This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json) Hash identifier: r4ouT1ZuSZVW4zHGomWk9KwHRz18xYfBp1UceuMh8lA= Subject key identifier: 60:8A:20:21:77:67:A9:C8:EE:FB:08:12:0C:F6:5D:EE:23:70:62:CB Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Certificate serial: 019B0FA59129656F1C95A27F33D8392E1273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft Manifest number: 1670 Signing time: Thu 11 Dec 2025 23:01:07 +0000 Manifest this update: Thu 11 Dec 2025 23:01:07 +0000 Manifest next update: Fri 12 Dec 2025 23:01:07 +0000 Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: PjHjYvsM4peDSrQLQbRdM/5Bm2/iLXBJGSHac2vrLv4=) 2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:91:29:65:6f:1c:95:a2:7f:33:d8:39:2e:12:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Validity Not Before: Dec 11 23:01:07 2025 GMT Not After : Dec 12 23:01:07 2025 GMT Subject: CN=608a20217767a9c8eefb08120cf65dee237062cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:cb:7e:4b:eb:48:f9:63:2b:7e:94:9f:08: d3:f7:0b:fc:e3:6e:2f:04:cb:69:52:2e:83:7a:f0: 41:9a:c3:05:40:fb:81:41:c4:66:d0:a5:a7:43:12: b9:b0:d4:26:e9:cc:42:d1:39:c3:b3:0b:df:e3:80: dd:05:b2:f7:2d:cb:84:39:ae:79:0a:b5:cb:88:36: 3f:0f:0e:e7:bd:50:75:77:ba:3c:08:20:92:bf:ec: ce:23:88:ee:ff:7b:a7:ef:9c:05:8b:0f:03:78:2c: d0:34:1c:b0:2d:bf:74:49:53:8e:56:e5:8a:34:09: c9:ec:67:42:ab:16:4c:d0:31:ec:a3:e4:2a:2d:16: 52:e3:aa:b1:5d:be:9d:15:2f:fb:f8:05:45:48:8b: df:37:3c:96:66:70:75:72:6d:d8:6f:d5:fb:49:ad: 1a:f6:01:5e:86:de:23:4c:50:74:5d:76:26:92:6a: 0f:b6:39:17:8a:e7:26:ee:25:ca:bd:af:c8:c2:86: 1f:82:9d:c9:a7:18:a7:ad:a5:47:f2:ee:88:e0:10: d4:d3:e3:c9:b9:af:0d:2a:fe:2e:21:75:90:c6:82: 3b:2d:0d:f1:6b:77:2d:5c:19:55:21:dc:95:0b:06: 7b:a4:b5:4b:23:e5:19:94:32:ae:da:68:f8:88:10: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:20:21:77:67:A9:C8:EE:FB:08:12:0C:F6:5D:EE:23:70:62:CB X509v3 Authority Key Identifier: keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:26:3e:9e:a3:23:6e:d5:91:39:69:0e:8e:18:cb:38:e8:56: eb:58:1c:89:f8:5d:7f:77:9d:e3:94:b9:22:16:81:11:f9:40: 4f:78:88:58:15:09:57:91:7f:2b:d8:8b:55:64:95:b9:d0:39: 66:26:c0:bc:6b:18:51:9b:cc:9e:ad:84:b0:81:71:f1:5e:8d: 34:37:a6:eb:5c:5b:3d:50:3d:16:25:33:e1:0f:8d:52:d1:d1: 53:35:c1:42:87:52:d0:1c:7d:36:c4:4e:3f:56:e2:ba:a9:43: 46:e8:5c:45:74:f7:7b:b7:38:d2:82:ca:f9:c6:e2:25:f6:53: 1e:17:b3:28:19:ee:30:ee:f7:c5:53:e9:02:fb:5f:0b:87:96: c2:cf:38:4e:e5:f0:fe:74:89:a4:13:9b:4e:11:3b:59:8f:4b: 9c:c6:e5:f7:bd:32:18:00:d9:60:6c:a0:4a:e5:6f:ab:b3:64: fa:73:a5:52:6b:e0:7e:48:87:77:05:d0:36:61:21:76:ca:dc: f7:de:b3:ba:e3:1b:2f:80:b6:8c:40:4d:12:be:27:ee:e6:87: dc:a9:db:a5:17:f5:74:38:17:09:95:f6:35:ec:47:c9:43:46: 23:6e:a3:bd:3b:99:7d:1e:84:11:ee:46:58:d1:15:1b:56:c1: 18:e4:18:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpZEpZW8claJ/M9g5LhJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0 ODAwZmEwHhcNMjUxMjExMjMwMTA3WhcNMjUxMjEyMjMwMTA3WjAzMTEwLwYDVQQD Eyg2MDhhMjAyMTc3NjdhOWM4ZWVmYjA4MTIwY2Y2NWRlZTIzNzA2MmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK3LfkvrSPljK36UnwjT9wv8424v BMtpUi6DevBBmsMFQPuBQcRm0KWnQxK5sNQm6cxC0TnDswvf44DdBbL3LcuEOa55 CrXLiDY/Dw7nvVB1d7o8CCCSv+zOI4ju/3un75wFiw8DeCzQNBywLb90SVOOVuWK NAnJ7GdCqxZM0DHso+QqLRZS46qxXb6dFS/7+AVFSIvfNzyWZnB1cm3Yb9X7Sa0a 9gFeht4jTFB0XXYmkmoPtjkXiucm7iXKva/IwoYfgp3JpxinraVH8u6I4BDU0+PJ ua8NKv4uIXWQxoI7LQ3xa3ctXBlVIdyVCwZ7pLVLI+UZlDKu2mj4iBCzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCKICF3Z6nI7vsIEgz2Xe4jcGLLMB8GA1UdIwQY MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiY+nqMj btWROWkOjhjLOOhW61gcifhdf3ed45S5IhaBEflAT3iIWBUJV5F/K9iLVWSVudA5 ZibAvGsYUZvMnq2EsIFx8V6NNDem61xbPVA9FiUz4Q+NUtHRUzXBQodS0Bx9NsRO P1biuqlDRuhcRXT3e7c40oLK+cbiJfZTHhezKBnuMO73xVPpAvtfC4eWws84TuXw /nSJpBObThE7WY9LnMbl970yGADZYGygSuVvq7Nk+nOlUmvgfkiHdwXQNmEhdsrc 996zuuMbL4C2jEBNEr4n7uaH3KnbpRf1dDgXCZX2NexHyUNGI26jvTuZfR6EEe5G WNEVG1bBGOQYQw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:44:27 2025 by rpki-client