This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json) Hash identifier: 8bjEAv7WSvsXlyIQpLkS9/kbzsxkU/PvQ1rOYuFBhnw= Subject key identifier: B4:23:EB:E8:BA:D7:78:48:CB:67:4C:FC:39:E8:00:36:DB:AC:D7:4C Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Certificate serial: 019B514E77321AE46ECB70B31E825360A67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft Manifest number: 1079 Signing time: Wed 24 Dec 2025 17:00:55 +0000 Manifest this update: Wed 24 Dec 2025 17:00:55 +0000 Manifest next update: Thu 25 Dec 2025 17:00:55 +0000 Files and hashes: 1: 1Va9-VCRLq6nfmhgDYPY9z50vR4.roa (hash: ESx+goLfyktPxcscMRpU8+hvhVOyXeN96tMCeWI/nlM=) 2: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: vlwhUUHko9nyZ0c5XOOtgIT70WrsMvtBIf3GP+IYtPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:77:32:1a:e4:6e:cb:70:b3:1e:82:53:60:a6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Validity Not Before: Dec 24 17:00:55 2025 GMT Not After : Dec 25 17:00:55 2025 GMT Subject: CN=b423ebe8bad77848cb674cfc39e80036dbacd74c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:0f:b5:bc:2c:25:45:50:44:14:41:7a:87: 5d:2c:79:84:ed:9d:9b:f2:50:1f:06:8f:a9:58:e0: 55:0d:d5:f1:f6:90:00:6e:bb:73:d0:44:72:8f:d1: 15:6e:d8:a2:34:86:47:23:f4:a6:43:87:4a:94:1b: 43:58:4b:94:08:eb:84:b6:54:18:39:3c:65:08:85: a4:a6:03:03:3f:a9:e7:24:1d:4b:ac:aa:f8:5d:9e: db:3c:c9:f2:f3:1d:1a:9b:ec:63:2d:91:38:1a:8e: da:1a:00:bb:e2:43:3b:bf:e6:41:c0:f8:21:22:0c: 48:6c:31:2f:1c:55:5f:07:74:9b:1b:0b:03:92:4a: 08:25:5d:0c:c3:4d:54:a5:0e:c5:77:3c:76:b1:b9: 2e:e8:3a:9a:fb:cc:4a:c2:65:ee:cf:a7:89:2c:a3: 9a:55:a4:ec:63:d2:b4:d4:f9:70:fb:51:c1:69:e0: 5d:36:df:e0:f9:9c:05:d7:7d:38:ae:ad:03:84:cb: e5:24:c1:96:3d:e4:c7:c6:51:41:39:f0:0d:33:40: 86:50:a5:4c:af:08:4d:01:8c:c2:a8:c4:57:49:45: d3:d2:06:dd:8f:13:6f:f3:5b:14:da:44:3a:0c:91: 62:6a:a8:da:5a:86:31:e1:38:33:e7:49:f1:00:14: 74:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:EB:E8:BA:D7:78:48:CB:67:4C:FC:39:E8:00:36:DB:AC:D7:4C X509v3 Authority Key Identifier: keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:31:c8:66:61:f1:dd:93:44:d0:cc:ff:69:a8:8f:3f:9e:be: 2c:c6:fa:04:7d:13:f2:1b:61:c6:2f:5f:9a:5c:e4:3a:fd:18: 3a:1d:ce:71:f5:a1:46:12:23:de:46:a6:f5:0b:a8:31:1e:a2: b4:04:3d:0f:de:c9:09:8c:cc:d8:dd:00:23:79:73:41:60:7b: db:ff:cf:55:8e:93:66:41:92:b1:b8:c3:02:c4:88:ba:b9:e5: b3:1a:45:0d:cc:a9:e9:00:14:e5:15:8c:8d:96:10:98:ae:87: 04:20:f5:4f:59:f3:2a:a2:6d:c2:d2:83:29:d7:0c:9f:5c:5d: f4:3d:07:f9:98:83:be:3f:23:04:8c:3e:ac:e9:1c:23:5e:cf: db:7a:51:4e:30:1e:b4:3e:09:ec:cb:ed:c9:b2:37:67:57:b3: 8b:6c:46:4e:fa:ca:be:a4:ad:5e:3d:b3:0b:8f:6a:6d:73:05: 78:aa:47:77:04:0a:93:79:78:bb:79:fc:59:28:35:39:25:63: eb:d7:2d:56:e3:6a:23:1d:f3:b5:39:9f:8b:40:41:63:85:0a: 80:0a:eb:2d:df:8e:41:55:c0:ba:30:f4:31:99:60:95:d7:04: 0d:53:c9:28:a6:c7:00:de:7a:62:4b:05:5a:df:fc:a6:56:52: 55:e5:45:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTncyGuRuy3CzHoJTYKZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0 NmVhMDMwHhcNMjUxMjI0MTcwMDU1WhcNMjUxMjI1MTcwMDU1WjAzMTEwLwYDVQQD EyhiNDIzZWJlOGJhZDc3ODQ4Y2I2NzRjZmMzOWU4MDAzNmRiYWNkNzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XAPtbwsJUVQRBRBeoddLHmE7Z2b 8lAfBo+pWOBVDdXx9pAAbrtz0ERyj9EVbtiiNIZHI/SmQ4dKlBtDWEuUCOuEtlQY OTxlCIWkpgMDP6nnJB1LrKr4XZ7bPMny8x0am+xjLZE4Go7aGgC74kM7v+ZBwPgh IgxIbDEvHFVfB3SbGwsDkkoIJV0Mw01UpQ7Fdzx2sbku6Dqa+8xKwmXuz6eJLKOa VaTsY9K01Plw+1HBaeBdNt/g+ZwF1304rq0DhMvlJMGWPeTHxlFBOfANM0CGUKVM rwhNAYzCqMRXSUXT0gbdjxNv81sU2kQ6DJFiaqjaWoYx4Tgz50nxABR0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQj6+i613hIy2dM/DnoADbbrNdMMB8GA1UdIwQY MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt ZjI3YWE5YzZlYjZiLzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjHIZmHx 3ZNE0Mz/aaiPP56+LMb6BH0T8hthxi9fmlzkOv0YOh3OcfWhRhIj3kam9QuoMR6i tAQ9D97JCYzM2N0AI3lzQWB72//PVY6TZkGSsbjDAsSIurnlsxpFDcyp6QAU5RWM jZYQmK6HBCD1T1nzKqJtwtKDKdcMn1xd9D0H+ZiDvj8jBIw+rOkcI17P23pRTjAe tD4J7MvtybI3Z1ezi2xGTvrKvqStXj2zC49qbXMFeKpHdwQKk3l4u3n8WSg1OSVj 69ctVuNqIx3ztTmfi0BBY4UKgArrLd+OQVXAujD0MZlgldcEDVPJKKbHAN56YksF Wt/8plZSVeVF3w== -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:28 2025 by rpki-client