This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: Cdhl28Qh6vckobLJqePfbi6uDXSoJ2Fknkw5XT/ZLgI= Subject key identifier: 28:EB:EF:BD:30:72:B1:C9:3F:D9:31:85:0A:8E:01:A2:76:F9:E1:37 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B3F11810936E826BEDBAE6FFB91C17051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 04:01:10 +0000 Manifest this update: Sun 21 Dec 2025 04:01:10 +0000 Manifest next update: Mon 22 Dec 2025 04:01:10 +0000 Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=) 2: 13fsdNbOXAchalOwmEbNfHfqCJc.roa (hash: 621q3LROOmz+26C3baN1nFldj6CbmaJCoub9IuD0vmg=) 3: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: MKgrynJDniiZmFm2+sEcllqi+rVGWPtVsSLQ1AAJ6Aw=) 4: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=) 5: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=) 6: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=) 7: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=) 8: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=) 9: lHui1rAjQ_Q4r1wxIGuetVb48BI.roa (hash: RlNAJsl93PkyN71SoGN3JUD37RzQ/2tniVsKOLkpsMU=) 10: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:81:09:36:e8:26:be:db:ae:6f:fb:91:c1:70:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Dec 21 04:01:10 2025 GMT Not After : Dec 22 04:01:10 2025 GMT Subject: CN=28ebefbd3072b1c93fd931850a8e01a276f9e137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:8f:43:0b:ee:24:3d:72:15:61:79:3e:f4: e5:98:23:8e:d7:bd:c9:9b:51:95:be:27:a3:2d:e7: 8a:0d:4e:bf:32:f3:f6:3b:cd:3e:68:1c:a4:56:56: 63:fa:47:5a:9c:bc:a8:09:28:c2:fc:46:4e:96:cc: e1:bd:58:b7:61:31:c6:ed:9b:55:e2:5a:08:fd:78: 98:be:43:bf:0d:5d:ff:83:59:ff:93:f6:b4:8d:eb: b7:2a:b7:ad:a8:f8:f4:20:b2:cc:25:98:f0:a1:fe: 6e:5b:1a:23:80:33:f3:db:3e:4d:fb:b7:13:65:67: 23:92:c7:51:1e:c7:1d:58:16:63:13:ef:ae:c3:f9: a8:7e:22:de:7f:a4:ec:f7:e0:e8:58:61:ea:d6:6b: 50:10:dc:d2:e5:ab:b9:35:8e:be:38:cc:01:87:6e: 1e:69:f1:9a:a0:52:e6:3b:74:d0:6a:7d:6a:10:75: d5:e2:6c:4b:4d:f9:11:1c:98:dd:69:a9:01:84:78: 11:40:60:90:6c:80:6a:cd:e8:82:f3:6c:33:0b:5c: b5:f7:2f:a6:46:84:ba:b1:b1:70:3b:6c:e8:35:5d: 58:8d:c4:66:62:18:2c:95:00:0c:ae:1e:61:3f:42: 57:76:c4:7c:b5:3c:9b:84:62:1b:8b:d4:b4:a7:ee: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:EF:BD:30:72:B1:C9:3F:D9:31:85:0A:8E:01:A2:76:F9:E1:37 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:5d:7f:2e:7f:5e:99:cb:e1:73:d1:1d:90:1c:c0:af:39:ac: 10:6d:00:77:b1:57:81:07:96:01:c5:e7:94:7b:18:28:e7:ee: ba:32:42:70:d7:25:2b:8e:fa:e7:85:22:6c:43:2b:f5:74:83: 64:7f:71:8e:a1:db:93:6d:05:84:d0:eb:ca:7b:b3:b7:31:00: b5:87:78:ad:d2:e6:ee:d3:3e:88:d5:77:b1:26:3e:8a:be:d8: 1e:e7:55:14:6a:06:4f:17:ac:82:f7:8a:05:1c:2d:3c:71:94: ff:55:7d:3d:d3:c0:6c:0d:ad:30:7f:cb:95:0d:14:8c:31:f0: 9a:26:b8:b5:de:aa:01:e4:11:82:55:66:4f:32:7c:c7:4c:ba: 3e:02:47:f9:80:0c:a3:10:ff:10:80:b5:6b:35:cf:a6:f6:1f: f8:18:83:85:47:95:cb:98:10:4d:4d:b6:2e:51:9f:97:44:db: c9:af:8a:5c:9e:9d:cb:11:6d:79:b4:66:ee:1c:ac:46:54:2b: ce:fd:f1:40:ea:73:e5:5a:1d:d2:7d:f5:c5:20:2e:68:bb:4d: 73:d0:ad:0d:53:fd:40:b2:a4:df:53:ac:c0:c2:15:3a:38:95: f0:58:6e:f6:17:a2:92:04:a4:38:0f:c2:f1:1d:ce:4d:cc:e6: 5e:9e:85:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYEJNugmvtuub/uRwXBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjUxMjIxMDQwMTEwWhcNMjUxMjIyMDQwMTEwWjAzMTEwLwYDVQQD EygyOGViZWZiZDMwNzJiMWM5M2ZkOTMxODUwYThlMDFhMjc2ZjllMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlGPQwvuJD1yFWF5PvTlmCOO173J m1GVviejLeeKDU6/MvP2O80+aBykVlZj+kdanLyoCSjC/EZOlszhvVi3YTHG7ZtV 4loI/XiYvkO/DV3/g1n/k/a0jeu3KretqPj0ILLMJZjwof5uWxojgDPz2z5N+7cT ZWcjksdRHscdWBZjE++uw/mofiLef6Ts9+DoWGHq1mtQENzS5au5NY6+OMwBh24e afGaoFLmO3TQan1qEHXV4mxLTfkRHJjdaakBhHgRQGCQbIBqzeiC82wzC1y19y+m RoS6sbFwO2zoNV1YjcRmYhgslQAMrh5hP0JXdsR8tTybhGIbi9S0p+7VDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjr770wcrHJP9kxhQqOAaJ2+eE3MB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABF1/Ln9e mcvhc9EdkBzArzmsEG0Ad7FXgQeWAcXnlHsYKOfuujJCcNclK47654UibEMr9XSD ZH9xjqHbk20FhNDrynuztzEAtYd4rdLm7tM+iNV3sSY+ir7YHudVFGoGTxesgveK BRwtPHGU/1V9PdPAbA2tMH/LlQ0UjDHwmia4td6qAeQRglVmTzJ8x0y6PgJH+YAM oxD/EIC1azXPpvYf+BiDhUeVy5gQTU22LlGfl0Tbya+KXJ6dyxFtebRm7hysRlQr zv3xQOpz5Vod0n31xSAuaLtNc9CtDVP9QLKk31OswMIVOjiV8Fhu9heikgSkOA/C 8R3OTczmXp6F5A== -----END CERTIFICATE-----Generated at Sun Dec 21 09:07:30 2025 by rpki-client