This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json) Hash identifier: QGswyc9war/XSP1gmOG0+MJ6H3JNgXx0vVsdnOaYoQY= Subject key identifier: FC:AA:DE:9E:83:7E:E9:4E:A1:AE:73:C1:BE:4D:48:D0:15:A8:3F:AB Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2 Certificate serial: 019B0E25A163384980EEB76B8635E56FFE94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 16:01:45 +0000 Manifest this update: Thu 11 Dec 2025 16:01:45 +0000 Manifest next update: Fri 12 Dec 2025 16:01:45 +0000 Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: AFHAHgP1GhjiOvHnAxoT3fJw0BGf6ga1sekeb3iE07M=) 2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:a1:63:38:49:80:ee:b7:6b:86:35:e5:6f:fe:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2 Validity Not Before: Dec 11 16:01:45 2025 GMT Not After : Dec 12 16:01:45 2025 GMT Subject: CN=fcaade9e837ee94ea1ae73c1be4d48d015a83fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:1d:d8:71:04:85:85:b8:ba:1b:ad:4c:fe: 48:90:94:30:87:bc:6f:88:dc:10:5b:f0:49:ce:ea: 16:23:4b:ed:4b:e8:a4:5f:e9:1f:ee:07:f2:de:0f: 3b:62:d2:30:54:46:e2:1d:94:24:e9:7b:74:b2:8a: 9d:6f:56:26:7e:f4:88:05:87:cf:ca:92:82:e5:65: 22:9a:40:4a:f6:c3:8c:9a:99:ed:86:37:65:97:b8: 20:8d:35:f8:40:7e:c9:59:29:fe:fb:22:e8:96:26: be:5a:56:e1:56:5e:35:a2:e3:52:73:54:a5:15:1e: e5:da:b0:fd:e1:8d:73:a4:b8:45:23:73:0c:79:6e: 9b:81:9a:33:a3:66:91:f2:d3:9e:02:3c:04:cd:13: eb:06:58:d6:fa:e3:13:cf:e5:69:71:b8:ab:7e:e3: c9:06:9a:ab:f0:10:3c:2a:cd:ec:e1:91:91:04:d6: 00:56:22:83:39:47:b7:0c:6c:82:64:81:e0:2f:0e: d5:b6:05:6e:d6:3b:a0:1d:ed:62:53:0f:e5:19:91: 07:1f:13:92:f2:55:8a:d8:b1:8a:25:58:2d:55:a7: 40:8a:5d:36:0c:bb:ff:cd:51:a7:e0:f9:cc:b4:ca: da:2c:8b:01:ed:39:2e:de:5a:89:57:ae:a9:a4:af: 2a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:DE:9E:83:7E:E9:4E:A1:AE:73:C1:BE:4D:48:D0:15:A8:3F:AB X509v3 Authority Key Identifier: keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:45:06:88:90:e0:77:33:7a:f6:41:0e:0a:b1:54:49:d1:0d: 53:bf:d1:8c:b2:3d:80:79:0b:21:0f:7a:7d:00:4b:48:a6:e2: 8c:d1:d8:e1:2e:5a:ca:1f:e4:68:88:69:f1:d0:a6:9c:15:dd: 76:3a:30:e1:29:8b:2e:ce:32:d2:b7:49:fb:55:06:c1:81:92: e0:07:74:80:c2:c5:9c:94:70:d6:6e:97:f4:2c:71:ed:91:15: 1d:31:2e:f6:5d:8e:29:a3:90:ea:9c:a3:6c:58:93:41:d4:f5: 30:84:7a:ed:b3:91:26:f9:95:d0:14:44:fc:b9:c1:99:13:36: 34:6a:16:d0:7f:93:c4:45:98:20:2d:5e:4e:32:d6:af:c7:39: 8a:b5:f3:00:e2:9f:97:7e:6b:01:41:49:0f:71:4c:a2:5a:8a: bf:f2:29:f4:3e:6a:21:ea:d2:a2:00:06:91:39:e2:64:ca:85: 20:95:90:63:e3:0c:a1:9d:52:80:14:1e:9a:4e:3c:a3:22:f0: 6c:ce:fb:dc:2a:d7:f9:7c:04:ef:30:75:1d:ba:b1:2a:22:2c: 9c:de:1f:14:e9:08:86:82:25:05:ec:69:36:26:f1:66:11:f9: 7d:46:76:f9:f9:2e:6a:7b:ba:86:0f:70:1b:9f:49:8b:ca:d7: 0e:1a:b5:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJaFjOEmA7rdrhjXlb/6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODYyN2UzNmE0ZTE2YmRjMzlmMGI1NTBkNzRmZDcxZTQ0 MmQyYzIwHhcNMjUxMjExMTYwMTQ1WhcNMjUxMjEyMTYwMTQ1WjAzMTEwLwYDVQQD EyhmY2FhZGU5ZTgzN2VlOTRlYTFhZTczYzFiZTRkNDhkMDE1YTgzZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI4d2HEEhYW4uhutTP5IkJQwh7xv iNwQW/BJzuoWI0vtS+ikX+kf7gfy3g87YtIwVEbiHZQk6Xt0soqdb1YmfvSIBYfP ypKC5WUimkBK9sOMmpnthjdll7ggjTX4QH7JWSn++yLolia+WlbhVl41ouNSc1Sl FR7l2rD94Y1zpLhFI3MMeW6bgZozo2aR8tOeAjwEzRPrBljW+uMTz+VpcbirfuPJ Bpqr8BA8Ks3s4ZGRBNYAViKDOUe3DGyCZIHgLw7VtgVu1jugHe1iUw/lGZEHHxOS 8lWK2LGKJVgtVadAil02DLv/zVGn4PnMtMraLIsB7Tku3lqJV66ppK8qRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyq3p6DfulOoa5zwb5NSNAVqD+rMB8GA1UdIwQY MBaAFPOGJ+NqTha9w58LVQ10/XHkQtLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQt ODQyNDM3ZDI3Mjc5LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8zYThlNGMtOTIxNy00YjFmLWI2ZmQtODQyNDM3ZDI3Mjc5 LzEvODRZbjQycE9GcjNEbnd0VkRYVDljZVJDMHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0UGiJDg dzN69kEOCrFUSdENU7/RjLI9gHkLIQ96fQBLSKbijNHY4S5ayh/kaIhp8dCmnBXd djow4SmLLs4y0rdJ+1UGwYGS4Ad0gMLFnJRw1m6X9Cxx7ZEVHTEu9l2OKaOQ6pyj bFiTQdT1MIR67bORJvmV0BRE/LnBmRM2NGoW0H+TxEWYIC1eTjLWr8c5irXzAOKf l35rAUFJD3FMolqKv/Ip9D5qIerSogAGkTniZMqFIJWQY+MMoZ1SgBQemk48oyLw bM773CrX+XwE7zB1HbqxKiIsnN4fFOkIhoIlBexpNibxZhH5fUZ2+fkuanu6hg9w G59Ji8rXDhq1Fw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:20 2025 by rpki-client