This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft File: 87VkazYDeZJMttnD2ZZpzn87LKI.mft (raw, json) Hash identifier: /Da6mknm6YaeaRJrxn5o+Jb3sAc2ucqnEeSZyvqpXg8= Subject key identifier: EB:2E:9B:B7:F5:73:05:D5:27:DE:A1:85:33:31:37:4C:CC:49:DF:67 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019B0E93387D33B1B849A2BE9FA3E2B67225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 18:01:27 +0000 Manifest this update: Thu 11 Dec 2025 18:01:27 +0000 Manifest next update: Fri 12 Dec 2025 18:01:27 +0000 Files and hashes: 1: 1-e_2QwIcmA7Q_zf9ghc3o7TmRcs.roa (hash: bVYY71eU5m0lwevwkc7ycvwG53Ke2harvxIqoJDJ7jI=) 2: 87VkazYDeZJMttnD2ZZpzn87LKI.crl (hash: S02AtQI6iPP9P+zmKcoPPB/KtpkxjTh7dQZWBbw6D1E=) 3: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (hash: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs=) 4: K6n2xKgXMB8XpXxxNoze-y87IwY.roa (hash: 5l+r26ddBFr+1ltKIeIO00Ziqtu4HATdoqmCXwwYYYs=) 5: cwHAghJWGqnWJWI7Rqa_gVJgXsk.roa (hash: A9uNmIjCmOTxP4hoZ64ZsxveihKS/oGA8bLRXzGHAOE=) 6: h12Z5dF3_yD0GpmhspUB2KfjtGk.roa (hash: nu1iFZH0lBoDz1kbDz7Ey0jeIh6b7/yfA+ngiSiLVMU=) 7: h7cXhqH3auRRse3sztiHEb7noCA.roa (hash: S9HnqXfiJETt/RwRyZLdHPd4gp+8Jb7CRwrIDRcvi/g=) 8: pA0sJppD4-hlOPLbNch_JmxE0xs.roa (hash: csltPzaD5Tz0CZ0P+c/cIC1pK1sIGMJzDcINp0lt2fg=) 9: q6idzKrDu4CBsJRqLimxIXD6CmY.roa (hash: zcZmqN1SNQUWIh4VQAhk0AsbY6HsVOlujwRG+fTIpMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:38:7d:33:b1:b8:49:a2:be:9f:a3:e2:b6:72:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Dec 11 18:01:27 2025 GMT Not After : Dec 12 18:01:27 2025 GMT Subject: CN=eb2e9bb7f57305d527dea1853331374ccc49df67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:53:1e:80:9c:58:fd:73:37:42:89:d4:b1: c4:b2:f1:77:06:9e:9e:e2:d9:91:f6:13:63:06:be: c7:ee:c1:d2:89:ae:a9:ff:00:f1:31:f8:a1:a4:38: b0:d7:80:ba:c2:f8:ce:81:7e:a1:27:71:b3:bc:3e: 13:d8:32:0e:ad:1b:c0:46:18:08:db:7a:0b:94:1e: a7:f6:04:7e:a6:a6:40:f9:49:8e:ad:ec:fd:e9:20: 2c:d0:f6:20:e5:fc:70:f8:0c:a4:aa:36:12:d3:08: c5:75:7f:89:38:55:ee:8a:43:d5:73:20:07:f9:37: f0:8f:6a:e7:a6:e2:d4:50:0a:d9:12:fc:23:f3:29: ac:40:a7:97:54:7c:45:bd:d0:4a:34:12:91:9c:5b: 43:c5:ce:53:b6:93:c2:b4:74:9b:b4:75:60:e6:6f: a3:3f:05:c3:36:81:1c:58:ea:b4:a1:18:2a:1e:32: 20:15:41:bd:5a:b1:1c:ae:d0:77:f0:90:64:e8:88: 2c:cf:44:64:12:a7:70:a6:df:fc:c9:1b:c2:dc:03: 8e:23:90:32:12:f3:b2:b8:97:27:29:d8:cc:aa:93: 0c:01:5d:6a:ed:37:fb:cf:e9:57:d2:fb:a4:f0:4a: 26:fb:5a:8b:81:20:7b:69:4c:45:1f:bb:4f:79:fe: 8d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:9B:B7:F5:73:05:D5:27:DE:A1:85:33:31:37:4C:CC:49:DF:67 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a1:33:c1:b3:f5:34:1f:46:88:f8:b8:f3:0e:2d:eb:59:94: f1:46:a6:ec:48:c8:59:8c:b8:a4:72:3d:96:b7:ae:9d:b3:a8: 4c:ea:a1:87:44:06:19:b9:3f:9d:d6:13:61:64:5d:40:93:92: b3:b6:55:8d:f6:7a:75:19:c3:89:48:3c:b2:76:dd:54:c1:dc: 08:d1:c2:53:a0:80:e4:c4:5e:01:6b:91:a5:33:72:ee:b5:b6: 7e:ab:3b:31:bd:c1:a1:a6:75:cf:91:40:90:bf:91:a9:7b:6a: 42:58:b6:95:15:e8:e5:f4:c6:7a:21:d6:e2:2a:79:83:98:42: 85:d2:e6:21:74:30:ac:d5:34:21:af:c8:11:e0:70:cb:f0:95: df:30:cc:ef:58:73:38:86:b7:ad:b5:75:b6:80:53:12:cb:77: 13:36:8f:e7:c5:6a:bd:38:64:e7:2c:e4:05:0f:d2:46:81:5c: 0f:bb:b3:14:7a:6c:15:ff:e4:04:73:8b:52:71:26:31:31:2a: 38:9d:7b:af:99:e7:49:14:58:91:12:f8:32:28:70:c0:41:43: 45:aa:2f:ec:2f:38:95:55:0f:d2:e5:5f:99:61:b8:f8:ee:98: e5:3b:6b:bd:25:6b:e6:f5:36:03:53:ea:0a:4b:58:08:91:b4: e7:33:bd:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzh9M7G4SaK+n6PitnIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjUxMjExMTgwMTI3WhcNMjUxMjEyMTgwMTI3WjAzMTEwLwYDVQQD EyhlYjJlOWJiN2Y1NzMwNWQ1MjdkZWExODUzMzMxMzc0Y2NjNDlkZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKlTHoCcWP1zN0KJ1LHEsvF3Bp6e 4tmR9hNjBr7H7sHSia6p/wDxMfihpDiw14C6wvjOgX6hJ3GzvD4T2DIOrRvARhgI 23oLlB6n9gR+pqZA+UmOrez96SAs0PYg5fxw+AykqjYS0wjFdX+JOFXuikPVcyAH +Tfwj2rnpuLUUArZEvwj8ymsQKeXVHxFvdBKNBKRnFtDxc5TtpPCtHSbtHVg5m+j PwXDNoEcWOq0oRgqHjIgFUG9WrEcrtB38JBk6Igsz0RkEqdwpt/8yRvC3AOOI5Ay EvOyuJcnKdjMqpMMAV1q7Tf7z+lX0vuk8Eom+1qLgSB7aUxFH7tPef6N1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsum7f1cwXVJ96hhTMxN0zMSd9nMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKEzwbP1 NB9GiPi48w4t61mU8Uam7EjIWYy4pHI9lreunbOoTOqhh0QGGbk/ndYTYWRdQJOS s7ZVjfZ6dRnDiUg8snbdVMHcCNHCU6CA5MReAWuRpTNy7rW2fqs7Mb3BoaZ1z5FA kL+RqXtqQli2lRXo5fTGeiHW4ip5g5hChdLmIXQwrNU0Ia/IEeBwy/CV3zDM71hz OIa3rbV1toBTEst3EzaP58VqvThk5yzkBQ/SRoFcD7uzFHpsFf/kBHOLUnEmMTEq OJ17r5nnSRRYkRL4MihwwEFDRaov7C84lVUP0uVfmWG4+O6Y5TtrvSVr5vU2A1Pq CktYCJG05zO9aQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:46 2025 by rpki-client