This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft File: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json) Hash identifier: oepwLS5R08E1oSyyA6wNZf7jruryTfdJyI8FCwro37A= Subject key identifier: A1:A9:CE:6B:36:C2:DA:49:BA:8F:11:A2:19:C1:1E:1C:0F:78:07:45 Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C Certificate issuer: /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Certificate serial: 019ACB69DA21E9B6A6687AD19918EE0AE04C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft Manifest number: 0490 Signing time: Fri 28 Nov 2025 17:01:43 +0000 Manifest this update: Fri 28 Nov 2025 17:01:43 +0000 Manifest next update: Sat 29 Nov 2025 17:01:43 +0000 Files and hashes: 1: 0aywYTi5Sc6yVfxfBxLpHYbIDYs.roa (hash: XltTkT+5iNEXCHy8WnwN+9b+D1DDxHii8Hapue8Rijw=) 2: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: FDxBTsvnk378zDp91Nz7LaIOIbMxT6ICu4vK5k99eAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:69:da:21:e9:b6:a6:68:7a:d1:99:18:ee:0a:e0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c Validity Not Before: Nov 28 17:01:43 2025 GMT Not After : Nov 29 17:01:43 2025 GMT Subject: CN=a1a9ce6b36c2da49ba8f11a219c11e1c0f780745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:43:4c:7d:04:53:50:4d:e2:27:06:ea:f0: 55:b9:eb:8d:0b:ae:f1:1a:51:a2:96:c9:16:2e:b9: e3:96:5f:ec:dd:09:df:21:e7:1c:c2:76:c9:33:48: 8f:7a:61:f0:fa:2f:7b:c8:c1:2f:23:1b:17:9b:32: 2f:8f:e8:dd:97:5f:13:01:57:17:f6:4e:73:c6:e7: ca:92:2f:59:ef:5d:e8:07:f3:6f:ee:eb:5f:37:62: 82:13:dd:f4:5b:59:02:dd:56:57:71:90:59:9b:25: b3:c4:62:60:55:6c:a3:67:6a:d0:c1:d6:0d:e6:a3: 80:a1:d4:fd:3d:93:fd:68:0c:50:b1:1d:1b:d4:f1: ed:23:54:32:5b:00:ee:3a:c2:9d:74:ab:d3:88:21: 11:89:6b:8b:34:1b:36:16:21:7e:e6:9e:ad:5b:28: 7a:78:45:01:05:00:dc:bb:57:f9:3d:37:b0:31:7f: e3:c6:c7:c3:d6:dc:75:bd:f6:b0:83:73:40:ec:cf: 7b:e8:c8:72:b2:c0:8b:1d:a3:3c:d1:88:01:3a:6d: 0e:e0:c4:2c:65:0c:1f:71:98:5a:ff:02:77:06:11: f9:38:5f:87:45:70:4f:90:68:fe:80:4e:e8:7c:1a: 84:50:5c:3e:9c:a2:0f:b5:fd:15:c9:fb:d3:73:59: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A9:CE:6B:36:C2:DA:49:BA:8F:11:A2:19:C1:1E:1C:0F:78:07:45 X509v3 Authority Key Identifier: keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c4:66:fa:73:8c:44:46:70:f6:6f:08:4d:a0:95:48:f9:8d: 0f:01:6f:33:30:4e:6b:aa:46:7e:f5:45:43:f4:44:29:5e:04: 1e:61:73:89:1d:73:76:e6:71:3c:93:11:25:d5:b0:bf:13:dd: c5:25:0a:4b:1f:b5:bc:82:b1:91:20:37:41:bc:9d:c1:13:6f: d0:39:16:9a:97:95:b1:2b:26:ee:97:c3:42:a5:b3:49:fd:b9: 52:a7:40:ab:cf:8a:6a:84:03:8d:f1:21:82:40:f0:77:95:61: 06:ee:ae:2c:c7:d8:77:67:67:48:b9:61:1e:00:08:c5:18:b8: 19:68:41:a8:aa:8d:66:bc:86:fe:6e:44:67:ee:d1:82:c8:0e: eb:84:0d:0a:26:17:5e:1a:29:05:b3:5f:f9:0c:53:f9:98:d2: 20:fc:da:db:cf:17:e8:17:44:00:b9:94:9b:81:11:3f:26:3b: b5:03:e9:dc:f5:89:0a:d0:b4:eb:85:c2:b0:b2:48:8e:96:3d: 51:9c:c3:93:c5:15:cf:5a:56:b1:18:82:90:c3:46:a3:bd:a9: 87:2f:4c:7c:18:4a:60:46:b9:f1:52:3c:cd:b6:2f:c0:a0:df: 38:9b:89:0e:16:72:45:ea:55:8b:e7:00:af:71:f3:dc:eb:16: f6:8f:62:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrLadoh6bamaHrRmRjuCuBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYTgwYzQ4MzM3YmYyN2RiMmZkMDgzYzE3MmM2YTFjYzVk MWQxN2MwHhcNMjUxMTI4MTcwMTQzWhcNMjUxMTI5MTcwMTQzWjAzMTEwLwYDVQQD EyhhMWE5Y2U2YjM2YzJkYTQ5YmE4ZjExYTIxOWMxMWUxYzBmNzgwNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZDTH0EU1BN4icG6vBVueuNC67x GlGilskWLrnjll/s3QnfIeccwnbJM0iPemHw+i97yMEvIxsXmzIvj+jdl18TAVcX 9k5zxufKki9Z713oB/Nv7utfN2KCE930W1kC3VZXcZBZmyWzxGJgVWyjZ2rQwdYN 5qOAodT9PZP9aAxQsR0b1PHtI1QyWwDuOsKddKvTiCERiWuLNBs2FiF+5p6tWyh6 eEUBBQDcu1f5PTewMX/jxsfD1tx1vfawg3NA7M976MhyssCLHaM80YgBOm0O4MQs ZQwfcZha/wJ3BhH5OF+HRXBPkGj+gE7ofBqEUFw+nKIPtf0VyfvTc1lsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGpzms2wtpJuo8RohnBHhwPeAdFMB8GA1UdIwQY MBaAFPOoDEgze/J9sv0IPBcsahzF0dF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjkt MjY2NGRhY2U5NTgwLzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82ZTE3ZGQtYjQ4My00ZTdhLWFjZjktMjY2NGRhY2U5NTgw LzEvODZnTVNETjc4bjJ5X1FnOEZ5eHFITVhSMFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8Rm+nOM REZw9m8ITaCVSPmNDwFvMzBOa6pGfvVFQ/REKV4EHmFziR1zduZxPJMRJdWwvxPd xSUKSx+1vIKxkSA3QbydwRNv0DkWmpeVsSsm7pfDQqWzSf25UqdAq8+KaoQDjfEh gkDwd5VhBu6uLMfYd2dnSLlhHgAIxRi4GWhBqKqNZryG/m5EZ+7RgsgO64QNCiYX XhopBbNf+QxT+ZjSIPza288X6BdEALmUm4ERPyY7tQPp3PWJCtC064XCsLJIjpY9 UZzDk8UVz1pWsRiCkMNGo72phy9MfBhKYEa58VI8zbYvwKDfOJuJDhZyRepVi+cA r3Hz3OsW9o9i7Q== -----END CERTIFICATE-----Generated at Fri Nov 28 23:38:08 2025 by rpki-client