This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json) Hash identifier: leI3a3mIDhp6ceApukdb3CMNwwqC3iY39cDP/lcxrUE= Subject key identifier: C2:A3:11:82:D2:0C:41:64:6F:97:A5:2B:AB:27:EF:42:DC:3D:9D:04 Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Certificate serial: 019B2741678417BFB61E1388C1EFCB48F677 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft Manifest number: 137C Signing time: Tue 16 Dec 2025 13:02:36 +0000 Manifest this update: Tue 16 Dec 2025 13:02:36 +0000 Manifest next update: Wed 17 Dec 2025 13:02:36 +0000 Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=) 2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: vdnmI/uEtaZoU6uNVDoJnBzJomnjrrwXridb2MG156U=) 3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=) 4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:67:84:17:bf:b6:1e:13:88:c1:ef:cb:48:f6:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Validity Not Before: Dec 16 13:02:36 2025 GMT Not After : Dec 17 13:02:36 2025 GMT Subject: CN=c2a31182d20c41646f97a52bab27ef42dc3d9d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b2:c3:a3:2c:a1:6e:af:b8:b2:68:ce:15:f4: ad:d9:c4:a7:f7:f8:59:0c:a9:05:91:15:05:5b:1c: c0:6d:ac:94:d6:4b:11:19:52:5c:92:28:ea:b1:17: 63:f0:30:0d:25:5f:3d:ad:be:22:81:17:61:2f:fa: 75:1e:5d:5a:00:e8:b9:10:93:de:a7:dd:14:c1:7d: 22:e6:0c:81:bd:5e:45:b9:f7:6b:46:08:09:71:cc: 72:29:9c:b4:16:b5:77:d7:0e:7c:ef:88:17:ac:e5: 33:3b:0a:0b:78:64:42:38:90:c8:10:a7:b5:64:1d: d4:a7:70:58:90:3c:f5:fc:09:0b:c7:73:28:49:86: 10:a6:6a:49:41:bb:c0:7c:c2:13:d7:19:9d:50:6b: 95:7c:60:ce:7b:d7:d5:08:39:7b:52:ac:07:b5:d5: cd:fd:d2:c1:89:d1:06:38:c0:06:a9:df:6d:f7:ed: 72:2a:1e:aa:39:5f:b6:fa:f4:77:8e:f5:58:8e:99: 66:7f:6f:b9:21:02:e7:c2:f3:17:63:2c:8b:a5:d6: fe:3b:d8:8e:e1:29:31:c9:22:7d:1f:b5:a1:d6:a0: fe:cb:a5:0e:34:98:4b:87:0b:30:1d:38:44:d3:9a: 2a:7c:18:5c:19:8b:ea:45:5e:25:95:5b:91:5a:da: bd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:11:82:D2:0C:41:64:6F:97:A5:2B:AB:27:EF:42:DC:3D:9D:04 X509v3 Authority Key Identifier: keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:17:25:0d:3e:1c:95:7f:e6:f6:95:a0:44:1a:fa:e9:a9:7d: 89:50:3b:19:ad:bd:c5:97:cc:4f:f9:74:2f:f9:d2:f9:5e:01: 3e:11:2a:e9:7c:be:99:77:f8:bb:af:49:f7:68:24:67:72:25: 2b:ef:eb:a5:a2:03:83:04:7e:08:57:e1:ce:9c:e4:af:ab:6b: 16:44:a7:c2:a1:fa:c4:9e:07:59:a4:c1:36:8a:fb:23:c7:3e: 14:a0:6e:2a:c1:f5:40:b7:aa:04:57:f8:90:c2:59:46:ce:34: 17:09:e0:62:a7:3b:36:57:34:33:b8:ce:4f:c9:e1:0e:60:f2: ee:55:2c:48:ee:44:2a:da:97:52:45:d8:6c:f9:4a:84:5a:be: 66:d3:4c:74:03:0f:8a:0f:78:c8:61:90:35:a1:09:49:10:38: be:5d:e9:e9:a9:98:c8:bb:4a:f9:88:19:84:e9:f1:21:4b:b3: 0b:f6:a9:eb:fc:d2:87:6f:28:a3:72:4c:d9:45:92:15:bb:56: 65:e3:a8:5e:86:c1:6f:47:ca:df:ae:3e:86:e4:7e:da:6a:e8: 7b:23:7e:b8:90:fc:93:12:b9:06:62:3a:ab:88:35:89:d9:79: 90:f0:c1:16:19:ad:67:2b:14:a6:73:5d:e3:1c:de:c5:5a:ca: 0d:99:87:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQWeEF7+2HhOIwe/LSPZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh MTI4MzQwHhcNMjUxMjE2MTMwMjM2WhcNMjUxMjE3MTMwMjM2WjAzMTEwLwYDVQQD EyhjMmEzMTE4MmQyMGM0MTY0NmY5N2E1MmJhYjI3ZWY0MmRjM2Q5ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bLDoyyhbq+4smjOFfSt2cSn9/hZ DKkFkRUFWxzAbayU1ksRGVJckijqsRdj8DANJV89rb4igRdhL/p1Hl1aAOi5EJPe p90UwX0i5gyBvV5FufdrRggJccxyKZy0FrV31w5874gXrOUzOwoLeGRCOJDIEKe1 ZB3Up3BYkDz1/AkLx3MoSYYQpmpJQbvAfMIT1xmdUGuVfGDOe9fVCDl7UqwHtdXN /dLBidEGOMAGqd9t9+1yKh6qOV+2+vR3jvVYjplmf2+5IQLnwvMXYyyLpdb+O9iO 4SkxySJ9H7Wh1qD+y6UONJhLhwswHThE05oqfBhcGYvqRV4llVuRWtq9jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKjEYLSDEFkb5elK6sn70LcPZ0EMB8GA1UdIwQY MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt OWQwNzQzMzcwNDk1LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1 LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBclDT4c lX/m9pWgRBr66al9iVA7Ga29xZfMT/l0L/nS+V4BPhEq6Xy+mXf4u69J92gkZ3Il K+/rpaIDgwR+CFfhzpzkr6trFkSnwqH6xJ4HWaTBNor7I8c+FKBuKsH1QLeqBFf4 kMJZRs40FwngYqc7Nlc0M7jOT8nhDmDy7lUsSO5EKtqXUkXYbPlKhFq+ZtNMdAMP ig94yGGQNaEJSRA4vl3p6amYyLtK+YgZhOnxIUuzC/ap6/zSh28oo3JM2UWSFbtW ZeOoXobBb0fK364+huR+2mroeyN+uJD8kxK5BmI6q4g1idl5kPDBFhmtZysUpnNd 4xzexVrKDZmHKQ== -----END CERTIFICATE-----Generated at Tue Dec 16 23:04:17 2025 by rpki-client