This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json) Hash identifier: SaQqqccuHHqwHtkYeq55960cqdi7bVS33nM8MTRNP24= Subject key identifier: FA:05:2C:75:9B:D2:5C:3E:99:93:25:40:35:89:2C:61:EB:09:B7:C5 Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Certificate serial: 019AF3F7B7547BBA9344C4E94C973C2EEECB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft Manifest number: 04A5 Signing time: Sat 06 Dec 2025 14:01:28 +0000 Manifest this update: Sat 06 Dec 2025 14:01:28 +0000 Manifest next update: Sun 07 Dec 2025 14:01:28 +0000 Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=) 2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: kSF/QrdrAe2vq7DjM5RvEMjyK7iAg2G681I1eIAZSrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b7:54:7b:ba:93:44:c4:e9:4c:97:3c:2e:ee:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Validity Not Before: Dec 6 14:01:28 2025 GMT Not After : Dec 7 14:01:28 2025 GMT Subject: CN=fa052c759bd25c3e9993254035892c61eb09b7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:da:9d:df:f3:94:ef:76:d4:cd:38:a0:1e: 04:ff:34:2e:41:85:88:eb:71:28:22:13:96:aa:a1: eb:7d:a5:60:2f:01:80:5a:83:b2:4c:d4:a3:dc:9e: 6e:11:6c:25:6a:52:88:8e:95:5b:cc:81:95:53:8e: cf:3e:02:4f:d8:3e:9c:0e:10:24:e6:f8:61:ac:aa: cb:fe:10:a7:0a:0c:8d:0a:74:f1:ed:01:b1:e8:4e: c0:1f:1f:ac:36:4c:98:66:f4:54:fd:60:9d:18:e7: 3a:bf:68:44:bc:77:41:9e:aa:c3:07:c6:11:c9:a4: 88:81:1d:8a:a4:be:2f:ba:a7:37:cf:ce:cc:fc:a1: e4:83:db:61:4c:fb:15:b4:bb:57:8f:00:97:45:32: 65:9f:ca:d4:b5:fa:e5:5d:03:22:be:6f:c7:09:c1: 90:34:49:fe:18:90:84:6d:33:3c:23:78:5b:fd:67: 02:a3:c2:86:a9:37:d0:2c:61:55:f3:78:7d:ef:e7: 50:57:82:a0:4a:bc:4b:bf:6d:3f:cf:2c:e0:9b:1c: 62:b2:be:e9:d3:bc:d5:43:ab:7b:92:5b:6a:aa:25: 82:c6:eb:c4:56:79:4d:4a:a8:56:c7:33:1e:30:7c: 5e:8c:0e:2d:80:b9:25:4c:68:56:90:c0:f4:0d:e1: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:05:2C:75:9B:D2:5C:3E:99:93:25:40:35:89:2C:61:EB:09:B7:C5 X509v3 Authority Key Identifier: keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:db:59:75:e9:38:14:b1:93:53:f4:01:5c:56:d2:66:c1:e6: f5:bf:f1:bf:e3:09:61:78:87:8e:f7:80:3f:a5:77:b5:21:f1: 9b:a7:e9:1e:6d:e9:72:b2:b8:7f:74:6a:ab:bd:35:a9:9f:9b: 44:25:43:e6:02:8b:82:75:b7:23:5a:48:0c:8f:c5:fe:c1:4c: c8:74:03:6f:ec:b1:40:2f:30:ea:50:35:1b:8a:c3:69:5a:88: fd:b8:52:b3:97:c9:b1:b4:c8:3e:11:8e:47:6b:03:07:4b:0a: 88:0e:9a:47:a8:06:60:71:89:a5:53:df:77:21:9d:3e:33:f0: e0:c5:af:8c:20:d6:8c:16:38:c1:48:b8:1d:40:49:ef:30:5b: b0:75:2e:de:46:70:a7:fc:b2:ce:2b:1e:16:d5:c8:c6:68:83: fb:59:d6:6a:4f:fc:19:12:02:41:ab:2c:7c:2e:03:22:12:8c: 73:27:72:4f:a7:ed:ca:8a:4f:65:e6:60:ff:89:b7:14:b8:6d: 40:0e:9a:fb:6e:52:1f:11:2a:f9:ce:e3:f0:7c:65:8c:a1:90: ac:17:a4:54:7e:4b:0c:23:ae:da:08:df:51:31:07:21:cf:4e: c2:82:c0:b0:ee:ad:c3:a6:c4:ed:32:1b:53:19:d9:50:e4:81: d9:bb:e5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97dUe7qTRMTpTJc8Lu7LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk MWQxN2MwHhcNMjUxMjA2MTQwMTI4WhcNMjUxMjA3MTQwMTI4WjAzMTEwLwYDVQQD EyhmYTA1MmM3NTliZDI1YzNlOTk5MzI1NDAzNTg5MmM2MWViMDliN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5vand/zlO921M04oB4E/zQuQYWI 63EoIhOWqqHrfaVgLwGAWoOyTNSj3J5uEWwlalKIjpVbzIGVU47PPgJP2D6cDhAk 5vhhrKrL/hCnCgyNCnTx7QGx6E7AHx+sNkyYZvRU/WCdGOc6v2hEvHdBnqrDB8YR yaSIgR2KpL4vuqc3z87M/KHkg9thTPsVtLtXjwCXRTJln8rUtfrlXQMivm/HCcGQ NEn+GJCEbTM8I3hb/WcCo8KGqTfQLGFV83h97+dQV4KgSrxLv20/zyzgmxxisr7p 07zVQ6t7kltqqiWCxuvEVnlNSqhWxzMeMHxejA4tgLklTGhWkMD0DeHbCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoFLHWb0lw+mZMlQDWJLGHrCbfFMB8GA1UdIwQY MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqttZdek4 FLGTU/QBXFbSZsHm9b/xv+MJYXiHjveAP6V3tSHxm6fpHm3pcrK4f3Rqq701qZ+b RCVD5gKLgnW3I1pIDI/F/sFMyHQDb+yxQC8w6lA1G4rDaVqI/bhSs5fJsbTIPhGO R2sDB0sKiA6aR6gGYHGJpVPfdyGdPjPw4MWvjCDWjBY4wUi4HUBJ7zBbsHUu3kZw p/yyziseFtXIxmiD+1nWak/8GRICQassfC4DIhKMcydyT6ftyopPZeZg/4m3FLht QA6a+25SHxEq+c7j8HxljKGQrBekVH5LDCOu2gjfUTEHIc9OwoLAsO6tw6bE7TIb UxnZUOSB2bvlGw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:39 2025 by rpki-client