This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft File: l96FxoT8_4PsQUirX29nzRUE-T0.mft (raw, json) Hash identifier: u3svTYeA51pGelRFj/Nnsj/xqXwtPByqjHT6YueTtWg= Subject key identifier: 9E:31:D6:A0:A9:B7:C4:88:44:71:B2:20:F4:05:AD:A3:31:66:86:F3 Authority key identifier: 97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D Certificate issuer: /CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Certificate serial: 019AF12E28C26448B3FDBB71D2DCE3AEB1CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft Manifest number: 1278 Signing time: Sat 06 Dec 2025 01:02:05 +0000 Manifest this update: Sat 06 Dec 2025 01:02:05 +0000 Manifest next update: Sun 07 Dec 2025 01:02:05 +0000 Files and hashes: 1: aNefWas-v_WpGI-_669JeJcpGCE.roa (hash: AyqK/NRp/xUAyry2Wae2nQWK8xpykIL1yZ7NXpMhO2U=) 2: l96FxoT8_4PsQUirX29nzRUE-T0.crl (hash: aFONfTV+XgmjXMg5BUM7mhoNUkKxDl6neOadbEr5sd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:28:c2:64:48:b3:fd:bb:71:d2:dc:e3:ae:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97de85c684fcff83ec4148ab5f6f67cd1504f93d Validity Not Before: Dec 6 01:02:05 2025 GMT Not After : Dec 7 01:02:05 2025 GMT Subject: CN=9e31d6a0a9b7c4884471b220f405ada3316686f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:53:14:62:8c:8f:58:b2:2b:a1:fb:bb:4e: 61:85:98:6c:6a:7b:0e:28:92:53:05:62:33:31:7e: 7b:5f:b7:51:e7:66:35:c1:e2:15:a3:7c:a7:85:bd: 3d:63:78:05:e5:6e:43:fe:b6:18:ab:de:8b:78:0c: 90:44:b7:ef:2e:be:c2:cc:09:b2:61:67:bc:f4:1f: 96:6b:1c:57:ef:71:59:29:25:96:91:4f:a4:da:c9: 6c:2d:1b:03:50:b1:de:28:e6:a9:0c:d1:d1:fb:3c: 15:02:c9:d9:5a:fa:d4:55:05:5a:47:08:1f:ae:bd: 33:3a:b9:5a:ac:c6:e4:e5:31:64:28:4c:f4:09:c8: fb:4c:63:9c:b6:36:54:6d:1a:23:5c:84:c4:52:73: 5f:b4:32:ff:b4:50:6c:00:6a:18:8e:26:06:b2:41: 54:37:22:ff:22:8c:84:b1:61:ee:83:59:e4:b1:9f: 6b:56:35:93:df:84:d7:bb:74:22:a2:cd:48:c6:74: a7:5a:ce:b2:50:6e:33:3d:c6:28:ee:17:96:38:dd: 10:d9:3e:31:b0:ae:00:a7:58:35:06:33:d4:26:d8: 60:48:8a:7c:94:90:4a:a8:a7:cb:52:a3:9d:54:ef: d6:19:45:3a:f4:a5:87:e0:a5:d3:6f:96:6a:b6:e1: 35:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:D6:A0:A9:B7:C4:88:44:71:B2:20:F4:05:AD:A3:31:66:86:F3 X509v3 Authority Key Identifier: keyid:97:DE:85:C6:84:FC:FF:83:EC:41:48:AB:5F:6F:67:CD:15:04:F9:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l96FxoT8_4PsQUirX29nzRUE-T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/db4526-e0ef-4e22-8ff9-5030d0ae6ebc/1/l96FxoT8_4PsQUirX29nzRUE-T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:46:43:6d:b0:42:17:d2:71:a1:07:e2:46:e2:9c:a9:18:e2: 4a:01:5d:84:f8:e7:51:7a:e9:98:61:54:05:67:08:88:90:01: bc:88:d3:65:b9:2f:13:26:c6:98:88:8b:23:85:f4:51:23:f2: 76:05:98:f5:a4:28:56:37:83:3d:fb:50:9d:54:64:5c:ee:1d: e1:ee:2b:6d:6a:a0:23:ad:54:23:71:30:e8:06:d7:ce:f3:1f: dc:d5:12:5e:7b:1c:c0:3c:90:27:83:c3:38:b9:98:0e:7f:f1: e5:c6:a7:f5:af:82:33:ee:51:8b:ec:03:11:cd:46:a6:4a:15: 9e:54:65:86:f4:03:d7:4b:02:f8:41:62:ce:58:10:df:49:25: b6:2e:66:01:e2:90:3b:1c:43:98:1c:91:97:56:69:1f:b8:7b: 43:90:e2:b0:b0:db:16:a8:85:d0:a4:33:22:b2:c0:33:8c:d8: b9:c8:8d:c6:e9:93:4e:36:d0:15:1b:ff:7b:a7:55:9b:7a:20: 15:60:3b:41:d2:3c:1b:9e:3b:13:95:c9:78:2b:b9:1d:0d:1a: 62:fd:e9:70:09:7c:6c:50:8c:b5:0f:05:32:bf:83:87:e9:db: 03:9f:2a:2a:70:b5:fd:f4:03:e4:c5:c8:75:f1:00:cc:26:1b: 28:84:c9:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLijCZEiz/btx0tzjrrHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGU4NWM2ODRmY2ZmODNlYzQxNDhhYjVmNmY2N2NkMTUw NGY5M2QwHhcNMjUxMjA2MDEwMjA1WhcNMjUxMjA3MDEwMjA1WjAzMTEwLwYDVQQD Eyg5ZTMxZDZhMGE5YjdjNDg4NDQ3MWIyMjBmNDA1YWRhMzMxNjY4NmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb1TFGKMj1iyK6H7u05hhZhsansO KJJTBWIzMX57X7dR52Y1weIVo3ynhb09Y3gF5W5D/rYYq96LeAyQRLfvLr7CzAmy YWe89B+WaxxX73FZKSWWkU+k2slsLRsDULHeKOapDNHR+zwVAsnZWvrUVQVaRwgf rr0zOrlarMbk5TFkKEz0Ccj7TGOctjZUbRojXITEUnNftDL/tFBsAGoYjiYGskFU NyL/IoyEsWHug1nksZ9rVjWT34TXu3Qios1IxnSnWs6yUG4zPcYo7heWON0Q2T4x sK4Ap1g1BjPUJthgSIp8lJBKqKfLUqOdVO/WGUU69KWH4KXTb5ZqtuE1YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4x1qCpt8SIRHGyIPQFraMxZobzMB8GA1UdIwQY MBaAFJfehcaE/P+D7EFIq19vZ80VBPk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjkt NTAzMGQwYWU2ZWJjLzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9kYjQ1MjYtZTBlZi00ZTIyLThmZjktNTAzMGQwYWU2ZWJj LzEvbDk2RnhvVDhfNFBzUVVpclgyOW56UlVFLVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekZDbbBC F9JxoQfiRuKcqRjiSgFdhPjnUXrpmGFUBWcIiJABvIjTZbkvEybGmIiLI4X0USPy dgWY9aQoVjeDPftQnVRkXO4d4e4rbWqgI61UI3Ew6AbXzvMf3NUSXnscwDyQJ4PD OLmYDn/x5can9a+CM+5Ri+wDEc1GpkoVnlRlhvQD10sC+EFizlgQ30klti5mAeKQ OxxDmByRl1ZpH7h7Q5DisLDbFqiF0KQzIrLAM4zYuciNxumTTjbQFRv/e6dVm3og FWA7QdI8G547E5XJeCu5HQ0aYv3pcAl8bFCMtQ8FMr+Dh+nbA58qKnC1/fQD5MXI dfEAzCYbKITJgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:44 2025 by rpki-client