This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: JmuZYp1hR67LTbeX7AJA7T06t/cnAY8kA54gx1TfUV8= Subject key identifier: F4:1C:A9:2D:B6:AC:D6:90:90:C7:E8:96:A6:35:BF:E7:69:57:F1:F3 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019AF12EB60D45652C86280E921151C98947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1779 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: 0M_CHtTZz2ksD2BrxQYB5GYr6Qs.roa (hash: pjePI9MMIzsxZCozr1MX0ua7tggMW3H280y5yB3P7S0=) 2: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 3: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 4: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: zonUlai+PwalqPBsj7Cd//RjNf6p3yIIRelIzZi38uU=) 9: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b6:0d:45:65:2c:86:28:0e:92:11:51:c9:89:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=f41ca92db6acd69090c7e896a635bfe76957f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:a4:2a:6d:8e:5a:3b:d4:83:0c:27:ed:42: c0:f6:14:32:46:c6:38:85:e6:5e:be:7c:e4:4c:97: 71:af:5e:1c:1c:df:37:b4:56:de:7e:60:43:f9:c3: 18:38:7d:8e:8c:88:4b:3a:75:0d:c2:21:5b:cd:27: 51:68:d4:08:cf:16:c6:21:90:17:6a:80:8d:3d:a0: 08:db:25:b3:c8:71:a4:60:e8:84:d9:56:1c:77:23: 35:d9:25:84:be:db:70:dd:8d:e5:e0:a0:7e:92:95: fa:42:a2:cd:a4:d4:fe:b3:ca:94:a2:c6:0a:6f:a5: b9:5b:5d:e4:5f:78:c9:65:51:25:43:b4:45:4f:29: 5b:de:61:04:5f:f4:b0:6d:60:6d:05:1f:32:16:7a: 19:01:82:98:e7:63:68:49:88:fe:70:36:87:b0:c4: 22:15:0f:fa:e6:45:1b:35:15:76:d7:7e:93:61:6d: ed:c8:62:2d:bc:7d:d0:01:b6:b3:fc:fc:bf:18:0d: 0a:99:b6:ca:cd:e5:ba:52:16:b2:41:52:e4:f7:7c: cb:fd:07:fd:26:a3:80:23:b2:70:e4:38:13:9a:13: c4:26:c2:5f:6e:a4:27:35:9c:e8:0f:c6:47:8a:76: fb:36:e7:c6:82:2b:11:47:fc:99:83:3c:7f:38:9b: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:A9:2D:B6:AC:D6:90:90:C7:E8:96:A6:35:BF:E7:69:57:F1:F3 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a2:1e:9b:b1:88:c9:17:61:38:52:ca:66:3a:2b:fe:cc:73: 0b:74:49:b9:4d:87:cd:fc:ab:b0:e9:a3:7b:1f:dd:e7:4a:cf: f3:56:7f:c1:a4:9c:f4:59:e2:58:da:0a:3d:08:4e:3e:9f:83: 66:13:c3:65:c5:4b:9d:ad:8c:44:c7:77:07:de:ed:18:ae:a2: b5:00:12:34:2c:04:98:92:79:09:0b:4f:73:73:92:73:01:de: 57:95:6e:e1:8d:28:57:6f:a6:50:0c:1c:f9:50:fb:8d:bb:79: 6f:f9:e0:cd:e5:e2:63:c6:55:94:fa:81:6b:24:0d:18:f8:99: 7b:f9:28:77:bf:ae:9a:03:92:b4:8c:6b:80:2b:f6:e7:1d:29: 3a:5a:d3:d6:fb:ca:8e:c9:9c:78:e9:21:c2:1c:08:1a:26:fc: 3b:72:33:42:d5:4b:32:fe:66:d1:0d:d4:9f:a6:16:8e:04:83: 5b:92:ff:43:1f:38:a0:3c:68:cf:7d:6d:fd:01:53:29:60:fb: bb:2b:05:65:4d:38:e1:79:9d:ae:38:fe:d7:e1:b1:97:2d:00: ca:bd:09:3e:95:24:ce:f5:b9:11:1d:4e:a0:0d:67:8c:51:1f: 4f:3f:e2:67:75:01:d1:0d:75:16:4f:61:2b:46:08:c5:47:22: 1b:de:50:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrYNRWUshigOkhFRyYlHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhmNDFjYTkyZGI2YWNkNjkwOTBjN2U4OTZhNjM1YmZlNzY5NTdmMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OikKm2OWjvUgwwn7ULA9hQyRsY4 heZevnzkTJdxr14cHN83tFbefmBD+cMYOH2OjIhLOnUNwiFbzSdRaNQIzxbGIZAX aoCNPaAI2yWzyHGkYOiE2VYcdyM12SWEvttw3Y3l4KB+kpX6QqLNpNT+s8qUosYK b6W5W13kX3jJZVElQ7RFTylb3mEEX/SwbWBtBR8yFnoZAYKY52NoSYj+cDaHsMQi FQ/65kUbNRV2136TYW3tyGItvH3QAbaz/Py/GA0KmbbKzeW6UhayQVLk93zL/Qf9 JqOAI7Jw5DgTmhPEJsJfbqQnNZzoD8ZHinb7NufGgisRR/yZgzx/OJvqowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQcqS22rNaQkMfolqY1v+dpV/HzMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaIem7GI yRdhOFLKZjor/sxzC3RJuU2HzfyrsOmjex/d50rP81Z/waSc9FniWNoKPQhOPp+D ZhPDZcVLna2MRMd3B97tGK6itQASNCwEmJJ5CQtPc3OScwHeV5Vu4Y0oV2+mUAwc +VD7jbt5b/ngzeXiY8ZVlPqBayQNGPiZe/kod7+umgOStIxrgCv25x0pOlrT1vvK jsmceOkhwhwIGib8O3IzQtVLMv5m0Q3Un6YWjgSDW5L/Qx84oDxoz31t/QFTKWD7 uysFZU044Xmdrjj+1+Gxly0Ayr0JPpUkzvW5ER1OoA1njFEfTz/iZ3UB0Q11Fk9h K0YIxUciG95QLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:51 2025 by rpki-client