This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft File: 86GuCwfNBe4khPTuvNRWhHNHNBQ.mft (raw, json) Hash identifier: gIw77yqtXy/3PWHcLI1K4CGsmcwqbiOq3cDjdGCCac0= Subject key identifier: 17:EE:28:E5:AA:D9:C4:3E:EE:C1:A2:C0:0A:2D:58:BC:7A:49:01:96 Authority key identifier: F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14 Certificate issuer: /CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414 Certificate serial: 019AF5780F71F507D80BDFF6DED110964CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 21:01:17 +0000 Manifest this update: Sat 06 Dec 2025 21:01:17 +0000 Manifest next update: Sun 07 Dec 2025 21:01:17 +0000 Files and hashes: 1: 0yNiuwlEmaGi-GMVCrhtb0jD684.roa (hash: 0JYmDVSwa/kA2DCdsSlQFjDnGZq4KcJ5IykJE11qOfk=) 2: 86GuCwfNBe4khPTuvNRWhHNHNBQ.crl (hash: Wv+G279OO4lQkmwl3rLz40KS4rSIkppngpzaspF6RjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0f:71:f5:07:d8:0b:df:f6:de:d1:10:96:4c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a1ae0b07cd05ee2484f4eebcd4568473473414 Validity Not Before: Dec 6 21:01:17 2025 GMT Not After : Dec 7 21:01:17 2025 GMT Subject: CN=17ee28e5aad9c43eeec1a2c00a2d58bc7a490196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:e5:9f:11:d1:0d:b4:8b:c3:73:78:d3:c6: f2:c4:21:77:8f:fa:67:5c:81:75:eb:97:d9:27:13: bf:15:fe:2a:88:b9:a6:ef:5d:26:bd:07:48:b5:b9: 63:79:93:66:37:a9:3b:12:09:5d:85:a7:47:ee:15: b2:28:25:bb:51:03:a8:56:ab:45:c0:33:a2:09:59: 7a:0d:98:41:9a:38:58:de:4a:dd:0f:1a:60:f5:0a: a5:cc:d3:43:0d:7b:4e:1f:75:ea:b0:d0:81:fa:1a: c0:8f:ec:af:62:7a:17:6f:4f:d0:69:1f:06:88:ec: a3:15:09:34:ec:87:37:6e:54:51:e7:11:91:2f:b0: 4b:69:b2:a2:9a:0d:fd:ab:e0:61:72:72:fe:44:e0: 43:f3:a0:97:3d:8f:93:01:27:29:4a:aa:95:49:09: ea:b2:dd:6b:ff:66:6c:f7:14:68:b9:39:7b:a1:8a: 24:08:d8:d7:23:4f:d5:bb:8a:3e:98:c7:ad:b7:a1: 35:e2:47:58:e4:7a:18:72:2e:f7:dc:f5:fd:df:65: d2:55:00:3a:84:4b:14:be:6b:a5:e7:ea:a1:9f:5b: 41:b4:5c:91:4b:f2:1f:ca:ae:00:54:e6:ac:30:21: b4:fa:24:a3:cd:c3:e7:87:81:1b:ab:6d:cf:88:c0: c6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:28:E5:AA:D9:C4:3E:EE:C1:A2:C0:0A:2D:58:BC:7A:49:01:96 X509v3 Authority Key Identifier: keyid:F3:A1:AE:0B:07:CD:05:EE:24:84:F4:EE:BC:D4:56:84:73:47:34:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GuCwfNBe4khPTuvNRWhHNHNBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2162d8-e9de-4981-b1ca-b8477f5073c1/1/86GuCwfNBe4khPTuvNRWhHNHNBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b3:66:c6:82:f3:d5:f1:01:ad:51:0d:a7:da:e9:88:5e:33: 55:79:69:7c:ac:70:ac:ba:81:7b:96:5c:e8:2d:0f:ba:c5:67: 85:db:e1:6c:c6:44:e8:36:28:a4:ea:65:a0:88:be:7f:70:0c: 17:ab:40:7e:a4:d4:13:76:c1:78:e0:81:c2:4a:35:14:21:7e: 87:38:06:e8:c2:2f:3e:31:9e:1b:ac:1d:c8:36:bb:2e:6b:62: 3e:bf:08:05:1d:6f:4f:5e:29:ff:47:a9:01:99:4e:74:f1:9c: 8a:d1:a3:b9:a2:66:77:f5:9a:84:fa:46:df:60:e5:b2:72:17: 9f:e2:4b:83:fe:ca:34:b4:0f:95:86:53:aa:23:2a:62:ad:c5: 1e:d2:44:cf:86:5f:63:72:89:29:17:45:52:bd:74:00:ae:1d: 05:65:8f:e6:de:72:d7:5c:6b:50:b8:c3:55:17:52:70:4a:e8: 59:d2:66:92:af:c1:80:52:f9:98:a5:7a:60:30:bb:df:eb:99: c2:75:42:64:fc:4f:92:95:78:dd:2d:f0:58:73:28:27:31:08: 10:3d:68:e8:b2:e7:a3:5f:0c:44:1f:00:dc:87:75:58:70:89: b9:4f:9b:8e:60:08:d6:15:fb:05:a7:fb:54:f6:23:55:ad:0d: 96:fd:9e:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eA9x9QfYC9/23tEQlky+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTFhZTBiMDdjZDA1ZWUyNDg0ZjRlZWJjZDQ1Njg0NzM0 NzM0MTQwHhcNMjUxMjA2MjEwMTE3WhcNMjUxMjA3MjEwMTE3WjAzMTEwLwYDVQQD EygxN2VlMjhlNWFhZDljNDNlZWVjMWEyYzAwYTJkNThiYzdhNDkwMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq7lnxHRDbSLw3N408byxCF3j/pn XIF165fZJxO/Ff4qiLmm710mvQdItbljeZNmN6k7EgldhadH7hWyKCW7UQOoVqtF wDOiCVl6DZhBmjhY3krdDxpg9QqlzNNDDXtOH3XqsNCB+hrAj+yvYnoXb0/QaR8G iOyjFQk07Ic3blRR5xGRL7BLabKimg39q+BhcnL+ROBD86CXPY+TAScpSqqVSQnq st1r/2Zs9xRouTl7oYokCNjXI0/Vu4o+mMett6E14kdY5HoYci733PX932XSVQA6 hEsUvmul5+qhn1tBtFyRS/Ifyq4AVOasMCG0+iSjzcPnh4Ebq23PiMDG5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfuKOWq2cQ+7sGiwAotWLx6SQGWMB8GA1UdIwQY MBaAFPOhrgsHzQXuJIT07rzUVoRzRzQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2Et Yjg0NzdmNTA3M2MxLzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8yMTYyZDgtZTlkZS00OTgxLWIxY2EtYjg0NzdmNTA3M2Mx LzEvODZHdUN3Zk5CZTRraFBUdXZOUldoSE5ITkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbNmxoLz 1fEBrVENp9rpiF4zVXlpfKxwrLqBe5Zc6C0PusVnhdvhbMZE6DYopOploIi+f3AM F6tAfqTUE3bBeOCBwko1FCF+hzgG6MIvPjGeG6wdyDa7LmtiPr8IBR1vT14p/0ep AZlOdPGcitGjuaJmd/WahPpG32DlsnIXn+JLg/7KNLQPlYZTqiMqYq3FHtJEz4Zf Y3KJKRdFUr10AK4dBWWP5t5y11xrULjDVRdScEroWdJmkq/BgFL5mKV6YDC73+uZ wnVCZPxPkpV43S3wWHMoJzEIED1o6LLno18MRB8A3Id1WHCJuU+bjmAI1hX7Baf7 VPYjVa0Nlv2e8A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:43:49 2025 by rpki-client