This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft File: 87KAXYd27t63qky-WvVozbJin8I.mft (raw, json) Hash identifier: lhLs64h99n4+gflMLxqK01qpSfvR15fnCxXXUMSYYyE= Subject key identifier: 32:11:BC:96:BB:25:5E:50:34:52:0D:C4:AF:2E:34:E2:62:61:9C:7A Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Certificate serial: 019B30B0A8289F32AA198087455D354A112E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft Manifest number: 10B7 Signing time: Thu 18 Dec 2025 09:00:42 +0000 Manifest this update: Thu 18 Dec 2025 09:00:42 +0000 Manifest next update: Fri 19 Dec 2025 09:00:42 +0000 Files and hashes: 1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: JWUYrBaGA4TgaaAI5cbfywpZmdCrTmuYrCBlc4D4mVI=) 2: 8LQo-NmzGy5l2r5NZYIeKNdXs14.roa (hash: ilvAF3/ySzxVBGtuDQdjN+a1IHb253ip3G4kBn3IpkA=) 3: 8s7vHKE6FBZYlH7mxDn7_1ykPk4.roa (hash: fgNyBR69p7xJvQXl06eoPq2tjnGBemgh7E+PjbLx9mo=) 4: KBnV22O0C3tEALoBBJIOxcHb15g.roa (hash: Y3gI4bcoG8A3aqSjWcRxoni0bjtg/AtMO88Pu/MJNWg=) 5: Lq77aAwST8RILyM-oL6rNeFnjCE.roa (hash: Loe+ahaVydEMf0Ago+iaNs6AzxcPRts/E2zKD5WoQYs=) 6: ZoIewHefhjHP2Vd9cNeP-TAR-vM.roa (hash: IG+hitjDPUIZMjcFs/DHXrxqndBqaN9wlOddbrMn1eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:b0:a8:28:9f:32:aa:19:80:87:45:5d:35:4a:11:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2 Validity Not Before: Dec 18 09:00:42 2025 GMT Not After : Dec 19 09:00:42 2025 GMT Subject: CN=3211bc96bb255e5034520dc4af2e34e262619c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:e2:c1:21:d1:1c:3d:1a:46:70:54:80:ce: 1a:62:8a:41:34:3a:f4:f0:99:d6:35:01:7d:21:82: 13:f7:67:cc:05:37:4f:93:92:82:13:20:ca:bc:41: 23:79:e0:9f:cd:68:09:20:d6:1b:37:26:e2:67:b6: ba:45:8a:4a:a0:13:a3:91:65:a9:ad:b6:59:46:18: d7:04:ac:30:d3:c8:3c:00:6e:8d:b0:aa:1c:09:62: 0b:2f:51:bb:4e:53:be:52:62:35:65:a9:3b:05:32: 13:10:7e:24:40:c2:15:44:fb:ed:3c:a2:a9:fe:4f: 2c:e6:51:0d:58:36:af:b2:0b:60:af:51:27:d0:c3: 8f:e5:2c:8f:4a:cb:98:0a:cd:dc:d5:6e:e5:31:ec: aa:a6:2b:53:ee:4c:dd:54:31:a2:24:84:20:bf:fb: 43:85:9f:43:65:58:a1:db:82:80:42:1f:85:8d:bf: 06:90:53:2f:fe:ce:a9:05:4e:19:f9:5e:97:96:5b: 23:1e:fb:c0:13:2d:ab:66:7c:82:df:9d:2b:26:ac: 14:02:b6:b2:18:87:9a:ad:c5:93:75:0e:96:ae:a3: cf:83:fa:d2:ef:1d:68:22:bf:a3:ed:89:ff:80:d7: 46:69:86:0f:0f:74:83:49:bf:cb:71:51:f1:0a:e2: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:11:BC:96:BB:25:5E:50:34:52:0D:C4:AF:2E:34:E2:62:61:9C:7A X509v3 Authority Key Identifier: keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:45:a8:73:34:80:f9:33:86:e5:5e:ac:85:18:68:33:cc: c4:07:b8:f0:26:7a:76:81:df:a0:61:4c:20:4a:10:bc:d4:2f: 3c:bb:cc:2d:42:53:d5:42:e2:c8:15:9c:1c:d9:d3:cd:b3:0f: 6c:7d:5d:99:46:66:e9:84:aa:40:77:ec:e2:c5:95:1e:82:0f: c9:af:18:90:5c:bb:a5:b8:7c:24:3d:27:24:e0:72:c0:66:30: b1:38:58:f1:96:e2:99:1d:b4:44:00:d6:a0:f5:61:99:8e:85: ff:f5:df:c9:84:41:71:84:47:42:b2:63:c3:86:b8:66:9b:93: 9f:24:fd:25:20:99:d2:9e:ac:7b:8d:e3:24:c6:c8:ed:05:dd: 6b:e2:57:8b:e6:0a:da:cd:ae:64:82:8f:bf:8b:0f:8e:e6:f7: a6:22:2b:61:88:b1:8e:66:c4:5e:fc:76:f0:0d:d8:89:25:cf: cb:69:44:71:0a:ac:bf:68:a3:dc:d0:e1:63:9d:7d:28:62:ac: af:b7:b0:4f:78:00:06:1f:a4:03:32:67:16:4e:04:a6:ee:d5: 93:4d:91:69:0f:8b:e3:b9:f9:41:79:58:35:1f:7e:29:19:34: 17:f2:8e:cd:3c:e2:bb:b8:de:71:1c:51:55:09:12:c6:0d:8a: e1:0e:a9:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswsKgonzKqGYCHRV01ShEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2 MjlmYzIwHhcNMjUxMjE4MDkwMDQyWhcNMjUxMjE5MDkwMDQyWjAzMTEwLwYDVQQD EygzMjExYmM5NmJiMjU1ZTUwMzQ1MjBkYzRhZjJlMzRlMjYyNjE5YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ifiwSHRHD0aRnBUgM4aYopBNDr0 8JnWNQF9IYIT92fMBTdPk5KCEyDKvEEjeeCfzWgJINYbNybiZ7a6RYpKoBOjkWWp rbZZRhjXBKww08g8AG6NsKocCWILL1G7TlO+UmI1Zak7BTITEH4kQMIVRPvtPKKp /k8s5lENWDavsgtgr1En0MOP5SyPSsuYCs3c1W7lMeyqpitT7kzdVDGiJIQgv/tD hZ9DZVih24KAQh+Fjb8GkFMv/s6pBU4Z+V6XllsjHvvAEy2rZnyC350rJqwUAray GIearcWTdQ6WrqPPg/rS7x1oIr+j7Yn/gNdGaYYPD3SDSb/LcVHxCuKdjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIRvJa7JV5QNFINxK8uNOJiYZx6MB8GA1UdIwQY MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt ODNiYzc5NzI3OGUyLzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyBFqHM0 gPkzhuVerIUYaDPMxAe48CZ6doHfoGFMIEoQvNQvPLvMLUJT1ULiyBWcHNnTzbMP bH1dmUZm6YSqQHfs4sWVHoIPya8YkFy7pbh8JD0nJOBywGYwsThY8ZbimR20RADW oPVhmY6F//XfyYRBcYRHQrJjw4a4ZpuTnyT9JSCZ0p6se43jJMbI7QXda+JXi+YK 2s2uZIKPv4sPjub3piIrYYixjmbEXvx28A3YiSXPy2lEcQqsv2ij3NDhY519KGKs r7ewT3gABh+kAzJnFk4Epu7Vk02RaQ+L47n5QXlYNR9+KRk0F/KOzTziu7jecRxR VQkSxg2K4Q6p7A== -----END CERTIFICATE-----Generated at Thu Dec 18 17:33:47 2025 by rpki-client