This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: IdVI5LCcaBwj5I6DzOQCe+/FVwnmM7H6Om0Ze5S3bNk= Subject key identifier: 35:AB:A0:64:71:7E:C2:8D:D5:04:F5:AC:9F:AC:0C:F5:C3:EC:0A:27 Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019B41000CE55D3BB862BD900CA4CB1C7B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 1770 Signing time: Sun 21 Dec 2025 13:01:20 +0000 Manifest this update: Sun 21 Dec 2025 13:01:20 +0000 Manifest next update: Mon 22 Dec 2025 13:01:20 +0000 Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: bJIyu1LwdxES3QqcQvjrjQWs4WX3grZ79oGzHJUP98c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:0c:e5:5d:3b:b8:62:bd:90:0c:a4:cb:1c:7b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Dec 21 13:01:20 2025 GMT Not After : Dec 22 13:01:20 2025 GMT Subject: CN=35aba064717ec28dd504f5ac9fac0cf5c3ec0a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:b7:11:4d:4b:51:af:fe:e1:a6:18:89:8e: ca:3e:05:7f:d7:31:ab:41:5c:72:58:a2:86:78:a7: 55:f5:82:37:33:7e:05:8b:a0:d9:a5:12:44:fe:4c: ba:a5:1c:14:d5:45:1a:3a:71:8d:71:82:a7:6a:44: 6d:34:72:c5:a6:11:75:08:2e:11:e6:10:4d:6d:ca: 7b:55:0b:c5:cb:95:2f:7f:1b:cf:65:f3:b6:24:12: a1:2f:eb:24:e4:61:38:f9:2e:ca:d6:5c:bc:f2:40: 42:0a:9d:89:e6:47:c8:bd:23:53:ef:c2:bb:e8:67: 5b:63:16:07:da:81:f9:90:55:d2:c3:20:5a:b8:9f: ce:59:bd:16:da:52:d5:1f:d4:b1:1d:4d:5c:31:66: 5a:8b:62:78:82:32:5b:c4:57:e8:fb:c5:f4:57:7f: 7d:13:21:14:3f:15:b4:6c:dc:3e:12:32:79:79:24: 69:cf:43:fe:52:1f:d1:f5:a0:8f:2b:61:25:b1:96: 91:13:f3:7d:df:95:62:75:91:3e:94:d2:18:05:06: 3c:bc:74:10:01:88:60:25:ec:87:05:19:7e:eb:fc: 9b:4b:a8:7d:b9:1b:01:45:e6:1f:35:dc:68:3f:7e: 40:f6:fe:a2:c2:55:2d:b9:d4:d9:99:7d:3d:c3:06: 39:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AB:A0:64:71:7E:C2:8D:D5:04:F5:AC:9F:AC:0C:F5:C3:EC:0A:27 X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:70:64:a8:46:4b:37:1e:51:63:90:2f:6a:f2:bb:c2:09:6f: 8b:35:7e:aa:e2:a1:40:89:72:de:a6:c0:9a:64:1d:ef:8a:08: 9f:dd:7a:10:10:4a:df:39:2f:21:9d:d7:ac:bf:54:d0:11:8f: 68:f7:0f:42:d5:a1:57:1e:08:cf:65:54:c8:98:06:f9:63:1e: b3:4b:73:c1:be:59:ad:9d:d4:1f:ba:c2:42:7a:1e:57:ce:ad: 96:9e:6a:6c:f7:82:ce:b1:31:80:34:24:fb:3f:46:51:2c:72: 1b:70:90:bf:2e:8c:d1:3f:03:c6:05:da:43:9d:cf:b7:72:8f: 99:74:fd:1e:5d:1c:be:42:8e:8f:62:66:a3:3d:df:c9:b4:b9: 1d:51:0e:c7:18:fe:65:83:72:b2:a9:8d:6f:6d:6f:26:c5:7b: a4:73:94:42:6c:aa:53:f8:62:f7:08:49:e3:a9:ee:eb:fa:a1: ec:81:7d:0e:46:22:d7:c1:bb:2f:88:3f:23:a6:d8:5a:08:e3: 2f:ab:ba:7d:0e:c3:b9:94:48:3e:6f:20:78:6e:a8:f2:6a:a2: 8c:06:64:0c:2a:ee:66:9d:65:9d:e5:e0:01:80:0f:b2:9e:0e: 39:47:41:33:6b:ef:3d:43:35:36:8c:65:b4:ed:08:3e:e8:45: 21:42:da:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAzlXTu4Yr2QDKTLHHuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjUxMjIxMTMwMTIwWhcNMjUxMjIyMTMwMTIwWjAzMTEwLwYDVQQD EygzNWFiYTA2NDcxN2VjMjhkZDUwNGY1YWM5ZmFjMGNmNWMzZWMwYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQW3EU1LUa/+4aYYiY7KPgV/1zGr QVxyWKKGeKdV9YI3M34Fi6DZpRJE/ky6pRwU1UUaOnGNcYKnakRtNHLFphF1CC4R 5hBNbcp7VQvFy5UvfxvPZfO2JBKhL+sk5GE4+S7K1ly88kBCCp2J5kfIvSNT78K7 6GdbYxYH2oH5kFXSwyBauJ/OWb0W2lLVH9SxHU1cMWZai2J4gjJbxFfo+8X0V399 EyEUPxW0bNw+EjJ5eSRpz0P+Uh/R9aCPK2ElsZaRE/N935VidZE+lNIYBQY8vHQQ AYhgJeyHBRl+6/ybS6h9uRsBReYfNdxoP35A9v6iwlUtudTZmX09wwY5KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWroGRxfsKN1QT1rJ+sDPXD7AonMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXBkqEZL Nx5RY5AvavK7wglvizV+quKhQIly3qbAmmQd74oIn916EBBK3zkvIZ3XrL9U0BGP aPcPQtWhVx4Iz2VUyJgG+WMes0tzwb5ZrZ3UH7rCQnoeV86tlp5qbPeCzrExgDQk +z9GUSxyG3CQvy6M0T8DxgXaQ53Pt3KPmXT9Hl0cvkKOj2Jmoz3fybS5HVEOxxj+ ZYNysqmNb21vJsV7pHOUQmyqU/hi9whJ46nu6/qh7IF9DkYi18G7L4g/I6bYWgjj L6u6fQ7DuZRIPm8geG6o8mqijAZkDCruZp1lneXgAYAPsp4OOUdBM2vvPUM1Noxl tO0IPuhFIULa4Q== -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:45 2025 by rpki-client