This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft File: 80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json) Hash identifier: fYMGw4WEc19GQU5cc8ivTWSdQjxsnSpXhpnY3KLsRsw= Subject key identifier: 93:FA:AC:DA:09:54:15:E2:D2:5A:86:B0:B6:7F:2B:9C:31:EE:49:09 Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B Certificate issuer: /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Certificate serial: 019AF23F771FE1784EA20C700C613469FC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: LWs9/P4REbMcPSvsBFMOHeQc4v5WE6CBTt9MdoFPikM=) 2: k43rjk9OXsHM4eUp9ryidMIYrpg.roa (hash: nZ1oPuvx4yZUz9X/0NNanuY6VfbmWETyxMR7qm4VS+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:77:1f:e1:78:4e:a2:0c:70:0c:61:34:69:fc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=93faacda095415e2d25a86b0b67f2b9c31ee4909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:1e:09:e6:6f:6b:3d:f9:4d:43:9d:0d:c7: c0:1e:41:eb:c9:92:3d:ff:6c:07:9a:f2:aa:8e:4b: 14:8e:81:75:17:6e:c0:20:e6:92:f7:1b:5b:bd:78: 88:84:79:60:7c:3e:82:2d:83:3d:fc:7d:e4:00:a2: 2e:45:a7:7f:19:3d:e3:0d:38:02:41:87:ba:ea:58: c4:03:ca:43:cb:cd:20:1d:0e:39:1e:2e:ea:83:f7: f1:9f:f2:c1:8a:f5:82:a1:25:db:1b:c2:dd:59:ea: b1:c0:ce:23:69:c6:c4:0a:55:87:38:51:c7:cd:b5: 62:c9:de:5e:c7:cd:44:88:1f:40:e4:7d:ca:83:77: 61:f0:34:26:13:1a:dc:85:c3:ba:e1:72:10:74:22: 9d:9a:38:cc:3f:61:04:c1:d6:84:e5:6e:e6:33:d2: 11:a3:13:99:41:6f:3c:92:6e:29:19:3a:c7:ce:c5: af:fb:92:24:bc:5a:f5:5f:a3:cf:6a:ba:60:67:0b: 0f:41:f7:9e:46:30:87:86:07:7e:ba:12:ae:fc:83: ce:ae:8d:93:3e:30:34:fc:43:fa:5b:64:b5:f2:83: ea:9d:2a:1f:ff:33:21:49:52:3e:57:75:34:c1:80: dc:2e:c4:63:64:89:ea:c4:61:e2:d8:2e:f3:c9:18: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:AC:DA:09:54:15:E2:D2:5A:86:B0:B6:7F:2B:9C:31:EE:49:09 X509v3 Authority Key Identifier: keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c0:54:9a:8a:2f:1b:ac:49:15:a3:61:7b:1b:c1:3d:9d:9e: 36:de:56:67:0c:27:06:0d:db:58:5d:a5:17:08:62:95:2a:d5: e9:17:83:80:9b:0b:2c:a7:a9:ff:95:1c:2e:c7:65:f2:c0:10: 9d:0c:b8:57:e5:95:d5:b2:a6:11:35:78:9a:bc:9a:4f:aa:c8: f8:14:ee:d3:2e:2a:3e:b1:df:30:1e:0e:f3:dd:a2:85:9f:fe: 92:ec:d0:7d:c6:07:f1:08:88:9a:06:e0:64:0d:86:90:f7:5d: 9c:94:b3:4a:a2:98:0d:99:80:29:ce:69:d8:25:71:21:cb:0e: c3:0e:81:de:43:94:85:6e:65:25:76:3b:e2:98:fb:fc:b4:6a: ee:63:e8:72:76:48:a1:7f:3c:3b:bc:bf:8d:b5:a8:54:12:e6: d1:a4:b5:bc:4c:31:31:f1:72:8a:70:e6:77:13:e8:e0:c7:ba: f1:7f:11:0a:7b:7d:f3:4d:c7:5a:b1:e5:79:46:04:20:34:35: 5e:fa:b3:42:9d:11:aa:d5:37:a8:4e:ee:c3:dc:3b:d6:35:b6: 10:4a:ea:13:1f:07:e1:cb:2b:7f:07:84:ab:e2:62:7f:68:8f: 24:b2:2c:ce:c0:e6:71:19:db:a9:0b:9e:e6:32:59:33:34:8b: ba:99:89:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3cf4XhOogxwDGE0afyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDQzZjViNWM3OGQ2OGU3MzlkNGZhNmZlYWZkZDI0M2Iw NTJhNGIwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD Eyg5M2ZhYWNkYTA5NTQxNWUyZDI1YTg2YjBiNjdmMmI5YzMxZWU0OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteEeCeZvaz35TUOdDcfAHkHryZI9 /2wHmvKqjksUjoF1F27AIOaS9xtbvXiIhHlgfD6CLYM9/H3kAKIuRad/GT3jDTgC QYe66ljEA8pDy80gHQ45Hi7qg/fxn/LBivWCoSXbG8LdWeqxwM4jacbEClWHOFHH zbViyd5ex81EiB9A5H3Kg3dh8DQmExrchcO64XIQdCKdmjjMP2EEwdaE5W7mM9IR oxOZQW88km4pGTrHzsWv+5IkvFr1X6PParpgZwsPQfeeRjCHhgd+uhKu/IPOro2T PjA0/EP6W2S18oPqnSof/zMhSVI+V3U0wYDcLsRjZInqxGHi2C7zyRgzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP6rNoJVBXi0lqGsLZ/K5wx7kkJMB8GA1UdIwQY MBaAFPNEP1tceNaOc51Ppv6v3SQ7BSpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTct YjE2NTFhNjRmMzVlLzEvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9mZDMwYTgtYzBiZi00MTRmLWFiYTctYjE2NTFhNjRmMzVl LzEvODBRX1cxeDQxbzV6blUtbV9xX2RKRHNGS2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMBUmoov G6xJFaNhexvBPZ2eNt5WZwwnBg3bWF2lFwhilSrV6ReDgJsLLKep/5UcLsdl8sAQ nQy4V+WV1bKmETV4mryaT6rI+BTu0y4qPrHfMB4O892ihZ/+kuzQfcYH8QiImgbg ZA2GkPddnJSzSqKYDZmAKc5p2CVxIcsOww6B3kOUhW5lJXY74pj7/LRq7mPocnZI oX88O7y/jbWoVBLm0aS1vEwxMfFyinDmdxPo4Me68X8RCnt9803HWrHleUYEIDQ1 XvqzQp0RqtU3qE7uw9w71jW2EErqEx8H4csrfweEq+Jif2iPJLIszsDmcRnbqQue 5jJZMzSLupmJUw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:03 2025 by rpki-client