This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json) Hash identifier: +N7RGwaEJaRsrcqCRf/zGUNbd8wcntSymMvO5ZR4DQQ= Subject key identifier: 93:5C:84:31:19:F1:B7:A7:6B:18:D2:25:2A:2C:AF:07:9B:C3:57:E9 Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Certificate serial: 019B397D885D5D0F4DA7A705FB464E75EA07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft Manifest number: 04C9 Signing time: Sat 20 Dec 2025 02:01:26 +0000 Manifest this update: Sat 20 Dec 2025 02:01:26 +0000 Manifest next update: Sun 21 Dec 2025 02:01:26 +0000 Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=) 2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: uz3ZlpH0k2VPu6EvLNbDQy+UD2lcPJ4k3BtPu1aamdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:88:5d:5d:0f:4d:a7:a7:05:fb:46:4e:75:ea:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Validity Not Before: Dec 20 02:01:26 2025 GMT Not After : Dec 21 02:01:26 2025 GMT Subject: CN=935c843119f1b7a76b18d2252a2caf079bc357e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d6:c3:5a:2a:23:5f:46:a9:d1:07:ce:64:65: 62:5f:61:4f:ea:cb:a2:c6:2c:01:05:8f:f4:16:e8: 82:b2:5e:71:c8:82:0f:a0:91:0a:96:e6:4c:dd:a4: e3:3d:23:f2:c9:0a:73:4f:18:03:e1:7e:ef:08:50: b8:8f:3d:ba:d6:76:6a:72:6f:bf:3a:d9:d1:8f:6e: 00:0d:c5:3c:62:aa:e1:9c:ba:12:dc:3e:79:3e:63: 47:29:ae:d4:fa:aa:a6:db:0a:14:4e:f9:6e:49:d7: 1e:fb:3b:b8:cf:ef:80:92:56:21:7f:bf:d2:89:b8: 7b:5b:94:90:96:41:64:22:f4:ae:87:8d:c2:a9:ab: 52:57:a0:5a:43:bc:41:f2:92:85:1c:79:ca:a0:a5: 66:1a:dc:a7:bb:1f:2d:3d:56:51:24:9d:ca:2c:3f: c5:49:37:76:42:e6:e5:7c:b5:25:42:58:c1:a0:ad: ce:1c:f3:22:f0:84:ee:7a:b8:70:0c:73:95:ac:f2: de:13:f3:c2:5e:f4:8d:07:3b:ca:83:b5:1b:92:af: 3d:40:ae:81:2d:8a:57:82:c4:c0:5a:2c:a8:a0:99: 52:ca:e8:ff:dd:70:6b:8a:bc:61:09:31:d5:44:80: 0a:34:40:80:d6:d5:d3:4e:dc:b2:6d:10:17:47:19: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5C:84:31:19:F1:B7:A7:6B:18:D2:25:2A:2C:AF:07:9B:C3:57:E9 X509v3 Authority Key Identifier: keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a2:41:39:55:55:28:9b:96:72:c3:8e:1e:b1:20:48:e4:7c: a4:1e:18:4a:58:5f:77:6d:90:63:0a:13:b9:b5:51:ee:54:f7: 82:d0:2c:13:1a:ff:29:84:db:2e:49:8d:ae:cd:99:1b:ef:45: 08:98:33:07:37:72:02:13:f5:93:ad:cf:31:6d:8e:f2:94:a6: 8c:4e:36:0b:c1:ca:e8:9e:00:0e:5e:51:69:a6:28:01:ed:91: 8e:bb:30:d4:dd:d8:91:72:42:a4:50:f3:06:a0:26:bc:1d:ee: 8f:98:68:bb:d4:e5:80:31:99:b5:51:b5:9e:3e:84:40:04:e5: ba:d8:d6:52:6c:7d:a5:3b:be:26:5d:8a:ec:23:6d:14:dc:5d: 39:86:db:82:ce:5b:02:eb:12:31:01:23:fa:72:8b:0a:d1:ad: 22:11:5a:96:b2:d9:89:d9:d8:b8:10:45:80:a4:ba:01:91:41: 5d:28:10:3b:4e:10:e7:52:ed:6a:4c:4e:83:5f:9c:85:10:d1: 80:75:15:5d:4b:95:7b:02:b4:00:6a:72:f6:18:a2:7b:d7:ff: 91:d0:45:87:ce:9f:40:e2:38:7d:ea:21:1d:67:76:b1:5e:7f: 8c:26:e7:30:dd:db:24:d8:3e:25:d7:17:c4:84:0c:c7:9e:a4: ae:93:9a:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fYhdXQ9Np6cF+0ZOdeoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk MWQxN2MwHhcNMjUxMjIwMDIwMTI2WhcNMjUxMjIxMDIwMTI2WjAzMTEwLwYDVQQD Eyg5MzVjODQzMTE5ZjFiN2E3NmIxOGQyMjUyYTJjYWYwNzliYzM1N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dbDWiojX0ap0QfOZGViX2FP6sui xiwBBY/0FuiCsl5xyIIPoJEKluZM3aTjPSPyyQpzTxgD4X7vCFC4jz261nZqcm+/ OtnRj24ADcU8YqrhnLoS3D55PmNHKa7U+qqm2woUTvluSdce+zu4z++AklYhf7/S ibh7W5SQlkFkIvSuh43CqatSV6BaQ7xB8pKFHHnKoKVmGtynux8tPVZRJJ3KLD/F STd2QublfLUlQljBoK3OHPMi8ITuerhwDHOVrPLeE/PCXvSNBzvKg7Ubkq89QK6B LYpXgsTAWiyooJlSyuj/3XBrirxhCTHVRIAKNECA1tXTTtyybRAXRxkMkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNchDEZ8benaxjSJSosrwebw1fpMB8GA1UdIwQY MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaJBOVVV KJuWcsOOHrEgSOR8pB4YSlhfd22QYwoTubVR7lT3gtAsExr/KYTbLkmNrs2ZG+9F CJgzBzdyAhP1k63PMW2O8pSmjE42C8HK6J4ADl5RaaYoAe2Rjrsw1N3YkXJCpFDz BqAmvB3uj5hou9TlgDGZtVG1nj6EQATlutjWUmx9pTu+Jl2K7CNtFNxdOYbbgs5b AusSMQEj+nKLCtGtIhFalrLZidnYuBBFgKS6AZFBXSgQO04Q51LtakxOg1+chRDR gHUVXUuVewK0AGpy9hiie9f/kdBFh86fQOI4feohHWd2sV5/jCbnMN3bJNg+JdcX xIQMx56krpOaxA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:55 2025 by rpki-client