This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json) Hash identifier: mAoIEVDGNS6pzxRHi2HBIfwKcH+mwtD4Uuo9ZL0vsGE= Subject key identifier: 39:63:C2:33:88:9A:D2:2A:36:41:83:2B:39:9C:CA:AE:55:60:AA:4B Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083 Certificate serial: 019B1F867360051B68B8AA3148BF6EFBD474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft Manifest number: 177D Signing time: Mon 15 Dec 2025 01:01:03 +0000 Manifest this update: Mon 15 Dec 2025 01:01:03 +0000 Manifest next update: Tue 16 Dec 2025 01:01:03 +0000 Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: 5w1TJQkkgmeb458qrGJc/lz/Ky3Pz79sVZ99jB07jk4=) 2: N4n5sfqwVKR0MtRKu60VkuVT8t8.roa (hash: 7oA83Z9SKqiyh1q+LTyv1yKzsMJNh3uvhrwtOfQSMtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:86:73:60:05:1b:68:b8:aa:31:48:bf:6e:fb:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083 Validity Not Before: Dec 15 01:01:03 2025 GMT Not After : Dec 16 01:01:03 2025 GMT Subject: CN=3963c233889ad22a3641832b399ccaae5560aa4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:dc:7d:79:41:95:e0:c0:75:3d:6e:00:dd: 6d:17:6a:21:28:70:e1:82:3b:56:9b:b5:1e:99:a8: e9:11:b5:fe:99:d0:06:32:e4:68:49:24:23:d1:0e: 35:f0:a6:9a:70:21:75:16:92:b8:9f:2b:42:34:d4: f4:2d:55:b1:8d:df:03:29:f5:fa:34:01:03:86:47: b8:4c:bf:58:33:7b:ca:56:82:93:2f:5b:f9:f7:77: 9d:2d:33:c3:39:64:b3:f5:3b:9b:67:2c:5e:a9:74: ed:48:5b:a5:6d:dd:10:fa:ec:6c:2f:56:39:0e:1f: c7:73:ca:31:33:55:e9:5f:9e:b2:08:d4:e4:50:54: 5b:28:ee:da:82:6d:07:b8:7d:a2:d0:5b:e5:ce:97: 45:89:3c:41:e0:a6:6e:0f:96:60:37:4d:54:1c:24: 8f:ef:cd:f8:53:35:2c:9d:26:a8:bc:cf:83:14:92: 37:4b:c0:19:ba:ba:53:02:5e:06:bf:02:d8:49:8a: fc:fe:41:52:22:ac:76:8b:81:2a:5d:e1:22:51:54: 9b:97:e1:d3:50:f4:1b:02:3d:bd:2d:e7:33:9c:b5: e9:87:f3:ae:7f:93:c0:43:d2:84:67:ec:22:ed:db: 14:c2:4d:ca:d5:78:9e:51:c6:63:a5:5d:ef:7b:d8: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:63:C2:33:88:9A:D2:2A:36:41:83:2B:39:9C:CA:AE:55:60:AA:4B X509v3 Authority Key Identifier: keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ee:24:27:ae:a1:6c:13:cd:71:21:59:e3:b8:05:fc:8f:97: 52:d8:39:a2:f4:c1:02:09:3c:4d:04:46:cb:18:7e:12:7f:03: 49:72:90:1f:d3:f3:5c:0c:11:c5:68:eb:b3:b2:76:4a:72:b4: be:c1:53:c6:43:46:cf:c8:79:aa:8d:b6:8c:c1:f3:30:46:b7: 76:06:bb:75:54:bf:ca:d3:8c:bf:b6:2c:06:eb:d4:43:23:a5: fd:5f:09:ff:9b:76:02:0d:55:28:96:66:69:4b:e3:cc:44:3f: 9b:8f:bf:83:dd:c0:4f:be:16:65:e4:d1:e3:a5:be:a0:1f:a7: 9f:b2:60:1b:ca:b4:78:e9:f3:b7:a5:4a:49:61:17:38:c5:27: d3:96:69:d4:00:84:0d:5c:f4:c2:a0:0f:10:3a:b2:43:bc:82: 68:4e:01:5c:8a:f4:70:26:ec:37:25:d1:70:d3:25:26:3e:58: c2:2d:d5:49:32:5d:25:27:64:34:e4:ac:88:f3:89:41:07:29: 7e:ce:80:c0:1b:4e:67:ba:c6:d5:59:28:e7:c8:d1:d1:6f:01: 8c:e4:1a:35:3b:00:e9:f9:dc:a2:16:1e:e9:9b:ea:16:af:3b: a4:9d:2d:15:09:db:0d:ff:18:08:b1:9f:9c:46:c1:cf:1b:05: 6d:5b:7a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfhnNgBRtouKoxSL9u+9R0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTI5ZGVjNWMwZjIzYWRkOWJhZWVlYTdiYjM5YWM4N2E3 MjkwODMwHhcNMjUxMjE1MDEwMTAzWhcNMjUxMjE2MDEwMTAzWjAzMTEwLwYDVQQD EygzOTYzYzIzMzg4OWFkMjJhMzY0MTgzMmIzOTljY2FhZTU1NjBhYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvTcfXlBleDAdT1uAN1tF2ohKHDh gjtWm7UemajpEbX+mdAGMuRoSSQj0Q418KaacCF1FpK4nytCNNT0LVWxjd8DKfX6 NAEDhke4TL9YM3vKVoKTL1v593edLTPDOWSz9TubZyxeqXTtSFulbd0Q+uxsL1Y5 Dh/Hc8oxM1XpX56yCNTkUFRbKO7agm0HuH2i0FvlzpdFiTxB4KZuD5ZgN01UHCSP 7834UzUsnSaovM+DFJI3S8AZurpTAl4GvwLYSYr8/kFSIqx2i4EqXeEiUVSbl+HT UPQbAj29LecznLXph/Ouf5PAQ9KEZ+wi7dsUwk3K1XieUcZjpV3ve9hC1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDljwjOImtIqNkGDKzmcyq5VYKpLMB8GA1UdIwQY MBaAFNuSnexcDyOt2bru6nuzmsh6cpCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMt ZDMwYjdlMjVhZTBiLzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9iZTVmZmYtYzkxMS00NTdjLTk1ZmMtZDMwYjdlMjVhZTBi LzEvMjVLZDdGd1BJNjNadXU3cWU3T2F5SHB5a0lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+4kJ66h bBPNcSFZ47gF/I+XUtg5ovTBAgk8TQRGyxh+En8DSXKQH9PzXAwRxWjrs7J2SnK0 vsFTxkNGz8h5qo22jMHzMEa3dga7dVS/ytOMv7YsBuvUQyOl/V8J/5t2Ag1VKJZm aUvjzEQ/m4+/g93AT74WZeTR46W+oB+nn7JgG8q0eOnzt6VKSWEXOMUn05Zp1ACE DVz0wqAPEDqyQ7yCaE4BXIr0cCbsNyXRcNMlJj5Ywi3VSTJdJSdkNOSsiPOJQQcp fs6AwBtOZ7rG1Vko58jR0W8BjOQaNTsA6fncohYe6ZvqFq87pJ0tFQnbDf8YCLGf nEbBzxsFbVt6Ng== -----END CERTIFICATE-----Generated at Mon Dec 15 06:47:09 2025 by rpki-client