This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json) Hash identifier: 80gxAR9gpto5ybMJg8n8u/7tPeBCGHeruiYMML+6Jwk= Subject key identifier: 18:75:8D:B9:94:73:83:34:44:C2:2D:3F:08:40:72:98:29:08:15:1A Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Certificate serial: 019AF19B31B533ABC393097BA75E363D7960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: k/+fYMs7RdBgENHG8vJIMx3OAlR5mVaFkJ6+QMixi94=) 2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=) 3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=) 4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:31:b5:33:ab:c3:93:09:7b:a7:5e:36:3d:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=18758db99473833444c22d3f084072982908151a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:67:0a:fb:89:6f:5d:24:67:10:d9:84:f4: 3e:1a:f0:da:18:a3:e1:e5:cf:21:31:e5:e8:34:cf: f9:d3:be:b4:21:c6:64:87:d6:18:c6:7f:f6:09:71: 4d:62:50:da:18:88:79:48:61:4c:2d:24:e6:06:e3: 02:e4:d6:d4:88:c5:48:12:4c:9f:8c:80:20:e1:77: 3b:11:91:32:ed:1e:99:ec:4a:0a:51:0e:bc:73:34: 54:82:94:ad:ab:cf:40:35:16:73:90:94:f4:54:8f: 43:c4:67:d6:7a:2f:f6:f1:c3:ef:55:74:3d:8a:8e: 2e:44:47:6e:d4:1e:88:1f:16:c9:97:dd:f1:d5:39: 31:d2:46:65:4a:24:58:d2:92:72:2f:8d:48:5b:3a: e0:33:78:d2:29:ff:47:d9:95:2d:d8:83:da:a0:3d: 01:c6:b5:c5:1b:5e:32:b7:36:74:1f:11:67:ab:42: d0:3f:69:53:2f:62:ef:5f:fe:35:67:c1:38:88:f5: 9f:e6:66:b0:f7:ac:eb:1f:5b:af:d9:6d:dc:0f:36: 91:11:14:75:cd:61:e8:46:7f:91:c7:01:e1:0d:48: 88:a5:e9:d3:b9:c6:ce:b5:35:5f:7a:c7:a2:0b:5c: 6f:9d:f9:db:b2:81:79:55:d1:82:66:82:d8:67:07: e7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:75:8D:B9:94:73:83:34:44:C2:2D:3F:08:40:72:98:29:08:15:1A X509v3 Authority Key Identifier: keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:96:c0:60:66:bc:cf:16:77:53:81:84:0a:a9:13:ee:00:71: 31:4b:18:95:bf:11:7c:a3:a8:e5:3d:27:b9:2b:ff:b9:dc:67: 88:93:fa:a1:54:2d:81:5d:4e:59:56:a3:86:58:28:bb:ae:b4: 51:51:02:ab:fa:90:7a:fb:88:52:3c:49:a2:b4:d8:64:40:6d: 3f:49:6b:ec:56:01:13:f1:9b:a3:40:b9:c4:45:44:9e:f1:8f: 2e:9a:6e:26:88:6f:77:5c:32:fd:e1:66:9b:67:83:e1:91:82: 91:6b:00:74:a4:98:65:39:bf:7e:e1:aa:68:74:ab:79:21:86: 11:22:af:36:30:8e:d5:98:cc:39:3d:ed:ff:fd:23:e8:f8:d4: bf:4a:ba:0c:0d:9b:90:4f:b1:3c:5e:be:a0:77:39:b9:68:9f: c0:f6:19:1c:b8:09:b6:20:07:70:27:05:43:aa:da:84:28:69: 81:55:65:f4:28:63:f7:e6:4c:29:3a:9e:64:87:65:6e:4c:28: 8d:cf:40:ce:0a:51:2b:2b:80:47:4c:e2:8e:80:07:a1:32:27: 55:97:e6:24:4d:1c:85:09:9a:48:c9:6a:5f:4f:14:8b:52:df: c0:1e:cf:61:55:db:14:5f:60:64:20:b3:60:43:3a:30:d6:1d: c0:1d:52:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzG1M6vDkwl7p142PXlgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2 NTM5YzgwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygxODc1OGRiOTk0NzM4MzM0NDRjMjJkM2YwODQwNzI5ODI5MDgxNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk9nCvuJb10kZxDZhPQ+GvDaGKPh 5c8hMeXoNM/50760IcZkh9YYxn/2CXFNYlDaGIh5SGFMLSTmBuMC5NbUiMVIEkyf jIAg4Xc7EZEy7R6Z7EoKUQ68czRUgpStq89ANRZzkJT0VI9DxGfWei/28cPvVXQ9 io4uREdu1B6IHxbJl93x1Tkx0kZlSiRY0pJyL41IWzrgM3jSKf9H2ZUt2IPaoD0B xrXFG14ytzZ0HxFnq0LQP2lTL2LvX/41Z8E4iPWf5maw96zrH1uv2W3cDzaRERR1 zWHoRn+RxwHhDUiIpenTucbOtTVfeseiC1xvnfnbsoF5VdGCZoLYZwfn/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh1jbmUc4M0RMItPwhAcpgpCBUaMB8GA1UdIwQY MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZbAYGa8 zxZ3U4GECqkT7gBxMUsYlb8RfKOo5T0nuSv/udxniJP6oVQtgV1OWVajhlgou660 UVECq/qQevuIUjxJorTYZEBtP0lr7FYBE/Gbo0C5xEVEnvGPLppuJohvd1wy/eFm m2eD4ZGCkWsAdKSYZTm/fuGqaHSreSGGESKvNjCO1ZjMOT3t//0j6PjUv0q6DA2b kE+xPF6+oHc5uWifwPYZHLgJtiAHcCcFQ6rahChpgVVl9Chj9+ZMKTqeZIdlbkwo jc9AzgpRKyuAR0zijoAHoTInVZfmJE0chQmaSMlqX08Ui1LfwB7PYVXbFF9gZCCz YEM6MNYdwB1SHg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:04 2025 by rpki-client