This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft File: 94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json) Hash identifier: pPJBj8E9O3hTTUgNHPdySHvO04moL7Ss2hf3XjZfDes= Subject key identifier: 82:28:BD:86:96:28:19:F1:A7:AF:A4:F1:A9:BA:4E:A9:CC:D1:C8:49 Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78 Certificate issuer: /CN=f78847e0435356ee5ef086c12048408a04191b78 Certificate serial: 019AF19AF26872F580CCF97B797AEFDD287E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: gyYkMlGNIlwRxJ7RhwgU7EgPArcKd0m1kTCWFbrlECw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f2:68:72:f5:80:cc:f9:7b:79:7a:ef:dd:28:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=8228bd86962819f1a7afa4f1a9ba4ea9ccd1c849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:76:78:e0:cf:36:52:9c:c7:21:02:f6:59:eb: 9f:a4:ad:4b:e4:5f:57:84:d7:b6:c5:97:1a:4f:df: 48:ac:e6:05:eb:9c:e9:6d:7a:b7:9d:67:59:29:44: 69:83:c1:b9:39:e7:6a:45:d0:7e:7a:3c:12:a0:9e: fe:22:b0:62:d8:b1:07:80:7d:62:cd:8c:50:59:b1: c3:e6:55:74:cc:db:45:a8:74:30:00:0c:71:cd:ae: a3:ba:b3:80:19:81:48:71:c0:6b:15:c8:0c:c8:fd: 9e:5a:15:1c:93:32:ce:ca:a1:55:b3:e1:b9:63:de: 1d:88:17:35:8d:03:3f:7a:a3:a6:4d:5c:07:9c:88: 4d:c6:e4:a8:d6:21:4d:38:1e:be:6f:6a:38:60:69: d5:28:c0:ab:88:26:96:37:b1:00:1b:44:d8:02:24: 27:38:06:48:63:dd:44:4f:59:73:d4:4d:28:a5:d1: 59:d9:dd:f7:92:61:75:b7:51:56:b2:90:a0:7c:a6: 63:a7:e9:1d:83:b3:38:35:23:17:25:41:91:3d:df: db:49:21:b7:d5:be:e0:69:00:b3:09:9d:09:3a:64: f9:92:dd:18:b3:74:ef:dc:e8:5a:43:d6:4d:54:a6: 50:9b:ad:39:7e:c7:e0:8b:ff:73:2e:17:6c:a5:86: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:28:BD:86:96:28:19:F1:A7:AF:A4:F1:A9:BA:4E:A9:CC:D1:C8:49 X509v3 Authority Key Identifier: keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ad:41:78:a6:a8:56:37:85:32:d9:52:d4:55:be:b1:1f:cc: f5:81:2f:49:ed:4d:96:be:ec:37:b2:9c:60:94:c4:d1:db:47: c1:39:06:48:44:d0:f7:f0:dc:a3:e0:ef:bf:76:21:a4:ab:1c: 7e:bf:47:a1:30:a1:fa:e3:09:dd:08:a1:c3:44:95:dc:cf:74: a0:4b:b2:7f:92:b0:00:46:1a:07:eb:89:f2:92:9c:0b:d5:93: 5f:85:b5:6b:2f:9e:0c:e1:4b:6d:4f:cc:f3:39:4c:16:77:6f: e5:77:9c:ce:0d:7d:d9:ad:99:35:bd:c5:d5:db:88:18:f8:56: 5b:84:1e:f9:3b:0e:51:28:1f:17:02:fd:0f:88:ed:91:23:23: 47:2a:ca:b4:14:b8:fe:25:ba:49:ed:fb:6b:db:20:7e:72:50: 1d:e1:a1:db:16:40:c0:4d:36:96:47:e9:3e:53:4e:6e:11:dc: d9:bd:f5:2c:d8:f6:db:76:8a:27:42:02:41:83:da:2f:78:7f: 91:90:52:b7:36:b2:1c:d6:31:18:af:07:18:04:cd:3f:3f:ea: e6:9f:79:d7:ee:76:57:e5:d0:cd:e1:0b:38:b2:0f:a7:71:02: e2:32:12:a1:ae:18:fa:c7:b0:2a:08:9d:65:47:05:7f:31:9e: bd:3a:d6:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvJocvWAzPl7eXrv3Sh+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODg0N2UwNDM1MzU2ZWU1ZWYwODZjMTIwNDg0MDhhMDQx OTFiNzgwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD Eyg4MjI4YmQ4Njk2MjgxOWYxYTdhZmE0ZjFhOWJhNGVhOWNjZDFjODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnZ44M82UpzHIQL2WeufpK1L5F9X hNe2xZcaT99IrOYF65zpbXq3nWdZKURpg8G5OedqRdB+ejwSoJ7+IrBi2LEHgH1i zYxQWbHD5lV0zNtFqHQwAAxxza6jurOAGYFIccBrFcgMyP2eWhUckzLOyqFVs+G5 Y94diBc1jQM/eqOmTVwHnIhNxuSo1iFNOB6+b2o4YGnVKMCriCaWN7EAG0TYAiQn OAZIY91ET1lz1E0opdFZ2d33kmF1t1FWspCgfKZjp+kdg7M4NSMXJUGRPd/bSSG3 1b7gaQCzCZ0JOmT5kt0Ys3Tv3OhaQ9ZNVKZQm605fsfgi/9zLhdspYZ2YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIovYaWKBnxp6+k8am6TqnM0chJMB8GA1UdIwQY MBaAFPeIR+BDU1buXvCGwSBIQIoEGRt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDct ZGJiNGNhNTRkMjk0LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDctZGJiNGNhNTRkMjk0 LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxq1BeKao VjeFMtlS1FW+sR/M9YEvSe1Nlr7sN7KcYJTE0dtHwTkGSETQ9/Dco+Dvv3YhpKsc fr9HoTCh+uMJ3Qihw0SV3M90oEuyf5KwAEYaB+uJ8pKcC9WTX4W1ay+eDOFLbU/M 8zlMFndv5Xeczg192a2ZNb3F1duIGPhWW4Qe+TsOUSgfFwL9D4jtkSMjRyrKtBS4 /iW6Se37a9sgfnJQHeGh2xZAwE02lkfpPlNObhHc2b31LNj223aKJ0ICQYPaL3h/ kZBStzayHNYxGK8HGATNPz/q5p951+52V+XQzeELOLIPp3EC4jISoa4Y+sewKgid ZUcFfzGevTrWmg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:58 2025 by rpki-client