This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json) Hash identifier: qFb/JkU4fKfhhM3XRDFn3Zr55lnaUqLfOsbBSt+OtD8= Subject key identifier: 60:67:CE:E7:22:79:DA:F9:B6:3B:F5:1D:E5:A4:7E:28:A8:F9:5C:71 Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Certificate serial: 019B2B1CA1B3CCE681A669DF3FC8571789A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 07:00:55 +0000 Manifest this update: Wed 17 Dec 2025 07:00:55 +0000 Manifest next update: Thu 18 Dec 2025 07:00:55 +0000 Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: 4vQqdvV5U7//ILNmKpJbBgzrHEfJjEVndBQJgFaemz8=) 2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:a1:b3:cc:e6:81:a6:69:df:3f:c8:57:17:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Validity Not Before: Dec 17 07:00:55 2025 GMT Not After : Dec 18 07:00:55 2025 GMT Subject: CN=6067cee72279daf9b63bf51de5a47e28a8f95c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:1c:0a:82:7e:3e:85:70:e5:cc:b4:93:b8: cb:eb:b4:07:af:64:74:db:d0:57:14:ad:00:be:6b: bd:c7:bb:8d:65:e7:44:d5:cf:46:73:3f:84:c3:94: 34:c6:29:20:cc:58:7e:b4:e8:04:dd:36:d7:a0:24: 8d:6c:9d:1c:8b:ab:77:d9:ab:d3:75:a9:57:2b:2a: d4:36:c4:8c:3a:59:d1:d5:99:36:b8:45:7d:4f:03: 1e:df:9b:3b:8a:12:d6:eb:6d:d0:6c:2d:55:b1:f4: 6b:a7:82:3c:2e:69:a2:00:b2:75:ae:27:ad:55:fb: 3e:71:cc:14:bb:5f:6f:bf:36:af:ef:04:69:1c:82: a6:42:03:1d:4c:d0:ce:e7:8b:14:02:d4:40:b7:cf: 6f:1d:ab:37:04:75:4e:0f:c2:f7:1c:81:0e:d7:8c: d3:05:ca:a6:19:db:66:10:12:aa:de:77:51:10:a1: 98:22:16:a7:5a:63:90:f8:c2:f2:a7:1b:0a:25:36: a2:cf:7f:c3:2a:d1:a7:cf:48:0a:5b:92:21:00:b3: 83:b4:36:e2:ad:af:80:4f:48:9e:06:32:20:ae:68: 41:e2:bc:b2:e7:8d:5a:31:99:cf:53:00:5e:9c:94: ed:fb:6d:ad:0b:da:e7:b8:6a:e0:d5:82:7e:99:39: 01:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:CE:E7:22:79:DA:F9:B6:3B:F5:1D:E5:A4:7E:28:A8:F9:5C:71 X509v3 Authority Key Identifier: keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:12:0e:9a:99:40:a9:71:f8:7c:fa:25:86:ef:9c:a2:d6:29: 86:68:98:00:6f:5c:9c:82:35:e2:9e:ab:54:91:2d:03:da:5b: 7c:78:19:31:0c:ec:20:38:f7:79:47:9a:59:f2:1c:ad:e8:26: da:9a:03:af:59:56:4f:88:b3:94:3d:96:cf:42:cb:21:11:27: d9:d6:f8:11:25:c0:8b:a4:b2:40:36:f3:5e:09:08:a3:67:98: 91:32:e5:a0:18:6f:bb:2d:ee:bf:b0:74:06:b7:88:fb:34:ac: 72:1e:a0:dc:23:9f:77:b3:8f:93:0c:eb:57:22:1d:df:3f:85: c1:b1:58:89:95:e0:e9:32:96:91:90:e3:90:8a:44:c2:42:cf: 6a:b4:85:59:3c:91:30:79:ed:e8:d3:5a:91:6c:16:95:3b:43: ee:fe:bf:b2:2d:be:62:d2:74:b1:ae:e2:7f:3d:5f:eb:1d:bc: 20:44:a6:48:e2:31:f2:f2:5d:f9:51:fb:0a:ef:42:41:f5:bd: bc:41:67:13:99:bd:57:32:cc:83:e2:b7:21:70:bd:78:69:bc: cd:1b:0e:fe:f9:6c:51:7d:4e:6f:7c:19:eb:8e:94:ad:4e:70: 49:96:ee:f3:6b:6d:1f:72:4a:54:37:94:5d:0f:c0:7c:03:df: a2:50:b2:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHKGzzOaBpmnfP8hXF4mgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWNlM2NhZmI5ZTI2YzFhNjA1NjRmNzBkMmFjZWI0NTdi ZjUwMDkwHhcNMjUxMjE3MDcwMDU1WhcNMjUxMjE4MDcwMDU1WjAzMTEwLwYDVQQD Eyg2MDY3Y2VlNzIyNzlkYWY5YjYzYmY1MWRlNWE0N2UyOGE4Zjk1YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5EcCoJ+PoVw5cy0k7jL67QHr2R0 29BXFK0Avmu9x7uNZedE1c9Gcz+Ew5Q0xikgzFh+tOgE3TbXoCSNbJ0ci6t32avT dalXKyrUNsSMOlnR1Zk2uEV9TwMe35s7ihLW623QbC1VsfRrp4I8LmmiALJ1riet Vfs+ccwUu19vvzav7wRpHIKmQgMdTNDO54sUAtRAt89vHas3BHVOD8L3HIEO14zT BcqmGdtmEBKq3ndREKGYIhanWmOQ+MLypxsKJTaiz3/DKtGnz0gKW5IhALODtDbi ra+AT0ieBjIgrmhB4ryy541aMZnPUwBenJTt+22tC9rnuGrg1YJ+mTkBawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBnzuciedr5tjv1HeWkfiio+VxxMB8GA1UdIwQY MBaAFPOs48r7nibBpgVk9w0qzrRXv1AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMt MzYzZTJkNjY0M2YyLzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMtMzYzZTJkNjY0M2Yy LzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRIOmplA qXH4fPolhu+cotYphmiYAG9cnII14p6rVJEtA9pbfHgZMQzsIDj3eUeaWfIcregm 2poDr1lWT4izlD2Wz0LLIREn2db4ESXAi6SyQDbzXgkIo2eYkTLloBhvuy3uv7B0 BreI+zSsch6g3COfd7OPkwzrVyId3z+FwbFYiZXg6TKWkZDjkIpEwkLParSFWTyR MHnt6NNakWwWlTtD7v6/si2+YtJ0sa7ifz1f6x28IESmSOIx8vJd+VH7Cu9CQfW9 vEFnE5m9VzLMg+K3IXC9eGm8zRsO/vlsUX1Ob3wZ646UrU5wSZbu82ttH3JKVDeU XQ/AfAPfolCymw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:44:11 2025 by rpki-client