This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft File: 89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json) Hash identifier: oKT/DTiuBxOcN9LTwmZGQZp4tVIziaE696zAssrstNQ= Subject key identifier: A9:80:1E:86:FD:C7:E4:02:69:66:1A:11:F8:86:BB:17:83:82:DF:EC Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Certificate serial: 019B3CEC6678C9DF1AB88F57459C6CCE2F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft Manifest number: 0CF5 Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: uAi9x6lZA7lF6pXeORPFvhU4dDe7ZQwXq/5D+SXYfNg=) 2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=) 3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=) 4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:66:78:c9:df:1a:b8:8f:57:45:9c:6c:ce:2f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=a9801e86fdc7e40269661a11f886bb178382dfec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:ca:c3:4d:00:72:2a:54:63:6b:c0:a5:3e: 26:1a:21:94:cc:17:e1:f8:33:c9:32:0e:ef:84:41: 27:cf:52:5a:99:c1:9c:62:49:cb:8d:37:08:19:8c: 8b:e7:71:1e:c8:83:84:10:40:3a:20:7e:bc:bd:83: 0d:aa:2f:43:31:f9:8b:9a:ce:b3:09:74:8c:67:a1: 9a:9c:d3:36:e9:4c:10:dd:16:8d:f3:1e:9c:88:ee: 73:18:74:80:ac:e7:09:5f:dc:3a:ee:75:d2:de:be: 4b:50:74:d2:25:43:6f:21:57:98:fb:82:36:12:23: 0c:e8:05:8f:ff:eb:a1:9e:e3:41:d0:79:1d:2f:b7: 1b:c6:00:c2:42:54:84:7b:28:2b:00:97:3e:81:e7: b7:25:dd:5e:1a:cd:e9:54:23:48:dc:70:b3:5c:a1: b2:ef:41:0a:89:40:d2:ba:44:ed:88:24:4e:78:32: cc:7d:26:18:f1:86:c6:59:6e:ea:ee:5d:82:3f:5c: f5:44:51:ea:23:06:b6:4e:38:ff:55:c9:b3:d3:b1: 8b:07:05:14:32:0c:72:89:c1:f6:40:4f:f8:79:17: 7f:3f:f3:42:f8:c4:c3:fa:f7:49:e3:32:a4:f4:1e: 8d:11:ab:60:1e:9f:4f:fc:99:a3:f3:be:b9:6c:f2: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:1E:86:FD:C7:E4:02:69:66:1A:11:F8:86:BB:17:83:82:DF:EC X509v3 Authority Key Identifier: keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:4f:51:80:6d:cb:61:be:67:1e:c5:2b:a7:ad:e9:25:b2:0f: 8f:c5:81:80:2d:9e:61:c1:fc:eb:1b:a0:fd:25:69:45:8a:82: 42:15:c4:7e:8b:b5:5e:71:e4:fd:08:15:44:29:15:87:3a:f2: 31:2f:16:5b:0e:69:95:9b:51:ac:64:65:d0:0d:21:fe:93:98: a6:39:ea:ca:1c:b9:2a:32:ca:3f:ec:f0:64:33:da:80:ad:91: 97:e5:05:a1:11:35:d3:c3:40:dd:dd:b8:9e:1f:c9:23:7a:ec: 3d:a8:12:51:07:75:61:47:5c:c3:6a:30:62:5a:84:3d:7f:84: 81:0f:d6:b6:b4:f0:a1:ed:d2:63:cc:a5:35:63:c0:95:21:b4: ca:8d:7d:20:4c:28:01:eb:a9:8b:ba:02:9a:19:26:f3:e4:78: 74:97:28:bc:86:89:79:b8:7a:26:4b:00:58:07:9c:5f:b8:9d: bc:9f:65:4f:84:b8:bb:1f:e2:05:5a:fa:bc:56:e2:03:15:00: cd:a2:bb:96:85:72:d8:48:47:50:c0:68:51:34:f6:57:d3:a2: 8f:02:79:24:ec:5e:2f:da:fe:b5:c6:9b:b1:1d:0a:40:d9:21: 08:3d:1f:ae:6b:1d:88:31:88:9b:30:ef:d8:3f:8c:a4:91:f5: 51:1a:50:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GZ4yd8auI9XRZxszi8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDg1YzQ3ZDBiN2Q2ZGM1ZGRkYTA4NTcyYjY0NTRjMTA1 OTUxMmMwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD EyhhOTgwMWU4NmZkYzdlNDAyNjk2NjFhMTFmODg2YmIxNzgzODJkZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCnKw00AcipUY2vApT4mGiGUzBfh +DPJMg7vhEEnz1JamcGcYknLjTcIGYyL53EeyIOEEEA6IH68vYMNqi9DMfmLms6z CXSMZ6GanNM26UwQ3RaN8x6ciO5zGHSArOcJX9w67nXS3r5LUHTSJUNvIVeY+4I2 EiMM6AWP/+uhnuNB0HkdL7cbxgDCQlSEeygrAJc+gee3Jd1eGs3pVCNI3HCzXKGy 70EKiUDSukTtiCROeDLMfSYY8YbGWW7q7l2CP1z1RFHqIwa2Tjj/Vcmz07GLBwUU MgxyicH2QE/4eRd/P/NC+MTD+vdJ4zKk9B6NEatgHp9P/Jmj8765bPIRhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmAHob9x+QCaWYaEfiGuxeDgt/sMB8GA1UdIwQY MBaAFPPYXEfQt9bcXd2ghXK2RUwQWVEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTct NTIxMmRiOTc1NGY0LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNmZiMTEtMmQwMC00ZTdiLWIyOTctNTIxMmRiOTc1NGY0 LzEvODloY1I5QzMxdHhkM2FDRmNyWkZUQkJaVVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcE9RgG3L Yb5nHsUrp63pJbIPj8WBgC2eYcH86xug/SVpRYqCQhXEfou1XnHk/QgVRCkVhzry MS8WWw5plZtRrGRl0A0h/pOYpjnqyhy5KjLKP+zwZDPagK2Rl+UFoRE108NA3d24 nh/JI3rsPagSUQd1YUdcw2owYlqEPX+EgQ/WtrTwoe3SY8ylNWPAlSG0yo19IEwo Aeupi7oCmhkm8+R4dJcovIaJebh6JksAWAecX7idvJ9lT4S4ux/iBVr6vFbiAxUA zaK7loVy2EhHUMBoUTT2V9OijwJ5JOxeL9r+tcabsR0KQNkhCD0frmsdiDGImzDv 2D+MpJH1URpQjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:35:24 2025 by rpki-client