This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft File: L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json) Hash identifier: pf9brks33XpSd2AJZjcUs2WMUE1MlC3MY6ECHXxyj64= Subject key identifier: D6:0B:FA:05:DC:49:19:66:36:47:1C:CE:74:49:26:24:9A:A3:1C:E1 Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Certificate serial: 019AF1D2109E9D0C32531A2DAC0DA4FF1947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft Manifest number: 1747 Signing time: Sat 06 Dec 2025 04:01:07 +0000 Manifest this update: Sat 06 Dec 2025 04:01:07 +0000 Manifest next update: Sun 07 Dec 2025 04:01:07 +0000 Files and hashes: 1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=) 2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: P5rHuBWSz5xkubstAMwJYBcNUG48JFReMy2fuKF6YQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:10:9e:9d:0c:32:53:1a:2d:ac:0d:a4:ff:19:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9 Validity Not Before: Dec 6 04:01:07 2025 GMT Not After : Dec 7 04:01:07 2025 GMT Subject: CN=d60bfa05dc49196636471cce744926249aa31ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:6e:f8:af:c7:06:99:92:64:82:6b:c8:26: e3:1e:6d:1a:96:0f:d9:ce:14:a3:d5:e1:fd:26:bb: 65:d4:25:29:b1:23:3d:d3:15:b5:86:df:b0:98:4b: 3d:56:2a:67:26:36:dc:a0:a0:80:b7:3d:9b:19:c6: ec:40:71:64:2c:b0:22:be:46:cd:3d:a4:5f:96:40: ad:7f:d1:40:0c:9e:66:a8:97:02:8a:5b:2b:0e:53: 09:fc:d5:85:10:85:e9:1e:c6:42:54:5e:e0:0e:f1: 82:29:a6:0d:42:fd:fc:f9:5b:ae:d8:74:b5:1c:0d: e3:38:42:75:d7:16:99:c8:74:5b:b1:98:f4:96:c1: 95:ee:56:71:cd:36:8b:e3:7f:e9:86:4d:e5:5a:82: 98:2b:e0:1f:33:b2:d0:76:36:23:09:10:5b:0d:44: d5:57:d2:e6:31:35:d1:75:cd:7d:df:5a:fb:43:28: 7c:37:f8:d7:83:9a:a3:c9:c0:37:8c:cb:65:4f:5d: ad:84:11:2d:1a:2a:fc:ae:b5:5e:52:4f:b1:79:94: 60:5c:4e:06:f7:64:48:6e:fa:8f:57:b8:50:10:b4: a7:4e:7c:e6:59:08:85:74:96:95:5d:64:07:09:e9: 95:80:f9:ef:bb:36:39:ef:da:b3:dd:11:67:0e:3b: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0B:FA:05:DC:49:19:66:36:47:1C:CE:74:49:26:24:9A:A3:1C:E1 X509v3 Authority Key Identifier: keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fb:6d:a5:c1:2a:5a:d1:71:89:6c:21:cc:d5:57:b6:53:3c: b9:f5:65:24:12:a3:f6:f0:6c:f8:6a:90:26:7e:be:5b:4f:c5: da:c7:1e:be:25:59:5d:fd:53:31:15:bf:9c:5f:54:c6:5d:e7: f4:36:b0:23:f1:31:fa:b6:7b:ea:f3:71:c0:93:4c:e1:e8:12: 6b:ab:64:7f:4c:bc:0e:2c:94:6b:83:47:66:fe:3d:95:f4:89: 96:b2:d8:95:12:01:db:2c:7f:49:2e:20:2e:ad:4c:6b:ae:18: 44:a8:0d:62:fd:e9:aa:02:d8:df:da:49:63:73:7a:79:5e:5b: 58:9f:df:a1:bc:ef:cf:03:cd:33:e6:f2:64:43:cb:8d:24:6b: dc:1c:da:95:b2:92:85:7d:ac:29:69:5a:ef:71:28:5c:0f:50: fb:90:91:09:f4:18:39:89:85:22:69:52:28:d4:5d:b7:8d:c6: 08:5e:2e:c7:c4:1d:ab:cd:54:6b:73:02:8e:f8:96:76:e4:3f: b3:66:f0:90:03:20:7b:15:5d:30:5d:0e:a1:a8:07:ac:13:9b: ed:3e:50:3b:29:d8:47:6f:84:d9:c0:a8:bc:56:b5:33:f9:a8: da:46:d4:38:b9:15:f3:20:22:8c:9a:d9:b2:82:40:8d:bb:bc: 8d:da:cd:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hCenQwyUxotrA2k/xlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5 Y2IxZjkwHhcNMjUxMjA2MDQwMTA3WhcNMjUxMjA3MDQwMTA3WjAzMTEwLwYDVQQD EyhkNjBiZmEwNWRjNDkxOTY2MzY0NzFjY2U3NDQ5MjYyNDlhYTMxY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Bu+K/HBpmSZIJryCbjHm0alg/Z zhSj1eH9Jrtl1CUpsSM90xW1ht+wmEs9VipnJjbcoKCAtz2bGcbsQHFkLLAivkbN PaRflkCtf9FADJ5mqJcCilsrDlMJ/NWFEIXpHsZCVF7gDvGCKaYNQv38+Vuu2HS1 HA3jOEJ11xaZyHRbsZj0lsGV7lZxzTaL43/phk3lWoKYK+AfM7LQdjYjCRBbDUTV V9LmMTXRdc1931r7Qyh8N/jXg5qjycA3jMtlT12thBEtGir8rrVeUk+xeZRgXE4G 92RIbvqPV7hQELSnTnzmWQiFdJaVXWQHCemVgPnvuzY579qz3RFnDjvrdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYL+gXcSRlmNkccznRJJiSaoxzhMB8GA1UdIwQY MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5 LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvttpcEq WtFxiWwhzNVXtlM8ufVlJBKj9vBs+GqQJn6+W0/F2sceviVZXf1TMRW/nF9Uxl3n 9DawI/Ex+rZ76vNxwJNM4egSa6tkf0y8DiyUa4NHZv49lfSJlrLYlRIB2yx/SS4g Lq1Ma64YRKgNYv3pqgLY39pJY3N6eV5bWJ/fobzvzwPNM+byZEPLjSRr3BzalbKS hX2sKWla73EoXA9Q+5CRCfQYOYmFImlSKNRdt43GCF4ux8Qdq81Ua3MCjviWduQ/ s2bwkAMgexVdMF0OoagHrBOb7T5QOynYR2+E2cCovFa1M/mo2kbUOLkV8yAijJrZ soJAjbu8jdrNbg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:37:37 2025 by rpki-client