This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json) Hash identifier: 8ZJMcPaRpk080K01Q18Ip/KZYO20mdyf+9o1K0fdizM= Subject key identifier: 8E:9C:95:2C:D5:01:13:94:6F:74:DF:E6:95:5D:DE:71:63:09:F0:9A Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4 Certificate serial: 019B1049FB52419A1E2472EBDFDB08342E4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 02:00:42 +0000 Manifest this update: Fri 12 Dec 2025 02:00:42 +0000 Manifest next update: Sat 13 Dec 2025 02:00:42 +0000 Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=) 2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: o3MvIPMYlPSK/d0x5cDxoGTsBhhpiYYoqk10xytiQns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:fb:52:41:9a:1e:24:72:eb:df:db:08:34:2e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4 Validity Not Before: Dec 12 02:00:42 2025 GMT Not After : Dec 13 02:00:42 2025 GMT Subject: CN=8e9c952cd50113946f74dfe6955dde716309f09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:ef:31:c3:d3:e3:d2:9f:43:35:b3:2a:50: 6a:24:95:1b:5a:c4:57:59:62:48:f2:ef:cc:d7:fe: cd:a9:8a:ed:6a:96:3c:a7:c6:99:41:c5:3b:12:9d: b2:07:0e:38:10:ef:85:e7:41:a9:2d:b1:68:66:4d: c9:e1:fe:f3:05:70:c6:44:45:9e:68:8e:39:ab:0b: 17:a3:8a:d7:5c:a6:82:e0:b0:07:76:a0:50:01:a6: 0b:9a:82:51:2b:83:19:bd:48:2a:57:bb:85:03:07: 8f:fb:e6:75:23:5d:07:19:43:21:d9:84:76:7f:9d: 08:62:be:d9:dc:e4:99:f8:78:3b:30:21:1b:6e:e5: ab:25:aa:da:41:ad:eb:40:57:b3:a9:98:dc:6c:0c: 81:7e:1b:59:7d:2a:6f:12:76:3a:a1:a2:05:b3:70: 5c:a2:09:75:7c:6f:d1:fd:bd:eb:d9:48:ca:d9:fc: b6:f5:76:b5:35:2b:26:59:6f:4c:af:66:16:d6:c0: 70:e9:8a:09:5d:23:1f:a0:f6:02:2a:72:61:74:97: 80:0a:d6:43:f4:77:e0:99:ec:f6:3e:b8:d8:33:cd: ed:b8:bd:60:91:9d:3e:17:c6:3c:f9:00:b1:c6:f9: 2f:d1:6f:10:61:7d:f1:dd:ab:2e:7b:7a:ed:d3:54: 06:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:95:2C:D5:01:13:94:6F:74:DF:E6:95:5D:DE:71:63:09:F0:9A X509v3 Authority Key Identifier: keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a5:5a:18:e5:c9:16:6f:01:b4:fd:a6:46:31:3e:6d:ca:df: f9:9c:f9:b8:f0:a9:08:c7:10:93:73:c9:75:ab:a4:10:68:68: 6b:59:44:ae:2a:a3:c4:84:4d:e0:3a:32:27:88:0d:f9:87:83: e7:1d:f4:20:4f:95:b8:e7:d2:14:d7:d4:af:25:b6:2e:b5:2b: 52:b9:37:7d:cf:24:87:e6:a5:39:86:99:d4:d3:6b:2e:b2:22: 85:83:e6:93:35:ea:4b:4f:0c:da:0b:ff:90:fd:2f:d8:a4:84: af:a1:9d:c3:01:49:f0:37:20:98:ae:3b:bf:ce:e2:00:79:98: a8:b9:19:0b:88:2d:60:1e:ca:a0:54:a0:17:f6:8a:68:51:7a: 63:42:71:59:de:5f:37:46:fb:a0:62:e4:77:03:ce:4c:9b:50: 6e:e0:99:41:a6:d9:18:23:03:f8:1b:11:70:00:e3:4d:5a:73: 94:7e:94:7c:22:ac:c6:26:93:a1:05:12:67:58:c0:4b:18:04: 18:aa:29:2d:38:ab:23:2c:c6:ae:4d:e8:85:a4:f5:6d:20:07: 41:05:64:97:d2:fc:d3:68:6e:b1:47:fd:7c:c3:52:66:7e:33: 34:58:1f:f7:63:0e:ab:cc:a5:98:9c:f4:0d:8d:b8:f6:be:42: 70:3a:4f:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSftSQZoeJHLr39sINC5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2U0MjgxYTk5NGQ1MjE2NmVmM2ZmMTc3MjhiYWUyMTg4 NTVmYzQwHhcNMjUxMjEyMDIwMDQyWhcNMjUxMjEzMDIwMDQyWjAzMTEwLwYDVQQD Eyg4ZTljOTUyY2Q1MDExMzk0NmY3NGRmZTY5NTVkZGU3MTYzMDlmMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuPvMcPT49KfQzWzKlBqJJUbWsRX WWJI8u/M1/7NqYrtapY8p8aZQcU7Ep2yBw44EO+F50GpLbFoZk3J4f7zBXDGREWe aI45qwsXo4rXXKaC4LAHdqBQAaYLmoJRK4MZvUgqV7uFAweP++Z1I10HGUMh2YR2 f50IYr7Z3OSZ+Hg7MCEbbuWrJaraQa3rQFezqZjcbAyBfhtZfSpvEnY6oaIFs3Bc ogl1fG/R/b3r2UjK2fy29Xa1NSsmWW9Mr2YW1sBw6YoJXSMfoPYCKnJhdJeACtZD 9Hfgmez2PrjYM83tuL1gkZ0+F8Y8+QCxxvkv0W8QYX3x3asue3rt01QG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6clSzVAROUb3Tf5pVd3nFjCfCaMB8GA1UdIwQY MBaAFIvOQoGplNUhZu8/8XcouuIYhV/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUt YTFlMDFjNjMzNDNhLzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mZmM0NDgtOGUxOS00N2FhLTk2NjUtYTFlMDFjNjMzNDNh LzEvaTg1Q2dhbVUxU0ZtN3pfeGR5aTY0aGlGWDhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6VaGOXJ Fm8BtP2mRjE+bcrf+Zz5uPCpCMcQk3PJdaukEGhoa1lEriqjxIRN4DoyJ4gN+YeD 5x30IE+VuOfSFNfUryW2LrUrUrk3fc8kh+alOYaZ1NNrLrIihYPmkzXqS08M2gv/ kP0v2KSEr6GdwwFJ8DcgmK47v87iAHmYqLkZC4gtYB7KoFSgF/aKaFF6Y0JxWd5f N0b7oGLkdwPOTJtQbuCZQabZGCMD+BsRcADjTVpzlH6UfCKsxiaToQUSZ1jASxgE GKopLTirIyzGrk3ohaT1bSAHQQVkl9L802husUf9fMNSZn4zNFgf92MOq8ylmJz0 DY249r5CcDpPiA== -----END CERTIFICATE-----Generated at Fri Dec 12 05:17:51 2025 by rpki-client