This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json) Hash identifier: pwdTutTbQKrgJwkr1ztWYteM5yhDpnQ6+TDa/GvWgf0= Subject key identifier: 94:F8:8F:53:DB:8A:65:08:C7:C0:49:04:95:BC:C7:AE:05:4F:83:6A Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019B5A88A1F50D090549F76C6692FD9FE73C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft Manifest number: 54 Signing time: Fri 26 Dec 2025 12:01:02 +0000 Manifest this update: Fri 26 Dec 2025 12:01:02 +0000 Manifest next update: Sat 27 Dec 2025 12:01:02 +0000 Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: auQb+bTp4ETcLIYGFGKS9TgDnfJKJwVRu4vmIMHYlBw=) 2: aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa (hash: vWr6BftrdyWJD+hB0G6lD/tYnqXK0+OgPKOWHS3L0YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a1:f5:0d:09:05:49:f7:6c:66:92:fd:9f:e7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Dec 26 12:01:02 2025 GMT Not After : Dec 27 12:01:02 2025 GMT Subject: CN=94f88f53db8a6508c7c0490495bcc7ae054f836a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:40:2d:7f:af:91:8b:28:b8:e2:a1:ab:82:77: e9:ad:5a:f2:8c:0b:a1:8e:bb:8c:4c:05:8d:47:fa: 81:8e:d8:13:2d:1c:80:4b:a5:5f:73:08:4d:f7:7d: 21:79:69:34:f9:c3:99:62:4b:f5:fa:29:41:b1:52: f8:46:76:e4:ff:ab:d8:76:51:98:7d:58:e4:55:59: d5:a8:9b:eb:e4:bf:33:2a:9d:9d:57:7b:fa:d2:e5: be:a8:c8:e0:b5:c3:f4:4a:18:90:ed:82:4e:f4:1b: 11:d4:66:36:29:6e:10:38:30:ba:1e:6e:9b:2a:a6: f5:5c:0b:85:74:f6:83:6b:3a:7b:aa:df:a3:b4:92: 35:30:fe:83:d0:8c:98:1f:0c:9d:33:1f:68:6e:cf: e6:07:01:b7:95:8a:87:53:ef:03:9d:f9:33:75:61: 2c:0f:49:af:1f:ce:f8:c3:44:2e:68:30:ae:97:3d: 17:00:c3:8b:0e:e9:4c:57:18:bc:9f:36:7c:28:a8: bb:8f:85:ae:d6:53:12:22:26:79:b0:af:c7:4f:dc: d4:d5:26:47:e5:dd:d1:f5:97:10:37:4d:66:00:98: 13:34:70:af:05:2f:be:f2:17:da:48:33:c5:21:4c: 64:d1:86:1c:90:5c:9f:71:23:f0:3a:4d:be:39:14: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F8:8F:53:DB:8A:65:08:C7:C0:49:04:95:BC:C7:AE:05:4F:83:6A X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:93:41:53:ef:59:6f:d7:4f:57:2c:25:f3:bd:1c:94:51:4f: 73:07:c4:d8:07:58:c1:7c:05:b0:5e:09:b8:7f:c4:66:df:03: 7d:6f:d0:5d:07:21:e5:2e:cf:6f:9a:27:1d:b4:d8:28:af:07: ef:c0:3a:70:0b:71:ca:c1:55:4b:dc:dd:ea:9f:bf:32:c3:c2: f8:99:b2:1c:3c:ea:a8:17:21:72:4d:45:70:cc:05:e1:6d:6c: df:f0:1d:3c:96:61:f0:70:39:a2:49:90:56:d2:b5:9a:9a:24: 66:9a:bf:3e:88:4d:f8:18:86:78:b8:5a:85:9f:c7:a2:5d:b6: 42:f6:fb:4d:18:f1:42:0a:c6:10:da:49:73:f0:0f:04:33:41: aa:dd:fe:ac:8c:c7:66:c6:f8:9a:ab:75:e0:03:e4:f9:b4:73: 16:26:7a:e5:72:60:f4:94:ef:b4:79:a6:51:d3:dc:13:12:de: 2d:cd:0a:34:2c:00:cd:26:ae:17:d0:82:63:ab:5d:06:61:4b: ea:aa:8b:62:24:42:b0:c3:d6:31:50:70:94:c4:38:1d:9f:1e: 9e:c3:1d:14:09:d2:c0:63:8b:fc:4c:e8:62:6a:58:2b:e7:f4: ca:8a:dc:39:50:02:ac:e7:dd:52:15:af:6f:7b:d1:2e:ea:2a: ea:9e:1a:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKH1DQkFSfdsZpL9n+c8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjUxMjI2MTIwMTAyWhcNMjUxMjI3MTIwMTAyWjAzMTEwLwYDVQQD Eyg5NGY4OGY1M2RiOGE2NTA4YzdjMDQ5MDQ5NWJjYzdhZTA1NGY4MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Atf6+Riyi44qGrgnfprVryjAuh jruMTAWNR/qBjtgTLRyAS6VfcwhN930heWk0+cOZYkv1+ilBsVL4Rnbk/6vYdlGY fVjkVVnVqJvr5L8zKp2dV3v60uW+qMjgtcP0ShiQ7YJO9BsR1GY2KW4QODC6Hm6b Kqb1XAuFdPaDazp7qt+jtJI1MP6D0IyYHwydMx9obs/mBwG3lYqHU+8DnfkzdWEs D0mvH874w0QuaDCulz0XAMOLDulMVxi8nzZ8KKi7j4Wu1lMSIiZ5sK/HT9zU1SZH 5d3R9ZcQN01mAJgTNHCvBS++8hfaSDPFIUxk0YYckFyfcSPwOk2+ORROSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT4j1PbimUIx8BJBJW8x64FT4NqMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6pNBU+9Z b9dPVywl870clFFPcwfE2AdYwXwFsF4JuH/EZt8DfW/QXQch5S7Pb5onHbTYKK8H 78A6cAtxysFVS9zd6p+/MsPC+JmyHDzqqBchck1FcMwF4W1s3/AdPJZh8HA5okmQ VtK1mpokZpq/PohN+BiGeLhahZ/Hol22Qvb7TRjxQgrGENpJc/APBDNBqt3+rIzH Zsb4mqt14APk+bRzFiZ65XJg9JTvtHmmUdPcExLeLc0KNCwAzSauF9CCY6tdBmFL 6qqLYiRCsMPWMVBwlMQ4HZ8ensMdFAnSwGOL/EzoYmpYK+f0yorcOVACrOfdUhWv b3vRLuoq6p4azA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client