This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft File: 96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json) Hash identifier: lknhAKPJp1CIpnMXtp7baQh90B601s6YkTN4stiFQss= Subject key identifier: EE:F6:4D:94:40:06:56:73:06:C9:47:91:5C:B5:B2:37:81:B2:1A:FA Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41 Certificate issuer: /CN=f7ac1739f529daf4cc73382489b80597eba07f41 Certificate serial: 019AF1D25542C200CC86D1817A3B2AB078B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft Manifest number: 099A Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: 38rr15QCdd1PSVr8lnNQl8Qi4fvTxt2Gx7/pqBzj5Ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:55:42:c2:00:cc:86:d1:81:7a:3b:2a:b0:78:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=eef64d944006567306c947915cb5b23781b21afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:28:99:ae:5d:b2:06:71:9a:ca:cf:6b:14: da:ea:77:4b:28:f5:ea:67:ea:66:86:6a:08:9e:29: 32:24:ac:2d:c8:74:38:23:ae:55:48:2d:52:db:0c: 5d:de:b4:55:50:e3:aa:90:cb:39:5b:12:df:90:41: a3:64:c1:1b:35:0b:7e:b3:2b:8c:96:0d:ed:61:8f: 62:da:cb:72:8d:b5:bb:1a:4c:0c:d7:9e:5c:82:ff: 1e:80:28:f1:c1:51:56:66:81:fd:61:e0:bd:59:fb: b3:08:ce:0d:99:40:42:19:7e:d6:e0:85:47:80:2c: eb:d8:39:33:3e:3a:f1:98:79:43:67:8e:21:e1:0d: 09:f8:73:c0:4e:f6:8e:df:0e:b3:18:bc:b1:93:2a: 72:c1:47:15:70:3a:8c:af:fa:77:8a:ad:3d:b4:4a: 70:b8:9c:7e:94:eb:f7:18:14:01:92:fe:58:64:f0: a7:a7:25:01:80:3c:fc:ea:b9:b9:74:69:9a:c6:7f: 15:2b:cd:12:6d:1b:14:1c:cc:8c:c8:78:fd:a6:f9: b2:27:a9:64:f4:ef:ec:0b:a8:93:55:92:72:19:a7: 52:48:3d:d2:c1:af:0e:84:c8:56:b6:2d:8d:85:40: b7:b1:91:ac:c4:c3:87:59:d4:ac:0c:f4:d6:5e:fe: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F6:4D:94:40:06:56:73:06:C9:47:91:5C:B5:B2:37:81:B2:1A:FA X509v3 Authority Key Identifier: keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ad:78:54:42:fb:48:9d:91:16:47:3f:b0:0f:02:bb:f3:4f: 84:9a:9c:d6:c3:a2:f3:e0:b3:8e:2f:33:35:4c:c4:cc:19:78: c3:6e:ee:28:e5:d1:1b:48:68:ce:d2:7e:b3:69:30:3e:c9:16: da:ba:e8:f8:39:8d:42:cf:6d:07:c3:92:bb:c1:e6:90:b9:13: 2f:32:9e:4c:c3:26:e4:50:b8:4f:17:48:a0:57:d7:7f:33:7c: b1:b2:1f:fb:01:e2:6f:5f:2b:cc:89:67:a2:9c:b7:52:07:17: 60:0d:c0:35:4a:e8:06:ec:d7:c7:8d:d7:94:c7:d0:f4:c0:da: b7:15:fa:10:9e:02:c5:29:ca:c1:8e:6d:62:04:e3:17:07:52: a1:ca:a7:70:c9:95:25:fe:dc:a2:38:14:39:da:95:07:eb:18: f9:9d:d5:34:aa:72:4c:17:1b:cd:24:07:0d:6a:7c:8e:c0:e3: 60:8a:3f:98:08:d2:c3:54:a2:8e:0d:b6:3f:90:71:ab:1d:cd: c7:ad:18:d9:7c:80:f1:18:1d:aa:7c:21:69:84:53:b4:c8:3b: 38:b0:90:05:79:14:d8:33:9b:dd:52:b8:66:4b:44:03:3d:de: 68:0a:0e:13:54:03:46:7d:f7:53:a7:b9:6c:63:dc:6d:72:8d: 3d:bd:ff:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lVCwgDMhtGBejsqsHi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWMxNzM5ZjUyOWRhZjRjYzczMzgyNDg5YjgwNTk3ZWJh MDdmNDEwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhlZWY2NGQ5NDQwMDY1NjczMDZjOTQ3OTE1Y2I1YjIzNzgxYjIxYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVkoma5dsgZxmsrPaxTa6ndLKPXq Z+pmhmoInikyJKwtyHQ4I65VSC1S2wxd3rRVUOOqkMs5WxLfkEGjZMEbNQt+syuM lg3tYY9i2styjbW7GkwM155cgv8egCjxwVFWZoH9YeC9WfuzCM4NmUBCGX7W4IVH gCzr2DkzPjrxmHlDZ44h4Q0J+HPATvaO3w6zGLyxkypywUcVcDqMr/p3iq09tEpw uJx+lOv3GBQBkv5YZPCnpyUBgDz86rm5dGmaxn8VK80SbRsUHMyMyHj9pvmyJ6lk 9O/sC6iTVZJyGadSSD3Swa8OhMhWti2NhUC3sZGsxMOHWdSsDPTWXv6QuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO72TZRABlZzBslHkVy1sjeBshr6MB8GA1UdIwQY MBaAFPesFzn1Kdr0zHM4JIm4BZfroH9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAt MGI4YTc5MmMxYjlkLzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAtMGI4YTc5MmMxYjlk LzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK14VEL7 SJ2RFkc/sA8Cu/NPhJqc1sOi8+Czji8zNUzEzBl4w27uKOXRG0hoztJ+s2kwPskW 2rro+DmNQs9tB8OSu8HmkLkTLzKeTMMm5FC4TxdIoFfXfzN8sbIf+wHib18rzIln opy3UgcXYA3ANUroBuzXx43XlMfQ9MDatxX6EJ4CxSnKwY5tYgTjFwdSocqncMmV Jf7cojgUOdqVB+sY+Z3VNKpyTBcbzSQHDWp8jsDjYIo/mAjSw1Sijg22P5Bxqx3N x60Y2XyA8RgdqnwhaYRTtMg7OLCQBXkU2DOb3VK4ZktEAz3eaAoOE1QDRn33U6e5 bGPcbXKNPb3/SA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:05 2025 by rpki-client