This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json) Hash identifier: xsVTB6zEorQ7SP+ri7kdTnkBocaVbYKToKZ7lD8KliE= Subject key identifier: 69:3E:70:DD:08:DE:FA:CB:C6:0C:86:5E:8B:2E:17:33:79:27:A4:7B Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96 Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396 Certificate serial: 019B3644F864E041C739573A79695DC8BF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft Manifest number: 0E08 Signing time: Fri 19 Dec 2025 11:00:48 +0000 Manifest this update: Fri 19 Dec 2025 11:00:48 +0000 Manifest next update: Sat 20 Dec 2025 11:00:48 +0000 Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: YgMc7GGwG4I8rMoSx95zS9sg/U8uXMXGwUJdPv9i5KE=) 2: cmLjyeJCay-rIpV13cL4nS3umqA.roa (hash: zv80BsoFgYMaUhk2eqxE9kG1WrpCEraiiqsDzPaa4r8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:44:f8:64:e0:41:c7:39:57:3a:79:69:5d:c8:bf:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396 Validity Not Before: Dec 19 11:00:48 2025 GMT Not After : Dec 20 11:00:48 2025 GMT Subject: CN=693e70dd08defacbc60c865e8b2e17337927a47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:c9:a4:97:89:b2:0a:df:26:75:60:2a:7c: 80:56:f9:bb:3b:3a:fd:00:00:ec:7d:7c:37:bc:74: 41:21:08:4d:85:a2:16:c4:7b:f1:6f:44:c1:6b:42: f8:ea:17:0f:b0:7e:96:f4:de:89:e2:b4:ee:4e:40: 48:19:04:a8:49:5f:c8:e1:16:f8:b9:13:9a:64:df: ca:b1:9f:4a:11:32:76:a6:01:65:7a:d9:55:5f:c2: 40:f6:f4:da:a1:66:2e:0f:f1:1a:04:59:98:89:94: 31:4b:eb:65:38:d9:fa:fb:e2:83:33:27:d2:bf:7b: ca:b1:79:88:5a:57:ac:31:2f:52:2a:c8:05:24:d6: a1:70:fe:c4:62:c7:97:ef:31:0a:73:3d:26:03:a7: 9e:ae:9e:8f:91:92:38:91:c0:1c:fc:cb:fa:fc:7b: ca:aa:35:51:ab:4e:5a:93:89:14:60:0b:7f:d6:bd: 39:6b:7a:f1:da:0a:ae:08:14:d0:0b:85:ca:f7:fc: 86:e0:48:09:28:f6:c1:01:8c:da:24:79:0f:f8:f3: 32:df:3a:93:f1:25:91:2b:a9:a1:5e:2e:97:23:55: c6:95:58:81:a0:96:18:e8:e4:ea:db:ca:d3:54:60: e8:d9:37:0e:69:58:a2:5a:5f:5c:b5:a0:9d:a7:d7: eb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3E:70:DD:08:DE:FA:CB:C6:0C:86:5E:8B:2E:17:33:79:27:A4:7B X509v3 Authority Key Identifier: keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:98:8e:a8:0d:17:2f:be:d9:cd:78:9c:14:88:7f:8d:b8:37: b7:6d:fb:c3:20:3b:ab:48:62:42:29:8e:46:09:53:9c:ce:19: 0c:ed:bb:05:4b:4d:f9:12:a4:c3:f9:04:f5:4d:1d:b9:ac:3e: 84:1c:df:85:7c:9a:ec:7c:7a:93:d1:34:d5:60:79:8d:f2:23: 0d:04:5d:e8:fa:48:f6:c6:05:de:73:ff:a3:1b:30:15:1d:2b: aa:7b:e7:2d:21:96:64:f8:30:33:34:4b:f6:6e:1f:37:ab:45: 2c:9d:ec:45:5c:32:31:15:1f:20:0a:01:e8:e6:c4:d0:1a:62: 44:c4:2d:98:4a:07:41:35:51:b9:3e:0c:3e:f3:97:20:ac:42: a7:f9:c7:3a:a4:e7:7f:1c:29:8f:54:92:c7:8b:9b:f3:4e:bd: b2:53:37:3a:39:3a:31:ba:3b:bb:a0:fe:98:4f:15:12:23:a4: 75:b7:71:f3:e6:b5:24:ef:f8:f7:0d:c5:c1:c1:ec:68:81:77: 33:c1:d7:39:c9:2d:75:71:13:28:b8:91:a0:14:c9:68:d0:5c: 30:18:d9:e2:14:7c:b3:28:b4:1c:e9:5d:b1:94:c2:99:73:5d: 8e:c9:d5:af:4f:b4:61:9d:66:02:fb:50:6b:1c:44:23:6e:84: 88:8c:dd:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RPhk4EHHOVc6eWldyL9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3OTc3YWY1ODBjODUwY2M4YmY5MDY0OWY5YmRhOGE2YTQ4 YmYzOTYwHhcNMjUxMjE5MTEwMDQ4WhcNMjUxMjIwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg2OTNlNzBkZDA4ZGVmYWNiYzYwYzg2NWU4YjJlMTczMzc5MjdhNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtefJpJeJsgrfJnVgKnyAVvm7Ozr9 AADsfXw3vHRBIQhNhaIWxHvxb0TBa0L46hcPsH6W9N6J4rTuTkBIGQSoSV/I4Rb4 uROaZN/KsZ9KETJ2pgFletlVX8JA9vTaoWYuD/EaBFmYiZQxS+tlONn6++KDMyfS v3vKsXmIWlesMS9SKsgFJNahcP7EYseX7zEKcz0mA6eerp6PkZI4kcAc/Mv6/HvK qjVRq05ak4kUYAt/1r05a3rx2gquCBTQC4XK9/yG4EgJKPbBAYzaJHkP+PMy3zqT 8SWRK6mhXi6XI1XGlViBoJYY6OTq28rTVGDo2TcOaViiWl9ctaCdp9frYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk+cN0I3vrLxgyGXosuFzN5J6R7MB8GA1UdIwQY MBaAFPeXevWAyFDMi/kGSfm9qKaki/OWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2Mt MjExMjgwMjcyNTVkLzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iMzYxZWYtNWY2OS00YmNiLTk4M2MtMjExMjgwMjcyNTVk LzEvOTVkNjlZRElVTXlMLVFaSi1iMm9wcVNMODVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5iOqA0X L77ZzXicFIh/jbg3t237wyA7q0hiQimORglTnM4ZDO27BUtN+RKkw/kE9U0duaw+ hBzfhXya7Hx6k9E01WB5jfIjDQRd6PpI9sYF3nP/oxswFR0rqnvnLSGWZPgwMzRL 9m4fN6tFLJ3sRVwyMRUfIAoB6ObE0BpiRMQtmEoHQTVRuT4MPvOXIKxCp/nHOqTn fxwpj1SSx4ub8069slM3Ojk6Mbo7u6D+mE8VEiOkdbdx8+a1JO/49w3FwcHsaIF3 M8HXOcktdXETKLiRoBTJaNBcMBjZ4hR8syi0HOldsZTCmXNdjsnVr0+0YZ1mAvtQ axxEI26EiIzdMg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:58 2025 by rpki-client