This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft File: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft (raw, json) Hash identifier: OLM5yY1H2Tcjxmhu27bKxV+BPItptT9ICPQVaYUEsRA= Subject key identifier: C5:D4:B3:CF:D2:32:F4:3F:7C:4B:AB:7B:CB:AD:13:53:F5:88:EC:0D Authority key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4 Certificate issuer: /CN=f781ad3233d9c2c189d9499da1177b57101a5ef4 Certificate serial: 019B34C52B0DA495EFC83CF287A600AA412E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft Manifest number: 0D52 Signing time: Fri 19 Dec 2025 04:01:35 +0000 Manifest this update: Fri 19 Dec 2025 04:01:35 +0000 Manifest next update: Sat 20 Dec 2025 04:01:35 +0000 Files and hashes: 1: 7Ij8K8OvSYwUOnc-8VHeiDA9mSE.roa (hash: Ue865zCMYx1MYw21hb8vraaXEGFsPTiWFX4S2dOr6hg=) 2: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl (hash: NeEy9gMLgDbdtOagjpI3f+Xoj3U50CNC39De5oAZ+D0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:2b:0d:a4:95:ef:c8:3c:f2:87:a6:00:aa:41:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4 Validity Not Before: Dec 19 04:01:35 2025 GMT Not After : Dec 20 04:01:35 2025 GMT Subject: CN=c5d4b3cfd232f43f7c4bab7bcbad1353f588ec0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:3c:1c:87:f5:0d:b9:4a:4b:b6:62:c6:e3: 6f:30:87:96:e4:ca:b7:1d:a6:26:d1:bd:3a:c8:ef: 78:c4:4d:fb:41:b5:76:5a:45:83:5d:fd:e3:70:24: f5:99:83:d2:5f:c9:6f:5f:02:93:b2:bc:bc:97:87: e6:c2:58:61:df:7f:2b:d0:9a:00:a6:fe:ae:7a:cf: 33:e3:35:46:8a:8a:25:22:55:8a:c4:d1:39:6a:ab: 3c:a4:3b:a6:38:c9:b9:8e:e1:fd:85:23:4e:a9:ed: 93:ba:7a:e3:76:58:16:c9:d9:5f:92:28:09:ab:f7: 9a:2c:8d:5b:6f:12:b3:53:1d:df:eb:b1:ea:31:a7: e8:59:da:9b:64:50:ec:36:15:4d:98:b7:9a:99:d6: 2e:cd:56:db:31:c9:20:f6:e2:25:62:80:b6:96:ba: af:66:2f:60:bc:3a:38:95:dd:5c:4a:d2:05:91:90: 30:0d:e0:24:ba:3b:5e:1e:1b:b0:5f:7c:19:49:e0: 7c:1d:b6:ca:2a:1b:df:48:5a:be:e0:f8:a9:3a:9b: 27:e2:93:02:a4:08:a8:88:01:a8:db:79:fb:0b:3e: 3f:2a:b1:3e:b3:29:2c:fc:b3:35:26:8c:22:c2:28: 85:05:e4:eb:c3:bb:4c:ed:63:4f:6d:ba:89:96:21: 33:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:B3:CF:D2:32:F4:3F:7C:4B:AB:7B:CB:AD:13:53:F5:88:EC:0D X509v3 Authority Key Identifier: keyid:F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c1:02:92:89:bf:22:5b:18:fd:6a:9d:af:60:99:62:7b:f5: a7:92:1b:14:e3:12:73:42:db:cd:65:e9:18:5f:76:f7:83:0a: c4:ce:f9:c5:e4:74:d3:1e:0a:7e:12:cb:12:e4:1d:70:c0:db: 2f:6b:2e:df:ef:f2:3c:4b:b1:d2:31:8f:87:c7:79:58:dd:73: ed:e6:e8:50:99:ea:38:19:0c:80:28:da:ab:c3:8a:93:16:58: 93:16:2f:5f:21:21:3a:92:09:31:df:d8:fb:d8:6b:f9:89:3b: 6a:b1:ce:6b:d3:af:7c:27:dd:54:d2:2c:93:aa:11:95:c7:6b: e9:69:11:ae:59:50:52:2e:3a:fe:ce:e5:12:dc:61:82:68:9c: 99:68:a0:e5:ae:9b:3e:58:cd:eb:54:6d:32:74:e8:ac:01:77: 34:2e:13:39:d1:35:82:14:18:07:34:fd:6b:5b:a3:a5:20:45: 43:a8:bf:e3:cf:a5:03:c4:24:65:09:f8:61:1a:71:3c:f2:54: 93:bb:24:0c:f1:a4:10:ff:3e:48:45:47:90:07:11:c6:27:bd: ab:a1:cd:51:75:da:ef:c2:13:5b:7a:53:35:a0:67:99:ff:ae: 0d:aa:b9:c7:87:ad:cd:88:c8:26:d9:e6:3f:1a:ce:ae:98:de: 5d:17:2d:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xSsNpJXvyDzyh6YAqkEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODFhZDMyMzNkOWMyYzE4OWQ5NDk5ZGExMTc3YjU3MTAx YTVlZjQwHhcNMjUxMjE5MDQwMTM1WhcNMjUxMjIwMDQwMTM1WjAzMTEwLwYDVQQD EyhjNWQ0YjNjZmQyMzJmNDNmN2M0YmFiN2JjYmFkMTM1M2Y1ODhlYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojU8HIf1DblKS7ZixuNvMIeW5Mq3 HaYm0b06yO94xE37QbV2WkWDXf3jcCT1mYPSX8lvXwKTsry8l4fmwlhh338r0JoA pv6ues8z4zVGioolIlWKxNE5aqs8pDumOMm5juH9hSNOqe2TunrjdlgWydlfkigJ q/eaLI1bbxKzUx3f67HqMafoWdqbZFDsNhVNmLeamdYuzVbbMckg9uIlYoC2lrqv Zi9gvDo4ld1cStIFkZAwDeAkujteHhuwX3wZSeB8HbbKKhvfSFq+4PipOpsn4pMC pAioiAGo23n7Cz4/KrE+syks/LM1JowiwiiFBeTrw7tM7WNPbbqJliEzwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXUs8/SMvQ/fEure8utE1P1iOwNMB8GA1UdIwQY MBaAFPeBrTIz2cLBidlJnaEXe1cQGl70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUt OTU2NGE0NzIyZTc4LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kZjc1YTctZWQ1Ny00ZWQwLWExMmUtOTU2NGE0NzIyZTc4 LzEvOTRHdE1qUFp3c0dKMlVtZG9SZDdWeEFhWHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisECkom/ IlsY/Wqdr2CZYnv1p5IbFOMSc0LbzWXpGF9294MKxM75xeR00x4KfhLLEuQdcMDb L2su3+/yPEux0jGPh8d5WN1z7eboUJnqOBkMgCjaq8OKkxZYkxYvXyEhOpIJMd/Y +9hr+Yk7arHOa9OvfCfdVNIsk6oRlcdr6WkRrllQUi46/s7lEtxhgmicmWig5a6b PljN61RtMnTorAF3NC4TOdE1ghQYBzT9a1ujpSBFQ6i/48+lA8QkZQn4YRpxPPJU k7skDPGkEP8+SEVHkAcRxie9q6HNUXXa78ITW3pTNaBnmf+uDaq5x4etzYjIJtnm PxrOrpjeXRctsg== -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:05 2025 by rpki-client