This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json) Hash identifier: baO53rDHGm5P7v5rUTFHNhZq3FIMjYd9jnQ6arf6qZM= Subject key identifier: B4:77:FF:5F:31:E3:EB:57:02:48:5F:73:77:58:E1:6E:13:7E:93:FB Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Certificate serial: 019B240799A0FC9F5D3E2729E639E0D8EF96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 22:00:36 +0000 Manifest this update: Mon 15 Dec 2025 22:00:36 +0000 Manifest next update: Tue 16 Dec 2025 22:00:36 +0000 Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=) 2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: KF5byZ4b1Gi3z2BVu7/NTeftueRfwCpqh0WbAbaDTBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:99:a0:fc:9f:5d:3e:27:29:e6:39:e0:d8:ef:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185 Validity Not Before: Dec 15 22:00:36 2025 GMT Not After : Dec 16 22:00:36 2025 GMT Subject: CN=b477ff5f31e3eb5702485f737758e16e137e93fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4f:bc:e3:a2:65:21:d5:f5:e7:0c:24:46:8d: 1e:2d:7b:43:f5:6f:0f:63:15:8c:46:9a:00:14:b8: 70:62:f9:26:93:9d:8b:77:50:23:27:97:ac:80:7e: bb:a5:55:8f:56:20:af:fa:45:2e:73:07:e8:51:6a: 6c:9a:8d:37:37:d3:89:ec:1c:57:4e:06:62:f2:66: b2:15:dc:f9:d5:dd:6d:47:2e:30:04:eb:94:b2:5e: 93:90:03:5e:61:00:45:1e:99:c0:aa:95:39:41:df: 9d:6b:23:9d:5f:58:b9:7b:6e:18:d5:75:fd:2f:31: 8d:7a:70:c6:10:db:7b:6f:4d:42:51:0d:14:9e:55: 6b:57:71:c9:eb:e4:b3:ae:c7:c4:8e:fd:6b:69:1c: bd:5c:54:fa:b6:3d:70:11:b1:30:59:da:68:14:a6: 64:f0:26:e4:2b:be:d3:e7:53:d8:ee:f8:e5:55:8e: 0a:09:0b:c1:73:e3:ee:40:68:40:30:9f:3d:ef:e0: c4:8c:84:df:13:b8:25:35:46:7e:e4:bc:85:5c:ad: 98:ef:60:6f:52:ff:cb:ab:81:c0:25:f5:d6:cb:bb: a4:7a:c8:bf:7f:14:be:50:ed:4f:4f:0c:af:7d:d4: 21:4d:0b:4a:32:d7:46:42:a1:82:15:c0:1d:88:1d: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:FF:5F:31:E3:EB:57:02:48:5F:73:77:58:E1:6E:13:7E:93:FB X509v3 Authority Key Identifier: keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:14:10:f0:5f:70:b5:e8:b5:49:c9:84:d1:88:5c:43:d8:ab: 5b:37:97:f7:3a:bc:c5:fb:2c:e1:b0:d3:7b:f0:d0:f8:52:6f: eb:49:ed:b4:e5:89:30:d8:45:37:00:06:97:3b:3d:a1:78:b0: 87:3d:c1:06:b1:06:03:35:1e:9f:94:9a:28:25:a6:d6:03:de: 54:ed:46:d7:06:c2:ce:4f:79:74:11:4c:46:df:bf:e2:30:32: 61:7f:e5:83:e4:f9:7d:75:16:27:e3:e2:f2:41:fb:59:77:54: 73:78:94:ff:09:9c:40:5b:5f:0f:96:b5:46:6d:02:a0:29:c4: 3d:1c:f3:8b:e1:09:2e:6f:02:c1:91:82:97:12:9b:55:3c:b4: 4a:c9:09:6f:ff:22:15:62:cc:0c:b6:6d:13:13:eb:21:a5:dc: ff:71:01:37:74:67:32:52:3d:08:2c:53:83:42:da:08:bf:d9: 96:7f:e5:b8:81:81:92:79:2e:5b:f2:ce:18:eb:25:d7:62:a2: 87:13:f7:b1:b1:b1:2b:6e:84:2d:e9:af:12:b5:01:99:1f:09: 05:87:ea:1a:99:ea:c2:4c:27:7e:56:1c:55:d1:e5:b7:47:eb: 03:7b:07:5e:e4:c9:e1:dd:9b:fd:86:7b:9e:62:98:24:d3:9f: d1:ef:86:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB5mg/J9dPicp5jng2O+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz NjQxODUwHhcNMjUxMjE1MjIwMDM2WhcNMjUxMjE2MjIwMDM2WjAzMTEwLwYDVQQD EyhiNDc3ZmY1ZjMxZTNlYjU3MDI0ODVmNzM3NzU4ZTE2ZTEzN2U5M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+846JlIdX15wwkRo0eLXtD9W8P YxWMRpoAFLhwYvkmk52Ld1AjJ5esgH67pVWPViCv+kUucwfoUWpsmo03N9OJ7BxX TgZi8mayFdz51d1tRy4wBOuUsl6TkANeYQBFHpnAqpU5Qd+dayOdX1i5e24Y1XX9 LzGNenDGENt7b01CUQ0UnlVrV3HJ6+SzrsfEjv1raRy9XFT6tj1wEbEwWdpoFKZk 8CbkK77T51PY7vjlVY4KCQvBc+PuQGhAMJ897+DEjITfE7glNUZ+5LyFXK2Y72Bv Uv/Lq4HAJfXWy7ukesi/fxS+UO1PTwyvfdQhTQtKMtdGQqGCFcAdiB38EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR3/18x4+tXAkhfc3dY4W4TfpP7MB8GA1UdIwQY MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1 LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRQQ8F9w tei1ScmE0YhcQ9irWzeX9zq8xfss4bDTe/DQ+FJv60nttOWJMNhFNwAGlzs9oXiw hz3BBrEGAzUen5SaKCWm1gPeVO1G1wbCzk95dBFMRt+/4jAyYX/lg+T5fXUWJ+Pi 8kH7WXdUc3iU/wmcQFtfD5a1Rm0CoCnEPRzzi+EJLm8CwZGClxKbVTy0SskJb/8i FWLMDLZtExPrIaXc/3EBN3RnMlI9CCxTg0LaCL/Zln/luIGBknkuW/LOGOsl12Ki hxP3sbGxK26ELemvErUBmR8JBYfqGpnqwkwnflYcVdHlt0frA3sHXuTJ4d2b/YZ7 nmKYJNOf0e+Glw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:41:54 2025 by rpki-client