This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json) Hash identifier: g60TkJrIrbuJTQA4nTe1v3jrVKJIWl5gJvT71MbUxhw= Subject key identifier: 13:D2:36:BC:9B:5E:2A:E3:33:E1:BA:DB:B9:1E:73:09:DC:9E:45:2E Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Certificate serial: 019AF3F7EC49B60C3A272638DE07E00745A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft Manifest number: 106F Signing time: Sat 06 Dec 2025 14:01:42 +0000 Manifest this update: Sat 06 Dec 2025 14:01:42 +0000 Manifest next update: Sun 07 Dec 2025 14:01:42 +0000 Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=) 2: KPSPKR5CERt24RgHkaAIVOQ-_3Y.roa (hash: /B2g+d8SvUFH1wq4gYFhblNg4apBCw0hfFmzBcRbekw=) 3: bFD1sjNrlT8-Exv5RMapq_1KPJ0.roa (hash: dms0tmgxNyDbB9rboVPonFSAfotpbIdMya/cvQRCIY0=) 4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: K/DwTE9kLSy+3LeU0rstqQpi4As2WNbOCGkUghLh4qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ec:49:b6:0c:3a:27:26:38:de:07:e0:07:45:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9 Validity Not Before: Dec 6 14:01:42 2025 GMT Not After : Dec 7 14:01:42 2025 GMT Subject: CN=13d236bc9b5e2ae333e1badbb91e7309dc9e452e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:d9:20:ce:3b:cb:17:36:7c:20:b0:3b:14: c9:85:52:db:71:99:d2:64:73:bc:bb:51:6a:3f:ff: 5e:df:a8:5e:f0:d8:f8:3a:df:b7:1b:36:e6:fc:a9: b1:48:ed:89:ac:42:fc:e4:62:b1:34:69:08:b7:78: 82:a0:89:79:9e:0f:8e:9e:cd:3c:ea:66:7d:13:29: 32:93:41:dd:30:15:51:ae:47:db:96:f0:e3:52:8e: aa:7c:e0:ab:ae:c2:a3:14:21:63:7e:07:dc:36:ba: be:48:42:a7:34:85:b0:ac:3c:ec:51:d9:f2:46:81: 35:cf:15:54:2c:26:3d:dc:f3:6a:ce:60:dc:19:5b: ca:48:fd:2d:59:af:90:86:0a:e6:1b:fa:23:65:1b: 60:27:91:96:02:01:31:c9:9e:b5:d4:a2:6c:ee:d9: eb:46:96:df:c0:6c:95:5a:cb:15:6f:81:a4:37:fd: 91:56:50:fe:82:a2:92:29:a2:5d:29:88:27:b2:4c: 79:d2:74:e9:d7:ce:2e:38:6a:9a:72:76:8b:c0:e1: 05:81:06:82:67:05:b8:fc:e8:a1:94:9a:cf:2e:2e: 6c:0a:2d:78:0b:5f:3b:a1:b4:01:ec:9c:fb:67:b5: 96:53:c4:54:94:21:9a:cf:f4:fe:9b:65:52:72:c8: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:36:BC:9B:5E:2A:E3:33:E1:BA:DB:B9:1E:73:09:DC:9E:45:2E X509v3 Authority Key Identifier: keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:69:26:48:9f:0e:6c:a2:42:3a:86:c6:cb:41:73:4b:ff:a3: d5:8f:5e:23:69:3f:a1:c1:f6:67:ef:b0:0b:12:0e:3a:3f:72: 4e:56:72:65:dc:7b:a3:f8:0a:bf:22:53:33:8d:db:1b:81:c6: da:57:68:20:1d:37:e8:53:14:c0:e9:03:e9:f0:b1:a2:36:3c: 21:8e:f7:35:6f:07:b6:2b:a0:21:93:05:45:d3:61:5e:84:e7: 7e:97:84:e9:92:93:1c:fe:05:cb:e2:5d:e1:87:cd:d3:df:61: eb:dd:f6:6f:62:e1:75:d8:37:47:93:a5:a2:44:71:b3:ee:19: 69:11:4f:67:d6:d1:58:a7:4b:42:3a:16:bf:7e:fa:62:93:da: 8c:6c:02:a9:3c:a6:f2:d6:e4:0a:9a:25:26:fc:ef:86:ee:a5: ec:76:51:2d:a5:35:23:ec:3d:8e:c6:65:c4:1b:cf:2b:c4:49: a5:11:77:5d:74:ca:a2:43:26:8a:a5:88:77:59:83:b3:1e:9d: 51:86:ab:a2:05:11:8e:d0:77:88:f1:73:0b:88:18:62:6d:6e: 9e:41:d5:a6:78:67:6e:b8:78:c0:3a:e9:d3:db:11:f1:0e:d8: 98:00:70:d3:4f:90:30:25:11:a1:7f:2d:fd:5c:09:3c:2e:c1: 9b:0c:34:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+xJtgw6JyY43gfgB0WlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm Y2NkZjkwHhcNMjUxMjA2MTQwMTQyWhcNMjUxMjA3MTQwMTQyWjAzMTEwLwYDVQQD EygxM2QyMzZiYzliNWUyYWUzMzNlMWJhZGJiOTFlNzMwOWRjOWU0NTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJXZIM47yxc2fCCwOxTJhVLbcZnS ZHO8u1FqP/9e36he8Nj4Ot+3Gzbm/KmxSO2JrEL85GKxNGkIt3iCoIl5ng+Ons08 6mZ9Eykyk0HdMBVRrkfblvDjUo6qfOCrrsKjFCFjfgfcNrq+SEKnNIWwrDzsUdny RoE1zxVULCY93PNqzmDcGVvKSP0tWa+QhgrmG/ojZRtgJ5GWAgExyZ611KJs7tnr RpbfwGyVWssVb4GkN/2RVlD+gqKSKaJdKYgnskx50nTp184uOGqacnaLwOEFgQaC ZwW4/OihlJrPLi5sCi14C187obQB7Jz7Z7WWU8RUlCGaz/T+m2VScsgRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPSNrybXirjM+G627kecwncnkUuMB8GA1UdIwQY MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3 LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWkmSJ8O bKJCOobGy0FzS/+j1Y9eI2k/ocH2Z++wCxIOOj9yTlZyZdx7o/gKvyJTM43bG4HG 2ldoIB036FMUwOkD6fCxojY8IY73NW8HtiugIZMFRdNhXoTnfpeE6ZKTHP4Fy+Jd 4YfN099h6932b2Lhddg3R5OlokRxs+4ZaRFPZ9bRWKdLQjoWv376YpPajGwCqTym 8tbkCpolJvzvhu6l7HZRLaU1I+w9jsZlxBvPK8RJpRF3XXTKokMmiqWId1mDsx6d UYarogURjtB3iPFzC4gYYm1unkHVpnhnbrh4wDrp09sR8Q7YmABw00+QMCURoX8t /VwJPC7Bmww0Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:37 2025 by rpki-client