This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json) Hash identifier: 8Shn1ZYf8CUKJGlMEwspZs7HJqDXQryWsvI2lr0kRl4= Subject key identifier: 47:AA:B9:7F:81:D6:1C:6E:F8:39:45:D9:18:02:65:30:6E:B0:D0:28 Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278 Certificate serial: 019B0D805A34E5054284544F4859140E7F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft Manifest number: 04BB Signing time: Thu 11 Dec 2025 13:01:14 +0000 Manifest this update: Thu 11 Dec 2025 13:01:14 +0000 Manifest next update: Fri 12 Dec 2025 13:01:14 +0000 Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: wAP5NyxDziyHoI0kUI6jhQ1JHD8XByVBnUtIb4ddWkU=) 2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:5a:34:e5:05:42:84:54:4f:48:59:14:0e:7f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38049be801a136e387abc14498e486044d96278 Validity Not Before: Dec 11 13:01:14 2025 GMT Not After : Dec 12 13:01:14 2025 GMT Subject: CN=47aab97f81d61c6ef83945d9180265306eb0d028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:3a:97:6d:71:8c:a9:3d:2f:aa:07:35:44: 15:1f:33:cb:6f:73:60:e1:ae:a5:50:75:46:92:f0: 6a:4f:3c:09:de:cd:c5:b5:80:6f:1a:7e:9f:6a:d6: 01:05:2c:c6:aa:8a:81:f2:18:e6:80:74:50:d5:a2: 62:2d:ac:72:e3:25:08:b6:f3:c8:ef:af:d7:02:fe: dd:08:3d:05:63:53:e8:db:05:43:82:de:6c:e9:ec: 1e:3a:9e:0e:5e:3b:05:48:02:94:35:d7:32:29:cf: f1:df:02:c6:72:8b:ba:a0:ec:ef:e4:a1:77:b4:e5: 67:a0:eb:6e:8d:e7:b3:f6:c5:7a:8c:b8:96:ec:09: cc:bd:dc:ea:8d:bf:a3:63:ce:58:02:b1:cd:8b:94: 27:49:00:41:04:ca:51:45:c2:1e:48:a2:01:43:70: 5c:8e:9f:35:0a:cc:df:8a:ea:52:81:15:16:3c:87: 72:36:a6:b8:4c:fd:54:a2:de:f4:5d:94:e4:e6:90: 6e:1b:b0:7b:99:29:fc:39:8f:3d:62:5d:74:ed:a7: ea:d1:30:b9:4f:de:06:e5:23:b6:2a:c8:9a:d6:c4: 13:9e:af:ad:e0:ed:e0:b4:33:8a:00:0e:f8:ce:0d: ac:2e:91:5b:b3:84:12:03:20:01:4a:dc:b1:34:c5: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:B9:7F:81:D6:1C:6E:F8:39:45:D9:18:02:65:30:6E:B0:D0:28 X509v3 Authority Key Identifier: keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4f:ec:06:6b:20:e2:56:de:c9:0e:5a:8f:ce:84:8c:12:d4: 94:f2:39:2f:f6:ab:58:24:33:a6:80:28:5a:e2:24:36:50:34: 81:f7:c4:87:82:fc:0d:32:eb:4d:cd:ee:95:53:5a:10:b6:2d: 6c:78:e0:0e:9b:36:95:fa:9d:09:48:51:69:13:bd:c7:89:7d: ad:9f:0d:14:b3:64:e7:20:1e:cc:fa:b6:24:67:16:48:0c:d8: f5:e3:6c:a5:63:8e:ba:14:c9:64:3c:e4:cc:c6:be:2c:f4:e9: f5:f3:27:42:d9:ee:15:b4:f7:89:dd:a1:0b:f5:c5:81:eb:71: ff:7c:5e:2d:a6:0a:6e:2d:26:9a:29:71:3c:a2:7c:a6:4a:34: 7a:c3:1d:34:00:42:f7:39:21:46:37:af:43:1d:51:b8:71:f8: fb:46:c4:43:6a:e3:2c:12:d1:c1:84:e8:cf:d4:f4:4a:5d:c2: 65:db:c3:b4:40:9b:a9:8d:a6:a7:cc:46:06:8d:3b:3d:e2:a2: 7b:32:b2:1f:17:06:2a:de:a2:6d:c1:5f:3c:82:04:82:9d:f7: c1:7c:4c:61:38:c6:02:98:67:27:7e:a9:c0:36:16:52:65:b8: b2:24:83:5f:e2:a7:e6:45:1c:c6:56:07:b8:ee:93:e7:a7:23: 70:75:c8:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgFo05QVChFRPSFkUDn9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk OTYyNzgwHhcNMjUxMjExMTMwMTE0WhcNMjUxMjEyMTMwMTE0WjAzMTEwLwYDVQQD Eyg0N2FhYjk3ZjgxZDYxYzZlZjgzOTQ1ZDkxODAyNjUzMDZlYjBkMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TU6l21xjKk9L6oHNUQVHzPLb3Ng 4a6lUHVGkvBqTzwJ3s3FtYBvGn6fatYBBSzGqoqB8hjmgHRQ1aJiLaxy4yUItvPI 76/XAv7dCD0FY1Po2wVDgt5s6eweOp4OXjsFSAKUNdcyKc/x3wLGcou6oOzv5KF3 tOVnoOtujeez9sV6jLiW7AnMvdzqjb+jY85YArHNi5QnSQBBBMpRRcIeSKIBQ3Bc jp81CszfiupSgRUWPIdyNqa4TP1Uot70XZTk5pBuG7B7mSn8OY89Yl107afq0TC5 T94G5SO2Ksia1sQTnq+t4O3gtDOKAA74zg2sLpFbs4QSAyABStyxNMU6HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEequX+B1hxu+DlF2RgCZTBusNAoMB8GA1UdIwQY MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt MjhmNGRhZDM3OGZjLzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIU/sBmsg 4lbeyQ5aj86EjBLUlPI5L/arWCQzpoAoWuIkNlA0gffEh4L8DTLrTc3ulVNaELYt bHjgDps2lfqdCUhRaRO9x4l9rZ8NFLNk5yAezPq2JGcWSAzY9eNspWOOuhTJZDzk zMa+LPTp9fMnQtnuFbT3id2hC/XFgetx/3xeLaYKbi0mmilxPKJ8pko0esMdNABC 9zkhRjevQx1RuHH4+0bEQ2rjLBLRwYToz9T0Sl3CZdvDtECbqY2mp8xGBo07PeKi ezKyHxcGKt6ibcFfPIIEgp33wXxMYTjGAphnJ36pwDYWUmW4siSDX+Kn5kUcxlYH uO6T56cjcHXIww== -----END CERTIFICATE-----Generated at Thu Dec 11 22:20:03 2025 by rpki-client