This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json) Hash identifier: RnhefLDAEqAdvL0qraxrgamY/pIIeuePjVkjUgZbU7k= Subject key identifier: C2:81:6A:A0:E6:10:DE:87:2B:21:9C:A4:E8:00:08:1D:26:7D:4A:84 Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Certificate serial: 019B39B4565640C91AE6EC8FBCD9A51EBB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft Manifest number: 091C Signing time: Sat 20 Dec 2025 03:01:18 +0000 Manifest this update: Sat 20 Dec 2025 03:01:18 +0000 Manifest next update: Sun 21 Dec 2025 03:01:18 +0000 Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=) 2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: 80Etm30qfwk6zh4laN3BK+AJO2ltfbOn0Hq9X0AWA5o=) 3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=) 4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=) 5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=) 6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=) 7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=) 8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:56:56:40:c9:1a:e6:ec:8f:bc:d9:a5:1e:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Validity Not Before: Dec 20 03:01:18 2025 GMT Not After : Dec 21 03:01:18 2025 GMT Subject: CN=c2816aa0e610de872b219ca4e800081d267d4a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:39:ab:eb:98:96:b7:d2:c5:0e:f6:0a:38: 05:e4:c9:21:09:bf:14:b7:d3:08:7f:31:1e:ab:03: cc:33:60:5a:f4:61:45:3e:79:84:f4:63:db:0e:52: 51:52:77:f9:5a:b5:06:cb:34:e6:a4:a4:ee:e6:bf: a8:4b:bb:1e:65:aa:52:9a:3b:ba:f3:dd:64:29:7a: dc:60:02:9b:ee:0f:ba:60:0d:18:7b:84:71:42:23: 0b:85:2a:fa:d0:47:18:d7:15:67:c0:35:e4:98:08: 8d:0a:e6:90:7b:a7:4e:bb:96:52:e5:6b:84:2b:a1: b6:12:21:ac:57:a3:88:78:67:c8:7b:ea:8c:c7:75: ff:a6:2f:c2:53:fe:4a:a4:e6:37:7f:22:80:8c:6a: 8d:73:8e:62:38:2a:5e:b6:10:6c:b7:40:71:99:11: 50:df:55:e7:42:d7:ba:3c:38:dc:39:fe:90:97:16: 21:88:0e:bc:1c:8e:a0:2c:2d:cf:f7:59:e8:87:47: 47:d1:eb:75:f3:ed:33:50:7a:ce:df:8d:ba:b4:f8: 2e:2d:1f:b2:7f:28:61:8e:b4:ae:5b:6f:08:cd:52: 9b:e3:2c:92:97:54:1c:63:04:0e:8a:4a:5c:44:35: 07:a2:0e:27:5a:d6:91:59:a9:81:3e:74:ef:1d:61: bf:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:81:6A:A0:E6:10:DE:87:2B:21:9C:A4:E8:00:08:1D:26:7D:4A:84 X509v3 Authority Key Identifier: keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:74:38:d9:af:65:09:f0:af:b1:e4:b1:64:db:22:87:f9:6c: f8:c8:c3:d3:11:89:9f:4e:b1:44:00:91:b1:16:ef:ab:40:9b: de:e2:25:f9:38:0d:00:72:34:db:3b:3f:58:50:6b:10:ce:08: 7d:b8:3f:19:1f:73:cb:3c:59:75:71:92:81:92:98:03:23:35: 05:85:ef:0b:0d:51:cb:52:0b:71:66:4d:35:42:66:7b:11:27: e1:aa:43:53:b5:2d:c8:ac:20:5b:18:2c:8c:47:46:28:9d:06: 7a:52:ee:0b:08:30:4b:e9:40:2f:ce:76:bc:ba:64:45:5f:73: 4e:5e:e6:26:7a:e5:1f:e6:26:be:32:13:4a:0a:2a:83:e8:37: 04:45:aa:15:a3:66:03:ec:67:09:a0:00:50:88:12:c7:34:1d: 31:8c:c8:18:3c:52:22:ec:6c:e2:38:c2:a4:55:db:7a:da:f4: eb:b0:8d:5c:c4:76:fc:0f:57:8e:40:e5:fe:78:c4:ee:ad:62: 32:fc:a3:8b:02:35:27:d6:ff:93:3b:64:ba:8a:d7:d1:4e:ea: 94:19:cb:e1:c5:a2:b1:4c:62:59:8a:db:53:f4:1d:18:7d:4d: 67:e6:32:72:6a:d2:c4:2c:32:9d:0c:c4:41:6c:5c:7d:3d:4e: ea:a7:89:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFZWQMka5uyPvNmlHrsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4 NjZhYWMwHhcNMjUxMjIwMDMwMTE4WhcNMjUxMjIxMDMwMTE4WjAzMTEwLwYDVQQD EyhjMjgxNmFhMGU2MTBkZTg3MmIyMTljYTRlODAwMDgxZDI2N2Q0YTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNE5q+uYlrfSxQ72CjgF5MkhCb8U t9MIfzEeqwPMM2Ba9GFFPnmE9GPbDlJRUnf5WrUGyzTmpKTu5r+oS7seZapSmju6 891kKXrcYAKb7g+6YA0Ye4RxQiMLhSr60EcY1xVnwDXkmAiNCuaQe6dOu5ZS5WuE K6G2EiGsV6OIeGfIe+qMx3X/pi/CU/5KpOY3fyKAjGqNc45iOCpethBst0BxmRFQ 31XnQte6PDjcOf6QlxYhiA68HI6gLC3P91noh0dH0et18+0zUHrO3426tPguLR+y fyhhjrSuW28IzVKb4yySl1QcYwQOikpcRDUHog4nWtaRWamBPnTvHWG/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKBaqDmEN6HKyGcpOgACB0mfUqEMB8GA1UdIwQY MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4 LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHQ42a9l CfCvseSxZNsih/ls+MjD0xGJn06xRACRsRbvq0Cb3uIl+TgNAHI02zs/WFBrEM4I fbg/GR9zyzxZdXGSgZKYAyM1BYXvCw1Ry1ILcWZNNUJmexEn4apDU7UtyKwgWxgs jEdGKJ0GelLuCwgwS+lAL852vLpkRV9zTl7mJnrlH+YmvjITSgoqg+g3BEWqFaNm A+xnCaAAUIgSxzQdMYzIGDxSIuxs4jjCpFXbetr067CNXMR2/A9XjkDl/njE7q1i MvyjiwI1J9b/kztkuorX0U7qlBnL4cWisUxiWYrbU/QdGH1NZ+YycmrSxCwynQzE QWxcfT1O6qeJsw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:22 2025 by rpki-client