This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json) Hash identifier: K2/dSkr8uoiROYW7r1SIjgMi7MhStuCJzUiAIoqkD9g= Subject key identifier: B2:D1:2E:93:83:94:4E:5D:0A:B3:EB:E4:37:B1:74:82:CC:F6:74:62 Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Certificate serial: 019AF2AD829CBC2590C78ABDFBC611FF3416 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft Manifest number: 1048 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: 1Va9-VCRLq6nfmhgDYPY9z50vR4.roa (hash: ESx+goLfyktPxcscMRpU8+hvhVOyXeN96tMCeWI/nlM=) 2: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: yknxCZ7QClDByLCtK8WjG5gTAo/nIaJlHnK6ecuUsaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:82:9c:bc:25:90:c7:8a:bd:fb:c6:11:ff:34:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03 Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=b2d12e9383944e5d0ab3ebe437b17482ccf67462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:b3:08:3d:cd:6f:19:21:e7:3b:3f:a9:25: 9c:c4:97:90:be:9b:c6:7a:7f:00:71:17:bf:f1:0e: 17:a3:4e:e6:99:d4:6d:b7:35:21:e4:3a:c7:97:48: 8c:a5:7d:62:9e:d3:4a:ff:ea:a5:20:33:14:87:0e: ee:2d:ec:f1:03:62:c2:f6:12:a0:2b:8e:1b:9a:c4: 41:10:48:f2:28:96:92:cc:35:49:4a:87:07:5d:f3: c2:8e:e8:eb:89:c6:7c:ac:a1:46:f5:43:6a:6c:80: 90:14:6f:36:32:66:bd:3c:7d:52:8a:e5:24:0d:0c: bd:25:4c:11:c9:1e:16:16:aa:77:f9:46:46:5a:77: d4:dd:f3:d2:c4:e4:86:5f:39:20:f2:e3:8a:23:49: 97:80:c8:bc:6a:f5:b7:f2:ff:d7:7d:19:e1:8b:aa: 84:f0:44:2e:d0:e3:00:82:ef:aa:09:22:ca:ce:9f: 3d:f6:c5:f2:4e:bc:cb:9e:12:60:5d:c2:fe:a2:22: 9f:f2:c3:1b:fa:ae:5e:d5:6a:8d:20:71:b0:b2:6d: 8d:82:42:31:0d:0c:ac:4b:01:b0:2f:36:5a:c4:86: 7f:21:ec:4d:16:84:f8:e2:e5:09:b6:52:6c:28:af: ca:35:a4:f3:ad:d0:7f:c3:c7:01:08:d8:4d:a3:65: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D1:2E:93:83:94:4E:5D:0A:B3:EB:E4:37:B1:74:82:CC:F6:74:62 X509v3 Authority Key Identifier: keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2f:37:0d:ef:c3:22:af:e7:f1:10:49:60:42:51:f7:b4:ec: 80:c3:5a:bf:ee:eb:0a:30:af:98:1b:39:59:09:49:7e:bd:65: 94:41:c3:18:7f:de:e4:4c:b1:ae:6e:4b:c2:3d:02:d2:46:68: 5d:e4:70:e1:57:16:da:a5:bb:a9:9a:e0:73:65:68:4e:80:2e: 41:eb:e2:d5:ca:d7:69:91:04:48:a6:0c:f7:65:53:23:8f:6c: f6:e9:11:53:f4:37:96:08:ee:de:d5:93:a1:8c:bb:62:83:59: a2:07:5d:0a:1c:1e:93:16:00:62:d6:cd:12:29:79:eb:7d:4c: 02:23:af:d8:d5:36:49:bf:01:e0:dc:bf:39:e6:0e:7f:34:e8: 47:39:c7:a3:b4:79:0b:5c:47:d0:fe:f1:5a:d2:24:eb:a9:74: 7b:96:ca:22:57:17:14:e8:ed:1c:4d:7a:e4:e6:a6:39:3f:f7: 3f:d1:81:10:d8:66:53:af:4d:a0:66:4e:7f:02:4a:35:38:88: fd:d7:0d:9f:76:33:c4:50:cd:a4:1d:3e:6d:bd:fc:be:18:a5: 20:1b:4d:22:86:89:0f:7d:9e:b5:14:f9:32:8e:32:91:b4:dc: 16:bc:06:f6:8e:71:fd:9c:54:a6:13:5f:04:98:80:c3:69:16: 49:01:cc:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYKcvCWQx4q9+8YR/zQWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODU4YjkxYTY2MjdmMjM1OGVhYWRjZDI2YmE1YzJjNWM0 NmVhMDMwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD EyhiMmQxMmU5MzgzOTQ0ZTVkMGFiM2ViZTQzN2IxNzQ4MmNjZjY3NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBazCD3Nbxkh5zs/qSWcxJeQvpvG en8AcRe/8Q4Xo07mmdRttzUh5DrHl0iMpX1intNK/+qlIDMUhw7uLezxA2LC9hKg K44bmsRBEEjyKJaSzDVJSocHXfPCjujricZ8rKFG9UNqbICQFG82Mma9PH1SiuUk DQy9JUwRyR4WFqp3+UZGWnfU3fPSxOSGXzkg8uOKI0mXgMi8avW38v/XfRnhi6qE 8EQu0OMAgu+qCSLKzp899sXyTrzLnhJgXcL+oiKf8sMb+q5e1WqNIHGwsm2NgkIx DQysSwGwLzZaxIZ/IexNFoT44uUJtlJsKK/KNaTzrdB/w8cBCNhNo2WEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLRLpODlE5dCrPr5DexdILM9nRiMB8GA1UdIwQY MBaAFPeFi5GmYn8jWOqtzSa6XCxcRuoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQt ZjI3YWE5YzZlYjZiLzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9mMDI4ZTgtZjA0MS00ODgwLThhOWQtZjI3YWE5YzZlYjZi LzEvOTRXTGthWmlmeU5ZNnEzTkpycGNMRnhHNmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny83De/D Iq/n8RBJYEJR97TsgMNav+7rCjCvmBs5WQlJfr1llEHDGH/e5Eyxrm5Lwj0C0kZo XeRw4VcW2qW7qZrgc2VoToAuQevi1crXaZEESKYM92VTI49s9ukRU/Q3lgju3tWT oYy7YoNZogddChwekxYAYtbNEil5631MAiOv2NU2Sb8B4Ny/OeYOfzToRznHo7R5 C1xH0P7xWtIk66l0e5bKIlcXFOjtHE165OamOT/3P9GBENhmU69NoGZOfwJKNTiI /dcNn3YzxFDNpB0+bb38vhilIBtNIoaJD32etRT5Mo4ykbTcFrwG9o5x/ZxUphNf BJiAw2kWSQHMPg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:30 2025 by rpki-client