This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: Eu/2GEL69MgJj9/ilFB/HUFBEOu63MDZIMATnebKlmI= Subject key identifier: 52:5E:3F:91:5A:C6:DB:F4:41:09:C6:10:72:61:31:7D:46:59:95:C5 Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019AF57844443BA285D3DBBB2FF097292675 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 16E4 Signing time: Sat 06 Dec 2025 21:01:30 +0000 Manifest this update: Sat 06 Dec 2025 21:01:30 +0000 Manifest next update: Sun 07 Dec 2025 21:01:30 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: sulX6KiP+o6FXirjYfHC5UtjE1IDzRJyE4ImAECTkhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:44:44:3b:a2:85:d3:db:bb:2f:f0:97:29:26:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 6 21:01:30 2025 GMT Not After : Dec 7 21:01:30 2025 GMT Subject: CN=525e3f915ac6dbf44109c6107261317d465995c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:35:d5:a9:34:7a:27:0b:0c:65:4b:0c:5e:94: f7:9e:f9:dc:64:d9:d1:5b:f9:35:0d:b7:3f:2c:83: 12:14:9d:1e:dc:64:6d:9e:e7:f6:1b:10:42:73:e0: 09:14:59:72:ea:40:53:ac:45:4c:67:3a:38:6a:ae: 1a:03:eb:fc:24:b7:39:7f:83:b4:d2:20:c5:42:f9: 8f:6a:10:83:5e:8e:6d:49:d7:bc:ed:72:d0:15:e0: f5:74:6c:34:b9:10:f3:29:7f:15:14:b6:ff:2c:4b: 66:ff:e8:63:b4:26:73:32:f2:50:f7:23:f8:d7:8d: 9b:45:6e:06:f6:ea:ab:d3:00:57:28:e0:fa:fc:ed: b1:8b:47:55:96:f0:47:db:0d:7e:67:c7:12:15:05: a6:00:db:09:98:e2:7e:98:3e:35:f9:5e:1f:66:52: 2a:9d:40:8d:1d:cc:d5:fb:c9:b0:70:8d:ea:b9:5b: 7e:a0:46:90:e1:04:0f:92:fe:b8:0b:f6:6e:7c:56: 2c:45:f0:4a:94:78:28:65:c5:d8:66:7e:05:3e:a1: b9:05:e1:a7:04:a9:fb:a4:81:63:89:2e:f5:fd:3d: 92:e6:cf:94:f4:e4:6c:f0:21:99:73:5e:76:b0:63: 60:74:04:4d:58:76:72:f4:57:6a:fe:d5:3b:fe:cc: 28:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:3F:91:5A:C6:DB:F4:41:09:C6:10:72:61:31:7D:46:59:95:C5 X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dc:ce:4c:74:bb:83:ce:69:44:5a:30:76:8d:6c:94:1f:4a: bc:56:28:33:d5:89:76:d8:17:ae:ca:a3:c8:3a:a4:a4:7b:d1: 77:74:91:18:24:1e:67:06:43:d2:d0:b0:a4:49:8b:8a:11:66: 6f:db:20:f2:28:52:89:b8:0b:2e:7c:6f:56:26:ff:2b:34:5e: 7c:dc:35:7b:aa:e9:e5:54:f1:d4:19:ba:c8:89:00:12:62:8f: b9:0c:16:5e:2d:66:c6:82:30:fa:44:02:9d:21:b6:57:43:ca: b8:8a:d3:8e:a6:4b:8f:e2:0e:fb:3b:d7:b6:19:10:ce:49:f3: a3:c6:60:f8:95:30:fe:f9:9c:8d:06:0e:4e:07:a1:d8:27:f9: 34:f3:b8:46:b7:b3:cf:79:eb:f7:b2:2d:9a:7c:09:77:98:61: 25:cd:32:15:a8:87:f5:7b:bf:07:93:15:33:a2:2c:da:45:c3: be:70:c6:cc:13:30:ec:05:fe:44:21:d8:02:9a:d8:ca:ca:e5: 06:1a:5e:00:14:b1:b3:8b:d7:a6:68:52:04:70:e2:5e:8c:43: 98:83:5b:0e:72:31:48:ff:8b:8d:ed:19:c6:10:ed:eb:2d:7e: ae:56:cd:9e:fe:31:dc:e6:4c:5a:1d:58:c7:14:10:24:ea:5d: 72:06:e6:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eEREO6KF09u7L/CXKSZ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjA2MjEwMTMwWhcNMjUxMjA3MjEwMTMwWjAzMTEwLwYDVQQD Eyg1MjVlM2Y5MTVhYzZkYmY0NDEwOWM2MTA3MjYxMzE3ZDQ2NTk5NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jXVqTR6JwsMZUsMXpT3nvncZNnR W/k1Dbc/LIMSFJ0e3GRtnuf2GxBCc+AJFFly6kBTrEVMZzo4aq4aA+v8JLc5f4O0 0iDFQvmPahCDXo5tSde87XLQFeD1dGw0uRDzKX8VFLb/LEtm/+hjtCZzMvJQ9yP4 142bRW4G9uqr0wBXKOD6/O2xi0dVlvBH2w1+Z8cSFQWmANsJmOJ+mD41+V4fZlIq nUCNHczV+8mwcI3quVt+oEaQ4QQPkv64C/ZufFYsRfBKlHgoZcXYZn4FPqG5BeGn BKn7pIFjiS71/T2S5s+U9ORs8CGZc152sGNgdARNWHZy9Fdq/tU7/swodQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJeP5Faxtv0QQnGEHJhMX1GWZXFMB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtzOTHS7 g85pRFowdo1slB9KvFYoM9WJdtgXrsqjyDqkpHvRd3SRGCQeZwZD0tCwpEmLihFm b9sg8ihSibgLLnxvVib/KzRefNw1e6rp5VTx1Bm6yIkAEmKPuQwWXi1mxoIw+kQC nSG2V0PKuIrTjqZLj+IO+zvXthkQzknzo8Zg+JUw/vmcjQYOTgeh2Cf5NPO4Rrez z3nr97ItmnwJd5hhJc0yFaiH9Xu/B5MVM6Is2kXDvnDGzBMw7AX+RCHYAprYysrl BhpeABSxs4vXpmhSBHDiXoxDmINbDnIxSP+Lje0ZxhDt6y1+rlbNnv4x3OZMWh1Y xxQQJOpdcgbmzg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:42 2025 by rpki-client