This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json) Hash identifier: SbfMbsDQCGHDHTLqnwS11/Yp7KSJlJ5RB8/ijYgFoP4= Subject key identifier: 4A:4E:5B:73:9D:A8:78:AD:E5:0E:11:ED:8D:DA:90:53:26:16:93:D3 Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43 Certificate serial: 019B1916A4A7349395BBA04F52B9E4C584ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 19:01:12 +0000 Manifest this update: Sat 13 Dec 2025 19:01:12 +0000 Manifest next update: Sun 14 Dec 2025 19:01:12 +0000 Files and hashes: 1: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (hash: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=) 2: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: PjOx2G0GVkeVcWTB/TPtiL/vIn/ttDZn+IS7mMGyxqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:a4:a7:34:93:95:bb:a0:4f:52:b9:e4:c5:84:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43 Validity Not Before: Dec 13 19:01:12 2025 GMT Not After : Dec 14 19:01:12 2025 GMT Subject: CN=4a4e5b739da878ade50e11ed8dda9053261693d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:60:2b:5d:59:b7:62:9f:9c:72:1e:39:d4:5f: d7:e2:b9:34:ea:88:91:37:ef:c8:b6:46:28:90:fb: 81:48:70:20:f2:06:c3:98:27:45:08:61:17:c7:40: 3a:62:75:d0:89:b2:aa:a5:ca:95:7d:34:44:c8:ca: c6:4c:44:b2:cb:31:46:00:60:f5:35:f9:63:a4:0a: 60:4c:dd:21:dc:11:70:28:df:f5:0a:41:90:40:fb: d1:7f:71:00:96:6b:c8:32:f7:a7:68:64:11:5f:2c: ae:1a:e6:c0:b2:1d:f7:55:15:33:eb:74:6f:95:3b: b7:c0:bd:e9:2f:a9:b5:4b:d6:d0:b1:4b:21:ee:80: 20:5c:9b:35:13:c9:b7:42:38:2e:57:e9:be:d9:72: 47:45:15:ba:e6:49:cc:eb:83:d4:3e:53:3d:01:c3: e7:d7:60:ed:97:6b:0a:68:be:48:58:50:d8:7d:e2: ec:8b:d3:97:a2:7a:9d:b4:ed:18:fb:61:c7:fb:5c: 52:16:f9:88:79:ee:cd:8e:d4:2c:de:00:b9:3a:eb: e7:5a:84:dd:7a:ad:08:a5:bf:3d:34:a6:cf:30:74: b4:c6:06:b7:84:dc:22:3d:35:05:fa:65:f6:67:9d: 81:62:f2:5a:b7:47:cd:10:34:ac:a0:03:ff:b1:8c: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4E:5B:73:9D:A8:78:AD:E5:0E:11:ED:8D:DA:90:53:26:16:93:D3 X509v3 Authority Key Identifier: keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:37:e9:59:1c:92:56:b0:3b:39:94:11:d7:3d:af:b6:b2:2c: c0:38:62:2e:bb:0a:d9:52:a5:38:10:72:6d:17:64:4b:b2:eb: a2:06:bd:b2:c3:51:ba:1a:db:7f:19:cd:57:ef:42:d6:1b:76: 27:86:4f:86:38:d8:30:3a:e8:d2:ca:8f:6b:17:da:98:83:16: 7e:ef:2f:3e:ad:fe:4a:20:1a:a7:9e:69:ed:c5:99:dd:cb:42: d1:a6:a3:dc:d0:3a:60:57:b3:f1:f9:3f:98:be:73:ff:a4:ee: a1:13:16:34:1c:3c:51:cd:57:84:19:c4:b6:1f:95:ca:1d:ab: 14:45:a0:19:93:09:08:1b:d1:c3:37:89:27:f5:d5:76:3f:29: 42:d4:3e:ae:c3:3c:f5:1d:92:6a:b9:90:e7:7c:26:9d:8e:7b: 13:42:d7:56:aa:15:45:6c:34:8d:75:ba:7d:4e:ac:d4:71:2d: 82:f8:d3:6f:30:c1:60:38:0b:cc:1c:49:5b:96:aa:15:22:a3: e4:2b:4c:21:3b:ed:74:7d:8a:49:6e:32:e9:70:6d:7d:d8:0c: a6:23:6c:af:10:91:7a:ed:af:05:df:29:5b:53:64:6f:eb:42: e5:49:f6:88:5f:76:26:e1:bd:59:d0:2f:9f:5c:22:27:24:d7: 55:24:9e:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFqSnNJOVu6BPUrnkxYTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl NjhkNDMwHhcNMjUxMjEzMTkwMTEyWhcNMjUxMjE0MTkwMTEyWjAzMTEwLwYDVQQD Eyg0YTRlNWI3MzlkYTg3OGFkZTUwZTExZWQ4ZGRhOTA1MzI2MTY5M2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmArXVm3Yp+cch451F/X4rk06oiR N+/ItkYokPuBSHAg8gbDmCdFCGEXx0A6YnXQibKqpcqVfTREyMrGTESyyzFGAGD1 NfljpApgTN0h3BFwKN/1CkGQQPvRf3EAlmvIMvenaGQRXyyuGubAsh33VRUz63Rv lTu3wL3pL6m1S9bQsUsh7oAgXJs1E8m3QjguV+m+2XJHRRW65knM64PUPlM9AcPn 12Dtl2sKaL5IWFDYfeLsi9OXonqdtO0Y+2HH+1xSFvmIee7NjtQs3gC5OuvnWoTd eq0Ipb89NKbPMHS0xga3hNwiPTUF+mX2Z52BYvJat0fNEDSsoAP/sYzINQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpOW3OdqHit5Q4R7Y3akFMmFpPTMB8GA1UdIwQY MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct YTczNWNhMTA4NGI3LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3 LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzfpWRyS VrA7OZQR1z2vtrIswDhiLrsK2VKlOBBybRdkS7Lroga9ssNRuhrbfxnNV+9C1ht2 J4ZPhjjYMDro0sqPaxfamIMWfu8vPq3+SiAap55p7cWZ3ctC0aaj3NA6YFez8fk/ mL5z/6TuoRMWNBw8Uc1XhBnEth+Vyh2rFEWgGZMJCBvRwzeJJ/XVdj8pQtQ+rsM8 9R2SarmQ53wmnY57E0LXVqoVRWw0jXW6fU6s1HEtgvjTbzDBYDgLzBxJW5aqFSKj 5CtMITvtdH2KSW4y6XBtfdgMpiNsrxCReu2vBd8pW1Nkb+tC5Un2iF92JuG9WdAv n1wiJyTXVSSeAw== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:26 2025 by rpki-client