This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft File: 96WNGxKutVgzKN2lJdBphnS7He8.mft (raw, json) Hash identifier: US0GkUAVpZDRGw9RkI1N1VxcHjdaknaOVyJou1P7qys= Subject key identifier: C8:7F:35:3F:9C:5F:6E:CD:AE:F3:A1:DD:06:25:48:55:F6:E1:66:ED Authority key identifier: F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF Certificate issuer: /CN=f7a58d1b12aeb5583328dda525d0698674bb1def Certificate serial: 019AF31B3926146E8E6C13C8FA756DF9CA71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: 96WNGxKutVgzKN2lJdBphnS7He8.crl (hash: rsHdXJoZCWtBXhpnGDj5H0TnnpJd+MkJ+7c+HeslAms=) 2: T-ndwyW2lzOqFwfi0HlwvxGN6hA.roa (hash: SwBUiR0PUxgXxZT0VaCgm/zNAN819Fxo/yeUtptTXzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:39:26:14:6e:8e:6c:13:c8:fa:75:6d:f9:ca:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a58d1b12aeb5583328dda525d0698674bb1def Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=c87f353f9c5f6ecdaef3a1dd06254855f6e166ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:15:70:89:3b:a4:d1:bc:8a:fe:b3:c0:5b: c2:ed:e7:f2:db:33:1c:9d:9c:d7:ec:c9:95:5b:c7: 85:e6:cc:8d:9b:91:91:87:e1:4c:e0:54:17:f2:8f: 71:8c:33:f0:14:8a:cb:c0:d2:be:46:ee:25:25:ae: 53:31:93:d0:6c:fb:7d:d7:a9:25:eb:b4:be:c7:e4: 48:01:ab:5e:83:10:e4:c9:71:06:d8:c9:e1:71:79: 95:69:35:10:53:80:9c:c9:e2:71:97:db:2c:cb:48: 59:ac:0b:11:50:d1:4b:e6:e7:8f:77:76:0b:44:de: c7:21:96:89:bf:13:15:d7:a5:df:82:97:9c:d3:b6: c5:9d:af:3f:33:72:e0:0e:fb:53:f5:46:5a:e8:8f: 35:5d:a8:5e:ba:36:51:c8:7c:2a:99:d4:a7:2b:f5: a8:64:4c:ef:2b:2e:39:fc:86:60:b7:b8:7e:77:5c: ce:20:83:e1:c6:da:af:22:40:7e:a2:f1:59:32:96: a4:53:ff:f9:51:6f:14:4b:78:31:2e:49:59:12:0a: 41:45:d7:69:a7:47:8b:c3:39:21:17:cf:d8:7a:a9: df:ab:26:4b:c9:40:de:37:84:36:cd:bc:28:21:c5: 10:a9:23:2b:8f:62:fb:65:1c:da:d5:2c:89:88:60: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7F:35:3F:9C:5F:6E:CD:AE:F3:A1:DD:06:25:48:55:F6:E1:66:ED X509v3 Authority Key Identifier: keyid:F7:A5:8D:1B:12:AE:B5:58:33:28:DD:A5:25:D0:69:86:74:BB:1D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96WNGxKutVgzKN2lJdBphnS7He8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e07b-e9e4-42a5-b8e0-a8d3838052d0/1/96WNGxKutVgzKN2lJdBphnS7He8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:65:bd:04:30:e2:9f:51:ac:7b:08:02:ad:84:36:1f:89: 2a:26:9c:2d:fb:05:dc:30:d6:4f:99:11:9a:ac:58:f5:d8:08: 78:91:1b:9f:b9:84:68:81:21:96:10:46:d8:d1:1c:b4:86:8d: ae:83:80:64:7b:39:10:b9:c3:11:d0:09:60:21:99:ff:6f:85: e5:04:68:98:b7:ec:83:a1:f8:9a:ac:62:1d:73:00:50:74:aa: 8e:a3:b5:19:70:44:c5:45:c5:1f:43:a9:96:d2:6a:be:dd:c3: 8f:51:89:d4:5c:f4:34:1c:b7:aa:3c:29:47:15:53:e7:55:39: 16:27:67:e5:e0:24:a0:a6:e9:81:6c:7b:9c:18:59:d0:32:96: a7:c3:95:85:77:67:57:da:05:cd:05:5c:9c:a3:21:53:3a:d4: 57:a9:d9:22:e5:a4:e7:08:ac:db:56:d0:5a:76:6d:7f:1d:ae: c0:fc:34:94:92:f3:27:d0:a5:dc:1a:f1:37:6c:02:53:4c:d8: 11:9c:a1:96:ea:aa:c7:3d:5b:4f:2d:3a:d8:73:03:e6:18:ee: ac:76:6f:27:63:43:e3:e3:4d:ac:25:4a:5f:80:7d:38:9f:6b: da:b4:3e:2a:ee:33:6a:b8:87:c3:65:42:b7:dd:18:10:bb:d8: 60:d8:92:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzkmFG6ObBPI+nVt+cpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YTU4ZDFiMTJhZWI1NTgzMzI4ZGRhNTI1ZDA2OTg2NzRi YjFkZWYwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhjODdmMzUzZjljNWY2ZWNkYWVmM2ExZGQwNjI1NDg1NWY2ZTE2NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneAVcIk7pNG8iv6zwFvC7efy2zMc nZzX7MmVW8eF5syNm5GRh+FM4FQX8o9xjDPwFIrLwNK+Ru4lJa5TMZPQbPt916kl 67S+x+RIAategxDkyXEG2MnhcXmVaTUQU4CcyeJxl9ssy0hZrAsRUNFL5uePd3YL RN7HIZaJvxMV16Xfgpec07bFna8/M3LgDvtT9UZa6I81XaheujZRyHwqmdSnK/Wo ZEzvKy45/IZgt7h+d1zOIIPhxtqvIkB+ovFZMpakU//5UW8US3gxLklZEgpBRddp p0eLwzkhF8/YeqnfqyZLyUDeN4Q2zbwoIcUQqSMrj2L7ZRza1SyJiGCwKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh/NT+cX27NrvOh3QYlSFX24WbtMB8GA1UdIwQY MBaAFPeljRsSrrVYMyjdpSXQaYZ0ux3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAt YThkMzgzODA1MmQwLzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UwN2ItZTllNC00MmE1LWI4ZTAtYThkMzgzODA1MmQw LzEvOTZXTkd4S3V0Vmd6S04ybEpkQnBoblM3SGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjdlvQQw 4p9RrHsIAq2ENh+JKiacLfsF3DDWT5kRmqxY9dgIeJEbn7mEaIEhlhBG2NEctIaN roOAZHs5ELnDEdAJYCGZ/2+F5QRomLfsg6H4mqxiHXMAUHSqjqO1GXBExUXFH0Op ltJqvt3Dj1GJ1Fz0NBy3qjwpRxVT51U5Fidn5eAkoKbpgWx7nBhZ0DKWp8OVhXdn V9oFzQVcnKMhUzrUV6nZIuWk5wis21bQWnZtfx2uwPw0lJLzJ9Cl3BrxN2wCU0zY EZyhluqqxz1bTy062HMD5hjurHZvJ2ND4+NNrCVKX4B9OJ9r2rQ+Ku4zariHw2VC t90YELvYYNiSWw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:40 2025 by rpki-client