This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: 5BhiQoVqdaGl66GUDjIScbzzfF/5hoEjWgdqQ3movCA= Subject key identifier: 5A:7D:FF:80:6C:4D:C0:17:04:FE:45:51:BB:EC:FA:5F:D7:51:AD:23 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B209943024B1AD3878004EDBB9433DB1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1793 Signing time: Mon 15 Dec 2025 06:01:13 +0000 Manifest this update: Mon 15 Dec 2025 06:01:13 +0000 Manifest next update: Tue 16 Dec 2025 06:01:13 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 5: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 6: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: iJtRlnmBQlNaE2+f2YeHrurWag+cE08tDbD6+Dq2P+0=) 8: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) 9: yNDcn7_YAgDZZm2i8gFSSGcDmD8.roa (hash: lsW80dY6/ypLPll75wSzW6y40nqxhinJEK5/rFAqHvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:43:02:4b:1a:d3:87:80:04:ed:bb:94:33:db:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Dec 15 06:01:13 2025 GMT Not After : Dec 16 06:01:13 2025 GMT Subject: CN=5a7dff806c4dc01704fe4551bbecfa5fd751ad23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:44:7d:5c:94:74:fa:dc:01:0c:66:d7:f2: 81:dd:23:56:06:88:ab:ac:96:4d:b4:e1:28:09:d1: 29:79:74:ba:fe:b1:23:64:3d:4b:77:da:69:40:fe: 6a:80:e2:8d:27:a7:03:ac:52:0c:f4:91:01:74:26: c7:ef:e3:9f:23:7d:57:ee:bb:7b:96:1a:36:9e:5c: 38:78:b5:de:7c:ca:ac:f2:1f:13:ea:89:15:ae:11: 8c:39:c5:3c:e3:44:1e:53:52:9e:f2:79:42:11:d6: 8e:b3:7c:53:7d:31:af:fe:5f:69:0e:9c:54:9e:f1: 75:13:78:c1:73:06:04:54:71:44:49:b9:49:82:6d: f8:2d:15:64:46:b4:4e:41:44:d1:a6:32:95:0e:69: de:e2:d0:e5:50:f8:dc:a1:b2:53:9f:09:2a:9c:ae: 90:09:66:50:cb:98:05:c0:e8:74:48:8b:2e:1f:e2: b6:70:9a:99:26:8a:ac:fb:dc:34:3f:89:56:3b:20: 34:a1:6a:be:c3:91:db:e3:09:3d:3e:85:11:54:30: 95:56:2a:db:f4:ef:6b:3d:ba:81:c2:9d:df:5d:e1: 78:a6:db:1a:b9:28:2c:12:c0:38:10:76:95:e6:0f: a5:11:ac:20:3b:13:b6:83:32:b1:72:06:c7:bf:3f: d8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:FF:80:6C:4D:C0:17:04:FE:45:51:BB:EC:FA:5F:D7:51:AD:23 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:52:7b:ee:4a:b3:07:9d:eb:fa:50:8d:6f:05:8f:25:35:7f: ff:89:45:92:d4:06:69:e1:d8:07:10:78:bf:d8:6e:3f:ad:c4: 43:61:92:37:d5:1a:20:ff:2a:b1:21:c6:a3:16:be:6f:c7:86: 30:0c:6c:fa:e1:ae:19:f3:1c:d5:5b:61:87:95:4e:af:0a:37: 61:d1:93:b0:8a:2a:dd:c1:7b:04:3c:2c:a6:12:85:a6:c7:f1: 23:11:d0:b0:95:95:7a:24:66:21:53:2f:f9:43:74:86:35:52: 74:c4:9e:98:c6:d6:56:54:64:27:98:63:f0:c9:76:5a:46:d4: 95:39:5b:b1:8f:f4:44:a2:5d:55:6b:0f:8b:37:79:26:ad:c4: 73:a5:67:91:33:d8:3a:91:62:09:4c:ee:6b:2f:48:1e:32:a5: 4e:07:9e:6b:71:65:13:cc:18:3a:68:00:48:a7:6f:b3:db:96: e4:e9:48:fe:43:80:dc:fe:87:c7:e6:fe:b4:06:65:8f:d5:15: e4:5d:9a:fe:7c:05:6a:91:3d:9f:ec:88:0d:46:04:fb:b5:ef: 17:41:36:99:42:cc:4d:34:5d:07:c8:fa:5e:4e:91:64:0a:4b: 1e:fe:5c:8b:52:9a:8c:c9:1d:b8:fe:41:d7:b8:eb:9e:b1:ba: b7:00:84:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmUMCSxrTh4AE7buUM9scMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUxMjE1MDYwMTEzWhcNMjUxMjE2MDYwMTEzWjAzMTEwLwYDVQQD Eyg1YTdkZmY4MDZjNGRjMDE3MDRmZTQ1NTFiYmVjZmE1ZmQ3NTFhZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fBEfVyUdPrcAQxm1/KB3SNWBoir rJZNtOEoCdEpeXS6/rEjZD1Ld9ppQP5qgOKNJ6cDrFIM9JEBdCbH7+OfI31X7rt7 lho2nlw4eLXefMqs8h8T6okVrhGMOcU840QeU1Ke8nlCEdaOs3xTfTGv/l9pDpxU nvF1E3jBcwYEVHFESblJgm34LRVkRrROQUTRpjKVDmne4tDlUPjcobJTnwkqnK6Q CWZQy5gFwOh0SIsuH+K2cJqZJoqs+9w0P4lWOyA0oWq+w5Hb4wk9PoURVDCVVirb 9O9rPbqBwp3fXeF4ptsauSgsEsA4EHaV5g+lEawgOxO2gzKxcgbHvz/YZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp9/4BsTcAXBP5FUbvs+l/XUa0jMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglJ77kqz B53r+lCNbwWPJTV//4lFktQGaeHYBxB4v9huP63EQ2GSN9UaIP8qsSHGoxa+b8eG MAxs+uGuGfMc1Vthh5VOrwo3YdGTsIoq3cF7BDwsphKFpsfxIxHQsJWVeiRmIVMv +UN0hjVSdMSemMbWVlRkJ5hj8Ml2WkbUlTlbsY/0RKJdVWsPizd5Jq3Ec6VnkTPY OpFiCUzuay9IHjKlTgeea3FlE8wYOmgASKdvs9uW5OlI/kOA3P6Hx+b+tAZlj9UV 5F2a/nwFapE9n+yIDUYE+7XvF0E2mULMTTRdB8j6Xk6RZApLHv5ci1KajMkduP5B 17jrnrG6twCEVA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:07:50 2025 by rpki-client