This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft File: 86zjyvueJsGmBWT3DSrOtFe_UAk.mft (raw, json) Hash identifier: iSbB0NyuZ2HHf8l5ZXKN9DFenYzqHr0jabhizvgbsFc= Subject key identifier: FE:9A:8B:78:44:4E:64:F4:2B:46:3A:94:D3:8F:C6:F7:16:0D:9D:57 Authority key identifier: F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 Certificate issuer: /CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Certificate serial: 019AF31B787727E467A16A32F398FD0BE7B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:55 +0000 Manifest this update: Sat 06 Dec 2025 10:00:55 +0000 Manifest next update: Sun 07 Dec 2025 10:00:55 +0000 Files and hashes: 1: 86zjyvueJsGmBWT3DSrOtFe_UAk.crl (hash: mf+0Q/VEbsaOtTlCMLteB7fUUOD5pZJf57fdywAFzCQ=) 2: Pr7YGGLPe8s_S4LRz9ziv5ucbAw.roa (hash: sx9n+qGnhP0I6sp10kmNLeGSUg0Fv6GPJl7WmFjWTnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:78:77:27:e4:67:a1:6a:32:f3:98:fd:0b:e7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ace3cafb9e26c1a60564f70d2aceb457bf5009 Validity Not Before: Dec 6 10:00:55 2025 GMT Not After : Dec 7 10:00:55 2025 GMT Subject: CN=fe9a8b78444e64f42b463a94d38fc6f7160d9d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:c7:51:72:82:f0:7e:ee:5d:ff:70:d0:e9: ef:f1:1b:a6:4f:ad:8e:d0:88:4b:24:2f:80:5c:de: 6f:51:50:3c:9f:09:a6:66:6c:0f:b2:aa:48:3d:22: c8:0f:ff:d8:4e:20:01:27:bc:ed:55:2c:5c:79:c6: ce:01:b8:79:de:fb:8a:1e:c3:77:81:31:ff:cc:a6: e9:58:33:9c:cb:b7:c6:db:f9:80:dc:8b:ce:a8:39: a0:c9:e6:e0:0c:55:7c:d8:ed:30:1c:43:29:55:17: 40:31:70:47:98:49:91:97:2e:ed:a7:3a:3a:a0:44: 00:2b:de:21:5f:2f:b4:b5:59:79:d9:3e:b1:28:35: 22:99:86:c3:9b:54:19:fe:5b:b7:2f:1f:84:15:ef: 51:db:6c:36:81:9c:13:d1:f6:94:09:7c:cb:57:0b: cd:c4:c7:b3:02:3c:4c:2c:90:0c:cd:5a:6f:ea:d1: ce:43:78:de:6e:c7:dd:af:a6:3c:88:70:9c:c0:4e: 72:3d:4e:ba:a9:b8:bd:6f:ac:c5:b0:07:5b:48:09: 05:c3:7c:09:5b:bf:be:2c:50:4a:3f:5e:59:b4:d9: 95:27:58:82:77:6b:53:a7:81:17:f0:ba:21:19:b4: 14:0a:cf:e1:c9:74:f9:f8:c1:35:f6:5e:cf:32:99: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:8B:78:44:4E:64:F4:2B:46:3A:94:D3:8F:C6:F7:16:0D:9D:57 X509v3 Authority Key Identifier: keyid:F3:AC:E3:CA:FB:9E:26:C1:A6:05:64:F7:0D:2A:CE:B4:57:BF:50:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86zjyvueJsGmBWT3DSrOtFe_UAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/eb22fa-fba4-47a9-ab53-363e2d6643f2/1/86zjyvueJsGmBWT3DSrOtFe_UAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4c:7f:61:52:22:d2:e9:a1:cb:60:9f:41:0e:1b:11:1a:47: 7b:7c:73:c9:2e:3d:ad:7c:97:00:d8:0b:66:99:b0:4d:ab:b0: 54:cf:24:60:6b:f8:d6:01:2f:04:33:41:c6:a1:00:7a:de:fe: c4:03:55:92:a2:0a:09:a4:ad:9c:9e:ab:e0:3a:74:d4:8a:0e: 0b:b4:8f:a2:cd:83:1f:68:24:e2:08:8d:14:15:1e:32:e7:78: 74:1d:91:12:df:17:51:86:5e:39:2f:6a:f7:82:e0:8e:59:ed: 54:36:4f:9f:00:62:41:9a:44:a0:a2:6e:9c:6e:11:4b:ab:77: 7b:97:e4:28:c1:70:62:c4:8b:19:fb:d4:45:d3:9b:dc:34:c2: d1:2b:0c:b8:7c:ca:3c:8b:aa:10:e2:42:a8:dd:4d:dd:5f:1a: 77:ab:73:ca:2e:14:ce:43:e3:7c:3c:31:31:13:7e:d6:8d:bb: 27:b6:8f:87:cd:15:c5:09:6c:65:06:bc:26:91:6c:cf:e2:de: 66:e3:b8:b5:b1:d0:d1:87:35:d1:c2:5f:d8:c5:fa:04:d4:18: 3c:59:ee:ac:3a:bc:10:eb:7b:7d:05:34:67:b6:85:0f:ca:5e: 0a:c9:3d:11:53:c1:0f:3b:9c:ef:e3:83:83:b9:dc:a0:3a:18: be:55:56:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3h3J+RnoWoy85j9C+ezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWNlM2NhZmI5ZTI2YzFhNjA1NjRmNzBkMmFjZWI0NTdi ZjUwMDkwHhcNMjUxMjA2MTAwMDU1WhcNMjUxMjA3MTAwMDU1WjAzMTEwLwYDVQQD EyhmZTlhOGI3ODQ0NGU2NGY0MmI0NjNhOTRkMzhmYzZmNzE2MGQ5ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGLHUXKC8H7uXf9w0Onv8RumT62O 0IhLJC+AXN5vUVA8nwmmZmwPsqpIPSLID//YTiABJ7ztVSxcecbOAbh53vuKHsN3 gTH/zKbpWDOcy7fG2/mA3IvOqDmgyebgDFV82O0wHEMpVRdAMXBHmEmRly7tpzo6 oEQAK94hXy+0tVl52T6xKDUimYbDm1QZ/lu3Lx+EFe9R22w2gZwT0faUCXzLVwvN xMezAjxMLJAMzVpv6tHOQ3jebsfdr6Y8iHCcwE5yPU66qbi9b6zFsAdbSAkFw3wJ W7++LFBKP15ZtNmVJ1iCd2tTp4EX8LohGbQUCs/hyXT5+ME19l7PMpkdSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6ai3hETmT0K0Y6lNOPxvcWDZ1XMB8GA1UdIwQY MBaAFPOs48r7nibBpgVk9w0qzrRXv1AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMt MzYzZTJkNjY0M2YyLzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYjIyZmEtZmJhNC00N2E5LWFiNTMtMzYzZTJkNjY0M2Yy LzEvODZ6anl2dWVKc0dtQldUM0RTck90RmVfVUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEx/YVIi 0umhy2CfQQ4bERpHe3xzyS49rXyXANgLZpmwTauwVM8kYGv41gEvBDNBxqEAet7+ xANVkqIKCaStnJ6r4Dp01IoOC7SPos2DH2gk4giNFBUeMud4dB2REt8XUYZeOS9q 94LgjlntVDZPnwBiQZpEoKJunG4RS6t3e5fkKMFwYsSLGfvURdOb3DTC0SsMuHzK PIuqEOJCqN1N3V8ad6tzyi4UzkPjfDwxMRN+1o27J7aPh80VxQlsZQa8JpFsz+Le ZuO4tbHQ0Yc10cJf2MX6BNQYPFnurDq8EOt7fQU0Z7aFD8peCsk9EVPBDzuc7+OD g7ncoDoYvlVWMg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:41:05 2025 by rpki-client