This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json) Hash identifier: xicaPwRY6TzDg8U2heBDa6YG0MujMN716ZI+uj8VVto= Subject key identifier: 34:01:D1:8C:7A:BB:43:9E:79:D7:E1:42:8E:A5:35:9E:3E:AC:7C:6A Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a Certificate serial: 019AF49C0C5590233A75390588FDC52C57DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 17:00:58 +0000 Manifest this update: Sat 06 Dec 2025 17:00:58 +0000 Manifest next update: Sun 07 Dec 2025 17:00:58 +0000 Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: N+22Vgh4A/W1OSYA8YWkLSBSz66giEpOkvjA4Wc9+Ck=) 2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0c:55:90:23:3a:75:39:05:88:fd:c5:2c:57:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a Validity Not Before: Dec 6 17:00:58 2025 GMT Not After : Dec 7 17:00:58 2025 GMT Subject: CN=3401d18c7abb439e79d7e1428ea5359e3eac7c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:e2:d5:f4:c3:1c:e9:20:e3:60:a9:f6:d5: 4b:6c:da:1f:08:fa:50:94:4f:df:ca:08:d0:dc:28: cd:93:b5:cd:66:29:53:88:61:23:b5:f9:7e:7c:5a: a3:4d:9f:ec:3e:eb:85:68:49:1e:66:8d:e7:fc:64: fe:68:1d:53:7e:fb:d1:b8:d4:61:de:7d:ab:6c:5f: 47:3c:fb:59:9e:6b:94:7e:a8:26:e1:ed:ec:f2:f0: 4d:3c:53:12:31:58:0e:4b:02:b0:87:fd:d1:f8:cb: 53:ed:0c:c4:ee:9c:7d:aa:a9:d4:f0:de:12:8c:d6: 35:be:de:2c:54:7f:29:10:93:57:ae:f4:34:7e:9c: af:03:a4:34:96:8c:33:02:0b:e4:5d:9f:d3:e3:76: 16:e5:86:98:80:0c:c3:38:d0:f0:31:bd:6e:46:1b: e8:fe:58:14:79:e6:06:2e:1a:50:05:57:8d:40:2a: 24:1c:5b:07:23:06:af:b6:1c:72:9d:bb:3a:41:c2: 4c:b3:07:93:77:9e:cb:aa:b3:34:55:47:86:eb:7d: e4:e1:a1:3e:fe:76:8f:26:34:ba:65:4f:30:9b:64: 3e:3e:af:74:05:85:d2:54:46:a4:f9:a2:f4:f9:1f: 10:c1:7f:2b:df:85:55:f6:3f:24:1d:19:a2:76:51: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:D1:8C:7A:BB:43:9E:79:D7:E1:42:8E:A5:35:9E:3E:AC:7C:6A X509v3 Authority Key Identifier: keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:7e:fc:c9:23:42:14:bf:8d:15:20:1d:6d:10:ad:74:72: 38:05:38:21:ef:ec:09:4a:90:a8:8f:6f:bf:b7:4d:3a:33:ea: 2b:58:9f:3a:b0:af:7b:2e:fc:da:8e:84:77:6e:66:e0:91:75: 91:7d:fc:e8:49:ed:ef:b4:7a:31:09:70:3f:7b:fd:d8:5f:74: 56:43:81:2b:85:32:54:27:4f:34:68:cf:cb:3a:5d:94:6a:f5: ef:85:41:46:fa:39:01:8c:58:dd:de:41:04:f3:ec:9c:2c:d8: 7c:24:96:de:be:33:5e:2a:24:5c:52:55:75:2c:d4:d3:ff:ee: 46:e3:6e:48:17:4c:13:96:5b:f0:b3:5b:f8:5c:15:14:03:de: 29:c9:ea:41:d6:2b:63:93:48:7a:09:aa:5c:59:53:06:dd:81: 8c:f4:a1:14:5c:78:85:67:a1:f9:16:25:7d:ef:1b:6a:38:1a: 55:73:77:76:38:f0:22:c3:7c:15:3c:fe:fc:55:7e:b2:36:74: d2:00:8e:e2:e3:66:00:53:d7:27:31:c8:ef:9b:40:06:c2:db: cf:00:6f:ab:1e:58:fc:f4:96:8e:dc:e1:e3:80:82:c7:f4:bb: 19:20:89:86:a4:c0:c0:57:f1:b2:b0:4c:31:fb:0a:ff:ad:6f: 63:69:44:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAxVkCM6dTkFiP3FLFfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZGVhMmMxNTk5M2Q2ODMxNzUwYWE2MzBlMGU2ODBkOWVl Zjg4OGEwHhcNMjUxMjA2MTcwMDU4WhcNMjUxMjA3MTcwMDU4WjAzMTEwLwYDVQQD EygzNDAxZDE4YzdhYmI0MzllNzlkN2UxNDI4ZWE1MzU5ZTNlYWM3YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruji1fTDHOkg42Cp9tVLbNofCPpQ lE/fygjQ3CjNk7XNZilTiGEjtfl+fFqjTZ/sPuuFaEkeZo3n/GT+aB1TfvvRuNRh 3n2rbF9HPPtZnmuUfqgm4e3s8vBNPFMSMVgOSwKwh/3R+MtT7QzE7px9qqnU8N4S jNY1vt4sVH8pEJNXrvQ0fpyvA6Q0lowzAgvkXZ/T43YW5YaYgAzDONDwMb1uRhvo /lgUeeYGLhpQBVeNQCokHFsHIwavthxynbs6QcJMsweTd57LqrM0VUeG633k4aE+ /naPJjS6ZU8wm2Q+Pq90BYXSVEak+aL0+R8QwX8r34VV9j8kHRmidlH9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQB0Yx6u0OeedfhQo6lNZ4+rHxqMB8GA1UdIwQY MBaAFPfeosFZk9aDF1CqYw4OaA2e74iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYt MzhkOTcxYzEzNDQxLzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYtMzhkOTcxYzEzNDQx LzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgB+/Mkj QhS/jRUgHW0QrXRyOAU4Ie/sCUqQqI9vv7dNOjPqK1ifOrCvey782o6Ed25m4JF1 kX386Ent77R6MQlwP3v92F90VkOBK4UyVCdPNGjPyzpdlGr174VBRvo5AYxY3d5B BPPsnCzYfCSW3r4zXiokXFJVdSzU0//uRuNuSBdME5Zb8LNb+FwVFAPeKcnqQdYr Y5NIegmqXFlTBt2BjPShFFx4hWeh+RYlfe8bajgaVXN3djjwIsN8FTz+/FV+sjZ0 0gCO4uNmAFPXJzHI75tABsLbzwBvqx5Y/PSWjtzh44CCx/S7GSCJhqTAwFfxsrBM MfsK/61vY2lEbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:01 2025 by rpki-client