This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json) Hash identifier: H2yPEoiS6gMkQv+DXS0yWPNHS4WO5tWQXT1bvNpJEMg= Subject key identifier: DC:2A:25:90:DA:21:00:4B:F3:B8:28:2B:3C:D7:0E:FC:5B:37:3E:20 Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e Certificate serial: 019B096C80E9A5340BF202714F0BF4BAC8CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft Manifest number: 1700 Signing time: Wed 10 Dec 2025 18:01:04 +0000 Manifest this update: Wed 10 Dec 2025 18:01:04 +0000 Manifest next update: Thu 11 Dec 2025 18:01:04 +0000 Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: DUqPK7hpAWQz95V7GOluPoe+GkkRW/4rF3aMJ9VQCz0=) 2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 17:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:6c:80:e9:a5:34:0b:f2:02:71:4f:0b:f4:ba:c8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e Validity Not Before: Dec 10 18:01:04 2025 GMT Not After : Dec 11 18:01:04 2025 GMT Subject: CN=dc2a2590da21004bf3b8282b3cd70efc5b373e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:ce:d7:e9:0f:ac:85:2e:ad:8d:9f:4f:72: 28:ae:ce:54:c9:0c:9a:3b:3f:9c:51:5c:22:e1:40: 78:96:86:4b:08:08:cb:68:85:b1:ed:4b:e1:c7:4d: af:96:f3:40:a7:92:69:e3:3a:25:6f:30:55:6a:29: 40:ab:41:f9:c4:27:47:a5:ae:ee:70:c3:4c:c8:a7: 9d:03:00:2d:96:c7:10:b7:5c:b0:a5:f3:06:1e:31: 9d:56:91:8a:12:5f:93:e4:1b:21:25:0a:63:ab:3f: a0:fc:79:01:a2:95:f7:f0:a8:ed:af:0d:c8:22:5a: 55:39:a5:5d:d8:19:70:76:56:d3:64:33:81:0d:6f: 22:62:82:11:5b:28:ec:03:e0:01:8a:41:02:4b:33: d9:0e:01:c5:5f:37:2c:92:6b:12:57:9b:59:07:0a: 8a:d5:e8:cc:c7:16:ff:24:96:29:19:91:b2:11:b5: 07:69:af:5f:e2:85:43:53:47:ca:cc:35:00:57:ef: d1:ef:b7:22:53:a6:ed:da:e7:cd:70:c3:9a:af:3e: e7:d6:7b:ab:72:27:14:9a:42:03:2e:91:0a:6a:9d: 3c:e6:69:97:c3:d1:df:9a:66:f3:09:4f:85:11:e5: cb:36:b7:d3:3d:71:e2:76:c4:fa:d9:90:2c:6c:c1: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2A:25:90:DA:21:00:4B:F3:B8:28:2B:3C:D7:0E:FC:5B:37:3E:20 X509v3 Authority Key Identifier: keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:38:cc:9c:3b:14:f4:3d:14:37:43:e7:f8:7c:fb:c6:af:4b: 94:3b:db:00:47:23:f3:55:0f:80:ba:8f:63:6e:50:20:b1:00: b7:a9:36:76:21:df:ed:22:59:a0:8b:cc:58:ac:0c:d8:11:b4: 2e:a4:50:39:34:24:c3:e2:af:da:43:1b:60:b4:df:59:c9:79: ab:a2:71:80:1f:86:63:3e:10:70:ec:87:75:1c:04:0f:e9:66: c1:1b:15:4e:96:31:83:26:90:82:b9:44:2c:a0:c1:e1:c1:6d: 1b:df:ab:e4:8a:5d:ee:f9:23:c5:96:06:66:5f:98:16:c1:3f: ae:3b:7b:87:e9:fe:9e:74:2d:29:ae:6e:a7:1e:90:a7:26:99: f9:d9:03:82:cf:4e:97:ac:43:f6:87:31:7c:c8:fe:f5:ce:11: 4a:2c:35:c7:18:94:e9:4c:3b:c0:9f:d9:28:98:73:ce:3e:d7: e0:70:3f:2c:71:2c:0d:b4:25:37:b9:34:8f:01:8b:31:d0:fe: 3b:b2:d8:9c:cb:1f:3e:48:0c:1c:97:80:e5:5e:fa:fb:3b:c0: 13:c9:9c:81:60:56:1e:1d:fd:ed:46:6e:ae:d0:4b:c0:5b:e1: b7:45:43:a9:5d:2c:03:d6:49:6e:5b:d8:6f:49:e8:c0:62:19: 4a:1a:b3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJbIDppTQL8gJxTwv0usjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5 NzRlM2UwHhcNMjUxMjEwMTgwMTA0WhcNMjUxMjExMTgwMTA0WjAzMTEwLwYDVQQD EyhkYzJhMjU5MGRhMjEwMDRiZjNiODI4MmIzY2Q3MGVmYzViMzczZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxazO1+kPrIUurY2fT3Iors5UyQya Oz+cUVwi4UB4loZLCAjLaIWx7Uvhx02vlvNAp5Jp4zolbzBVailAq0H5xCdHpa7u cMNMyKedAwAtlscQt1ywpfMGHjGdVpGKEl+T5BshJQpjqz+g/HkBopX38Kjtrw3I IlpVOaVd2BlwdlbTZDOBDW8iYoIRWyjsA+ABikECSzPZDgHFXzcskmsSV5tZBwqK 1ejMxxb/JJYpGZGyEbUHaa9f4oVDU0fKzDUAV+/R77ciU6bt2ufNcMOarz7n1nur cicUmkIDLpEKap085mmXw9HfmmbzCU+FEeXLNrfTPXHidsT62ZAsbMFzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwqJZDaIQBL87goKzzXDvxbNz4gMB8GA1UdIwQY MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5 LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTjMnDsU 9D0UN0Pn+Hz7xq9LlDvbAEcj81UPgLqPY25QILEAt6k2diHf7SJZoIvMWKwM2BG0 LqRQOTQkw+Kv2kMbYLTfWcl5q6JxgB+GYz4QcOyHdRwED+lmwRsVTpYxgyaQgrlE LKDB4cFtG9+r5Ipd7vkjxZYGZl+YFsE/rjt7h+n+nnQtKa5upx6QpyaZ+dkDgs9O l6xD9ocxfMj+9c4RSiw1xxiU6Uw7wJ/ZKJhzzj7X4HA/LHEsDbQlN7k0jwGLMdD+ O7LYnMsfPkgMHJeA5V76+zvAE8mcgWBWHh397UZurtBLwFvht0VDqV0sA9ZJblvY b0nowGIZShqzpw== -----END CERTIFICATE-----Generated at Wed Dec 10 21:16:03 2025 by rpki-client