This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: jfOEl7fmBj+oZaRKd6fN3AhHfqges3Jro0zCRY+5DcA= Subject key identifier: 97:26:CB:A6:73:61:3B:96:6A:6A:31:8D:12:C5:48:D7:A4:C1:61:32 Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019B544F49CC1043365D8971EB927265EA1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 177A Signing time: Thu 25 Dec 2025 07:00:40 +0000 Manifest this update: Thu 25 Dec 2025 07:00:40 +0000 Manifest next update: Fri 26 Dec 2025 07:00:40 +0000 Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: OeActOMEoe0NQ7kHVdZkM5l7qe1/V6ZY+XVqBWz55W0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:49:cc:10:43:36:5d:89:71:eb:92:72:65:ea:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Dec 25 07:00:40 2025 GMT Not After : Dec 26 07:00:40 2025 GMT Subject: CN=9726cba673613b966a6a318d12c548d7a4c16132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:99:7a:cd:a7:75:b4:53:c5:33:2d:cd:35:78: 4c:c5:c5:b5:e6:e4:b9:f7:51:7e:03:a9:2a:0c:37: 85:f8:41:77:cb:50:dc:10:f9:0b:5a:49:59:cf:39: 4b:58:9a:1d:55:25:dc:19:13:74:85:b8:ad:3a:64: 1a:ce:c4:1a:32:2c:6f:41:b8:2d:10:a6:0a:12:a1: 02:3a:55:c4:55:66:ba:3c:1c:85:03:94:73:9f:2a: e8:96:86:cf:7a:b3:d3:31:7d:82:ac:c1:18:7d:f7: 15:36:fd:db:10:f2:6f:ba:8c:1a:9c:29:91:47:66: 5b:6e:a8:ed:db:7c:79:b9:d1:6d:ed:3b:f9:2d:59: 52:43:d5:ce:d0:a2:76:21:20:e2:78:aa:0e:e3:23: 38:b7:57:e5:18:5c:25:45:43:d4:cf:1a:c6:04:6b: d8:4e:b7:93:61:31:cb:90:37:0f:13:2b:b9:08:64: 93:c7:89:f6:cb:44:1c:97:d6:a9:2d:de:3b:1e:bf: 35:91:1f:30:06:d3:04:43:a3:18:86:44:ef:b0:79: e0:d0:6f:26:03:05:88:c0:22:df:5d:59:05:ad:f0: ea:66:08:f8:17:c4:86:f3:1e:f0:48:41:40:ef:01: 7a:b6:16:2a:87:e9:e1:81:b1:60:ca:53:07:b3:c5: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:26:CB:A6:73:61:3B:96:6A:6A:31:8D:12:C5:48:D7:A4:C1:61:32 X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f3:b8:bb:32:e5:1e:2b:c4:e5:89:75:32:0c:77:60:6c:1f: d6:11:52:b4:2a:95:ef:28:91:67:eb:a9:8c:7e:03:c0:3b:74: 69:22:c2:f1:b0:d9:91:3e:5e:be:4b:19:25:87:07:a9:76:bd: 2d:2f:64:92:3f:29:f0:4b:ee:08:d9:8f:08:a0:11:9a:26:3f: 9d:48:c3:8d:7c:01:19:e6:bb:81:d3:94:f4:b7:9c:75:da:38: a6:c2:88:50:78:f9:d9:cf:15:25:ba:10:f3:af:89:29:b5:05: d8:31:fe:05:5a:5d:9c:88:6d:ee:5d:88:51:a5:e0:92:ba:e8: c7:83:67:23:1d:51:f4:e7:55:63:bd:07:ce:89:03:c4:b8:d3: fd:4f:06:5a:2c:b4:a1:6f:44:54:ec:7b:6c:5f:9d:15:26:8c: 30:68:02:20:cd:70:91:2f:ba:ed:61:db:5a:bc:4f:29:c5:00: 56:50:01:ba:3d:4b:7a:76:c1:10:f3:09:68:33:67:9b:c1:59: ce:27:38:83:00:9d:96:7b:4e:8d:05:64:47:fe:7d:2c:9d:26: 06:0d:aa:1b:cf:f9:58:97:ad:c1:93:2c:7d:69:1c:89:0d:b0: 10:77:5f:b0:79:7a:9f:34:71:84:bf:fb:38:3e:4e:99:f6:f8: 4a:57:be:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT0nMEEM2XYlx65JyZeodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjUxMjI1MDcwMDQwWhcNMjUxMjI2MDcwMDQwWjAzMTEwLwYDVQQD Eyg5NzI2Y2JhNjczNjEzYjk2NmE2YTMxOGQxMmM1NDhkN2E0YzE2MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35l6zad1tFPFMy3NNXhMxcW15uS5 91F+A6kqDDeF+EF3y1DcEPkLWklZzzlLWJodVSXcGRN0hbitOmQazsQaMixvQbgt EKYKEqECOlXEVWa6PByFA5RznyrolobPerPTMX2CrMEYffcVNv3bEPJvuowanCmR R2Zbbqjt23x5udFt7Tv5LVlSQ9XO0KJ2ISDieKoO4yM4t1flGFwlRUPUzxrGBGvY TreTYTHLkDcPEyu5CGSTx4n2y0Qcl9apLd47Hr81kR8wBtMEQ6MYhkTvsHng0G8m AwWIwCLfXVkFrfDqZgj4F8SG8x7wSEFA7wF6thYqh+nhgbFgylMHs8VYAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcmy6ZzYTuWamoxjRLFSNekwWEyMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvO4uzLl HivE5Yl1Mgx3YGwf1hFStCqV7yiRZ+upjH4DwDt0aSLC8bDZkT5evksZJYcHqXa9 LS9kkj8p8EvuCNmPCKARmiY/nUjDjXwBGea7gdOU9Lecddo4psKIUHj52c8VJboQ 86+JKbUF2DH+BVpdnIht7l2IUaXgkrrox4NnIx1R9OdVY70HzokDxLjT/U8GWiy0 oW9EVOx7bF+dFSaMMGgCIM1wkS+67WHbWrxPKcUAVlABuj1LenbBEPMJaDNnm8FZ zic4gwCdlntOjQVkR/59LJ0mBg2qG8/5WJetwZMsfWkciQ2wEHdfsHl6nzRxhL/7 OD5Omfb4Sle+Vg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:14:41 2025 by rpki-client