This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json) Hash identifier: oA4sI13BzI0xmWc1AEqvUjIWrljkE60QTM71+ftQ6D8= Subject key identifier: 98:C5:E8:21:F1:F3:51:44:23:8B:5F:C1:72:17:42:7C:E8:67:66:E5 Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4 Certificate serial: 019AF16469AFE229D4478A308C5FCD02080F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=) 2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: N8GypFLaYUd+wJogceyPCjmUqdLHplPMjw8WvBJxcKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:af:e2:29:d4:47:8a:30:8c:5f:cd:02:08:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=98c5e821f1f35144238b5fc17217427ce86766e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:10:80:3e:f9:38:3e:97:17:82:c8:b9:10:35: 2c:4a:5d:f8:04:57:6a:a8:7e:49:85:d7:c2:23:bc: 07:65:4d:af:d9:65:ad:87:f1:6b:80:8e:b0:1b:44: a9:e6:4f:fc:0c:3e:de:c6:17:89:80:f4:ff:89:4a: d9:30:02:ff:c5:5a:4b:89:0c:55:60:7c:6a:7b:3e: ad:91:1a:c7:6e:ac:87:5d:67:bd:e8:d1:b1:4c:91: d8:f6:40:0a:38:01:27:ae:c3:53:99:39:61:0e:f5: 94:1c:38:91:8c:4b:63:61:da:8e:f3:aa:22:a8:2e: 07:92:9c:ce:3d:9a:00:bb:85:f5:24:68:bc:a9:a3: 95:3a:b7:2a:61:d9:f5:b1:70:8c:c3:2b:f1:98:b7: fc:c8:16:67:ed:29:43:0c:db:cf:0a:38:bc:ce:e3: 43:2a:13:a4:68:5d:47:82:86:13:34:14:e2:49:96: d3:dc:bb:f5:91:86:32:e6:68:72:91:7c:c1:6f:db: 54:57:e8:99:03:8e:b6:a7:c1:26:d2:3b:6f:4b:e9: 87:5f:7f:47:d2:58:cb:18:e7:e2:d2:73:f7:aa:35: 86:ea:48:92:64:e8:3b:5e:99:db:f4:90:95:7a:16: 09:8c:47:5b:55:f7:ca:62:a6:82:4d:b1:48:60:52: 73:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:E8:21:F1:F3:51:44:23:8B:5F:C1:72:17:42:7C:E8:67:66:E5 X509v3 Authority Key Identifier: keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:20:00:2d:4b:bd:c9:7e:e2:90:4f:dd:5a:f9:1a:7c:60:ee: b1:3b:a8:d4:6d:03:f9:fe:44:08:08:14:6c:c3:8d:b3:0f:13: bd:71:92:99:0b:4b:66:9f:8c:91:c4:d5:83:23:b3:08:de:ed: fd:10:8b:2f:ba:04:a6:7d:d4:2e:98:aa:86:56:29:d8:59:0c: 4c:b8:20:79:af:aa:5d:39:03:30:1b:a9:d2:ed:58:35:f1:28: 55:c6:01:69:15:85:56:a1:17:23:91:9b:76:bb:d3:76:f6:d1: 89:31:72:dc:ad:08:9f:1f:6a:e1:b5:fb:aa:8f:4c:f4:60:54: f5:37:0c:1c:47:f7:9d:da:1c:c3:02:ad:3e:a4:ca:90:ab:a0: f4:e5:e8:bd:8c:2f:a4:0c:1d:7c:1d:31:79:8d:4d:89:c9:18: 7d:ad:cb:1a:ac:10:bf:46:b6:07:48:30:3b:17:44:52:4f:01: cf:9a:0b:da:6a:b5:f1:27:3c:1b:f5:6f:ac:d5:a8:b1:40:30: 70:6c:99:2d:00:4c:b3:f7:e6:e7:21:93:74:ec:99:12:11:c4: cc:63:0a:f5:86:2a:fc:ea:34:a1:de:70:5c:dc:4a:03:02:c6: a9:d0:80:ac:3b:f9:fc:2a:94:19:49:07:03:15:b1:09:e1:61: 9c:8d:da:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGmv4inUR4owjF/NAggPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4 NTVmYzQwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg5OGM1ZTgyMWYxZjM1MTQ0MjM4YjVmYzE3MjE3NDI3Y2U4Njc2NmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRCAPvk4PpcXgsi5EDUsSl34BFdq qH5JhdfCI7wHZU2v2WWth/FrgI6wG0Sp5k/8DD7exheJgPT/iUrZMAL/xVpLiQxV YHxqez6tkRrHbqyHXWe96NGxTJHY9kAKOAEnrsNTmTlhDvWUHDiRjEtjYdqO86oi qC4HkpzOPZoAu4X1JGi8qaOVOrcqYdn1sXCMwyvxmLf8yBZn7SlDDNvPCji8zuND KhOkaF1HgoYTNBTiSZbT3Lv1kYYy5mhykXzBb9tUV+iZA462p8Em0jtvS+mHX39H 0ljLGOfi0nP3qjWG6kiSZOg7Xpnb9JCVehYJjEdbVffKYqaCTbFIYFJzGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjF6CHx81FEI4tfwXIXQnzoZ2blMB8GA1UdIwQY MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSAALUu9 yX7ikE/dWvkafGDusTuo1G0D+f5ECAgUbMONsw8TvXGSmQtLZp+MkcTVgyOzCN7t /RCLL7oEpn3ULpiqhlYp2FkMTLggea+qXTkDMBup0u1YNfEoVcYBaRWFVqEXI5Gb drvTdvbRiTFy3K0Inx9q4bX7qo9M9GBU9TcMHEf3ndocwwKtPqTKkKug9OXovYwv pAwdfB0xeY1NickYfa3LGqwQv0a2B0gwOxdEUk8Bz5oL2mq18Sc8G/VvrNWosUAw cGyZLQBMs/fm5yGTdOyZEhHEzGMK9YYq/Oo0od5wXNxKAwLGqdCArDv5/CqUGUkH AxWxCeFhnI3a7w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:49 2025 by rpki-client