This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: Qra3jYLSOEoBZrhlzzF2R6z7H5VOKP45udl0EJvzYNs= Subject key identifier: 59:2E:FF:CC:04:A8:42:32:DE:EB:96:BD:E1:36:17:DB:88:82:C0:04 Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019B3FECD2B15172A5794B8F7BEA52C4378C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 1689 Signing time: Sun 21 Dec 2025 08:00:43 +0000 Manifest this update: Sun 21 Dec 2025 08:00:43 +0000 Manifest next update: Mon 22 Dec 2025 08:00:43 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: iNBw3yJvRByd/MKquJ1h/V07hOAhsDb8dyDT21NdBrw=) 2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d2:b1:51:72:a5:79:4b:8f:7b:ea:52:c4:37:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Dec 21 08:00:43 2025 GMT Not After : Dec 22 08:00:43 2025 GMT Subject: CN=592effcc04a84232deeb96bde13617db8882c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:3b:16:fb:cc:49:a7:d8:64:0f:20:5e:ed: 94:27:91:18:2e:b4:e1:e9:1f:0b:47:40:6d:f9:6b: 38:2c:fd:04:4e:52:14:69:cc:5f:67:b5:97:fa:f7: 2b:7f:48:a4:61:62:f9:c6:e8:5b:8c:fb:19:40:77: 60:d1:1e:27:a0:98:8a:6e:65:16:b5:79:4f:43:31: 31:2c:d0:2c:48:9c:a6:25:b1:3d:f1:a2:84:cc:31: 61:59:b5:97:11:9c:5a:b2:81:32:b9:25:26:f8:09: b8:a4:b0:8b:fd:40:02:c5:25:81:ee:c4:f6:b0:5c: 95:83:23:d6:18:82:9e:95:3d:4e:48:b8:63:7a:58: 40:45:a8:9d:da:4f:19:d6:80:e8:5c:46:9b:06:fb: 27:69:1d:fb:0e:11:ac:9d:b6:05:22:38:df:8a:0d: 0e:e9:6c:4c:11:e6:3c:10:12:cd:13:d4:19:99:b5: e2:d9:ce:10:ec:ad:9a:3b:df:0d:6f:d8:ce:b4:a2: b2:12:d0:66:6b:54:41:df:b3:d0:a1:29:72:c9:95: 01:4c:ce:f0:7a:20:be:f7:cb:15:57:1a:04:e9:d8: b3:4d:e1:8a:70:99:74:e2:da:00:fb:f0:dd:55:39: 4d:c4:b8:64:53:fb:74:ec:20:96:f3:01:f6:6e:98: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:FF:CC:04:A8:42:32:DE:EB:96:BD:E1:36:17:DB:88:82:C0:04 X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:27:e9:a4:87:c4:44:9b:64:66:2e:af:f6:09:0b:8f:c4:bb: 93:50:93:d1:d2:6f:5a:06:ff:3f:bd:b1:0f:0b:d8:2b:ff:05: c0:88:9d:03:8e:ed:52:c4:b3:93:6d:11:48:63:a9:cd:46:e8: 48:91:14:73:90:44:54:db:84:87:10:01:d9:c0:7d:98:a5:10: 4c:21:bb:e6:60:2d:09:b5:25:c8:e0:c5:02:b6:9a:b9:7b:63: 0e:b8:95:7e:57:64:27:52:d8:ab:b4:61:4b:5b:75:8d:3e:2c: 35:82:8a:be:9d:b6:03:53:66:21:71:e6:35:71:b9:86:d2:49: a0:3f:db:b8:10:44:d6:7e:1b:a2:31:23:bc:25:14:dc:fb:fa: a6:ee:ac:79:3c:ce:5b:b2:ce:1a:c6:7c:54:ea:5d:fc:8d:f4: 16:19:95:0c:0a:60:a2:3c:08:eb:57:d4:8e:6d:cd:a5:f8:f6: 92:b5:eb:29:d4:e6:67:b4:60:f8:5d:39:6a:2d:aa:ea:c4:94: d4:b6:ab:00:b0:b4:82:e7:d2:86:27:63:eb:e8:91:e1:60:d9: 15:0c:9a:ed:18:83:0a:68:87:4a:cf:c3:ed:1d:d3:54:04:36: 8e:52:a8:31:b0:a4:04:87:24:40:d1:f4:c4:51:b3:ce:ea:8b: 91:60:79:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NKxUXKleUuPe+pSxDeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjUxMjIxMDgwMDQzWhcNMjUxMjIyMDgwMDQzWjAzMTEwLwYDVQQD Eyg1OTJlZmZjYzA0YTg0MjMyZGVlYjk2YmRlMTM2MTdkYjg4ODJjMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuQ7FvvMSafYZA8gXu2UJ5EYLrTh 6R8LR0Bt+Ws4LP0ETlIUacxfZ7WX+vcrf0ikYWL5xuhbjPsZQHdg0R4noJiKbmUW tXlPQzExLNAsSJymJbE98aKEzDFhWbWXEZxasoEyuSUm+Am4pLCL/UACxSWB7sT2 sFyVgyPWGIKelT1OSLhjelhARaid2k8Z1oDoXEabBvsnaR37DhGsnbYFIjjfig0O 6WxMEeY8EBLNE9QZmbXi2c4Q7K2aO98Nb9jOtKKyEtBma1RB37PQoSlyyZUBTM7w eiC+98sVVxoE6dizTeGKcJl04toA+/DdVTlNxLhkU/t07CCW8wH2bpgP3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFku/8wEqEIy3uuWveE2F9uIgsAEMB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyfppIfE RJtkZi6v9gkLj8S7k1CT0dJvWgb/P72xDwvYK/8FwIidA47tUsSzk20RSGOpzUbo SJEUc5BEVNuEhxAB2cB9mKUQTCG75mAtCbUlyODFAraauXtjDriVfldkJ1LYq7Rh S1t1jT4sNYKKvp22A1NmIXHmNXG5htJJoD/buBBE1n4bojEjvCUU3Pv6pu6seTzO W7LOGsZ8VOpd/I30FhmVDApgojwI61fUjm3Npfj2krXrKdTmZ7Rg+F05ai2q6sSU 1LarALC0gufShidj6+iR4WDZFQya7RiDCmiHSs/D7R3TVAQ2jlKoMbCkBIckQNH0 xFGzzuqLkWB5Uw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:23:14 2025 by rpki-client