This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json) Hash identifier: ih/oWScTK6psrpB+T60xL/hKIKaBIzW3WNvmRLXacyA= Subject key identifier: 6D:0A:03:B8:8D:1A:E2:77:64:EC:17:40:D4:8F:93:E3:20:4F:06:6A Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28 Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28 Certificate serial: 019B44DD0B0A932040CECB3D8097E29EA83D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft Manifest number: 04CB Signing time: Mon 22 Dec 2025 07:01:35 +0000 Manifest this update: Mon 22 Dec 2025 07:01:35 +0000 Manifest next update: Tue 23 Dec 2025 07:01:35 +0000 Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: exYKneh+LuN/ninw3eJFj+Aj5kJ5TuxNamiIzkEZkzg=) 2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:0b:0a:93:20:40:ce:cb:3d:80:97:e2:9e:a8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28 Validity Not Before: Dec 22 07:01:35 2025 GMT Not After : Dec 23 07:01:35 2025 GMT Subject: CN=6d0a03b88d1ae27764ec1740d48f93e3204f066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:69:0c:34:9d:60:e5:81:9a:bc:43:52:0f:b1: 55:43:bb:d7:85:3b:b5:26:d4:e1:a3:77:65:a2:03: 47:12:66:94:97:47:03:c5:47:f8:4c:e1:2b:f4:a6: 32:ed:2f:ce:17:fb:35:42:5a:b6:0b:36:c0:ca:61: f6:fa:7e:4b:7c:58:8d:20:8a:31:29:f5:84:97:b5: 66:7c:fe:60:3f:57:04:9c:3b:42:79:b0:7c:ad:bb: fa:06:8b:8a:1b:39:9b:45:2b:32:87:33:76:b3:63: 87:c5:9a:ed:d3:93:a8:29:0a:d5:27:00:e3:b0:2c: fe:82:5b:0f:eb:2c:01:e7:9f:1b:97:84:fd:59:53: 0a:32:c2:1a:70:0b:6e:6b:fd:27:a3:89:57:03:ae: 4a:f9:27:48:15:32:22:a4:fe:76:23:3e:c7:7b:1e: d9:65:24:9a:51:0d:c8:f5:73:1a:58:0c:03:34:02: 0f:71:28:91:9c:c7:66:35:e9:40:7b:b7:34:71:3f: 0d:bd:8b:8d:a0:91:11:1e:6d:4e:bb:85:f8:7f:f0: 4c:f6:84:6f:f9:45:c9:9e:dc:01:20:1f:50:57:b0: e1:96:b3:a1:7a:1d:8e:87:0d:ca:63:b3:81:3b:21: 6c:79:d1:8e:4d:54:7e:b8:d3:4e:30:f5:ee:3c:af: 15:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:03:B8:8D:1A:E2:77:64:EC:17:40:D4:8F:93:E3:20:4F:06:6A X509v3 Authority Key Identifier: keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:d3:5d:9f:85:2a:01:e2:1c:68:c1:50:99:83:3d:2a:ec: 1d:51:a4:ce:33:09:e9:e9:a7:90:4a:a7:db:28:75:87:4a:02: 35:2c:02:c9:0b:86:9c:04:86:1c:88:7d:03:d0:9d:44:4a:f8: 6b:07:c6:57:fb:30:f9:a1:99:28:4f:41:b0:59:09:89:2c:30: bc:9a:95:13:43:72:ab:32:00:e9:9f:a3:f9:67:a3:57:89:cf: 5c:d7:f7:1a:b1:3e:a7:ca:42:6b:c4:ce:72:42:7e:2c:d9:24: 06:ba:ba:81:0d:7a:37:02:38:e0:4f:3a:ff:24:50:be:84:bf: e7:a8:b4:14:cb:69:aa:f9:5c:3e:33:f4:66:5f:22:4b:60:cd: 2d:bb:50:c0:41:b6:89:14:04:30:00:3c:eb:e5:fe:7d:25:c5: af:87:4e:55:de:40:95:0d:c6:c2:b4:c3:01:f1:ff:ee:f4:b9: 92:4a:19:08:78:ad:e2:ea:58:a9:3d:ce:75:18:9f:16:45:8d: 58:65:a7:e8:4d:bd:65:65:44:cb:d9:89:49:5a:4d:7d:38:d9: eb:82:19:be:d0:07:e8:c4:93:46:5f:7d:d8:66:77:ba:cc:fc: 86:5a:e9:98:71:5d:e6:8a:e4:df:8a:1d:63:26:b1:c0:d5:ae: 50:7e:3e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3QsKkyBAzss9gJfinqg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1 MTFmMjgwHhcNMjUxMjIyMDcwMTM1WhcNMjUxMjIzMDcwMTM1WjAzMTEwLwYDVQQD Eyg2ZDBhMDNiODhkMWFlMjc3NjRlYzE3NDBkNDhmOTNlMzIwNGYwNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWkMNJ1g5YGavENSD7FVQ7vXhTu1 JtTho3dlogNHEmaUl0cDxUf4TOEr9KYy7S/OF/s1Qlq2CzbAymH2+n5LfFiNIIox KfWEl7VmfP5gP1cEnDtCebB8rbv6BouKGzmbRSsyhzN2s2OHxZrt05OoKQrVJwDj sCz+glsP6ywB558bl4T9WVMKMsIacAtua/0no4lXA65K+SdIFTIipP52Iz7Hex7Z ZSSaUQ3I9XMaWAwDNAIPcSiRnMdmNelAe7c0cT8NvYuNoJERHm1Ou4X4f/BM9oRv +UXJntwBIB9QV7DhlrOheh2Ohw3KY7OBOyFsedGOTVR+uNNOMPXuPK8VnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0KA7iNGuJ3ZOwXQNSPk+MgTwZqMB8GA1UdIwQY MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXanTXZ+F KgHiHGjBUJmDPSrsHVGkzjMJ6emnkEqn2yh1h0oCNSwCyQuGnASGHIh9A9CdREr4 awfGV/sw+aGZKE9BsFkJiSwwvJqVE0NyqzIA6Z+j+WejV4nPXNf3GrE+p8pCa8TO ckJ+LNkkBrq6gQ16NwI44E86/yRQvoS/56i0FMtpqvlcPjP0Zl8iS2DNLbtQwEG2 iRQEMAA86+X+fSXFr4dOVd5AlQ3GwrTDAfH/7vS5kkoZCHit4upYqT3OdRifFkWN WGWn6E29ZWVEy9mJSVpNfTjZ64IZvtAH6MSTRl992GZ3usz8hlrpmHFd5ork34od YyaxwNWuUH4+lQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:43 2025 by rpki-client