This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json) Hash identifier: AL08TnZK7rAx3quobdhviyzrIXKGYkXD51KQ9pnDk7w= Subject key identifier: E1:CE:B1:AA:7E:5D:7B:D1:32:D0:7C:F3:40:5C:36:4F:14:48:75:BF Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e Certificate serial: 019B54BD6C210EBE4CB790A27DBE6C348D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft Manifest number: 1727 Signing time: Thu 25 Dec 2025 09:00:58 +0000 Manifest this update: Thu 25 Dec 2025 09:00:58 +0000 Manifest next update: Fri 26 Dec 2025 09:00:58 +0000 Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: IV+fCg3bKzey0ESMnf++fg3rn9SvUL8qcUCjG8e+MLQ=) 2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:6c:21:0e:be:4c:b7:90:a2:7d:be:6c:34:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e Validity Not Before: Dec 25 09:00:58 2025 GMT Not After : Dec 26 09:00:58 2025 GMT Subject: CN=e1ceb1aa7e5d7bd132d07cf3405c364f144875bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:01:f2:88:22:29:b6:cc:ce:62:98:ea:b6: f2:f1:11:5d:2d:2c:2e:5d:09:07:de:59:23:da:3a: 93:b1:9d:5f:1e:5c:27:9c:63:41:d4:73:6c:9c:16: d4:69:83:16:48:b1:45:6d:4e:ff:12:c3:4c:37:e9: 17:da:39:7d:13:85:18:2f:75:e3:bb:74:54:5e:38: c7:6b:e6:11:1b:ad:3f:5b:2c:fa:3b:3e:55:fe:a5: a1:19:b7:54:43:b7:cc:fc:9c:c7:bc:3f:49:7f:3e: ae:d5:7d:49:8b:ae:4d:e0:a4:97:e8:17:12:7c:8d: 0f:cb:22:41:5a:47:15:d7:75:54:58:dc:9a:2d:a7: 78:d7:2e:ec:0f:c9:cf:13:f8:62:83:6c:39:71:8b: b4:d3:09:49:44:00:88:f2:0e:4a:e2:d6:dd:86:f8: 9e:3a:db:c5:7b:c4:19:62:1f:5b:65:fb:dd:86:a4: 1f:3d:63:94:f6:3b:34:55:b3:2b:00:42:d9:ee:82: 21:5d:7c:dc:08:5f:74:ed:0f:1a:25:27:e1:16:56: 00:e5:18:39:e8:6d:58:4e:c2:e3:ed:a5:29:e1:4b: 80:97:df:98:28:33:10:90:b8:1b:5f:a7:9b:ee:0e: 92:be:bb:03:78:f0:5d:ec:9f:9e:30:08:6b:a9:a3: e8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CE:B1:AA:7E:5D:7B:D1:32:D0:7C:F3:40:5C:36:4F:14:48:75:BF X509v3 Authority Key Identifier: keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:02:ea:64:ba:31:9c:f6:eb:72:00:a0:69:c7:2f:29:4e:4b: c3:c9:84:8f:a3:66:b9:89:45:f4:cd:7b:a6:b5:19:fe:a1:f4: 78:d0:19:55:05:28:23:33:ef:b1:dc:a0:a4:88:f5:ea:56:61: 68:a9:f5:f7:e3:0b:b6:06:ee:f0:a4:c1:a1:2b:1b:fe:0f:78: c1:90:cc:d0:25:58:90:00:51:72:89:ce:6f:96:a4:fb:0f:6d: bf:2d:a3:c0:bc:f9:d4:58:e3:aa:fb:2c:32:c1:16:a9:29:51: 57:cb:6d:b4:9b:4c:52:3d:9c:c7:9e:51:09:87:eb:f8:4b:d6: dd:cd:fe:09:93:71:dd:1a:ab:ef:4b:c6:a9:72:af:7d:68:2d: 9b:b3:5b:2d:7f:e6:4a:97:10:4d:8e:93:de:00:cf:09:10:e2: 07:33:41:0c:f7:dc:59:0a:07:cc:dc:8d:32:38:7e:92:3b:8b: c4:63:51:3d:5f:40:f4:f3:7b:28:1c:fa:a0:54:7b:35:9e:3d: 9d:88:7d:34:3a:77:ad:d8:4d:ef:19:9d:17:73:e0:3f:84:3d: 5f:e8:14:aa:eb:23:63:12:48:05:dd:76:55:40:5d:59:93:9f: 8d:fe:1d:c9:b5:80:3a:cd:29:bc:b5:5d:43:5b:2a:be:97:85: 66:9d:bc:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvWwhDr5Mt5Cifb5sNI1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5 NzRlM2UwHhcNMjUxMjI1MDkwMDU4WhcNMjUxMjI2MDkwMDU4WjAzMTEwLwYDVQQD EyhlMWNlYjFhYTdlNWQ3YmQxMzJkMDdjZjM0MDVjMzY0ZjE0NDg3NWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZMB8ogiKbbMzmKY6rby8RFdLSwu XQkH3lkj2jqTsZ1fHlwnnGNB1HNsnBbUaYMWSLFFbU7/EsNMN+kX2jl9E4UYL3Xj u3RUXjjHa+YRG60/Wyz6Oz5V/qWhGbdUQ7fM/JzHvD9Jfz6u1X1Ji65N4KSX6BcS fI0PyyJBWkcV13VUWNyaLad41y7sD8nPE/hig2w5cYu00wlJRACI8g5K4tbdhvie OtvFe8QZYh9bZfvdhqQfPWOU9js0VbMrAELZ7oIhXXzcCF907Q8aJSfhFlYA5Rg5 6G1YTsLj7aUp4UuAl9+YKDMQkLgbX6eb7g6SvrsDePBd7J+eMAhrqaPopQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHOsap+XXvRMtB880BcNk8USHW/MB8GA1UdIwQY MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5 LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQLqZLox nPbrcgCgaccvKU5Lw8mEj6NmuYlF9M17prUZ/qH0eNAZVQUoIzPvsdygpIj16lZh aKn19+MLtgbu8KTBoSsb/g94wZDM0CVYkABRconOb5ak+w9tvy2jwLz51Fjjqvss MsEWqSlRV8tttJtMUj2cx55RCYfr+EvW3c3+CZNx3Rqr70vGqXKvfWgtm7NbLX/m SpcQTY6T3gDPCRDiBzNBDPfcWQoHzNyNMjh+kjuLxGNRPV9A9PN7KBz6oFR7NZ49 nYh9NDp3rdhN7xmdF3PgP4Q9X+gUqusjYxJIBd12VUBdWZOfjf4dybWAOs0pvLVd Q1sqvpeFZp28KA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:11 2025 by rpki-client