat 20 Dec 2025 13:00:40 +0000 Manifest next update: Sun 21 Dec 2025 13:00:40 +0000 Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=) 2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: GRnubhjciDmpnfIy+mGSIasBqZp5XjXITYzLbdU/b/g=) 3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:11:af:57:60:8e:f5:23:54:ff:fa:15:dc:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Validity Not Before: Dec 20 13:00:40 2025 GMT Not After : Dec 21 13:00:40 2025 GMT Subject: CN=bc603a68f54533aca1513db716013e0c4e8950ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:00:10:a0:2d:57:c8:82:44:49:96:78:6a: 60:63:7e:6c:75:2f:79:a7:2f:02:01:e0:07:12:61: 4c:7a:df:13:93:22:1d:84:31:c4:bd:b0:69:5f:17: 18:69:69:7d:c5:25:2a:47:48:30:1a:c7:34:a9:39: 88:74:bb:7c:cf:ee:95:85:9d:7e:94:a9:0f:20:6b: 99:22:73:39:e8:b0:c8:83:76:37:98:b7:35:ef:1e: c4:1e:12:8b:cc:d9:17:54:68:db:95:f5:d0:57:7a: 42:7b:d7:ad:27:0e:ef:1b:b1:1e:a9:4c:9e:18:ad: 3c:c5:3f:91:82:57:9c:d5:b4:03:94:ef:65:90:d3: 99:59:8e:ee:1e:26:a0:fe:2d:45:86:22:95:f7:55: da:d8:95:4c:23:e0:d1:20:ce:9c:ae:66:bd:93:0a: cb:a6:ca:2d:f8:4b:a5:f2:89:57:b6:e7:96:40:1a: 93:ab:6c:8d:d7:7d:94:74:4e:89:42:ff:b2:ff:83: c8:59:89:66:66:1a:9c:d7:62:00:60:96:77:58:0a: 8e:95:38:d7:7b:3b:66:8f:1e:e6:21:2a:11:70:04: b8:44:ac:3f:da:53:db:78:5d:2d:93:49:c1:c7:4a: c3:24:fb:72:bd:a2:62:f2:c4:8b:f2:c7:df:67:14: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:3A:68:F5:45:33:AC:A1:51:3D:B7:16:01:3E:0C:4E:89:50:CA X509v3 Authority Key Identifier: keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c7:84:fc:00:53:af:c9:36:0b:79:be:34:0d:e3:8d:7f:b0: 4c:22:4c:31:65:bb:83:93:dd:83:3e:8f:8d:22:33:da:b5:36: 17:62:f9:5a:66:3f:fb:e8:30:74:a4:3b:6a:a1:ff:23:bf:cc: 2a:ae:d8:23:10:e6:96:c5:a2:3a:2a:98:8c:46:97:85:1a:dc: 68:02:bb:7e:32:a9:7d:e3:67:5b:3b:d7:51:94:10:c5:ce:f1: c9:5e:62:c0:17:8c:06:c6:0f:13:06:01:44:84:ae:d8:3d:0b: 15:88:6e:ae:57:cd:96:da:2b:85:c0:ce:d8:e8:c0:8e:fd:e9: c1:8d:58:af:d0:eb:e6:60:ef:b0:9a:a0:8d:63:56:74:81:b5: fd:81:66:d6:67:e1:dd:74:ec:02:23:c5:89:63:79:a8:9b:62: 20:b5:81:57:7b:d6:5e:25:b3:74:21:9b:eb:99:98:96:6e:c1: 2f:90:1c:50:c2:21:00:eb:8d:98:d2:91:05:0d:91:0b:19:e0: b3:c1:ee:1c:29:9b:90:bc:ff:a3:41:ae:af:1f:ad:7d:0b:e7: 0b:fa:99:6a:b0:bc:99:93:e1:fd:90:a3:ac:64:e7:b3:74:30: e3:d6:af:2c:7d:ae:83:80:9a:56:fa:34:d2:da:00:cd:0c:66: be:a9:c1:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RGvV2CO9SNU//oV3CLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5 NDM1NTgwHhcNMjUxMjIwMTMwMDQwWhcNMjUxMjIxMTMwMDQwWjAzMTEwLwYDVQQD EyhiYzYwM2E2OGY1NDUzM2FjYTE1MTNkYjcxNjAxM2UwYzRlODk1MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7cAEKAtV8iCREmWeGpgY35sdS95 py8CAeAHEmFMet8TkyIdhDHEvbBpXxcYaWl9xSUqR0gwGsc0qTmIdLt8z+6VhZ1+ lKkPIGuZInM56LDIg3Y3mLc17x7EHhKLzNkXVGjblfXQV3pCe9etJw7vG7EeqUye GK08xT+Rglec1bQDlO9lkNOZWY7uHiag/i1FhiKV91Xa2JVMI+DRIM6crma9kwrL psot+Eul8olXtueWQBqTq2yN132UdE6JQv+y/4PIWYlmZhqc12IAYJZ3WAqOlTjX eztmjx7mISoRcAS4RKw/2lPbeF0tk0nBx0rDJPtyvaJi8sSL8sffZxQ65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxgOmj1RTOsoVE9txYBPgxOiVDKMB8GA1UdIwQY MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt MWUzMjZkZWJhNGQwLzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08eE/ABT r8k2C3m+NA3jjX+wTCJMMWW7g5Pdgz6PjSIz2rU2F2L5WmY/++gwdKQ7aqH/I7/M Kq7YIxDmlsWiOiqYjEaXhRrcaAK7fjKpfeNnWzvXUZQQxc7xyV5iwBeMBsYPEwYB RISu2D0LFYhurlfNltorhcDO2OjAjv3pwY1Yr9Dr5mDvsJqgjWNWdIG1/YFm1mfh 3XTsAiPFiWN5qJtiILWBV3vWXiWzdCGb65mYlm7BL5AcUMIhAOuNmNKRBQ2RCxng s8HuHCmbkLz/o0Gurx+tfQvnC/qZarC8mZPh/ZCjrGTns3Qw49avLH2ug4CaVvo0 0toAzQxmvqnBjw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:15:34 2025 by rpki-client