This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: DYFT1ofjYRmXRUaGNbxFsL2rFuYGdo0tf6mtGLKGltQ= Subject key identifier: 20:CB:6D:04:29:72:06:9B:3F:F8:55:FD:37:13:11:E1:61:8B:B8:0E Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B3D235B7E0984AD051961E645A43DD7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 19:01:25 +0000 Manifest this update: Sat 20 Dec 2025 19:01:25 +0000 Manifest next update: Sun 21 Dec 2025 19:01:25 +0000 Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=) 2: 13fsdNbOXAchalOwmEbNfHfqCJc.roa (hash: 621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=) 3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: PG1fOEZF6iY9+FAcH+j0Mb+EgLEimaEG6owKzy48kCM=) 4: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=) 5: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=) 6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=) 7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=) 8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=) 9: lHui1rAjQ_Q4r1wxIGuetVb48BI.roa (hash: RlNAJsl93PkyN71SoGN3JUD37RzQ/2tniVsKOLkpsMU=) 10: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:5b:7e:09:84:ad:05:19:61:e6:45:a4:3d:d7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Dec 20 19:01:25 2025 GMT Not After : Dec 21 19:01:25 2025 GMT Subject: CN=20cb6d042972069b3ff855fd371311e1618bb80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:25:73:ff:7b:41:c5:41:f7:fc:99:83:3a: 1c:b7:a0:83:f2:c1:26:8a:06:0a:b7:d9:5c:11:12: ff:17:cf:9b:3c:c9:82:0d:7e:1f:6c:4e:ec:f8:1b: f5:3b:63:cb:2d:f1:28:19:6f:37:c5:e6:43:47:0e: 8c:74:09:26:43:34:a9:ec:ba:ed:16:c8:ae:82:2c: 77:e9:6e:36:8b:4d:6a:a5:f9:b2:4d:92:ff:3b:07: a6:17:9c:b7:d4:40:92:2d:69:31:bc:bf:1d:5f:16: f0:06:61:91:50:f5:bf:02:ea:c5:01:34:24:73:ae: ff:87:f0:37:c7:bb:bc:72:94:57:df:78:a5:85:7f: 9f:57:07:63:92:82:81:39:27:96:f9:8d:17:9d:ed: 53:f2:25:25:47:76:35:b3:ba:3e:2f:7a:fb:7b:31: ac:11:dd:a6:19:8d:3b:cb:cf:07:e6:3f:2b:fe:62: 24:c8:8c:ca:60:91:be:8f:bb:96:45:52:75:89:63: 3d:ad:6d:c9:4e:45:af:da:11:c5:07:58:52:8b:c6: bc:8e:28:5a:26:f2:bf:41:8e:d3:4e:29:39:21:19: be:93:b3:ba:5a:9e:1a:e6:14:e9:f7:8e:9f:82:45: ee:71:50:0d:cd:66:f8:9e:cc:a0:da:1e:4b:be:75: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CB:6D:04:29:72:06:9B:3F:F8:55:FD:37:13:11:E1:61:8B:B8:0E X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9c:40:67:e1:2e:52:1e:b5:57:0a:35:e3:e3:25:8a:dd:48: 53:3e:6e:c9:8d:ee:32:c4:92:7e:fe:ad:19:11:62:2d:c2:81: dc:c7:01:e2:6e:c8:56:5b:6c:2f:a7:d8:61:16:07:36:de:a7: f3:22:30:8c:e6:06:3f:b2:99:db:99:7f:83:f3:9d:2b:2c:67: b3:e7:2a:40:b3:c5:6a:e2:e4:bb:6e:7f:a4:af:a9:e5:b5:19: 8d:fc:ab:ec:89:6b:51:1e:dd:b2:62:8c:e6:bd:02:91:4a:19: b1:4a:8d:59:af:d8:be:4c:ad:75:b3:98:35:d6:4c:2d:00:72: e3:0a:15:df:a7:bc:ab:16:b0:80:68:d3:0c:f0:5f:cd:e5:46: 8f:6c:21:01:b7:8b:d0:41:9a:6b:d5:68:0d:c5:64:4a:27:30: e3:c0:b5:24:24:cb:2f:e6:67:ff:bb:76:f6:75:65:fc:32:ab: 24:b5:8e:6b:8c:67:33:2d:02:9c:9d:29:8a:16:c2:3f:53:8c: c4:17:0d:c1:7f:12:ff:89:d5:cd:08:23:13:0f:1e:13:2f:eb: 7b:0b:12:6d:2b:5f:97:8d:49:c7:01:d1:14:9b:8c:66:b6:5a: 21:a9:9c:00:8a:ce:6b:da:f1:36:12:f1:9e:7b:dd:fe:6a:57: 90:8b:32:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1t+CYStBRlh5kWkPdfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjUxMjIwMTkwMTI1WhcNMjUxMjIxMTkwMTI1WjAzMTEwLwYDVQQD EygyMGNiNmQwNDI5NzIwNjliM2ZmODU1ZmQzNzEzMTFlMTYxOGJiODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfolc/97QcVB9/yZgzoct6CD8sEm igYKt9lcERL/F8+bPMmCDX4fbE7s+Bv1O2PLLfEoGW83xeZDRw6MdAkmQzSp7Lrt Fsiugix36W42i01qpfmyTZL/OwemF5y31ECSLWkxvL8dXxbwBmGRUPW/AurFATQk c67/h/A3x7u8cpRX33ilhX+fVwdjkoKBOSeW+Y0Xne1T8iUlR3Y1s7o+L3r7ezGs Ed2mGY07y88H5j8r/mIkyIzKYJG+j7uWRVJ1iWM9rW3JTkWv2hHFB1hSi8a8jiha JvK/QY7TTik5IRm+k7O6Wp4a5hTp946fgkXucVANzWb4nsyg2h5LvnUWCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDLbQQpcgabP/hV/TcTEeFhi7gOMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJxAZ+Eu Uh61Vwo14+Mlit1IUz5uyY3uMsSSfv6tGRFiLcKB3McB4m7IVltsL6fYYRYHNt6n 8yIwjOYGP7KZ25l/g/OdKyxns+cqQLPFauLku25/pK+p5bUZjfyr7IlrUR7dsmKM 5r0CkUoZsUqNWa/YvkytdbOYNdZMLQBy4woV36e8qxawgGjTDPBfzeVGj2whAbeL 0EGaa9VoDcVkSicw48C1JCTLL+Zn/7t29nVl/DKrJLWOa4xnMy0CnJ0pihbCP1OM xBcNwX8S/4nVzQgjEw8eEy/rewsSbStfl41JxwHRFJuMZrZaIamcAIrOa9rxNhLx nnvd/mpXkIsyVg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:10:56 2025 by rpki-client