This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft File: 87fdVNqwL-jN6KheVp-CcIiXlBk.mft (raw, json) Hash identifier: 9YLnOcDPij5NE0PYlJqtR12fS9heBuHY/HJTRfQsw8U= Subject key identifier: 45:12:9D:23:F5:D3:68:60:A8:67:E0:41:5E:36:A6:7D:5C:01:23:50 Authority key identifier: F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19 Certificate issuer: /CN=f3b7dd54dab02fe8cde8a85e569f827088979419 Certificate serial: 019AF2ADB02BC0595087316C0AE048A87578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft Manifest number: 0CD6 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: 1-Umc9hOt2tpo1ZchNi7HZONvobM.roa (hash: uKhjdfQ+p8B+ov8GKsdABY8fRu2epUYrzObWxrEfxuQ=) 2: 87fdVNqwL-jN6KheVp-CcIiXlBk.crl (hash: 8E9t4AlkM+h8hx3u2Xg545tKjJcD1FJhorXLZRDGmyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b0:2b:c0:59:50:87:31:6c:0a:e0:48:a8:75:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b7dd54dab02fe8cde8a85e569f827088979419 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=45129d23f5d36860a867e0415e36a67d5c012350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:c4:12:8e:eb:09:e0:67:bd:2c:26:27:52: 00:7b:c4:ca:e0:42:3b:4a:39:29:b9:75:28:a7:e8: 1a:0f:5d:e8:3b:c9:ad:d0:f0:e1:e9:4b:36:44:58: a7:98:62:04:b9:b6:da:ed:1f:c9:48:eb:a6:7c:36: 76:f4:5b:68:6b:73:70:e2:26:39:50:03:5e:7c:09: 6f:74:a5:f8:99:fa:e3:5d:bd:ea:20:c8:24:07:f3: 82:cd:c2:0b:b2:76:cd:0a:57:48:81:1b:5b:b7:02: d7:11:ef:5c:6a:61:ee:e3:2d:dc:40:9b:55:23:af: 83:c6:c1:5f:a8:fc:a1:f3:75:f6:bc:96:c2:bc:3f: 4b:00:9b:e2:26:0b:22:dd:90:fb:54:bc:2b:b3:b6: 93:37:13:9e:f2:a0:4d:82:58:97:4e:6c:94:a4:06: e2:4a:1a:b1:82:0f:00:cc:50:e3:e1:47:d0:a1:a7: af:65:04:b0:2d:36:31:26:72:8a:0b:20:75:a1:0f: 36:01:9c:68:00:0c:6a:f4:1e:98:af:af:6a:59:f6: 82:0a:c3:df:52:51:1f:e9:c0:d3:e6:62:3b:cc:24: 37:87:c2:46:59:a7:61:94:b4:84:7f:af:96:91:05: ef:d6:05:db:e9:15:b5:a2:90:c7:79:8a:f3:c7:4e: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:12:9D:23:F5:D3:68:60:A8:67:E0:41:5E:36:A6:7D:5C:01:23:50 X509v3 Authority Key Identifier: keyid:F3:B7:DD:54:DA:B0:2F:E8:CD:E8:A8:5E:56:9F:82:70:88:97:94:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87fdVNqwL-jN6KheVp-CcIiXlBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/840dc1-83fc-4f9d-be5e-1939883bb1f8/1/87fdVNqwL-jN6KheVp-CcIiXlBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:af:29:2b:94:9f:75:ef:3b:7c:8b:e1:6c:01:2e:22:39:f1: 0e:d0:69:bf:18:59:df:5d:67:97:2f:81:db:39:5c:b6:a3:b7: a0:b9:66:7a:53:44:23:ce:f4:d3:2a:de:87:87:bc:ac:af:91: 45:12:c2:47:28:38:02:54:9f:e3:6a:d7:94:e7:a6:56:ba:d5: c0:40:51:1b:ef:82:c6:01:7b:13:72:a1:ba:42:da:d8:ea:e3: b0:50:10:9d:68:54:75:ee:2f:bf:10:10:02:ff:18:5a:39:41: eb:57:1d:09:7c:24:43:3e:c0:89:46:c6:95:49:36:fb:52:ca: 9b:f6:51:88:28:16:b8:e0:14:fd:8d:52:d8:d8:a1:80:41:0a: b1:26:14:48:92:26:32:0b:9a:9f:28:73:b1:49:4f:9a:b6:52: bd:cf:bc:dc:21:5d:c8:6a:a2:69:13:50:02:32:4e:9b:ee:86: 4c:ce:f8:fa:f8:0c:27:42:d4:6a:f1:ac:7c:fd:cc:cf:b1:bc: 10:98:71:02:32:63:ac:34:5e:02:5e:ce:f3:33:2b:3a:d5:54: e7:d3:76:aa:a3:6e:f7:d7:14:fc:6b:b8:a4:c0:46:2f:bb:04: 82:93:6b:e3:61:82:75:a2:cd:74:07:12:27:87:04:e8:ce:25: 1c:76:2d:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbArwFlQhzFsCuBIqHV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjdkZDU0ZGFiMDJmZThjZGU4YTg1ZTU2OWY4MjcwODg5 Nzk0MTkwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD Eyg0NTEyOWQyM2Y1ZDM2ODYwYTg2N2UwNDE1ZTM2YTY3ZDVjMDEyMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGbEEo7rCeBnvSwmJ1IAe8TK4EI7 SjkpuXUop+gaD13oO8mt0PDh6Us2RFinmGIEubba7R/JSOumfDZ29Ftoa3Nw4iY5 UANefAlvdKX4mfrjXb3qIMgkB/OCzcILsnbNCldIgRtbtwLXEe9camHu4y3cQJtV I6+DxsFfqPyh83X2vJbCvD9LAJviJgsi3ZD7VLwrs7aTNxOe8qBNgliXTmyUpAbi Shqxgg8AzFDj4UfQoaevZQSwLTYxJnKKCyB1oQ82AZxoAAxq9B6Yr69qWfaCCsPf UlEf6cDT5mI7zCQ3h8JGWadhlLSEf6+WkQXv1gXb6RW1opDHeYrzx06eowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUSnSP102hgqGfgQV42pn1cASNQMB8GA1UdIwQY MBaAFPO33VTasC/ozeioXlafgnCIl5QZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUt MTkzOTg4M2JiMWY4LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS84NDBkYzEtODNmYy00ZjlkLWJlNWUtMTkzOTg4M2JiMWY4 LzEvODdmZFZOcXdMLWpONktoZVZwLUNjSWlYbEJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO68pK5Sf de87fIvhbAEuIjnxDtBpvxhZ311nly+B2zlctqO3oLlmelNEI8700yreh4e8rK+R RRLCRyg4AlSf42rXlOemVrrVwEBRG++CxgF7E3KhukLa2OrjsFAQnWhUde4vvxAQ Av8YWjlB61cdCXwkQz7AiUbGlUk2+1LKm/ZRiCgWuOAU/Y1S2NihgEEKsSYUSJIm MguanyhzsUlPmrZSvc+83CFdyGqiaRNQAjJOm+6GTM74+vgMJ0LUavGsfP3Mz7G8 EJhxAjJjrDReAl7O8zMrOtVU59N2qqNu99cU/Gu4pMBGL7sEgpNr42GCdaLNdAcS J4cE6M4lHHYtQg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:19:16 2025 by rpki-client