This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json) Hash identifier: +WvU/SgbNlPLrVAItUi6dtCm8KCg4vnOUTPGsnp3Jl8= Subject key identifier: CA:FC:F2:C9:AD:D7:A0:55:8B:19:10:74:12:2C:C5:F8:04:17:AC:8C Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a Certificate serial: 019B3A218F6D86FC5A6009A49DD32A25286E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 05:00:36 +0000 Manifest this update: Sat 20 Dec 2025 05:00:36 +0000 Manifest next update: Sun 21 Dec 2025 05:00:36 +0000 Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=) 2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: mMJiXm4Vyltv/WJxyhuNqmVVsbNrshEtJbXibZSss2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:8f:6d:86:fc:5a:60:09:a4:9d:d3:2a:25:28:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a Validity Not Before: Dec 20 05:00:36 2025 GMT Not After : Dec 21 05:00:36 2025 GMT Subject: CN=cafcf2c9add7a0558b191074122cc5f80417ac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:ea:bb:5d:ce:b5:b0:33:16:74:e7:ba:3d: de:1e:c2:e7:95:7e:78:3e:9a:fe:c6:aa:db:57:7c: b7:63:9b:ed:f6:4d:f3:c0:49:de:98:67:a7:c7:53: ad:6d:e8:ce:f4:83:6e:0a:64:d0:fc:6f:7d:dd:db: f8:ee:6a:cd:c6:ac:0b:1d:fe:1e:5c:cc:70:15:82: c1:47:88:fa:df:53:c8:16:cf:3d:96:21:9a:25:4e: e7:25:05:81:dc:23:dd:1b:04:79:5d:b1:a1:67:cd: 31:ea:54:c3:35:97:18:01:9c:7e:8b:92:e7:77:8a: 29:e8:73:71:a3:9e:e3:bf:e2:87:9e:ad:70:80:ab: a1:7c:27:3b:bb:d9:5c:a7:14:81:e4:6a:be:50:d2: 15:c3:25:43:9c:c2:0e:55:f7:e1:74:06:02:85:2e: 67:b3:cd:17:96:46:41:40:30:5d:ac:bc:76:df:c1: 95:90:33:d3:74:b7:9d:4e:05:a8:ba:94:2f:6a:e2: af:c9:1f:61:08:d4:b6:74:24:63:61:07:ca:9f:df: 27:94:bd:88:07:02:a6:7f:4f:df:70:4d:4f:5a:a5: 44:75:a1:42:f5:3d:2d:80:d3:b0:be:d6:6c:ce:7e: a8:29:72:c2:e4:4f:ad:06:ec:28:0d:e4:15:7c:7b: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FC:F2:C9:AD:D7:A0:55:8B:19:10:74:12:2C:C5:F8:04:17:AC:8C X509v3 Authority Key Identifier: keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e8:df:b7:ed:02:ad:72:a0:06:3a:86:29:b7:69:85:b2:bf: af:63:b4:65:60:7f:31:a0:c7:4a:8a:08:6c:bf:f3:ab:57:15: 73:a2:49:71:14:9d:f2:16:a0:62:93:64:54:55:f3:18:2c:e5: 83:41:e3:60:3f:2f:39:49:5e:3b:0b:f2:a9:eb:ed:1b:f0:d9: f4:0e:81:fc:c7:3d:90:23:3d:40:d6:64:0f:f8:30:9b:55:12: 0e:57:ef:39:b9:1b:a0:6c:26:e0:98:9f:27:a1:3d:db:5a:be: 83:c8:9c:0d:f6:5f:50:ff:37:a1:ce:bd:a8:be:2f:fc:b3:70: 20:f1:73:cd:93:f5:6f:b8:5e:3a:e2:4b:64:c0:62:61:f0:3b: db:bf:7f:2c:8d:d7:f3:42:20:5b:4d:ed:92:57:9f:a3:d8:a1: 40:af:5e:51:81:43:91:8d:79:b5:ea:bf:b0:69:b6:83:0c:73: ec:54:c2:ac:1a:0d:8f:95:dc:1a:0d:ab:ba:75:dd:b6:c2:38: e5:ea:4e:38:82:15:74:2c:38:2b:d6:82:18:68:be:81:00:4f: a4:20:b9:7d:14:0b:98:7f:02:24:a6:6d:20:0e:8e:e1:44:02: 27:8b:5e:6f:4c:02:62:61:ab:80:c2:17:60:ce:cd:a8:c5:2d: c3:c8:55:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IY9thvxaYAmkndMqJShuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3 NGNlM2EwHhcNMjUxMjIwMDUwMDM2WhcNMjUxMjIxMDUwMDM2WjAzMTEwLwYDVQQD EyhjYWZjZjJjOWFkZDdhMDU1OGIxOTEwNzQxMjJjYzVmODA0MTdhYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaLqu13OtbAzFnTnuj3eHsLnlX54 Ppr+xqrbV3y3Y5vt9k3zwEnemGenx1OtbejO9INuCmTQ/G993dv47mrNxqwLHf4e XMxwFYLBR4j631PIFs89liGaJU7nJQWB3CPdGwR5XbGhZ80x6lTDNZcYAZx+i5Ln d4op6HNxo57jv+KHnq1wgKuhfCc7u9lcpxSB5Gq+UNIVwyVDnMIOVffhdAYChS5n s80XlkZBQDBdrLx238GVkDPTdLedTgWoupQvauKvyR9hCNS2dCRjYQfKn98nlL2I BwKmf0/fcE1PWqVEdaFC9T0tgNOwvtZszn6oKXLC5E+tBuwoDeQVfHvM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMr88smt16BVixkQdBIsxfgEF6yMMB8GA1UdIwQY MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcujft+0C rXKgBjqGKbdphbK/r2O0ZWB/MaDHSooIbL/zq1cVc6JJcRSd8hagYpNkVFXzGCzl g0HjYD8vOUleOwvyqevtG/DZ9A6B/Mc9kCM9QNZkD/gwm1USDlfvObkboGwm4Jif J6E921q+g8icDfZfUP83oc69qL4v/LNwIPFzzZP1b7heOuJLZMBiYfA7279/LI3X 80IgW03tklefo9ihQK9eUYFDkY15teq/sGm2gwxz7FTCrBoNj5XcGg2runXdtsI4 5epOOIIVdCw4K9aCGGi+gQBPpCC5fRQLmH8CJKZtIA6O4UQCJ4teb0wCYmGrgMIX YM7NqMUtw8hVtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:49 2025 by rpki-client