This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft File: lrN3ZE5BQQHbberQ61ghBj9Yjow.mft (raw, json) Hash identifier: 0pw8Fm/PjowRpyQKgCLlITtb0FAXnNAPksiLw1jTmHo= Subject key identifier: C2:9C:06:05:C5:7A:61:2B:49:08:17:39:17:33:3D:2C:1D:44:81:3F Authority key identifier: 96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C Certificate issuer: /CN=96b377644e414101db6dead0eb5821063f588e8c Certificate serial: 019B1C17BD4A74E6215343290DFA52990A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft Manifest number: 16F8 Signing time: Sun 14 Dec 2025 09:01:16 +0000 Manifest this update: Sun 14 Dec 2025 09:01:16 +0000 Manifest next update: Mon 15 Dec 2025 09:01:16 +0000 Files and hashes: 1: jEYee-uOwLf9rNeDWIsHdJ75KKw.roa (hash: /wehpCViK0XYDMQCz1eNAOOXNcexzwchRQ7CIA4o1RM=) 2: lrN3ZE5BQQHbberQ61ghBj9Yjow.crl (hash: dP1HVMTuiKM7gR4DRpv8D+wXa6wOFkUOg3BnTBUuJgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:bd:4a:74:e6:21:53:43:29:0d:fa:52:99:0a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96b377644e414101db6dead0eb5821063f588e8c Validity Not Before: Dec 14 09:01:16 2025 GMT Not After : Dec 15 09:01:16 2025 GMT Subject: CN=c29c0605c57a612b4908173917333d2c1d44813f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2c:ee:be:41:b8:56:02:aa:e5:2e:1a:94:3f: 84:0e:38:75:84:30:b7:0f:e4:09:9c:86:de:76:f0: 0f:46:d4:18:36:48:45:4c:1a:c4:5b:b7:95:b5:5b: 7f:dd:0e:06:e4:6d:06:48:92:76:83:6a:ed:09:5f: 7f:9b:b2:1f:88:78:21:ea:4a:69:78:ff:5c:89:ec: fd:5b:22:65:a6:87:9a:8d:3c:c5:cc:53:51:7e:d7: 4b:bb:db:39:98:f4:9d:cd:ec:bf:78:c0:b5:76:1b: 62:d0:83:cd:50:ff:55:48:eb:be:ff:a7:8c:ad:4f: 7c:77:ea:15:7b:ea:db:43:c0:51:b8:af:56:73:c8: 9e:11:e6:7b:d3:91:3d:72:74:49:58:c2:bf:31:e6: 73:e8:12:6b:47:11:52:38:4d:3e:91:b4:5e:46:6e: 72:b8:30:5c:6c:98:75:96:7a:57:0d:d4:6b:24:71: 03:eb:e4:31:23:06:1d:da:5e:68:71:7e:99:b0:b3: 0f:de:90:51:57:59:8b:c6:54:63:20:ac:6c:ca:53: 45:e9:3a:95:8f:a2:03:02:67:26:3f:52:a0:d0:4f: a9:1d:aa:14:cb:ae:be:4b:dd:e3:4b:b4:91:67:76: e5:d1:58:93:5c:63:7d:c0:06:e8:be:0a:6b:18:58: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:06:05:C5:7A:61:2B:49:08:17:39:17:33:3D:2C:1D:44:81:3F X509v3 Authority Key Identifier: keyid:96:B3:77:64:4E:41:41:01:DB:6D:EA:D0:EB:58:21:06:3F:58:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrN3ZE5BQQHbberQ61ghBj9Yjow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/89e4e2-b8ab-4814-93c1-28e6c5ba2eae/1/lrN3ZE5BQQHbberQ61ghBj9Yjow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:96:43:d5:76:e1:c5:de:e0:1b:01:ab:e5:6d:79:48:1f:82: 5e:fe:5a:e2:93:61:49:82:31:a4:72:73:f4:8b:3d:3c:ba:f1: 8f:3b:27:7e:30:3c:51:cd:ff:e3:ec:bd:9c:5f:34:93:c9:88: 76:4c:d8:c1:44:96:be:6b:01:a9:bf:93:76:28:80:77:53:0f: a2:42:7a:1d:d3:0c:2c:49:40:3d:e9:a2:63:38:29:7b:7d:b5: a8:db:59:23:54:2c:50:cc:c0:eb:cc:c5:26:18:26:b7:26:a3: 7d:26:32:91:b4:8f:76:58:bd:27:34:b9:d9:e8:8d:5a:2c:ff: 95:d5:2e:6d:9e:64:42:cd:c1:2c:55:03:38:05:98:46:f1:c1: 19:9d:db:48:68:83:4e:47:a9:27:ca:eb:66:2c:b0:37:c9:e0: 30:88:28:f8:d1:af:26:0d:ad:7d:32:8c:7a:59:72:11:6f:52: 22:fc:67:69:fc:2c:7f:08:2a:d8:46:5a:c8:cf:e6:be:80:96: 70:8d:05:d9:43:48:68:39:6a:d3:e4:a6:a4:5d:04:01:cb:60: 59:cd:bc:b4:3c:bc:aa:82:f7:22:fe:52:0c:34:92:ef:67:56: 29:54:2a:a4:c5:13:da:9e:f7:17:da:c2:46:c7:78:7c:4e:e8: 7b:68:f9:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF71KdOYhU0MpDfpSmQo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YjM3NzY0NGU0MTQxMDFkYjZkZWFkMGViNTgyMTA2M2Y1 ODhlOGMwHhcNMjUxMjE0MDkwMTE2WhcNMjUxMjE1MDkwMTE2WjAzMTEwLwYDVQQD EyhjMjljMDYwNWM1N2E2MTJiNDkwODE3MzkxNzMzM2QyYzFkNDQ4MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CzuvkG4VgKq5S4alD+EDjh1hDC3 D+QJnIbedvAPRtQYNkhFTBrEW7eVtVt/3Q4G5G0GSJJ2g2rtCV9/m7IfiHgh6kpp eP9ciez9WyJlpoeajTzFzFNRftdLu9s5mPSdzey/eMC1dhti0IPNUP9VSOu+/6eM rU98d+oVe+rbQ8BRuK9Wc8ieEeZ705E9cnRJWMK/MeZz6BJrRxFSOE0+kbReRm5y uDBcbJh1lnpXDdRrJHED6+QxIwYd2l5ocX6ZsLMP3pBRV1mLxlRjIKxsylNF6TqV j6IDAmcmP1Kg0E+pHaoUy66+S93jS7SRZ3bl0ViTXGN9wAbovgprGFgL9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKcBgXFemErSQgXORczPSwdRIE/MB8GA1UdIwQY MBaAFJazd2ROQUEB223q0OtYIQY/WI6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEt MjhlNmM1YmEyZWFlLzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84OWU0ZTItYjhhYi00ODE0LTkzYzEtMjhlNmM1YmEyZWFl LzEvbHJOM1pFNUJRUUhiYmVyUTYxZ2hCajlZam93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5ZD1Xbh xd7gGwGr5W15SB+CXv5a4pNhSYIxpHJz9Is9PLrxjzsnfjA8Uc3/4+y9nF80k8mI dkzYwUSWvmsBqb+TdiiAd1MPokJ6HdMMLElAPemiYzgpe321qNtZI1QsUMzA68zF JhgmtyajfSYykbSPdli9JzS52eiNWiz/ldUubZ5kQs3BLFUDOAWYRvHBGZ3bSGiD TkepJ8rrZiywN8ngMIgo+NGvJg2tfTKMellyEW9SIvxnafwsfwgq2EZayM/mvoCW cI0F2UNIaDlq0+SmpF0EActgWc28tDy8qoL3Iv5SDDSS72dWKVQqpMUT2p73F9rC Rsd4fE7oe2j59w== -----END CERTIFICATE-----Generated at Sun Dec 14 19:05:08 2025 by rpki-client