This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json) Hash identifier: P1M/un0dOLuKEgG9/B/7LbOiJurwqwF6jlIw6kHJw3Q= Subject key identifier: CF:1E:10:04:9A:B8:A0:CB:DC:87:87:B6:0E:85:8C:BE:3A:32:BE:72 Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Certificate serial: 019B3DFE73236F07C9FCD919ADBE83152407 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft Manifest number: 106F Signing time: Sat 20 Dec 2025 23:00:44 +0000 Manifest this update: Sat 20 Dec 2025 23:00:44 +0000 Manifest next update: Sun 21 Dec 2025 23:00:44 +0000 Files and hashes: 1: 1Va9-VCRLq6nfmhgDYPY9z50vR4.roa (hash: ESx+goLfyktPxcscMRpU8+hvhVOyXeN96tMCeWI/nlM=) 2: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: QDoVu5MaovTEGpXf8arVw3hqGOOao2Cl6UHpdHr9WXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:73:23:6f:07:c9:fc:d9:19:ad:be:83:15:24:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Validity Not Before: Dec 20 23:00:44 2025 GMT Not After : Dec 21 23:00:44 2025 GMT Subject: CN=cf1e10049ab8a0cbdc8787b60e858cbe3a32be72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:f3:42:2c:c1:ac:39:56:0f:a4:41:ab:e6: 26:ad:bd:a7:b3:d0:21:63:a1:e3:59:1b:13:b9:8d: 0c:4d:58:3a:eb:e2:e1:8a:2b:04:b5:89:b0:31:51: cb:0d:14:e9:45:31:d2:84:9e:0f:d2:fd:08:d2:b8: 32:0b:13:16:17:93:d1:d3:05:4c:bb:2b:73:b3:2c: 96:d9:e1:de:c0:9a:a7:65:3b:a0:4b:09:86:59:13: 0b:74:a3:e7:d0:6e:09:75:17:ef:f6:4b:08:5b:1e: 73:a9:7b:5f:7e:15:ef:99:de:bb:56:4d:09:c6:6a: 84:74:a1:c5:e7:da:86:20:a2:0b:d9:bf:6d:ab:fa: 93:6a:ce:15:f8:2b:6c:a5:fa:4a:7c:e7:5a:b1:90: 08:17:9c:a3:c8:f4:f7:cf:88:68:8b:5a:60:0d:9b: 3c:c5:5b:c8:73:61:d3:a3:53:2b:44:13:5d:5f:fb: d5:b3:d7:36:36:21:6c:e5:9e:ce:52:d3:15:ef:e3: cd:28:46:ac:40:33:44:63:11:1a:38:6e:11:e9:ac: 31:e1:4a:b2:a9:5f:3f:1f:08:fc:76:b1:c2:0b:e6: 1d:45:b4:64:11:bc:4f:c7:b1:d8:40:39:4e:ae:46: 72:2f:5e:bf:c4:39:b8:67:c2:9e:c5:e0:85:87:94: 99:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1E:10:04:9A:B8:A0:CB:DC:87:87:B6:0E:85:8C:BE:3A:32:BE:72 X509v3 Authority Key Identifier: keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f4:7d:8c:8e:0f:a2:d3:26:92:8c:01:0b:7c:a3:33:18:09: cf:a5:6c:51:1b:26:6d:cf:19:c9:5c:04:69:ed:df:dd:2a:36: 79:94:95:1c:0f:95:51:02:d4:42:8b:60:8e:28:01:b0:5d:24: ac:32:88:d7:15:bd:ac:e6:90:61:f7:3d:31:84:0f:b5:36:22: 68:54:21:77:9b:e9:8e:8a:76:1b:6b:f0:ac:ba:28:ea:e0:d8: 00:c7:7d:a0:84:2e:34:fa:ea:00:da:ca:5e:ef:21:be:33:24: 74:49:54:a8:98:8a:8a:a9:21:81:c4:ac:24:53:02:c2:68:3a: fa:c6:71:af:1a:69:23:14:7a:b0:a4:dd:e2:72:8b:a3:0e:77: c1:60:af:a9:e4:bb:9a:f7:3f:be:76:96:70:cb:1b:ee:7d:f0: a2:98:46:29:d4:ba:58:b9:f9:dd:fc:fd:66:75:bd:e6:98:22: 47:97:6c:6b:5c:6b:2d:07:d5:b8:aa:c3:34:b8:30:61:a6:25: a2:60:2e:d0:c9:bf:64:27:59:b2:3a:1b:78:7e:41:14:77:89: 47:fa:43:79:35:12:c6:54:37:67:23:11:06:d1:02:32:44:d2: ed:af:ee:8e:27:64:42:02:61:55:29:18:fd:97:90:c2:37:ff: 4d:a2:08:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/nMjbwfJ/NkZrb6DFSQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0 NmVhMDMwHhcNMjUxMjIwMjMwMDQ0WhcNMjUxMjIxMjMwMDQ0WjAzMTEwLwYDVQQD EyhjZjFlMTAwNDlhYjhhMGNiZGM4Nzg3YjYwZTg1OGNiZTNhMzJiZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTbzQizBrDlWD6RBq+Ymrb2ns9Ah Y6HjWRsTuY0MTVg66+LhiisEtYmwMVHLDRTpRTHShJ4P0v0I0rgyCxMWF5PR0wVM uytzsyyW2eHewJqnZTugSwmGWRMLdKPn0G4JdRfv9ksIWx5zqXtffhXvmd67Vk0J xmqEdKHF59qGIKIL2b9tq/qTas4V+CtspfpKfOdasZAIF5yjyPT3z4hoi1pgDZs8 xVvIc2HTo1MrRBNdX/vVs9c2NiFs5Z7OUtMV7+PNKEasQDNEYxEaOG4R6awx4Uqy qV8/Hwj8drHCC+YdRbRkEbxPx7HYQDlOrkZyL16/xDm4Z8KexeCFh5SZ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8eEASauKDL3IeHtg6FjL46Mr5yMB8GA1UdIwQY MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt ZjI3YWE5YzZlYjZiLzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfR9jI4P otMmkowBC3yjMxgJz6VsURsmbc8ZyVwEae3f3So2eZSVHA+VUQLUQotgjigBsF0k rDKI1xW9rOaQYfc9MYQPtTYiaFQhd5vpjop2G2vwrLoo6uDYAMd9oIQuNPrqANrK Xu8hvjMkdElUqJiKiqkhgcSsJFMCwmg6+sZxrxppIxR6sKTd4nKLow53wWCvqeS7 mvc/vnaWcMsb7n3wophGKdS6WLn53fz9ZnW95pgiR5dsa1xrLQfVuKrDNLgwYaYl omAu0Mm/ZCdZsjobeH5BFHeJR/pDeTUSxlQ3ZyMRBtECMkTS7a/ujidkQgJhVSkY /ZeQwjf/TaIISw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:04:03 2025 by rpki-client