This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft File: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json) Hash identifier: gnrlrhMw0QDLfoBLIsE24R2E3V4HRcbGhIyuCd+TEgw= Subject key identifier: 28:E3:DA:6A:37:E9:EA:FB:90:E6:06:23:AB:97:F6:43:3F:E8:A1:0A Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4 Certificate issuer: /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4 Certificate serial: 019AF31BE0A895116FFC9EEE933C719F94DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft Manifest number: 0D30 Signing time: Sat 06 Dec 2025 10:01:21 +0000 Manifest this update: Sat 06 Dec 2025 10:01:21 +0000 Manifest next update: Sun 07 Dec 2025 10:01:21 +0000 Files and hashes: 1: 7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa (hash: Ue865zCMYx1MYw21hb8vraaXEGFsPTiWFX4S2dOr6hg=) 2: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: 2M3JspU8RX2zAOhnBXtAv7Hnilaqrrc1MuebXtEAvDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e0:a8:95:11:6f:fc:9e:ee:93:3c:71:9f:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4 Validity Not Before: Dec 6 10:01:21 2025 GMT Not After : Dec 7 10:01:21 2025 GMT Subject: CN=28e3da6a37e9eafb90e60623ab97f6433fe8a10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:e6:9a:ad:63:82:e4:ed:8c:4f:e8:00:b5: 3d:9b:2f:a6:68:ee:28:c4:a5:49:42:86:a1:5b:19: 8d:c3:ca:cf:bc:6b:13:4d:ec:83:f2:26:e7:47:f2: 4b:a1:a0:f0:b8:7a:fe:92:6a:7b:66:49:11:ad:3c: 1e:77:3b:22:86:05:0a:ea:65:89:2d:5f:2b:bc:5c: 5b:91:98:3f:df:ff:ca:a7:70:f1:df:23:a3:a4:b9: a6:82:ca:19:f6:fb:09:41:80:7c:72:a0:82:ef:47: 6b:ac:c7:dd:e3:79:5b:e4:67:e0:be:5d:03:61:5b: 45:09:4c:9f:93:bd:81:e9:4e:93:e5:31:c2:80:1b: 7a:95:22:45:3e:cd:50:50:85:55:37:cd:9f:ba:8a: 90:3c:6b:6e:a6:44:c3:4e:27:d0:90:2f:77:fa:4f: 09:59:31:6f:6a:a6:79:97:05:51:b9:e9:fb:f3:2e: a7:f6:61:97:d1:01:73:59:de:75:69:bb:4e:c2:0f: ee:5f:97:78:43:41:4d:04:81:14:f7:40:68:ca:ee: df:30:7c:54:81:b4:6a:8d:45:52:45:e9:d6:ab:e2: e1:a2:db:2e:f4:77:2d:1d:e3:da:52:84:b0:c7:97: 58:1d:25:d3:4a:17:2f:d7:97:c7:cb:8f:bf:32:f2: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E3:DA:6A:37:E9:EA:FB:90:E6:06:23:AB:97:F6:43:3F:E8:A1:0A X509v3 Authority Key Identifier: keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c0:d5:1f:53:1a:61:e5:65:fd:24:74:b4:9c:78:fa:6b:bf: 02:b4:ce:cf:31:1b:74:75:77:17:4f:6c:33:f9:9c:60:7e:bf: 1d:9e:12:b7:ff:6e:60:f7:e1:df:53:ec:ac:c7:48:f9:47:1c: 93:bc:f1:a1:04:75:aa:d6:82:df:cb:cf:94:63:ab:74:6f:47: 3c:36:00:84:f2:05:28:6a:6b:4d:44:22:94:82:b2:81:67:2a: 9b:ad:4a:1e:ab:ad:7c:81:b7:19:1d:b8:73:bb:19:ff:fe:ee: aa:a7:c3:cf:50:fc:ea:4c:67:b9:76:9f:f6:ed:be:c3:5d:18: ec:3a:fd:51:06:4a:04:56:99:9c:e9:92:cb:b2:db:df:98:0d: ac:3b:52:ae:27:bb:3d:0c:ec:ad:37:ca:37:d9:68:d5:df:ad: c8:0b:fb:fe:6c:ff:e9:d0:31:9e:3c:de:66:8e:56:7c:6b:c7: b7:8f:34:dd:c3:e2:da:7b:68:e9:bb:2a:21:fe:bb:40:a5:3a: 2e:16:f6:1f:c1:bc:25:bf:b1:e3:b5:64:a3:1d:76:96:1e:fc: 70:ed:b0:df:7b:46:6b:1f:2e:94:70:82:78:e7:ec:84:cd:9a: 94:2b:be:84:14:cb:fa:9f:12:af:54:db:24:42:8b:90:24:54: 56:10:60:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+ColRFv/J7ukzxxn5TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODFhZDMyMzNkOWMyYzE4OWQ5NDk5ZGExMTc3YjU3MTAx YTVlZjQwHhcNMjUxMjA2MTAwMTIxWhcNMjUxMjA3MTAwMTIxWjAzMTEwLwYDVQQD EygyOGUzZGE2YTM3ZTllYWZiOTBlNjA2MjNhYjk3ZjY0MzNmZThhMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp3mmq1jguTtjE/oALU9my+maO4o xKVJQoahWxmNw8rPvGsTTeyD8ibnR/JLoaDwuHr+kmp7ZkkRrTwedzsihgUK6mWJ LV8rvFxbkZg/3//Kp3Dx3yOjpLmmgsoZ9vsJQYB8cqCC70drrMfd43lb5Gfgvl0D YVtFCUyfk72B6U6T5THCgBt6lSJFPs1QUIVVN82fuoqQPGtupkTDTifQkC93+k8J WTFvaqZ5lwVRuen78y6n9mGX0QFzWd51abtOwg/uX5d4Q0FNBIEU90Boyu7fMHxU gbRqjUVSRenWq+Lhotsu9HctHePaUoSwx5dYHSXTShcv15fHy4+/MvLXWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjj2mo36er7kOYGI6uX9kM/6KEKMB8GA1UdIwQY MBaAFPeBrTIz2cLBidlJnaEXe1cQGl70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUt OTU2NGE0NzIyZTc4LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUtOTU2NGE0NzIyZTc4 LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcDVH1Ma YeVl/SR0tJx4+mu/ArTOzzEbdHV3F09sM/mcYH6/HZ4St/9uYPfh31PsrMdI+Ucc k7zxoQR1qtaC38vPlGOrdG9HPDYAhPIFKGprTUQilIKygWcqm61KHqutfIG3GR24 c7sZ//7uqqfDz1D86kxnuXaf9u2+w10Y7Dr9UQZKBFaZnOmSy7Lb35gNrDtSrie7 PQzsrTfKN9lo1d+tyAv7/mz/6dAxnjzeZo5WfGvHt4803cPi2nto6bsqIf67QKU6 Lhb2H8G8Jb+x47Vkox12lh78cO2w33tGax8ulHCCeOfshM2alCu+hBTL+p8Sr1Tb JEKLkCRUVhBgLA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:37 2025 by rpki-client