This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: rttnmsemBrstCbD09Y54wzlRjaDoeY1XrfjmMbkY0z4= Subject key identifier: 77:2D:78:7D:DF:1E:70:2D:B7:85:DE:E1:EE:D1:6D:CC:E9:BD:A7:19 Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019B65B12A8EABFD7E612A8BD042F4F88835 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 1783 Signing time: Sun 28 Dec 2025 16:01:08 +0000 Manifest this update: Sun 28 Dec 2025 16:01:08 +0000 Manifest next update: Mon 29 Dec 2025 16:01:08 +0000 Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: KURAr+vCxqo3hZLg9WCEF83qu9cEpQZ5DB75uUe2w8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:2a:8e:ab:fd:7e:61:2a:8b:d0:42:f4:f8:88:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Dec 28 16:01:08 2025 GMT Not After : Dec 29 16:01:08 2025 GMT Subject: CN=772d787ddf1e702db785dee1eed16dcce9bda719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:65:00:0c:62:b6:1a:c4:cd:18:c8:cf:30: 2a:18:3a:12:53:46:5d:bf:56:93:ec:d3:9d:bf:58: d3:77:d2:57:95:05:b6:14:9a:d1:71:15:eb:dc:b0: 6d:7e:84:2f:dc:bb:60:2c:ce:b8:76:b8:15:60:a1: f4:16:b6:ba:4a:8a:fa:5b:f5:7c:13:31:57:44:73: b5:3d:1f:0f:39:cc:04:e6:ae:a7:40:6a:44:80:e7: 53:27:35:16:b3:43:69:e3:06:fa:43:4c:7d:ad:8e: 1a:0d:8f:15:72:8e:8f:91:bd:48:f5:5c:e7:6b:44: 9f:0f:c7:18:5c:aa:f0:18:ca:fa:5a:9a:3b:73:98: 36:fc:b6:18:36:10:54:ee:84:f3:7f:bf:0e:8a:61: 5c:d6:e5:09:5f:4a:65:47:39:03:ec:87:b9:be:1d: 4d:77:2e:9e:d3:8f:0d:01:89:e7:a0:cc:3a:7d:91: b0:d7:91:d2:5e:d9:c4:c7:59:4c:52:11:83:d1:6f: a1:37:04:59:77:72:cd:d2:72:04:cb:9d:2d:00:fd: 23:88:1e:c7:92:48:49:d7:56:5c:59:a4:23:6d:bd: 24:dd:a5:5c:d9:c9:a7:72:d8:b5:0b:dd:53:9a:5d: b3:d8:c1:3a:dd:38:9e:cb:19:0a:ad:db:e8:2b:b4: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:78:7D:DF:1E:70:2D:B7:85:DE:E1:EE:D1:6D:CC:E9:BD:A7:19 X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:92:96:4d:10:eb:40:38:0e:92:d8:73:1b:5b:84:56:60:7f: c2:a8:a8:b4:4f:c4:11:b2:a0:4a:b0:ef:b2:cf:6b:2b:d0:c0: bb:ec:63:66:7d:4e:01:95:43:fe:73:23:17:b5:c3:5e:17:8f: 23:9a:a7:4c:61:b5:b6:a1:10:2b:3b:ba:5d:12:e9:05:bf:88: d1:66:e0:79:6e:a5:5d:7e:19:3f:c2:a6:c6:ab:25:01:f0:91: 62:dd:5b:ea:1f:5f:27:3f:cf:02:ad:20:e4:0f:34:7c:ba:fd: 15:4f:92:d3:59:83:d0:9a:23:a6:b8:4a:81:7b:f4:c8:11:44: aa:7c:03:63:31:1b:68:41:18:11:9e:79:30:69:09:a3:67:b5: 95:2b:ab:b4:bc:1f:53:9a:99:92:f3:f0:32:30:b9:ea:49:64: 17:37:e7:05:79:82:ec:45:cb:33:f5:b1:0a:f1:3a:32:66:78: f9:8e:cc:48:9e:e3:72:a9:90:12:e7:9a:48:68:73:e3:91:04: d9:bc:c8:2f:82:fa:5a:e2:40:ee:16:32:df:f3:58:36:d6:00: c4:b3:9a:84:ee:7b:ae:ad:54:7e:9b:90:64:3c:c2:b8:6b:04: b2:87:ed:22:5c:31:70:0b:12:c5:4b:eb:2c:7a:4f:6b:1f:4d: ac:45:27:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsSqOq/1+YSqL0EL0+Ig1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjUxMjI4MTYwMTA4WhcNMjUxMjI5MTYwMTA4WjAzMTEwLwYDVQQD Eyg3NzJkNzg3ZGRmMWU3MDJkYjc4NWRlZTFlZWQxNmRjY2U5YmRhNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vBlAAxithrEzRjIzzAqGDoSU0Zd v1aT7NOdv1jTd9JXlQW2FJrRcRXr3LBtfoQv3LtgLM64drgVYKH0Fra6Sor6W/V8 EzFXRHO1PR8POcwE5q6nQGpEgOdTJzUWs0Np4wb6Q0x9rY4aDY8Vco6Pkb1I9Vzn a0SfD8cYXKrwGMr6Wpo7c5g2/LYYNhBU7oTzf78OimFc1uUJX0plRzkD7Ie5vh1N dy6e048NAYnnoMw6fZGw15HSXtnEx1lMUhGD0W+hNwRZd3LN0nIEy50tAP0jiB7H kkhJ11ZcWaQjbb0k3aVc2cmncti1C91Tml2z2ME63TieyxkKrdvoK7SjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcteH3fHnAtt4Xe4e7RbczpvacZMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZKWTRDr QDgOkthzG1uEVmB/wqiotE/EEbKgSrDvss9rK9DAu+xjZn1OAZVD/nMjF7XDXheP I5qnTGG1tqEQKzu6XRLpBb+I0WbgeW6lXX4ZP8KmxqslAfCRYt1b6h9fJz/PAq0g 5A80fLr9FU+S01mD0JojprhKgXv0yBFEqnwDYzEbaEEYEZ55MGkJo2e1lSurtLwf U5qZkvPwMjC56klkFzfnBXmC7EXLM/WxCvE6MmZ4+Y7MSJ7jcqmQEueaSGhz45EE 2bzIL4L6WuJA7hYy3/NYNtYAxLOahO57rq1UfpuQZDzCuGsEsoftIlwxcAsSxUvr LHpPax9NrEUnxQ== -----END CERTIFICATE-----Generated at Mon Dec 29 01:48:48 2025 by rpki-client