This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json) Hash identifier: 9AJ84fcD4vNMRq3Q5ee0eXHKnQWlwkphb1hLPkgBXxw= Subject key identifier: CC:E4:2F:99:B4:0D:9F:74:7A:CE:9F:6D:56:D2:91:85:72:13:C6:AA Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Certificate serial: 019B1FF3CE88C8316355D967298505C358EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 03:00:30 +0000 Manifest this update: Mon 15 Dec 2025 03:00:30 +0000 Manifest next update: Tue 16 Dec 2025 03:00:30 +0000 Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: VHQxJQlzOOTWwxzXr794/PvY2MsUPoLEwDpZXvBTrYM=) 2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=) 3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=) 4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:ce:88:c8:31:63:55:d9:67:29:85:05:c3:58:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Validity Not Before: Dec 15 03:00:30 2025 GMT Not After : Dec 16 03:00:30 2025 GMT Subject: CN=cce42f99b40d9f747ace9f6d56d291857213c6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:c1:fa:b1:af:7b:3a:2b:69:64:58:6f:36: 5b:03:94:ee:5f:64:8d:e4:cf:fc:0b:0b:18:dc:88: ec:bd:44:cb:5c:b8:f6:fa:ec:07:9e:ac:fb:8f:a8: 53:19:70:b7:14:5b:51:e0:69:03:03:55:ef:b3:37: 09:4e:d6:e0:c7:ca:34:b5:0f:00:24:8a:b1:87:da: 54:e4:bc:05:8f:28:0f:71:65:ad:ad:e9:80:06:41: 7f:5e:b9:8d:ac:d4:67:11:e4:c4:0c:e5:6d:d9:2a: 42:73:57:20:be:8d:3e:39:bb:6a:f8:fe:f5:47:eb: a1:62:62:c8:70:89:82:94:5e:2f:71:7d:8e:7c:c4: 83:5f:04:18:38:fe:cf:17:1f:29:fd:59:cf:b0:9c: 0f:29:ca:fa:c9:8b:e6:bb:08:7d:1a:3c:06:fc:29: 38:28:1f:ac:8f:c6:ca:2f:ff:37:86:67:ec:2e:a8: 37:f6:fb:f6:05:ca:d9:8c:bb:df:52:a5:f5:18:56: d2:83:f8:fd:d6:31:32:5b:20:dd:8d:a6:0a:05:94: 3f:1c:fd:c0:58:fd:db:82:a7:13:20:b3:8b:d5:4a: 73:e5:97:24:41:34:e5:fa:71:38:80:8b:bf:65:57: 62:f9:2d:e7:94:4c:c1:20:93:3d:ac:ce:55:ec:ba: dc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E4:2F:99:B4:0D:9F:74:7A:CE:9F:6D:56:D2:91:85:72:13:C6:AA X509v3 Authority Key Identifier: keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:48:a9:80:f4:fb:1a:e1:0c:27:7b:c7:3a:d0:18:f7:b2:3c: 09:ef:40:d4:d9:b2:59:fe:48:a0:39:b9:58:84:eb:7d:54:0b: 69:6c:d4:fb:f7:5b:6a:93:4e:55:bc:5b:6f:7c:88:2e:db:d0: 56:38:8a:14:f6:c4:3d:67:a4:27:ed:84:ab:e4:09:3a:6f:24: 39:a9:72:72:72:a8:1d:a6:d9:9a:a1:21:23:5f:ac:5f:e7:b3: 45:47:68:e4:fa:fc:3c:a9:ac:aa:05:4c:df:86:32:5c:b2:b6: 9c:77:d8:d2:3f:50:cb:0d:7f:47:cd:a7:52:f2:55:28:4d:50: 6a:62:45:84:e0:9d:f1:e7:52:0e:a2:f5:a0:9b:ee:58:34:e0: 53:9e:8d:f5:67:33:16:cd:f2:93:97:dc:9b:6f:f9:71:b1:b2: 15:ea:ee:de:65:5b:70:18:78:a8:db:57:3a:d4:68:f3:83:1e: 23:55:e7:e8:22:b7:1a:00:dd:31:d7:6b:69:80:29:af:21:e9: 5f:55:1f:db:e3:93:50:29:1e:e7:1b:69:84:82:a3:63:a3:05: 0f:ea:74:76:d9:06:c2:ec:26:a8:d1:c3:31:cc:5f:2c:b6:eb: fe:be:fe:ec:ff:c9:4b:f4:60:20:28:c8:c4:bb:44:ab:54:87: 95:77:52:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf886IyDFjVdlnKYUFw1jqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2 NTM5YzgwHhcNMjUxMjE1MDMwMDMwWhcNMjUxMjE2MDMwMDMwWjAzMTEwLwYDVQQD EyhjY2U0MmY5OWI0MGQ5Zjc0N2FjZTlmNmQ1NmQyOTE4NTcyMTNjNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll7B+rGvezoraWRYbzZbA5TuX2SN 5M/8CwsY3IjsvUTLXLj2+uwHnqz7j6hTGXC3FFtR4GkDA1XvszcJTtbgx8o0tQ8A JIqxh9pU5LwFjygPcWWtremABkF/XrmNrNRnEeTEDOVt2SpCc1cgvo0+Obtq+P71 R+uhYmLIcImClF4vcX2OfMSDXwQYOP7PFx8p/VnPsJwPKcr6yYvmuwh9GjwG/Ck4 KB+sj8bKL/83hmfsLqg39vv2BcrZjLvfUqX1GFbSg/j91jEyWyDdjaYKBZQ/HP3A WP3bgqcTILOL1Upz5ZckQTTl+nE4gIu/ZVdi+S3nlEzBIJM9rM5V7LrcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzkL5m0DZ90es6fbVbSkYVyE8aqMB8GA1UdIwQY MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUipgPT7 GuEMJ3vHOtAY97I8Ce9A1NmyWf5IoDm5WITrfVQLaWzU+/dbapNOVbxbb3yILtvQ VjiKFPbEPWekJ+2Eq+QJOm8kOalycnKoHabZmqEhI1+sX+ezRUdo5Pr8PKmsqgVM 34YyXLK2nHfY0j9Qyw1/R82nUvJVKE1QamJFhOCd8edSDqL1oJvuWDTgU56N9Wcz Fs3yk5fcm2/5cbGyFeru3mVbcBh4qNtXOtRo84MeI1Xn6CK3GgDdMddraYApryHp X1Uf2+OTUCke5xtphIKjY6MFD+p0dtkGwuwmqNHDMcxfLLbr/r7+7P/JS/RgICjI xLtEq1SHlXdSlA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:13:03 2025 by rpki-client