This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: VBXM+FO57CFKyJYohMPWddDrDAAcJnO9aoQfdODoFn4= Subject key identifier: 68:C6:D9:A2:94:FF:22:A5:3C:AF:42:B6:9F:AA:81:AA:BF:A1:86:1B Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019B43C99A781157C61DD1A723ECE39D82CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 168B Signing time: Mon 22 Dec 2025 02:00:44 +0000 Manifest this update: Mon 22 Dec 2025 02:00:44 +0000 Manifest next update: Tue 23 Dec 2025 02:00:44 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: RDWS1QLmVClnW8BUsXwKsTAbWLtvd/m2jmMZkLDIVEQ=) 2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:9a:78:11:57:c6:1d:d1:a7:23:ec:e3:9d:82:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Dec 22 02:00:44 2025 GMT Not After : Dec 23 02:00:44 2025 GMT Subject: CN=68c6d9a294ff22a53caf42b69faa81aabfa1861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fe:02:46:77:b4:ac:21:6e:05:33:27:af:9d: 4f:99:e5:8b:d5:4e:a0:ab:41:38:64:4c:25:3b:b9: 0f:27:1b:ed:07:41:da:c5:9d:84:64:d5:03:bf:10: d0:8b:63:7a:34:de:36:1c:31:e8:ee:6e:c8:ea:e7: ad:4e:38:db:e1:62:3c:8d:09:43:5c:2b:ea:7e:1b: a2:5a:5e:5b:e8:88:fc:15:10:ba:62:46:c9:eb:18: ce:12:81:f0:1a:17:10:6a:e9:de:42:58:25:8e:ad: 60:b6:0f:fc:0e:7e:d2:08:f1:cc:f0:53:e3:1e:8f: 70:8b:1d:3c:43:14:24:6f:cc:96:a2:77:8f:30:59: eb:a7:17:95:d8:1f:fb:14:79:e6:3a:9c:1d:84:20: ef:3d:17:ed:1a:21:86:2a:e5:f0:64:2f:cf:16:01: 01:9d:d7:2d:d0:51:8e:f4:40:02:8d:d5:94:15:31: 29:d4:2f:19:1c:8b:5f:80:22:a6:30:b9:24:5e:2b: f2:a0:65:20:5f:eb:eb:13:37:b1:f4:0e:ec:a8:ba: 3c:56:33:6e:92:65:16:09:ea:cf:4c:7e:5b:15:6f: 02:03:5e:64:2b:9e:9a:3d:2e:bc:85:5a:94:63:1d: 3e:43:42:d4:42:d8:ff:3d:d8:3a:e7:4c:8a:5b:54: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:D9:A2:94:FF:22:A5:3C:AF:42:B6:9F:AA:81:AA:BF:A1:86:1B X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:29:f5:15:0d:06:8f:99:40:bd:5a:22:83:0f:33:9d:a0: 43:52:1b:91:01:3c:92:dc:72:b3:28:c2:a7:20:5b:97:b9:df: 45:b8:06:b1:79:e4:71:d1:c9:04:96:04:c6:7d:3d:9b:e6:ee: 93:7f:75:c4:bb:3a:58:a9:e2:ff:6d:0a:b7:c6:14:31:ec:08: 80:34:cb:69:cc:fc:61:98:92:10:91:c3:45:7a:e0:72:f3:27: 78:60:5d:0b:36:39:64:74:a5:e3:dd:4b:7b:d0:17:57:47:2d: 7e:a9:d0:dc:e4:11:a9:b4:a5:2f:23:da:11:57:5c:8c:f9:61: f3:9b:90:ea:1f:af:34:43:01:02:17:c2:17:a6:6e:52:33:db: 01:29:ca:e7:f1:15:46:95:04:c0:1b:d8:bc:84:2d:40:b3:78: ce:a5:d8:db:39:fc:11:3d:a6:ee:ab:99:d6:b4:1f:e6:4b:f4: 07:bd:e7:cf:8f:c8:8a:46:0c:f1:73:33:a0:97:04:c8:96:5e: da:c0:88:02:64:15:cb:d7:41:4b:43:07:a5:84:df:ff:bb:62: b0:fb:3b:0f:69:73:98:58:b9:3a:d2:ee:a4:00:0e:c0:9f:6c: 97:be:40:03:e5:ee:72:4c:8b:0d:54:7c:3e:76:b0:fb:3d:c2: 8d:5d:3d:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyZp4EVfGHdGnI+zjnYLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjUxMjIyMDIwMDQ0WhcNMjUxMjIzMDIwMDQ0WjAzMTEwLwYDVQQD Eyg2OGM2ZDlhMjk0ZmYyMmE1M2NhZjQyYjY5ZmFhODFhYWJmYTE4NjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv4CRne0rCFuBTMnr51PmeWL1U6g q0E4ZEwlO7kPJxvtB0HaxZ2EZNUDvxDQi2N6NN42HDHo7m7I6uetTjjb4WI8jQlD XCvqfhuiWl5b6Ij8FRC6YkbJ6xjOEoHwGhcQauneQlgljq1gtg/8Dn7SCPHM8FPj Ho9wix08QxQkb8yWonePMFnrpxeV2B/7FHnmOpwdhCDvPRftGiGGKuXwZC/PFgEB ndct0FGO9EACjdWUFTEp1C8ZHItfgCKmMLkkXivyoGUgX+vrEzex9A7sqLo8VjNu kmUWCerPTH5bFW8CA15kK56aPS68hVqUYx0+Q0LUQtj/Pdg650yKW1RqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjG2aKU/yKlPK9Ctp+qgaq/oYYbMB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsMp9RUN Bo+ZQL1aIoMPM52gQ1IbkQE8ktxysyjCpyBbl7nfRbgGsXnkcdHJBJYExn09m+bu k391xLs6WKni/20Kt8YUMewIgDTLacz8YZiSEJHDRXrgcvMneGBdCzY5ZHSl491L e9AXV0ctfqnQ3OQRqbSlLyPaEVdcjPlh85uQ6h+vNEMBAhfCF6ZuUjPbASnK5/EV RpUEwBvYvIQtQLN4zqXY2zn8ET2m7quZ1rQf5kv0B73nz4/IikYM8XMzoJcEyJZe 2sCIAmQVy9dBS0MHpYTf/7tisPs7D2lzmFi5OtLupAAOwJ9sl75AA+XuckyLDVR8 Pnaw+z3CjV09cA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:14 2025 by rpki-client