This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft File: 96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json) Hash identifier: UT6bp7Ze1VRI8h9CeuPwzgxfB4i12TMtdqZXy/wShKg= Subject key identifier: 2A:41:56:15:64:F7:3D:F9:10:C0:90:CC:57:69:FE:09:02:1E:F6:6D Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 Certificate issuer: /CN=f7aa039b886b226578bdb6a42781bf59044bb138 Certificate serial: 019B115CF17DF909038E8A2C3EBE6216D14C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft Manifest number: 1777 Signing time: Fri 12 Dec 2025 07:01:02 +0000 Manifest this update: Fri 12 Dec 2025 07:01:02 +0000 Manifest next update: Sat 13 Dec 2025 07:01:02 +0000 Files and hashes: 1: 5pSATMPZ0p7gsB8mMb7VRMdgILk.roa (hash: n6iETK+1U2jYxCvuN/hxrmzW6QRPJ6PVi/YnvpAOe54=) 2: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: 2mbvTHOUoLaIVEoevCNA8njCq6HGn3VDKKBsircJ8go=) 3: HOzDSyhci1oqkFYg_HbCSVURV70.roa (hash: nhIbLdZhFO91+DXj7DSINlsbz0bS+HiCo4ktiLJuf1I=) 4: HTtaJI7F0HZATXXascx3TmNByxo.roa (hash: d5j76fTLUAV6ovcqXej2UO/z7lwi9LauG77wR6/wZRE=) 5: Zc3EPNVFRcdWBGFghDwIYYsiutk.roa (hash: m81UKM1wAmpf9BPJ2gZjuvXEWH2Fd1esmxulacEVZrY=) 6: jEK1d3vUN0cIlA-uXNamjthkOwI.roa (hash: 41tF5GEIsjhhQFzZ4Z9ebWeIwUkdNFTY9RSR2SItUCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:f1:7d:f9:09:03:8e:8a:2c:3e:be:62:16:d1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138 Validity Not Before: Dec 12 07:01:02 2025 GMT Not After : Dec 13 07:01:02 2025 GMT Subject: CN=2a41561564f73df910c090cc5769fe09021ef66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:77:90:3e:c6:f8:4b:00:7f:fd:da:b3:89:7d: dc:cf:a3:65:01:84:9d:cb:b4:56:78:81:62:f1:30: 57:f1:7f:1f:b0:ec:eb:2b:b2:6f:3f:92:37:2c:1e: f2:df:bb:83:5d:e8:16:2b:f0:bb:04:c4:63:d2:b4: e6:1e:8a:0c:8c:02:6c:de:86:4e:04:f7:86:d8:93: e6:48:fd:ef:0c:d1:b5:95:22:c5:2d:59:a9:e5:4b: 14:5a:6d:a2:c3:8a:ad:41:02:18:a9:50:e8:c5:fb: 80:37:d7:a8:1c:43:23:f3:48:93:d3:81:a8:90:54: b2:8a:2c:23:c4:e0:59:d1:cd:f9:a0:dc:48:86:91: 2a:c9:11:7c:e0:de:2a:62:0b:21:38:bb:6c:e3:e4: 80:a3:bd:f3:a7:9c:1e:a9:63:6b:26:ba:d9:c4:c4: 71:ad:09:0e:e0:8c:3a:74:e1:ce:36:5c:f2:fd:a7: 22:af:58:a4:57:66:2e:d5:4c:c5:fd:42:39:78:ae: 3a:93:3f:35:86:57:ea:bc:cb:de:51:ed:c9:d7:f2: ed:f1:1c:0f:e1:e5:c5:8a:a2:09:fd:a8:2e:59:10: 5d:e6:a4:8f:ef:38:2e:3b:2d:ac:b3:de:c2:f6:87: 21:c2:17:d0:5e:a9:a2:3c:25:b2:dc:0d:ed:dd:5d: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:56:15:64:F7:3D:F9:10:C0:90:CC:57:69:FE:09:02:1E:F6:6D X509v3 Authority Key Identifier: keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5f:ca:16:04:72:34:59:f4:d2:37:a9:0f:46:be:7a:30:17: 59:ae:c5:0c:db:e6:9a:c5:31:79:d9:5f:0e:00:53:53:bb:6f: c9:b8:cb:94:c5:b9:af:c6:2f:bb:79:b4:1a:0d:53:a6:e7:77: b7:d3:3c:bf:17:8c:88:6a:87:11:04:11:d0:17:26:84:bc:b1: 2e:5d:51:24:c3:e7:bf:d1:02:55:cd:b2:a4:c2:26:8f:f2:ca: 33:a2:51:0e:2b:3c:23:cb:50:89:3f:e1:83:e6:12:de:f7:d9: b6:0a:ff:b2:41:cf:8a:c6:da:e6:82:5d:85:5c:92:d4:35:9a: 8e:49:ca:22:e1:bb:9f:40:8f:28:63:b0:cb:e2:a9:88:9b:52: d2:a8:61:79:32:c7:90:6a:77:8b:b2:76:a2:d3:ca:9f:3c:ac: c2:c4:28:51:28:87:de:44:4c:e2:6f:f7:0b:8c:f4:d0:4d:d4: 6c:31:4e:49:bc:61:eb:40:91:74:96:1a:80:2f:e9:30:cf:15: 11:bc:56:28:74:8a:9b:3c:ff:45:3b:43:44:ac:27:6d:ce:a1: 12:1d:4d:44:42:41:09:9e:24:61:f1:63:4c:62:92:c5:80:0e: 24:89:45:9e:63:84:19:47:d6:1f:c2:14:e5:39:a2:00:81:9e: 0a:12:64:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXPF9+QkDjoosPr5iFtFMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YWEwMzliODg2YjIyNjU3OGJkYjZhNDI3ODFiZjU5MDQ0 YmIxMzgwHhcNMjUxMjEyMDcwMTAyWhcNMjUxMjEzMDcwMTAyWjAzMTEwLwYDVQQD EygyYTQxNTYxNTY0ZjczZGY5MTBjMDkwY2M1NzY5ZmUwOTAyMWVmNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXeQPsb4SwB//dqziX3cz6NlAYSd y7RWeIFi8TBX8X8fsOzrK7JvP5I3LB7y37uDXegWK/C7BMRj0rTmHooMjAJs3oZO BPeG2JPmSP3vDNG1lSLFLVmp5UsUWm2iw4qtQQIYqVDoxfuAN9eoHEMj80iT04Go kFSyiiwjxOBZ0c35oNxIhpEqyRF84N4qYgshOLts4+SAo73zp5weqWNrJrrZxMRx rQkO4Iw6dOHONlzy/acir1ikV2Yu1UzF/UI5eK46kz81hlfqvMveUe3J1/Lt8RwP 4eXFiqIJ/aguWRBd5qSP7zguOy2ss97C9ochwhfQXqmiPCWy3A3t3V2p0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpBVhVk9z35EMCQzFdp/gkCHvZtMB8GA1UdIwQY MBaAFPeqA5uIayJleL22pCeBv1kES7E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWIt NmY2MjFkNzM2YWZmLzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS80YmJkNmMtOTFlZi00NDYxLTgyMWItNmY2MjFkNzM2YWZm LzEvOTZvRG00aHJJbVY0dmJha0o0R19XUVJMc1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsl/KFgRy NFn00jepD0a+ejAXWa7FDNvmmsUxedlfDgBTU7tvybjLlMW5r8Yvu3m0Gg1Tpud3 t9M8vxeMiGqHEQQR0BcmhLyxLl1RJMPnv9ECVc2ypMImj/LKM6JRDis8I8tQiT/h g+YS3vfZtgr/skHPisba5oJdhVyS1DWajknKIuG7n0CPKGOwy+KpiJtS0qhheTLH kGp3i7J2otPKnzyswsQoUSiH3kRM4m/3C4z00E3UbDFOSbxh60CRdJYagC/pMM8V EbxWKHSKmzz/RTtDRKwnbc6hEh1NREJBCZ4kYfFjTGKSxYAOJIlFnmOEGUfWH8IU 5TmiAIGeChJkNQ== -----END CERTIFICATE-----Generated at Fri Dec 12 15:45:15 2025 by rpki-client