This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json) Hash identifier: /FhHy1lXxy2cneTBsvVRrd3Q4uMNKbqiKByTKokAvqA= Subject key identifier: 14:41:17:F4:A2:48:99:FF:9C:14:99:C7:98:3F:75:9D:A6:3E:68:55 Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28 Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28 Certificate serial: 019AF1D1B0990EB17A69AE523BFB5A4F8938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft Manifest number: 04A0 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: LrEFMTl0BUi1GsF3r/fVxwJzhEjNo6K/CMNBUq1inpI=) 2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:99:0e:b1:7a:69:ae:52:3b:fb:5a:4f:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=144117f4a24899ff9c1499c7983f759da63e6855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:da:75:07:8f:8e:0e:4d:be:d7:96:e4:85: 22:09:c8:dc:aa:a7:ec:bb:39:06:7c:34:35:91:a9: dc:d6:07:6a:d8:80:7c:cf:94:25:31:30:c0:1d:ed: 14:e6:f1:de:6e:6b:90:25:a8:01:1f:44:c7:ed:1d: ef:e7:a1:a3:f4:be:82:be:90:16:cd:34:71:1e:41: 37:53:cf:83:43:8c:4c:71:f2:4f:7b:ba:67:db:83: 24:e9:db:1c:27:2b:72:ac:f2:b1:26:80:db:8f:ba: 45:cf:81:bc:cf:8a:0b:6d:0d:0c:25:cf:34:a0:c7: 89:fb:c9:08:08:6a:c2:be:b5:c9:b1:dc:52:f0:0d: 39:4a:31:a6:de:e5:d7:fb:86:1f:5f:b5:80:dc:b7: 9a:53:c9:73:69:a8:a3:b6:b6:1b:86:01:fc:8b:72: c9:0c:e9:f0:12:96:62:48:9e:04:75:7d:9b:0a:2f: c6:b0:81:a1:a3:b1:86:52:29:ed:23:8b:ef:c3:37: d9:fd:61:97:4c:2a:41:f7:b7:16:76:54:6a:fd:f8: a8:7d:42:14:c8:4a:d1:80:7e:4d:cd:91:4a:e9:49: 48:90:57:d5:2b:40:8c:c8:65:74:bb:95:e0:1e:dd: 4a:9b:b4:0f:f8:2b:0c:a5:b8:76:66:b8:87:33:0f: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:17:F4:A2:48:99:FF:9C:14:99:C7:98:3F:75:9D:A6:3E:68:55 X509v3 Authority Key Identifier: keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:e1:3c:68:8f:77:c6:a5:21:78:92:88:53:6d:d9:55:27: c7:5a:37:cc:ac:c3:e8:97:7a:cc:3c:3c:ac:aa:06:7b:f9:6f: b4:67:22:b9:03:7d:93:5f:1c:97:0b:83:37:39:db:3e:85:6e: 31:3a:c1:9c:03:18:cb:94:2a:19:be:03:bd:18:0c:fd:4b:44: 49:53:7a:d0:45:95:cc:3a:ed:cd:51:50:19:7a:26:4c:26:2a: ce:31:5f:48:22:94:58:e8:91:56:c9:42:81:00:54:2b:fc:d5: a8:e0:1a:d4:3e:36:09:e6:60:ad:dd:fc:f8:5a:80:01:da:79: c2:62:fa:df:2b:75:13:1c:69:3f:c0:63:3d:d2:19:e7:b9:a0: 25:28:bf:a8:b9:75:44:48:71:30:a4:f0:c2:59:4e:0c:ec:82: 15:3c:56:d7:0f:3e:1a:d4:39:08:3e:11:24:ae:a7:3f:a4:30: 5f:74:0b:f3:62:2f:af:88:a0:40:13:12:e9:cb:ad:e3:34:69: 43:9f:19:fc:62:98:ad:3e:34:db:9b:9c:df:8d:41:b0:5c:30: dc:63:1e:d6:ae:4d:0d:ab:77:bc:bd:51:9c:66:21:17:35:06: 9f:9b:9c:3a:8d:58:85:ca:55:3b:3b:81:4e:75:ca:5e:1d:17: 35:8a:1a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bCZDrF6aa5SO/taT4k4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNTQ0ZTkyM2Q4ODNiYWNlNGFhM2Y3ZWY3MDA3MmFmZTM1 MTFmMjgwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EygxNDQxMTdmNGEyNDg5OWZmOWMxNDk5Yzc5ODNmNzU5ZGE2M2U2ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvXadQePjg5NvteW5IUiCcjcqqfs uzkGfDQ1kanc1gdq2IB8z5QlMTDAHe0U5vHebmuQJagBH0TH7R3v56Gj9L6CvpAW zTRxHkE3U8+DQ4xMcfJPe7pn24Mk6dscJytyrPKxJoDbj7pFz4G8z4oLbQ0MJc80 oMeJ+8kICGrCvrXJsdxS8A05SjGm3uXX+4YfX7WA3LeaU8lzaaijtrYbhgH8i3LJ DOnwEpZiSJ4EdX2bCi/GsIGho7GGUintI4vvwzfZ/WGXTCpB97cWdlRq/fiofUIU yErRgH5NzZFK6UlIkFfVK0CMyGV0u5XgHt1Km7QP+CsMpbh2ZriHMw+bqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRBF/SiSJn/nBSZx5g/dZ2mPmhVMB8GA1UdIwQY MBaAFPNUTpI9iDus5Ko/fvcAcq/jUR8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEt MzhjNzU2YWE0YjUwLzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84NmQxYWEtNjQ3NS00MDEzLTg2ZWEtMzhjNzU2YWE0YjUw LzEvODFST2tqMklPNnprcWo5LTl3QnlyLU5SSHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbDhPGiP d8alIXiSiFNt2VUnx1o3zKzD6Jd6zDw8rKoGe/lvtGciuQN9k18clwuDNznbPoVu MTrBnAMYy5QqGb4DvRgM/UtESVN60EWVzDrtzVFQGXomTCYqzjFfSCKUWOiRVslC gQBUK/zVqOAa1D42CeZgrd38+FqAAdp5wmL63yt1ExxpP8BjPdIZ57mgJSi/qLl1 REhxMKTwwllODOyCFTxW1w8+GtQ5CD4RJK6nP6QwX3QL82Ivr4igQBMS6cut4zRp Q58Z/GKYrT4025uc341BsFww3GMe1q5NDat3vL1RnGYhFzUGn5ucOo1YhcpVOzuB TnXKXh0XNYoaGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:14 2025 by rpki-client