This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json) Hash identifier: yqnLmipCwDZizF0kTPWtCW69a8nE0+ZwK5eeB4UytLI= Subject key identifier: 8B:7B:06:70:66:C2:E5:5D:19:F3:D2:4D:44:38:9A:6C:EF:13:33:A9 Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def Certificate serial: 019B2EF922F11FFE7BCDF1D3115A327C060B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:00:37 +0000 Manifest this update: Thu 18 Dec 2025 01:00:37 +0000 Manifest next update: Fri 19 Dec 2025 01:00:37 +0000 Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: ME0iQ28yA9mRM+mc/Otun1oJnl4JpRzjzkw3l/gsjQU=) 2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:22:f1:1f:fe:7b:cd:f1:d3:11:5a:32:7c:06:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def Validity Not Before: Dec 18 01:00:37 2025 GMT Not After : Dec 19 01:00:37 2025 GMT Subject: CN=8b7b067066c2e55d19f3d24d44389a6cef1333a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:e8:f6:e3:a4:7e:14:09:3e:69:39:8d:bd: b9:4d:06:85:9d:fe:12:77:b9:7a:f2:b3:93:84:45: 7c:0a:e1:66:2b:7e:9b:f4:b6:84:23:f0:49:a7:5f: 73:81:ac:7a:29:b4:45:39:66:6c:5c:80:8f:66:8b: fa:df:cb:7a:ff:90:02:5b:c7:1c:9d:35:4d:65:9b: f4:0f:1b:c4:8a:32:44:25:70:88:7d:f2:36:e4:15: ca:5c:5e:c8:9f:e1:ea:4e:17:10:1c:31:47:dc:b5: 36:40:d7:5a:4d:9a:1e:f1:ca:ec:51:ce:94:64:fe: 8b:61:11:d5:53:62:3c:e0:0b:56:f9:a4:49:6f:7f: 39:b5:1d:41:34:9d:72:2e:8c:1e:ed:25:f5:1c:ee: 4b:49:a1:a0:86:08:3e:93:35:e9:1b:b1:c8:1f:b7: fe:51:e4:8e:44:32:aa:1a:3d:2f:8d:51:81:3e:1d: c1:69:7a:59:21:b8:de:e4:0c:1a:6f:a4:06:7c:d9: c2:a5:69:3f:7e:49:67:00:cd:66:3a:af:9e:93:84: 90:ac:34:bd:a3:00:60:09:97:b9:59:10:1b:1f:97: 06:76:0a:f9:d7:40:ab:25:9f:65:7e:1b:78:02:12: 60:26:c2:a1:64:f5:f9:dc:ed:87:57:cb:13:a8:b3: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7B:06:70:66:C2:E5:5D:19:F3:D2:4D:44:38:9A:6C:EF:13:33:A9 X509v3 Authority Key Identifier: keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5b:f3:53:2e:db:79:2e:32:36:d3:4b:ae:b6:5f:a6:97:de: c2:39:fd:01:5d:bd:d5:61:e9:c5:ad:57:fc:3b:03:0a:dd:5b: 87:88:e8:64:71:fa:b2:35:cf:cc:56:ec:90:58:cf:11:e9:37: 07:08:34:53:02:eb:47:94:ce:23:87:4b:62:62:d7:ae:3a:97: 03:cc:c1:a5:ea:a3:2a:d6:81:91:81:58:66:ca:de:f7:88:50: c4:0a:e3:a7:60:90:80:cf:a4:7e:1d:92:be:42:09:02:b3:3e: 49:02:7a:36:1d:c5:79:19:60:3c:8b:55:b9:44:17:0f:83:16: fb:bc:72:13:15:ec:bf:68:4f:56:58:17:86:10:d8:60:06:11: 58:6a:da:5e:69:ca:ac:d0:32:31:fc:23:fe:bd:2a:c5:39:c7: 75:d0:2e:6b:39:af:4f:63:14:27:ea:d4:70:2a:e0:31:fd:5f: 62:d9:8b:74:ba:c5:64:9b:f9:0d:f8:99:1a:fb:c5:b9:25:bb: 5e:9c:2f:18:be:dc:8e:14:35:2a:ce:84:d2:86:8d:e4:52:d3: 4e:7b:e3:c2:ca:30:33:55:43:8a:da:5e:5b:c3:f2:4f:27:ed: 2a:83:03:00:e0:27:60:d0:f4:7b:e0:98:00:34:0b:1c:9e:91: 47:bc:09:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+SLxH/57zfHTEVoyfAYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi YjFkZWYwHhcNMjUxMjE4MDEwMDM3WhcNMjUxMjE5MDEwMDM3WjAzMTEwLwYDVQQD Eyg4YjdiMDY3MDY2YzJlNTVkMTlmM2QyNGQ0NDM4OWE2Y2VmMTMzM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhLo9uOkfhQJPmk5jb25TQaFnf4S d7l68rOThEV8CuFmK36b9LaEI/BJp19zgax6KbRFOWZsXICPZov638t6/5ACW8cc nTVNZZv0DxvEijJEJXCIffI25BXKXF7In+HqThcQHDFH3LU2QNdaTZoe8crsUc6U ZP6LYRHVU2I84AtW+aRJb385tR1BNJ1yLowe7SX1HO5LSaGghgg+kzXpG7HIH7f+ UeSORDKqGj0vjVGBPh3BaXpZIbje5Awab6QGfNnCpWk/fklnAM1mOq+ek4SQrDS9 owBgCZe5WRAbH5cGdgr510CrJZ9lfht4AhJgJsKhZPX53O2HV8sTqLObkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIt7BnBmwuVdGfPSTUQ4mmzvEzOpMB8GA1UdIwQY MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlvzUy7b eS4yNtNLrrZfppfewjn9AV291WHpxa1X/DsDCt1bh4joZHH6sjXPzFbskFjPEek3 Bwg0UwLrR5TOI4dLYmLXrjqXA8zBpeqjKtaBkYFYZsre94hQxArjp2CQgM+kfh2S vkIJArM+SQJ6Nh3FeRlgPItVuUQXD4MW+7xyExXsv2hPVlgXhhDYYAYRWGraXmnK rNAyMfwj/r0qxTnHddAuazmvT2MUJ+rUcCrgMf1fYtmLdLrFZJv5DfiZGvvFuSW7 XpwvGL7cjhQ1Ks6E0oaN5FLTTnvjwsowM1VDitpeW8PyTyftKoMDAOAnYND0e+CY ADQLHJ6RR7wJCw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:17 2025 by rpki-client