This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: dET/ceHrgbhcuYxmpny+GLWNP7v8tlKQ4gUvP8adUqM= Subject key identifier: 52:A1:26:12:85:95:B0:19:F1:40:DB:D6:97:F5:EB:9C:42:D1:B6:DA Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019B3344A4F53806BEEACBCE380E5D4A67FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 1704 Signing time: Thu 18 Dec 2025 21:01:35 +0000 Manifest this update: Thu 18 Dec 2025 21:01:35 +0000 Manifest next update: Fri 19 Dec 2025 21:01:35 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: vkGuzxGK+18qkOX+9xOXvAF+JI4dW73/Z2Lz+6VTyII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:a4:f5:38:06:be:ea:cb:ce:38:0e:5d:4a:67:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 18 21:01:35 2025 GMT Not After : Dec 19 21:01:35 2025 GMT Subject: CN=52a126128595b019f140dbd697f5eb9c42d1b6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d6:14:96:a6:62:28:09:e3:76:23:63:98:a4: 85:d8:64:34:31:81:84:a3:31:09:96:64:f2:56:e0: 56:c2:b4:9e:c9:bd:c5:76:d7:4e:31:40:78:65:6a: 27:87:bc:1c:a2:0c:8a:4a:d1:d0:6b:79:98:29:9c: 8e:99:2e:c9:e9:56:93:31:c0:26:4b:c9:92:60:83: 2b:de:ca:c0:69:80:93:6d:b3:af:04:8a:dc:48:05: ea:b9:97:a5:27:3b:00:fd:d8:a7:3b:96:36:f9:66: 0a:be:d1:e9:21:af:fb:08:a0:c9:b1:cd:fa:4d:b5: f5:c9:89:bf:d8:38:d5:70:29:69:e1:24:bd:0e:80: bd:18:7a:d4:5c:86:9b:4e:d1:c1:98:c6:f7:ee:e1: 05:1e:9a:3a:d5:b2:56:90:43:2a:e0:56:d8:7b:c5: a9:07:c5:a2:e9:f4:78:8b:77:d9:10:c9:c7:79:02: b7:2d:0d:38:b6:b1:40:0c:01:c1:60:34:14:4e:53: e8:d7:06:c6:e5:97:67:8b:6a:37:4f:40:7f:b4:c3: a7:87:82:95:e3:32:5a:10:21:cf:e2:8c:15:56:5d: cf:39:3a:4c:3d:3c:36:49:b4:79:b6:d0:4e:ea:e4: 92:18:54:8e:1b:52:03:57:e6:10:c3:42:a2:8f:5d: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:26:12:85:95:B0:19:F1:40:DB:D6:97:F5:EB:9C:42:D1:B6:DA X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cb:a4:f5:18:05:61:19:55:43:3f:f4:29:56:21:eb:89:22: 08:57:02:59:a0:3b:3e:0c:1f:42:9e:21:05:f3:0b:f7:bf:97: 6d:f5:56:16:a3:f0:63:6a:86:cb:6f:ed:19:0f:1e:ed:84:28: d6:10:56:4b:30:27:f4:ed:65:bb:e0:55:8a:4a:0b:6a:13:4b: ab:22:e9:24:59:91:c4:ed:66:6f:eb:f6:54:1f:ef:f9:a6:79: 8d:d9:91:47:c5:60:c0:40:78:b7:bc:5e:45:26:04:98:89:c4: 94:40:a9:2c:d4:82:19:e1:c4:ea:5c:9b:a3:59:bb:7c:0c:f9: bd:7c:49:b1:e9:a1:b3:0c:04:cf:84:bb:5f:3d:c4:a3:d9:cd: 57:9e:ad:4f:44:a5:0a:f7:8c:09:73:1a:0b:40:aa:73:d0:81: 1f:31:3b:c7:94:c1:1d:b7:f3:51:68:02:40:07:28:bf:19:66: 4d:ae:bb:43:fe:d7:0f:d5:d2:7e:f0:02:4b:9a:42:29:aa:b6: 81:f9:e3:71:da:95:f0:86:07:9f:09:8b:cd:3b:09:b2:25:92: fb:30:5a:2c:70:9f:2f:1f:8e:ac:d6:50:32:36:b3:e3:66:d1: 0f:91:e1:8d:02:ff:fb:d5:ff:1f:2d:8b:f4:eb:26:7e:54:a4: 90:fd:53:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRKT1OAa+6svOOA5dSmf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjE4MjEwMTM1WhcNMjUxMjE5MjEwMTM1WjAzMTEwLwYDVQQD Eyg1MmExMjYxMjg1OTViMDE5ZjE0MGRiZDY5N2Y1ZWI5YzQyZDFiNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNYUlqZiKAnjdiNjmKSF2GQ0MYGE ozEJlmTyVuBWwrSeyb3FdtdOMUB4ZWonh7wcogyKStHQa3mYKZyOmS7J6VaTMcAm S8mSYIMr3srAaYCTbbOvBIrcSAXquZelJzsA/dinO5Y2+WYKvtHpIa/7CKDJsc36 TbX1yYm/2DjVcClp4SS9DoC9GHrUXIabTtHBmMb37uEFHpo61bJWkEMq4FbYe8Wp B8Wi6fR4i3fZEMnHeQK3LQ04trFADAHBYDQUTlPo1wbG5Zdni2o3T0B/tMOnh4KV 4zJaECHP4owVVl3POTpMPTw2SbR5ttBO6uSSGFSOG1IDV+YQw0Kij112YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKhJhKFlbAZ8UDb1pf165xC0bbaMB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcuk9RgF YRlVQz/0KVYh64kiCFcCWaA7PgwfQp4hBfML97+XbfVWFqPwY2qGy2/tGQ8e7YQo 1hBWSzAn9O1lu+BVikoLahNLqyLpJFmRxO1mb+v2VB/v+aZ5jdmRR8VgwEB4t7xe RSYEmInElECpLNSCGeHE6lybo1m7fAz5vXxJsemhswwEz4S7Xz3Eo9nNV56tT0Sl CveMCXMaC0Cqc9CBHzE7x5TBHbfzUWgCQAcovxlmTa67Q/7XD9XSfvACS5pCKaq2 gfnjcdqV8IYHnwmLzTsJsiWS+zBaLHCfLx+OrNZQMjaz42bRD5HhjQL/+9X/Hy2L 9OsmflSkkP1TaQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:06:59 2025 by rpki-client