This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: JWK90lFHyiRDujHcqVGzoJO8S2bf3nCYa9BDNTQOJQc= Subject key identifier: BF:54:00:A8:AF:01:1A:0C:7C:AA:70:6F:B9:1B:C8:BE:B9:A2:78:B5 Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019AF2AD6EEEB76CDCC36229484D80C16C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 1661 Signing time: Sat 06 Dec 2025 08:00:43 +0000 Manifest this update: Sat 06 Dec 2025 08:00:43 +0000 Manifest next update: Sun 07 Dec 2025 08:00:43 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: VxEDhTJVeILztPvDoBD9QO2A7lcM1FQAhyTeTAl6bnM=) 2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:6e:ee:b7:6c:dc:c3:62:29:48:4d:80:c1:6c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Dec 6 08:00:43 2025 GMT Not After : Dec 7 08:00:43 2025 GMT Subject: CN=bf5400a8af011a0c7caa706fb91bc8beb9a278b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:91:70:bd:09:8a:cf:a5:2d:79:c3:da:af: 52:b4:b9:b1:78:ba:55:b8:ae:f3:42:f7:92:97:41: f6:6c:16:50:b9:25:d6:54:f9:a4:73:f7:c7:d9:07: 11:34:5d:64:70:58:da:05:25:be:a5:58:36:d6:7f: 18:61:01:78:6e:1f:03:0c:18:47:d5:30:f5:f1:91: 75:0e:2c:04:f4:6f:45:20:0d:6f:ba:54:75:11:15: c3:7d:e1:72:38:54:d6:33:29:cf:49:15:4a:1a:fc: f2:6a:a7:2d:9b:9d:e5:00:a8:a1:1f:81:b3:c2:ae: cb:f3:0e:f9:8f:ad:f9:20:3d:91:8e:f7:ae:7a:59: 5d:db:af:55:c7:82:c8:12:8d:bc:55:97:9b:5b:c9: bd:03:49:a6:d3:0a:41:ea:17:f7:22:71:5d:b8:a3: 74:40:d2:0b:68:e9:4d:af:c1:89:69:ec:cd:ab:7e: 4d:08:19:22:21:94:99:20:e8:cd:ac:28:17:84:1e: 2b:9b:2f:eb:0d:97:a2:e1:af:85:d3:ee:b8:cd:28: ba:da:4a:aa:e1:41:41:ff:e7:b9:55:e4:b5:8a:89: b5:fc:30:ce:5c:11:4b:8c:5f:a8:2c:8d:84:74:e4: 86:4d:f7:c1:20:16:ce:46:aa:58:fc:c9:e0:46:c1: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:54:00:A8:AF:01:1A:0C:7C:AA:70:6F:B9:1B:C8:BE:B9:A2:78:B5 X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4a:66:36:fa:9a:89:63:b6:3e:07:e7:87:cc:45:8b:1b:3e: 96:cd:a6:ff:3f:ab:80:5b:fc:3f:7c:11:cd:86:40:45:52:8b: f8:78:9e:66:9b:46:a3:6b:6a:a0:3d:30:0a:8b:8e:18:db:dc: 8f:b6:e3:da:70:35:17:3f:b2:6d:2f:14:32:26:cc:fb:77:f7: 20:30:c7:97:52:06:9a:27:e5:ce:f2:e3:ec:f7:02:6d:82:bf: b3:eb:09:e8:db:34:0b:16:2b:da:45:a5:27:b9:a5:39:fd:51: e5:9d:3f:d0:4c:6d:25:ae:f6:31:4d:96:00:3c:76:d7:d6:5d: 58:fd:31:a7:15:c1:0e:e8:d6:1b:60:44:71:c6:76:12:84:c7: 12:1b:0f:50:dc:25:a6:77:bc:02:a9:74:da:df:b6:cd:6f:53: 8a:94:c8:6b:34:dd:df:96:1a:21:a5:14:f5:22:0c:a0:cd:22: 82:ed:31:c0:b0:3a:c0:8d:e7:69:84:1a:4c:71:9c:19:18:8a: 70:ed:cc:71:f9:14:90:dc:92:44:f6:88:9a:1a:b0:de:e7:dc: d4:d8:ca:3a:63:08:7c:76:5e:9b:ff:4a:f5:78:15:d9:48:ed: 8b:7d:bd:27:36:ab:dd:e9:51:c2:06:49:c8:79:40:ac:c6:19: 9d:6d:30:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrW7ut2zcw2IpSE2AwWwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjUxMjA2MDgwMDQzWhcNMjUxMjA3MDgwMDQzWjAzMTEwLwYDVQQD EyhiZjU0MDBhOGFmMDExYTBjN2NhYTcwNmZiOTFiYzhiZWI5YTI3OGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPuRcL0Jis+lLXnD2q9StLmxeLpV uK7zQveSl0H2bBZQuSXWVPmkc/fH2QcRNF1kcFjaBSW+pVg21n8YYQF4bh8DDBhH 1TD18ZF1DiwE9G9FIA1vulR1ERXDfeFyOFTWMynPSRVKGvzyaqctm53lAKihH4Gz wq7L8w75j635ID2Rjveuelld269Vx4LIEo28VZebW8m9A0mm0wpB6hf3InFduKN0 QNILaOlNr8GJaezNq35NCBkiIZSZIOjNrCgXhB4rmy/rDZei4a+F0+64zSi62kqq 4UFB/+e5VeS1iom1/DDOXBFLjF+oLI2EdOSGTffBIBbORqpY/MngRsHPeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9UAKivARoMfKpwb7kbyL65oni1MB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckpmNvqa iWO2Pgfnh8xFixs+ls2m/z+rgFv8P3wRzYZARVKL+HieZptGo2tqoD0wCouOGNvc j7bj2nA1Fz+ybS8UMibM+3f3IDDHl1IGmiflzvLj7PcCbYK/s+sJ6Ns0CxYr2kWl J7mlOf1R5Z0/0ExtJa72MU2WADx219ZdWP0xpxXBDujWG2BEccZ2EoTHEhsPUNwl pne8Aql02t+2zW9TipTIazTd35YaIaUU9SIMoM0igu0xwLA6wI3naYQaTHGcGRiK cO3McfkUkNySRPaImhqw3ufc1NjKOmMIfHZem/9K9XgV2Ujti329Jzar3elRwgZJ yHlArMYZnW0wTg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:47 2025 by rpki-client