This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft File: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json) Hash identifier: u3TNRr5MU0URQHFPgFttN6PsHaRMchtYewAC4AlvVVM= Subject key identifier: 3C:87:B4:56:B3:3C:E9:3E:40:CD:BC:A2:A0:DA:9C:CC:83:39:E5:8F Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Certificate serial: 019B0F37B9C899F2F6108A8F10D698A56EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft Manifest number: 0906 Signing time: Thu 11 Dec 2025 21:01:08 +0000 Manifest this update: Thu 11 Dec 2025 21:01:08 +0000 Manifest next update: Fri 12 Dec 2025 21:01:08 +0000 Files and hashes: 1: 3TbJq9j2geNORTi2E9xTbbuvxTw.roa (hash: GEQQroPBoH2N7pLErfqXNmjkVTV09NRy63LB6YJ9qVU=) 2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: nzFwbP3lfVwLV76vsWDZNQYFII1l1BcZeLCYwW2DyVQ=) 3: O5vcxppH2hWxYYAsqunLkBWcHEA.roa (hash: q4yYQF/m9xvQmRwlkRVUClFyEqyPX8PvXIb5hdq5C/c=) 4: S074YuodosP0UuUo6De4P_sFXFs.roa (hash: pyM9pUqd+rcNeRhYxGuF9WXwPo5DNw77BSKM8YnWbDw=) 5: Suwxb4A_r5JBEoQCb5YosZpgxYQ.roa (hash: ynVaJVBlwlWG6tSEdbng0uT/nO6dcjS+TT74OXhzdwE=) 6: TeWmN6EHoWRaSQ7AOqv2c821wck.roa (hash: nLb50bk1nICV8KXxpzGqIvnlONr6M9e61qQJa/r2Gnk=) 7: VV_pKUnIORWQZ3e9Gq0Sb2EbVrY.roa (hash: ILHJodGOzQUy/1EkSV1sW3J8/BVRtZEBwh5TBOH9dR0=) 8: fpQDOceW0nAf0mI2PAXShTq2K8Q.roa (hash: AwWdNgQE53Ja7SCJFwgUtSy2nXOjhiPggUFZe7XRmBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b9:c8:99:f2:f6:10:8a:8f:10:d6:98:a5:6e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac Validity Not Before: Dec 11 21:01:08 2025 GMT Not After : Dec 12 21:01:08 2025 GMT Subject: CN=3c87b456b33ce93e40cdbca2a0da9ccc8339e58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:48:55:f4:6c:23:fa:36:7f:c1:68:43:85: 87:fa:ad:2c:78:74:4b:23:2d:29:cc:10:e1:36:b0: d8:3b:08:4c:d6:b4:ba:5c:7a:2d:8c:01:7b:ee:3f: db:ef:74:d4:f4:03:1b:6a:f3:91:2f:59:6e:72:38: 12:7a:56:52:0a:48:a3:d8:03:67:94:ba:cb:d3:3a: d2:70:35:b1:85:c7:0d:ea:ca:18:c3:eb:e4:f9:4e: b5:27:13:fc:77:d1:52:c2:4a:2e:3a:64:29:32:63: 14:b5:00:6c:b6:9d:a0:5a:f7:f3:5c:9e:24:3f:a8: 6c:1e:1d:60:b8:49:34:e4:c9:ab:18:dd:c5:c3:dc: b1:e3:9f:4b:b7:de:99:89:a8:9e:08:00:4b:01:a6: 6c:28:0e:94:18:08:88:a7:d6:93:dd:c7:2d:82:01: c2:d2:99:2e:31:83:2c:6c:29:65:7d:30:8b:83:f8: 79:49:9e:6e:ad:28:c7:50:09:a2:1a:c2:31:c2:0a: 3e:9d:89:54:5a:64:c9:8d:bf:a2:6c:2b:3d:9e:7c: 8d:96:91:78:c4:99:fc:66:2b:c9:1d:d8:5a:fd:c0: 33:6c:e4:c2:33:c4:72:01:3f:ce:b4:7f:d7:bc:ee: fa:9f:e1:e2:1f:0f:f4:44:aa:a7:d8:53:7e:bd:bb: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:87:B4:56:B3:3C:E9:3E:40:CD:BC:A2:A0:DA:9C:CC:83:39:E5:8F X509v3 Authority Key Identifier: keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:fc:61:70:ee:b4:c6:cc:57:95:1d:f4:29:34:64:d8:7a: 44:04:6b:40:7b:f9:fb:5a:6b:a2:5e:27:c0:76:0c:da:c1:0b: 8e:7f:50:a6:a9:d7:fd:95:61:7a:a1:1d:fd:78:54:67:01:ec: 27:32:a1:e3:ca:8b:9c:f2:84:45:1b:f0:71:93:01:df:bc:cb: f3:e6:cb:46:38:28:8c:3a:8f:29:9b:d0:e0:97:7d:9e:2c:b1: 8d:38:d2:06:36:89:c8:44:6f:6f:a8:46:79:03:50:13:cf:e4: 1b:fc:76:90:eb:51:44:6c:b6:e1:80:a4:68:ed:fc:ae:8c:a5: 84:ad:7f:f8:d5:53:69:db:bb:23:ff:af:66:8d:ff:65:49:f0: b1:46:7c:48:69:3c:d3:b2:fd:1f:43:f4:16:cc:1d:53:dc:80: f5:8e:05:de:3a:2a:d1:2e:e0:b2:33:66:f5:a7:30:53:c1:67: e1:33:19:33:d2:74:31:5b:bc:de:fe:d0:0e:af:59:15:43:de: 94:fb:31:01:57:89:5f:f1:cd:04:f2:70:e8:09:7b:ad:5c:b5: a6:0c:41:c4:d6:a9:70:c8:0e:46:69:b0:f9:0c:06:6b:ab:0b: ca:ec:04:0a:85:9c:0b:b1:25:d5:a5:8d:61:4b:5a:bd:f8:84: e0:68:0d:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7nImfL2EIqPENaYpW7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjkwNzgxZGJiZWJkYjhlYzQyYmFmNjY0ODgwNTllYTU4 NjZhYWMwHhcNMjUxMjExMjEwMTA4WhcNMjUxMjEyMjEwMTA4WjAzMTEwLwYDVQQD EygzYzg3YjQ1NmIzM2NlOTNlNDBjZGJjYTJhMGRhOWNjYzgzMzllNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzBIVfRsI/o2f8FoQ4WH+q0seHRL Iy0pzBDhNrDYOwhM1rS6XHotjAF77j/b73TU9AMbavORL1lucjgSelZSCkij2ANn lLrL0zrScDWxhccN6soYw+vk+U61JxP8d9FSwkouOmQpMmMUtQBstp2gWvfzXJ4k P6hsHh1guEk05MmrGN3Fw9yx459Lt96ZiaieCABLAaZsKA6UGAiIp9aT3cctggHC 0pkuMYMsbCllfTCLg/h5SZ5urSjHUAmiGsIxwgo+nYlUWmTJjb+ibCs9nnyNlpF4 xJn8ZivJHdha/cAzbOTCM8RyAT/OtH/XvO76n+HiHw/0RKqn2FN+vbsJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyHtFazPOk+QM28oqDanMyDOeWPMB8GA1UdIwQY MBaAFPO5B4Hbvr247EK69mSIBZ6lhmqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAt M2VmNWViN2M4NTk4LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84YzU4MDgtMzE2NS00MWRjLTkwYTAtM2VmNWViN2M4NTk4 LzEvODdrSGdkdS12YmpzUXJyMlpJZ0ZucVdHYXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActP8YXDu tMbMV5Ud9Ck0ZNh6RARrQHv5+1prol4nwHYM2sELjn9QpqnX/ZVheqEd/XhUZwHs JzKh48qLnPKERRvwcZMB37zL8+bLRjgojDqPKZvQ4Jd9niyxjTjSBjaJyERvb6hG eQNQE8/kG/x2kOtRRGy24YCkaO38roylhK1/+NVTadu7I/+vZo3/ZUnwsUZ8SGk8 07L9H0P0FswdU9yA9Y4F3joq0S7gsjNm9acwU8Fn4TMZM9J0MVu83v7QDq9ZFUPe lPsxAVeJX/HNBPJw6Al7rVy1pgxBxNapcMgORmmw+QwGa6sLyuwECoWcC7El1aWN YUtavfiE4GgNZw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:59 2025 by rpki-client