This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft File: 86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json) Hash identifier: T2vTgKAY3iwph1W2UpnW+I5E/l32fL+zciR5/On3pyM= Subject key identifier: 27:1B:BE:98:C7:7E:E1:FE:CA:70:4A:FC:76:9A:09:BC:40:15:DF:0E Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 Certificate issuer: /CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Certificate serial: 019ABBF62C178F06C1CA6A30BD037C622B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft Manifest number: 059B Signing time: Tue 25 Nov 2025 17:01:03 +0000 Manifest this update: Tue 25 Nov 2025 17:01:03 +0000 Manifest next update: Wed 26 Nov 2025 17:01:03 +0000 Files and hashes: 1: 5EWBzdepm8m1-Fw5ggkBVnYeo3Q.roa (hash: VXD9eDnJ0GXpX+c0YUcqrxEzhI7okMcsDXHvru13uGI=) 2: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: X1NiiolAGFi9YuFKyOHkfCYBMu2+TKWUNpKeBV8EmjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:f6:2c:17:8f:06:c1:ca:6a:30:bd:03:7c:62:2b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098 Validity Not Before: Nov 25 17:01:03 2025 GMT Not After : Nov 26 17:01:03 2025 GMT Subject: CN=271bbe98c77ee1feca704afc769a09bc4015df0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:56:02:83:4b:ed:75:db:6a:87:cc:81:a8: 33:64:d9:53:e0:1e:5f:a0:96:70:2f:1d:7c:33:7f: d0:8e:f4:d5:7f:5d:b6:9d:f2:2c:be:cc:b8:da:b5: e7:33:39:ec:20:6a:97:df:1e:85:a9:4a:d7:a3:fe: 9e:fa:62:3b:e1:0d:d4:e6:d7:ce:a3:a3:07:03:2d: c3:b0:7d:fb:50:d8:17:50:1f:5a:bf:0b:b4:dd:dd: 32:ba:e4:23:5f:63:f1:75:40:2d:47:fb:b8:a7:99: 80:bf:62:42:6e:a5:98:3a:c4:3e:33:dc:b9:0e:39: f7:d4:be:1a:20:23:0e:dc:6e:87:8b:a3:64:be:4f: 78:1d:12:97:d7:97:f6:42:d6:47:7b:cb:7a:80:90: 99:c7:d3:48:d4:b1:15:98:c5:38:66:c5:41:18:d7: f3:53:da:a7:4a:1c:ff:43:36:c4:7c:fb:3c:bb:1b: e0:38:be:f2:50:24:d7:fc:0a:57:9d:2c:27:b3:3e: 28:90:b3:9c:3c:54:63:bd:76:69:20:18:b3:e6:63: 9b:c3:ac:1f:fd:1b:0c:e7:e4:0f:d8:f4:3c:d5:57: 36:88:56:e8:bc:09:41:19:e8:70:e7:d6:1f:ad:ce: e7:a9:5a:43:3d:d2:26:4e:91:1b:e6:74:0e:d9:f8: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:BE:98:C7:7E:E1:FE:CA:70:4A:FC:76:9A:09:BC:40:15:DF:0E X509v3 Authority Key Identifier: keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:43:06:3f:b2:d5:d5:59:ec:85:6a:fe:3d:19:a0:da:43:2e: 99:60:52:81:7d:29:b4:32:6e:5b:07:7a:bb:be:68:36:0f:01: 15:bf:52:0e:fc:62:15:43:5e:e8:9f:87:87:57:c8:b8:84:9a: 22:59:81:a6:9d:40:1c:1a:88:73:6a:19:21:98:82:c8:6e:5b: fd:48:ab:1a:20:42:15:9b:7a:55:22:48:60:19:11:a1:81:4b: 9e:d2:86:e9:1a:6f:3f:7a:10:50:77:a0:95:83:dc:f9:65:74: 0f:e2:57:3c:aa:8e:87:7a:0a:77:f5:dd:54:41:07:ee:88:85: 6e:93:2b:bc:3a:17:11:c8:9d:76:7b:db:51:ee:e8:37:b5:06: d9:db:a9:19:19:bc:13:9d:fe:05:28:35:a9:cf:3d:d5:94:1f: b8:06:e8:49:bb:1d:68:eb:47:0c:31:0c:66:50:63:ae:bd:fa: 47:c8:33:44:f4:bf:1d:02:18:bd:6b:39:5b:62:f5:f6:59:32: b4:49:9f:08:90:1d:20:b3:6a:9e:ea:5e:81:6d:67:eb:22:2e: ad:79:31:33:e6:bd:ac:31:4f:3d:ac:9e:be:82:38:75:38:c5: 0f:87:6d:86:98:00:7f:9b:a9:2e:d4:02:15:c8:62:87:02:54: 8f:68:5c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq79iwXjwbBymowvQN8YiuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTE5NDA3ZWRhNmRiMDg2M2NkYzlmMTg1NzM0ODJkNmFk MTIwOTgwHhcNMjUxMTI1MTcwMTAzWhcNMjUxMTI2MTcwMTAzWjAzMTEwLwYDVQQD EygyNzFiYmU5OGM3N2VlMWZlY2E3MDRhZmM3NjlhMDliYzQwMTVkZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r5WAoNL7XXbaofMgagzZNlT4B5f oJZwLx18M3/QjvTVf122nfIsvsy42rXnMznsIGqX3x6FqUrXo/6e+mI74Q3U5tfO o6MHAy3DsH37UNgXUB9avwu03d0yuuQjX2PxdUAtR/u4p5mAv2JCbqWYOsQ+M9y5 Djn31L4aICMO3G6Hi6Nkvk94HRKX15f2QtZHe8t6gJCZx9NI1LEVmMU4ZsVBGNfz U9qnShz/QzbEfPs8uxvgOL7yUCTX/ApXnSwnsz4okLOcPFRjvXZpIBiz5mObw6wf /RsM5+QP2PQ81Vc2iFbovAlBGehw59Yfrc7nqVpDPdImTpEb5nQO2fhLlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcbvpjHfuH+ynBK/HaaCbxAFd8OMB8GA1UdIwQY MBaAFPOhlAftptsIY83J8YVzSC1q0SCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgt ZmFjOTA0YTRhYWI1LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi85ZGZkMTEtYWE1MS00N2FmLWExYzgtZmFjOTA0YTRhYWI1 LzEvODZHVUItMm0yd2hqemNueGhYTklMV3JSSUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0MGP7LV 1VnshWr+PRmg2kMumWBSgX0ptDJuWwd6u75oNg8BFb9SDvxiFUNe6J+Hh1fIuISa IlmBpp1AHBqIc2oZIZiCyG5b/UirGiBCFZt6VSJIYBkRoYFLntKG6RpvP3oQUHeg lYPc+WV0D+JXPKqOh3oKd/XdVEEH7oiFbpMrvDoXEciddnvbUe7oN7UG2dupGRm8 E53+BSg1qc891ZQfuAboSbsdaOtHDDEMZlBjrr36R8gzRPS/HQIYvWs5W2L19lky tEmfCJAdILNqnupegW1n6yIurXkxM+a9rDFPPayevoI4dTjFD4dthpgAf5upLtQC FchihwJUj2hcjw== -----END CERTIFICATE-----Generated at Tue Nov 25 22:45:53 2025 by rpki-client