This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json) Hash identifier: 329jgnGNnOlfZA5TQ5BgevI58Nuy4iMBw2lPzIWxCAA= Subject key identifier: 81:2E:E0:22:D3:F6:5C:29:DB:1D:AF:FF:C6:8E:CB:BA:A1:48:50:1D Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Certificate serial: 019B0E259BE5AEEC84F1DDDC277F184A7CF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 16:01:44 +0000 Manifest this update: Thu 11 Dec 2025 16:01:44 +0000 Manifest next update: Fri 12 Dec 2025 16:01:44 +0000 Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: GYI0AfxcdkfGep5aG0WOte1pyTyPm/hHRlOCIKKIlwk=) 2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=) 3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:9b:e5:ae:ec:84:f1:dd:dc:27:7f:18:4a:7c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Validity Not Before: Dec 11 16:01:44 2025 GMT Not After : Dec 12 16:01:44 2025 GMT Subject: CN=812ee022d3f65c29db1dafffc68ecbbaa148501d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:02:09:4a:23:20:38:dc:ad:4a:d1:d2:e1: 2b:96:2f:41:26:05:6c:a7:dd:7b:3b:e2:bb:15:9e: 70:e1:04:cf:77:e8:98:8e:9c:38:a1:aa:77:d1:24: c4:af:bc:8e:b8:47:93:40:55:4d:79:fe:53:04:4d: 9d:ac:be:b5:87:55:5c:db:8b:46:77:1b:76:47:d6: 5d:f8:f1:a8:ab:ee:3d:c9:a2:d1:a2:61:e5:99:f4: 54:df:f8:26:dc:b0:52:4e:74:8e:a1:41:08:be:0f: a2:38:00:bf:ff:4b:71:27:2e:47:81:3e:ff:cb:1c: 8c:9a:1b:ac:e7:8a:cf:b4:fe:30:b7:03:4b:e6:cc: a8:93:d4:24:8e:0e:6d:13:40:9b:4b:f1:c9:96:3a: c9:6d:bd:40:d4:67:03:cc:32:f1:5a:eb:06:c2:11: e6:9c:86:41:d5:c0:db:8d:bd:3f:4f:2c:ae:75:ee: 7f:ff:0a:d4:32:ba:3e:b2:27:49:43:26:c4:b8:ac: 81:8d:d8:59:14:4d:bc:d1:9a:cc:26:30:6d:d3:41: eb:db:3d:48:a6:46:6c:64:8c:58:7b:ae:ad:42:3a: fc:2b:df:2f:af:68:25:de:6c:7c:62:93:e5:8a:90: 10:49:25:b8:6b:bf:05:43:aa:25:dc:59:87:a7:d1: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2E:E0:22:D3:F6:5C:29:DB:1D:AF:FF:C6:8E:CB:BA:A1:48:50:1D X509v3 Authority Key Identifier: keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:28:5a:f5:c7:a3:69:92:76:d2:64:76:c9:c5:b7:e0:c4: ea:a4:62:e2:b5:34:f3:16:a5:64:ab:05:72:41:61:e5:45:5e: 37:9d:92:60:6c:d2:60:6d:68:70:f9:23:28:51:38:05:6f:41: a5:92:fd:3d:eb:e7:8a:5b:31:8e:e4:73:c0:74:83:7b:4b:3a: bb:45:61:af:23:90:18:2e:3c:42:68:2b:e3:e9:c3:02:67:e3: 61:1f:dc:cc:07:14:f5:60:89:52:43:68:6e:73:36:04:00:69: 5f:1a:a7:8b:53:15:07:ec:c1:ad:01:16:9e:8f:fc:cf:cf:7a: 85:0d:5a:39:5e:b4:6a:c7:d1:80:c6:f4:0d:27:0d:22:d1:d1: 8d:ca:15:83:a3:18:c4:ec:d7:50:04:b2:45:f2:4b:04:f6:16: 01:a9:04:59:be:35:ac:d6:ef:24:fc:d8:fd:43:07:6c:ac:3d: 1d:91:14:4f:62:82:d4:91:83:27:c4:9c:91:2d:b7:10:05:f2: f8:5d:02:bd:29:c6:9d:03:7d:40:8d:89:85:0b:5e:0e:d5:39: 1d:d4:9f:4d:4d:55:59:50:71:1f:28:d6:3a:95:d6:fc:78:22: 18:8b:3e:27:ff:f5:6f:70:57:e0:63:5a:4a:ae:7d:b2:2d:39: ea:fd:6e:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJZvlruyE8d3cJ38YSnz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3 YTBlY2UwHhcNMjUxMjExMTYwMTQ0WhcNMjUxMjEyMTYwMTQ0WjAzMTEwLwYDVQQD Eyg4MTJlZTAyMmQzZjY1YzI5ZGIxZGFmZmZjNjhlY2JiYWExNDg1MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxsCCUojIDjcrUrR0uErli9BJgVs p917O+K7FZ5w4QTPd+iYjpw4oap30STEr7yOuEeTQFVNef5TBE2drL61h1Vc24tG dxt2R9Zd+PGoq+49yaLRomHlmfRU3/gm3LBSTnSOoUEIvg+iOAC//0txJy5HgT7/ yxyMmhus54rPtP4wtwNL5syok9Qkjg5tE0CbS/HJljrJbb1A1GcDzDLxWusGwhHm nIZB1cDbjb0/Tyyude5//wrUMro+sidJQybEuKyBjdhZFE280ZrMJjBt00Hr2z1I pkZsZIxYe66tQjr8K98vr2gl3mx8YpPlipAQSSW4a78FQ6ol3FmHp9HwgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEu4CLT9lwp2x2v/8aOy7qhSFAdMB8GA1UdIwQY MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt YTY5YzViYzdlZDU3LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3 LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh4oWvXH o2mSdtJkdsnFt+DE6qRi4rU08xalZKsFckFh5UVeN52SYGzSYG1ocPkjKFE4BW9B pZL9PevnilsxjuRzwHSDe0s6u0VhryOQGC48Qmgr4+nDAmfjYR/czAcU9WCJUkNo bnM2BABpXxqni1MVB+zBrQEWno/8z896hQ1aOV60asfRgMb0DScNItHRjcoVg6MY xOzXUASyRfJLBPYWAakEWb41rNbvJPzY/UMHbKw9HZEUT2KC1JGDJ8SckS23EAXy +F0CvSnGnQN9QI2JhQteDtU5HdSfTU1VWVBxHyjWOpXW/HgiGIs+J//1b3BX4GNa Sq59si056v1ueA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:22 2025 by rpki-client