This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft File: 86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json) Hash identifier: /vuL2LH+97A2IXo/CE4oSQFfiNrObcpgrVuc8nWkUO0= Subject key identifier: 56:68:ED:1B:6D:51:D3:FF:89:70:97:B9:57:74:78:EC:F2:65:69:E8 Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC Certificate issuer: /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Certificate serial: 019B42491D21F8759FEE88F7FACE6FD4524A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:00:46 +0000 Manifest this update: Sun 21 Dec 2025 19:00:46 +0000 Manifest next update: Mon 22 Dec 2025 19:00:46 +0000 Files and hashes: 1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: ILKJaUUUrIp/cUSUfhc3fSQJgaiBuEIU9aUSCf2y768=) 2: _WY9oVFOYqmtmX68AGnfgT7sREE.roa (hash: q9/lH0PLXrWCsLPCcce8J+bMagH3s+E/1JbmVpZu4OE=) 3: rhwUtXnir6Ij3bx9MKQbSbz6QMs.roa (hash: lHIMVJIkgOZjzszGdrunsUWlov0VvywXObxobD5RkaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:1d:21:f8:75:9f:ee:88:f7:fa:ce:6f:d4:52:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc Validity Not Before: Dec 21 19:00:46 2025 GMT Not After : Dec 22 19:00:46 2025 GMT Subject: CN=5668ed1b6d51d3ff897097b9577478ecf26569e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:29:6d:cd:62:40:35:25:a5:1d:21:06:6f:9a: 10:23:18:08:90:90:f7:55:bb:a8:bc:25:cd:d6:b6: cd:eb:8c:63:1a:4b:b0:b5:f8:c0:7d:42:e4:09:f0: 42:05:15:98:7d:25:fa:a8:b4:25:84:39:7b:66:06: ab:68:1e:bf:76:28:6e:e6:f7:75:66:90:79:9e:db: 75:79:c6:05:a8:32:89:39:9c:c2:de:52:dc:89:81: 23:44:42:57:1f:d5:71:25:46:83:d0:25:3b:c4:05: 31:81:75:c9:8c:88:21:de:01:18:d5:e6:44:4e:fb: ef:31:cf:4c:dd:32:82:d9:fb:da:5f:04:eb:31:df: ff:f0:c7:b5:18:6a:e4:f7:24:54:2d:51:78:7c:ef: c7:06:94:76:1e:67:ca:78:3e:23:1e:1f:db:35:b3: 36:10:cc:d8:f8:48:f5:86:e6:aa:83:1d:78:cd:ca: 09:b2:2f:9f:63:24:32:50:5d:00:cf:4a:5d:64:66: 50:f5:eb:b3:23:a8:79:e5:67:5b:9d:dd:3d:a7:a6: ab:ee:3c:9e:f8:69:f0:65:93:21:71:70:da:46:1c: 70:52:57:80:0e:72:4c:2f:e7:34:cd:49:70:71:6f: d9:96:a5:30:02:e5:6b:1c:d0:eb:6e:4d:61:3c:f0: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:ED:1B:6D:51:D3:FF:89:70:97:B9:57:74:78:EC:F2:65:69:E8 X509v3 Authority Key Identifier: keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:d1:4f:21:98:f6:9e:bd:ae:ac:6d:3a:26:c6:01:a8:44: 6c:92:8a:b8:57:2b:18:a9:81:50:cf:e6:d2:f8:53:31:92:1a: c8:a8:93:be:02:27:8b:fc:7b:19:97:f4:d0:2e:38:d4:9b:ba: e2:2a:8a:b4:bd:c1:72:36:c4:5e:1d:e5:05:4b:17:f5:0d:6a: d4:2c:f6:43:2a:2f:d4:c1:e0:8c:ff:74:29:5a:e7:4a:bc:6a: a6:59:48:4a:82:6b:2c:db:c1:74:45:ec:94:02:1f:0a:31:01: 80:fe:84:34:0d:59:8b:69:72:31:b0:d6:45:6b:57:c9:0f:7d: 8e:0e:20:22:b1:20:1a:b6:a3:03:94:45:4b:17:da:da:dd:8f: f7:0b:ac:28:24:3c:ef:b8:58:02:12:85:f3:f0:e3:e6:91:a7: db:e4:80:4a:9f:15:36:8e:0d:8d:a3:16:79:71:71:fd:3f:a8: 10:25:9b:b4:44:c3:8b:f7:01:11:93:18:a9:39:c0:32:18:c2: 26:ad:9b:a0:02:3e:6e:7d:16:b6:f4:20:15:e2:fc:90:6f:9c: c7:00:f5:30:76:c7:a0:1d:95:ff:e8:89:80:b5:02:a5:1c:f4: 5e:7e:0b:c3:4e:50:97:19:a6:2c:4f:88:36:55:78:4c:b2:b7: dc:3e:6e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSR0h+HWf7oj3+s5v1FJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYWM4YzdlMzJiYWY3NzhiOGM0NTFhMmQyNGNjNjgxOTY5 NjRiZmMwHhcNMjUxMjIxMTkwMDQ2WhcNMjUxMjIyMTkwMDQ2WjAzMTEwLwYDVQQD Eyg1NjY4ZWQxYjZkNTFkM2ZmODk3MDk3Yjk1Nzc0NzhlY2YyNjU2OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iltzWJANSWlHSEGb5oQIxgIkJD3 VbuovCXN1rbN64xjGkuwtfjAfULkCfBCBRWYfSX6qLQlhDl7ZgaraB6/dihu5vd1 ZpB5ntt1ecYFqDKJOZzC3lLciYEjREJXH9VxJUaD0CU7xAUxgXXJjIgh3gEY1eZE TvvvMc9M3TKC2fvaXwTrMd//8Me1GGrk9yRULVF4fO/HBpR2HmfKeD4jHh/bNbM2 EMzY+Ej1huaqgx14zcoJsi+fYyQyUF0Az0pdZGZQ9euzI6h55Wdbnd09p6ar7jye +GnwZZMhcXDaRhxwUleADnJML+c0zUlwcW/ZlqUwAuVrHNDrbk1hPPCIfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZo7RttUdP/iXCXuVd0eOzyZWnoMB8GA1UdIwQY MBaAFPOsjH4yuvd4uMRRotJMxoGWlkv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjkt NDVjNTY4ZjhhMjdjLzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni81YzU4NTktNzVjMC00MzQ1LWJkMjktNDVjNTY4ZjhhMjdj LzEvODZ5TWZqSzY5M2k0eEZHaTBrekdnWmFXU193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxXRTyGY 9p69rqxtOibGAahEbJKKuFcrGKmBUM/m0vhTMZIayKiTvgIni/x7GZf00C441Ju6 4iqKtL3BcjbEXh3lBUsX9Q1q1Cz2Qyov1MHgjP90KVrnSrxqpllISoJrLNvBdEXs lAIfCjEBgP6ENA1Zi2lyMbDWRWtXyQ99jg4gIrEgGrajA5RFSxfa2t2P9wusKCQ8 77hYAhKF8/Dj5pGn2+SASp8VNo4NjaMWeXFx/T+oECWbtETDi/cBEZMYqTnAMhjC Jq2boAI+bn0WtvQgFeL8kG+cxwD1MHbHoB2V/+iJgLUCpRz0Xn4Lw05QlxmmLE+I NlV4TLK33D5uYQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:27:27 2025 by rpki-client