This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json) Hash identifier: 0AqwZU4KjjYs8EpBpITuQ3OT8R8KBICL70ec0q6lvHQ= Subject key identifier: 64:2B:B7:4D:90:BC:1B:B5:80:62:1E:88:B7:E9:8E:86:8D:21:61:0C Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43 Certificate serial: 019AF276FD727ED65813D8004D393DC4190C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (hash: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=) 2: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: JnvCjWNteq+2hDbjdaDxzxg0/P7ALb8rMttoV7fFdYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fd:72:7e:d6:58:13:d8:00:4d:39:3d:c4:19:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=642bb74d90bc1bb580621e88b7e98e868d21610c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:d9:4e:1e:03:4a:4e:01:6e:9e:05:7d:d0: 40:92:16:e7:8f:d9:0c:db:b4:e2:a5:32:d5:34:72: 4e:ff:63:2b:95:e7:f6:e2:b9:3e:d5:3d:68:ad:d0: 76:c5:8c:f3:b0:a5:cc:5f:33:ff:0f:31:e4:10:bc: c1:79:5b:05:aa:d7:d8:ec:62:c6:69:d3:24:2a:d9: 25:94:ce:b9:27:a0:9a:5c:54:7a:5f:13:e5:1d:54: d2:08:6c:77:04:fd:12:6f:a6:5a:d9:db:64:97:7c: 06:19:a1:71:f0:d9:eb:44:06:88:dc:29:e0:1e:04: f5:c7:a4:9d:b6:29:b2:71:de:49:1c:cc:3a:7f:3f: 16:68:63:66:76:aa:4f:98:cd:f2:6b:6f:7a:b6:b7: 5a:5a:63:86:ae:36:88:03:32:83:e6:37:aa:e3:68: d1:1a:18:e4:0b:4a:90:08:29:da:30:6a:a2:2b:34: 2c:3d:dd:60:6e:bb:91:d7:a7:db:c1:b0:bd:03:f0: ad:0e:fd:b8:25:39:0a:4e:3f:e9:63:6e:35:07:52: cc:69:4c:03:a2:0a:15:dc:d9:5d:97:7e:40:56:b3: 5d:3a:12:98:72:ff:9b:c6:11:12:3f:fb:ae:65:00: e9:7c:51:bd:33:10:2c:75:e7:28:1b:9d:6a:49:34: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:B7:4D:90:BC:1B:B5:80:62:1E:88:B7:E9:8E:86:8D:21:61:0C X509v3 Authority Key Identifier: keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:05:40:0d:9c:a8:e1:ec:8b:9c:d8:0c:b6:4d:d3:a1:88: e2:65:6e:c0:13:2a:d1:57:20:09:e6:96:a0:fb:07:99:43:63: 8a:87:d9:81:27:d6:d3:68:c2:cd:5a:be:1c:f0:f1:12:c6:f9: a4:d7:44:0d:9a:54:b8:b7:a4:2a:0d:73:0a:b4:53:3b:3b:26: 10:9d:24:d5:1a:ec:6b:8f:2d:d7:35:3f:03:89:ad:42:46:77: 7a:a9:b0:96:dd:77:a7:6d:3e:5e:72:96:36:1f:1d:38:05:ef: 10:27:dd:48:de:3c:2d:c1:3b:e8:56:96:78:0d:6f:29:b2:29: e8:96:dd:9a:7a:93:7f:e0:c9:14:eb:9a:76:3e:e8:9f:d7:91: e2:ca:5f:35:7b:02:91:6e:fa:f1:5a:f6:a6:f1:04:75:0c:f1: 5a:0b:29:4c:46:c5:ae:83:02:9c:f3:ec:22:4b:53:da:13:94: c2:dc:a6:54:d7:3b:71:25:94:0c:c7:0f:51:8d:32:f4:d1:85: 10:72:e7:9b:a2:08:c7:66:19:f8:37:52:0b:5c:ce:e6:2d:d7: f2:ce:a6:52:2b:5a:47:5a:69:07:47:fa:c6:de:5d:33:77:fa: 77:6d:33:d8:c1:a6:9a:bb:5a:b1:0a:2d:0d:0d:b5:f3:ec:2f: f2:53:6f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydv1yftZYE9gATTk9xBkMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl NjhkNDMwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD Eyg2NDJiYjc0ZDkwYmMxYmI1ODA2MjFlODhiN2U5OGU4NjhkMjE2MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rvZTh4DSk4Bbp4FfdBAkhbnj9kM 27TipTLVNHJO/2Mrlef24rk+1T1ordB2xYzzsKXMXzP/DzHkELzBeVsFqtfY7GLG adMkKtkllM65J6CaXFR6XxPlHVTSCGx3BP0Sb6Za2dtkl3wGGaFx8NnrRAaI3Cng HgT1x6Sdtimycd5JHMw6fz8WaGNmdqpPmM3ya296trdaWmOGrjaIAzKD5jeq42jR GhjkC0qQCCnaMGqiKzQsPd1gbruR16fbwbC9A/CtDv24JTkKTj/pY241B1LMaUwD ogoV3Nldl35AVrNdOhKYcv+bxhESP/uuZQDpfFG9MxAsdecoG51qSTT22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQrt02QvBu1gGIeiLfpjoaNIWEMMB8GA1UdIwQY MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct YTczNWNhMTA4NGI3LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3 LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPMFQA2c qOHsi5zYDLZN06GI4mVuwBMq0VcgCeaWoPsHmUNjiofZgSfW02jCzVq+HPDxEsb5 pNdEDZpUuLekKg1zCrRTOzsmEJ0k1Rrsa48t1zU/A4mtQkZ3eqmwlt13p20+XnKW Nh8dOAXvECfdSN48LcE76FaWeA1vKbIp6JbdmnqTf+DJFOuadj7on9eR4spfNXsC kW768Vr2pvEEdQzxWgspTEbFroMCnPPsIktT2hOUwtymVNc7cSWUDMcPUY0y9NGF EHLnm6IIx2YZ+DdSC1zO5i3X8s6mUitaR1ppB0f6xt5dM3f6d20z2MGmmrtasQot DQ218+wv8lNv/A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:47 2025 by rpki-client