This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json) Hash identifier: uEqTEOp50YbkiNhyWMrAJoxY5GGGR2qM3nAOY89JowU= Subject key identifier: 1E:CA:FA:06:8A:B7:9E:F3:14:4D:52:60:B7:96:BC:1C:68:1B:1D:A9 Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Certificate serial: 019AF5E5BB020A4800CC878A81B08C1DF80E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft Manifest number: 05B9 Signing time: Sat 06 Dec 2025 23:01:04 +0000 Manifest this update: Sat 06 Dec 2025 23:01:04 +0000 Manifest next update: Sun 07 Dec 2025 23:01:04 +0000 Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=) 2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: XomHxKDWh36VLUoHYGI1b5oBji0DAbZRKzzWSCohEsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:bb:02:0a:48:00:cc:87:8a:81:b0:8c:1d:f8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Validity Not Before: Dec 6 23:01:04 2025 GMT Not After : Dec 7 23:01:04 2025 GMT Subject: CN=1ecafa068ab79ef3144d5260b796bc1c681b1da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:90:15:a2:64:01:13:b2:ab:0d:2c:56:e8: 3a:0a:fa:27:85:2d:72:9e:11:0c:ff:1d:fa:c3:6c: 07:21:67:2c:85:ff:ea:10:ff:51:14:23:3c:11:33: 68:66:a9:d7:01:8c:81:b8:0a:60:04:25:87:93:83: 6c:84:e7:d3:65:6d:4b:e5:c1:2f:b2:07:a3:a3:01: 52:83:8c:78:93:14:f8:08:b0:85:d1:5a:2d:60:a7: 42:25:f3:54:a9:b4:09:e6:54:4a:56:ae:d9:5d:df: d3:e4:10:f3:89:02:e8:86:e4:ed:56:de:aa:7b:d6: 90:de:af:58:f8:05:f1:8b:a1:15:4d:77:e8:57:c4: f0:f7:a1:c4:b0:7c:1a:c9:76:82:4c:00:5a:18:45: 4a:d2:b0:1d:a8:22:60:d2:f7:03:24:d6:bc:5f:1f: 2f:29:f6:73:48:dc:63:a7:0e:b8:cb:39:2a:b0:91: 8b:61:10:99:3d:3d:97:76:03:ee:03:81:21:7a:7a: 4d:3b:52:32:6a:4c:65:be:90:92:92:ef:fa:9f:82: 33:8a:3e:06:b8:21:10:d5:c5:41:69:9a:5c:05:24: d8:aa:3e:f2:29:7b:d9:6d:58:13:1f:4b:48:de:49: 3b:b4:54:9b:97:79:0b:44:d9:eb:a2:10:69:bc:eb: 88:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CA:FA:06:8A:B7:9E:F3:14:4D:52:60:B7:96:BC:1C:68:1B:1D:A9 X509v3 Authority Key Identifier: keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:06:32:43:11:63:f2:d0:53:0c:88:89:01:3f:1d:f9:74:5f: ec:b2:b1:98:7c:6a:a4:e4:84:c4:34:df:a7:06:79:10:f5:56: 5e:a3:98:bd:3c:23:a2:6d:1b:5d:d3:5d:cc:ff:2d:f6:b5:c3: 6a:6b:c2:1a:73:07:47:48:71:48:ff:b7:4d:0e:d1:9e:83:b4: 02:fb:10:49:27:fa:5a:6e:2f:5f:35:3d:6a:ac:c5:0a:5b:8d: 42:94:c7:96:bf:24:42:57:77:4f:fc:81:64:dd:c2:c6:85:44: c1:ac:30:98:23:b1:39:b8:39:7a:78:82:c1:57:60:32:4e:9b: 56:27:c1:73:ba:40:92:bc:e5:6d:8a:cc:79:ad:75:0b:22:aa: c9:37:e5:29:46:29:4a:a5:98:0b:db:f8:ee:18:5d:32:d1:f7: 09:cf:48:dd:fb:fe:06:76:f9:7d:2c:21:01:73:77:71:e9:b5: 8c:4e:ef:69:cc:da:03:5d:6a:46:7e:95:38:7e:d4:6a:9c:4a: 76:64:87:85:b3:42:6a:40:e1:f5:3e:91:ac:87:1d:96:8d:ea: 37:20:d7:3c:ec:a1:d0:c5:82:26:1b:22:46:13:04:16:66:31: ac:d4:17:eb:8e:8c:2f:f3:86:46:63:44:7f:82:0c:39:98:54: dc:79:29:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bsCCkgAzIeKgbCMHfgOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk MTIwOTgwHhcNMjUxMjA2MjMwMTA0WhcNMjUxMjA3MjMwMTA0WjAzMTEwLwYDVQQD EygxZWNhZmEwNjhhYjc5ZWYzMTQ0ZDUyNjBiNzk2YmMxYzY4MWIxZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjiQFaJkAROyqw0sVug6CvonhS1y nhEM/x36w2wHIWcshf/qEP9RFCM8ETNoZqnXAYyBuApgBCWHk4NshOfTZW1L5cEv sgejowFSg4x4kxT4CLCF0VotYKdCJfNUqbQJ5lRKVq7ZXd/T5BDziQLohuTtVt6q e9aQ3q9Y+AXxi6EVTXfoV8Tw96HEsHwayXaCTABaGEVK0rAdqCJg0vcDJNa8Xx8v KfZzSNxjpw64yzkqsJGLYRCZPT2XdgPuA4EhenpNO1IyakxlvpCSku/6n4Izij4G uCEQ1cVBaZpcBSTYqj7yKXvZbVgTH0tI3kk7tFSbl3kLRNnrohBpvOuIjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7K+gaKt57zFE1SYLeWvBxoGx2pMB8GA1UdIwQY MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1 LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQYyQxFj 8tBTDIiJAT8d+XRf7LKxmHxqpOSExDTfpwZ5EPVWXqOYvTwjom0bXdNdzP8t9rXD amvCGnMHR0hxSP+3TQ7RnoO0AvsQSSf6Wm4vXzU9aqzFCluNQpTHlr8kQld3T/yB ZN3CxoVEwawwmCOxObg5eniCwVdgMk6bVifBc7pAkrzlbYrMea11CyKqyTflKUYp SqWYC9v47hhdMtH3Cc9I3fv+Bnb5fSwhAXN3cem1jE7vaczaA11qRn6VOH7UapxK dmSHhbNCakDh9T6RrIcdlo3qNyDXPOyh0MWCJhsiRhMEFmYxrNQX646ML/OGRmNE f4IMOZhU3Hkp/g== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:59 2025 by rpki-client