This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: BLZ7iCd99juWTUztj4ltwiWD8pBmhmDalQKCxzdiqVQ= Subject key identifier: 34:38:42:18:4B:67:21:6C:CF:58:81:E4:9E:00:74:0A:41:32:05:51 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B39B44D0381147501A5A4800BD1897D93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 17A0 Signing time: Sat 20 Dec 2025 03:01:16 +0000 Manifest this update: Sat 20 Dec 2025 03:01:16 +0000 Manifest next update: Sun 21 Dec 2025 03:01:16 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 5: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 6: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 9zkzmVVemphpxFSXdaGu95FzIoKrUtcxOkppzdt++UY=) 8: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) 9: yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa (hash: lsW80dY6/ypLPll75wSzW6y40nqxhinJEK5/rFAqHvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:4d:03:81:14:75:01:a5:a4:80:0b:d1:89:7d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Dec 20 03:01:16 2025 GMT Not After : Dec 21 03:01:16 2025 GMT Subject: CN=343842184b67216ccf5881e49e00740a41320551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:50:f5:c4:62:51:b3:f4:9c:af:b7:9c:b8:c5: f9:9c:b6:7c:ad:03:1c:77:46:d4:18:00:d0:71:0a: a9:21:ca:ec:c3:00:b5:ae:af:a0:97:ed:bf:c7:a5: b7:d3:ff:34:93:82:aa:50:e1:3e:62:36:1e:98:e5: cb:06:37:c5:3e:c5:77:cc:f8:6d:9f:77:ec:bb:90: ce:e7:c8:4b:4e:3e:98:a8:f5:f5:d9:3f:80:df:ff: 0b:b2:07:cb:43:d3:85:1d:b0:a3:74:cf:74:c7:70: 21:e5:99:16:a6:f9:3e:2c:8d:cc:1e:37:4a:63:b6: 3e:1f:be:7a:12:75:46:b6:f0:4a:e2:83:78:df:65: d8:4b:2c:5a:49:94:a0:21:65:74:d2:a1:97:cf:1a: f4:3c:43:a3:d1:79:f1:8e:a8:14:37:e2:56:72:c5: 59:26:c6:27:05:11:65:14:65:04:50:1e:47:0c:44: d1:86:26:e9:1f:1a:f2:34:ed:70:92:44:03:03:80: 73:08:65:68:60:53:e4:fe:30:d8:4f:11:c7:57:63: 78:15:9b:e7:91:b2:65:d1:3d:d4:5c:05:d1:5e:3e: 13:57:b7:38:3e:aa:3a:d2:b1:18:d6:56:a6:ac:39: ed:51:ae:38:ac:dc:1c:95:40:28:9b:2d:48:68:b4: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:42:18:4B:67:21:6C:CF:58:81:E4:9E:00:74:0A:41:32:05:51 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e9:94:64:46:81:db:5b:7e:38:30:2c:55:9e:f6:44:40:99: 44:cd:3a:de:f0:4b:e7:55:58:bc:46:7b:a8:27:db:f6:e1:32: a9:fd:49:26:23:f1:a7:05:83:4e:e0:3c:ae:a9:6e:a9:69:06: 6b:76:c4:d6:9b:af:e0:5d:d6:df:d0:5a:5a:4c:09:a8:0a:51: c2:19:5f:88:43:fa:c7:d6:89:3f:bb:9e:5a:7d:27:91:27:50: f8:d2:84:ac:d4:49:f8:30:d7:80:31:d0:a0:a2:b5:33:a8:04: b5:e9:44:ca:32:54:46:5f:f1:7c:44:9c:bf:84:51:30:a3:65: 7f:85:ac:3a:e7:39:ff:cb:7b:6a:d8:2f:32:0f:a3:61:89:4f: 34:b5:82:63:fb:93:16:87:82:56:00:43:5a:e0:5f:13:34:9c: 78:92:a4:ce:17:ef:1e:40:c3:95:60:36:6f:68:1c:2d:bb:13: 8d:8a:65:80:ab:77:4f:ee:a2:e5:62:74:44:e4:b1:ad:67:ce: 18:67:7c:42:fe:75:bd:c3:ba:a1:7b:16:41:67:be:42:ca:74: 21:20:eb:1a:de:7a:db:91:57:99:f7:1f:72:9c:17:51:f7:a9: e7:bf:82:09:c9:08:b5:74:94:e0:58:61:d9:9a:ad:12:b6:8e: ed:68:45:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tE0DgRR1AaWkgAvRiX2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMjIwMDMwMTE2WhcNMjUxMjIxMDMwMTE2WjAzMTEwLwYDVQQD EygzNDM4NDIxODRiNjcyMTZjY2Y1ODgxZTQ5ZTAwNzQwYTQxMzIwNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVD1xGJRs/Scr7ecuMX5nLZ8rQMc d0bUGADQcQqpIcrswwC1rq+gl+2/x6W30/80k4KqUOE+YjYemOXLBjfFPsV3zPht n3fsu5DO58hLTj6YqPX12T+A3/8LsgfLQ9OFHbCjdM90x3Ah5ZkWpvk+LI3MHjdK Y7Y+H756EnVGtvBK4oN432XYSyxaSZSgIWV00qGXzxr0PEOj0XnxjqgUN+JWcsVZ JsYnBRFlFGUEUB5HDETRhibpHxryNO1wkkQDA4BzCGVoYFPk/jDYTxHHV2N4FZvn kbJl0T3UXAXRXj4TV7c4Pqo60rEY1lamrDntUa44rNwclUAomy1IaLQMJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ4QhhLZyFsz1iB5J4AdApBMgVRMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAumUZEaB 21t+ODAsVZ72RECZRM063vBL51VYvEZ7qCfb9uEyqf1JJiPxpwWDTuA8rqluqWkG a3bE1puv4F3W39BaWkwJqApRwhlfiEP6x9aJP7ueWn0nkSdQ+NKErNRJ+DDXgDHQ oKK1M6gEtelEyjJURl/xfEScv4RRMKNlf4WsOuc5/8t7atgvMg+jYYlPNLWCY/uT FoeCVgBDWuBfEzSceJKkzhfvHkDDlWA2b2gcLbsTjYplgKt3T+6i5WJ0ROSxrWfO GGd8Qv51vcO6oXsWQWe+Qsp0ISDrGt5625FXmfcfcpwXUfep57+CCckItXSU4Fhh 2ZqtEraO7WhFWw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:03 2025 by rpki-client