This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json) Hash identifier: VtFMvHgV5N7BlTUL9AJube1yRapxG+Zgz3mQyizRD5c= Subject key identifier: 3F:A2:1C:80:76:FF:B4:1D:61:5C:BF:C8:4D:BF:2D:1E:81:13:61:49 Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Certificate serial: 019B3F115938972FC379D6874DA12C76E476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 04:00:59 +0000 Manifest this update: Sun 21 Dec 2025 04:00:59 +0000 Manifest next update: Mon 22 Dec 2025 04:00:59 +0000 Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=) 2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: evwHdpVRoiHLNL5v8am35ATEMO+i1BaNuOGGYhkLiwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:59:38:97:2f:c3:79:d6:87:4d:a1:2c:76:e4:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Validity Not Before: Dec 21 04:00:59 2025 GMT Not After : Dec 22 04:00:59 2025 GMT Subject: CN=3fa21c8076ffb41d615cbfc84dbf2d1e81136149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:0c:2a:e2:df:ab:5d:87:19:6d:ae:6f:d9: 86:e8:d2:26:f7:0b:49:d8:11:d3:f8:6e:fc:7a:00: 89:76:c7:7c:a2:ff:fb:f6:7e:36:c3:d5:d7:44:8b: 54:db:c8:9f:34:bd:6a:da:ae:ad:60:5f:66:10:18: 37:36:2e:aa:4f:f6:31:32:3a:f5:17:d2:f2:89:a4: c9:98:a4:4a:0b:cd:55:54:1f:85:e7:ea:fb:63:d6: d9:c6:34:74:04:2d:95:81:75:b3:dc:9e:c4:e3:db: 3e:56:9f:3c:e9:fb:1b:f9:56:41:86:a3:12:50:0c: 85:0c:5c:52:1c:26:1b:b9:9a:a8:5d:b5:9a:da:66: 8b:6c:7b:6f:2f:be:02:0b:6a:92:6b:32:d3:13:be: 8c:5d:bf:ef:68:06:dc:7f:5c:fc:f2:5b:de:06:b9: e6:87:7a:91:54:36:9a:20:4a:3d:ba:f8:38:92:eb: eb:e3:b5:17:f8:78:c6:f9:52:53:14:63:18:23:75: cd:8a:00:ba:7c:15:03:c7:26:d5:c3:c4:03:e3:1d: 78:a2:8b:f2:39:4a:6a:2d:ce:56:ac:c8:28:a6:9e: 2f:94:dc:90:d5:27:bd:1a:aa:6f:33:ac:db:62:fd: 66:99:fa:9e:07:e5:32:24:0a:77:b5:15:7e:4d:35: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:1C:80:76:FF:B4:1D:61:5C:BF:C8:4D:BF:2D:1E:81:13:61:49 X509v3 Authority Key Identifier: keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:57:96:ff:a3:5e:73:51:f7:e3:f9:2f:e5:13:a9:f0:ce:fd: d5:c4:ef:ab:3a:92:1f:79:e3:ec:16:44:58:b6:1a:cf:06:6c: 96:15:3a:22:12:3b:9b:0c:16:33:be:6d:0e:5c:8f:87:91:86: 14:0a:69:51:95:fa:7f:19:90:2a:d9:8b:9c:9a:dd:fa:74:65: 1e:67:a5:4b:38:98:09:64:ff:e3:c6:ae:81:a3:3f:40:9a:96: b0:1d:d7:29:06:7c:96:8f:3c:c4:d8:75:e4:46:f4:b9:60:20: e1:04:b1:36:20:f5:65:d3:54:74:9e:25:44:fd:6d:68:d0:8f: 10:d2:12:83:9e:a6:bb:e8:f5:ed:b9:ae:01:96:43:fc:95:d3: cc:8c:75:bd:c4:d8:0d:05:ab:52:ac:e4:75:e7:96:ab:ff:a6: c8:fd:2a:3c:6c:93:89:e5:b5:bb:7f:1c:97:c7:ad:bc:1f:b7: b9:c6:75:97:91:2b:c0:b6:3f:d5:c4:82:05:19:77:14:28:eb: 83:53:63:be:1c:f6:86:3b:01:fb:c6:f1:33:a2:74:9c:1c:7c: 6b:ab:2e:27:05:eb:2f:f8:82:ae:6f:dc:c1:cb:f0:61:54:b2: 8c:6f:ac:62:cf:15:30:66:cb:12:c5:eb:f1:46:d4:2f:50:0d: 10:67:44:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EVk4ly/DedaHTaEsduR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz NjQxODUwHhcNMjUxMjIxMDQwMDU5WhcNMjUxMjIyMDQwMDU5WjAzMTEwLwYDVQQD EygzZmEyMWM4MDc2ZmZiNDFkNjE1Y2JmYzg0ZGJmMmQxZTgxMTM2MTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyngMKuLfq12HGW2ub9mG6NIm9wtJ 2BHT+G78egCJdsd8ov/79n42w9XXRItU28ifNL1q2q6tYF9mEBg3Ni6qT/YxMjr1 F9LyiaTJmKRKC81VVB+F5+r7Y9bZxjR0BC2VgXWz3J7E49s+Vp886fsb+VZBhqMS UAyFDFxSHCYbuZqoXbWa2maLbHtvL74CC2qSazLTE76MXb/vaAbcf1z88lveBrnm h3qRVDaaIEo9uvg4kuvr47UX+HjG+VJTFGMYI3XNigC6fBUDxybVw8QD4x14oovy OUpqLc5WrMgopp4vlNyQ1Se9GqpvM6zbYv1mmfqeB+UyJAp3tRV+TTWwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+iHIB2/7QdYVy/yE2/LR6BE2FJMB8GA1UdIwQY MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1 LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1eW/6Ne c1H34/kv5ROp8M791cTvqzqSH3nj7BZEWLYazwZslhU6IhI7mwwWM75tDlyPh5GG FAppUZX6fxmQKtmLnJrd+nRlHmelSziYCWT/48augaM/QJqWsB3XKQZ8lo88xNh1 5Eb0uWAg4QSxNiD1ZdNUdJ4lRP1taNCPENISg56mu+j17bmuAZZD/JXTzIx1vcTY DQWrUqzkdeeWq/+myP0qPGyTieW1u38cl8etvB+3ucZ1l5ErwLY/1cSCBRl3FCjr g1Njvhz2hjsB+8bxM6J0nBx8a6suJwXrL/iCrm/cwcvwYVSyjG+sYs8VMGbLEsXr 8UbUL1ANEGdE4A== -----END CERTIFICATE-----Generated at Sun Dec 21 11:26:31 2025 by rpki-client