This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: QKcZZHumG59VoVfIBkOawKje49g7QpnC1qLk0HwXxLw= Subject key identifier: F0:8C:8F:C0:F0:B6:65:FB:23:47:0B:DA:9B:A2:C9:8B:C1:92:AE:DD Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019B0CDBD0BE14BCBB1CEB8D91DE9E5C5CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 045B Signing time: Thu 11 Dec 2025 10:01:30 +0000 Manifest this update: Thu 11 Dec 2025 10:01:30 +0000 Manifest next update: Fri 12 Dec 2025 10:01:30 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: Nj//NeDhOS/645NKGFGWsy/07t7ktwSjX5aXkA+wiLg=) 2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:d0:be:14:bc:bb:1c:eb:8d:91:de:9e:5c:5c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Dec 11 10:01:30 2025 GMT Not After : Dec 12 10:01:30 2025 GMT Subject: CN=f08c8fc0f0b665fb23470bda9ba2c98bc192aedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:43:5e:26:f4:f5:d1:0e:ae:fc:52:4b:b9: 44:22:17:e4:b3:79:29:b3:23:dd:bc:e0:fd:8b:03: 9b:df:12:a6:05:58:6c:96:ad:39:ec:6f:94:ec:96: 55:f1:4f:6b:d0:62:bf:c9:cb:f0:e4:1d:8e:cd:7b: 69:56:fa:81:54:f2:47:43:43:62:78:09:bc:da:7f: 17:86:16:21:f5:c8:50:70:57:26:cf:cc:b0:93:90: e3:44:57:01:ff:e2:cb:08:09:37:99:6b:3c:ef:5b: 00:ad:9d:42:35:12:36:71:53:b6:b8:c3:67:e2:58: c8:70:90:9f:ab:54:9a:b1:52:df:fc:d7:eb:03:3e: 03:49:c0:e1:15:1d:bf:c4:16:90:14:48:1f:1a:38: aa:c3:81:52:a2:f0:c2:31:7c:53:7b:7e:08:6d:c9: 52:b6:1b:01:37:d9:43:53:76:a0:f8:87:4b:6f:a3: 41:a6:4c:99:08:1d:9a:07:b2:01:5e:63:d7:4e:2c: 69:80:38:ee:8b:ae:2a:a5:9d:dc:10:09:b1:5b:a4: 65:0e:d7:10:0f:0b:4c:b5:51:6d:9a:b9:a9:d6:eb: a6:a0:0f:44:e0:d5:87:72:6f:72:24:04:1f:82:23: bb:ad:94:42:a0:54:81:db:72:07:57:67:fb:60:a3: 80:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8C:8F:C0:F0:B6:65:FB:23:47:0B:DA:9B:A2:C9:8B:C1:92:AE:DD X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:1c:3d:6b:c2:c2:b3:ee:2d:9c:3f:2b:74:c2:9e:1e:c7: c7:64:f8:91:10:8c:20:d5:87:60:2a:e0:09:c0:87:f4:a0:01: 7c:b3:3e:d7:28:4a:6c:5a:98:ec:cb:65:fe:33:bd:31:2f:a1: c0:43:2c:28:ae:13:50:34:ca:52:13:e3:d6:94:48:c3:36:b8: 76:0f:17:db:e6:00:c3:9a:5f:6b:70:f5:7d:d7:df:1c:72:16: ee:f5:3b:67:82:d1:bd:80:ee:fd:8b:94:07:ec:0a:09:77:e2: 98:83:a3:4c:76:33:8a:1b:71:ac:d3:40:76:17:14:c0:f2:ac: 85:2c:c6:ed:18:af:55:f1:92:48:89:e0:32:8c:5e:0c:c9:b7: 5e:35:c9:ca:27:45:45:9d:b6:df:71:40:f6:dc:7f:b7:55:42: ec:4c:0a:60:39:3f:e8:06:19:a1:5f:03:fd:d6:61:30:2f:ac: c7:db:3a:70:26:b5:2a:eb:94:9b:53:94:17:e6:23:1a:f4:fe: 98:6b:71:65:07:5e:4a:24:2f:50:a4:12:38:07:16:4d:50:7a: 7e:a8:5e:eb:5a:60:4a:09:db:6a:c9:16:fd:18:16:71:b9:f8: ea:01:a7:c3:0d:e9:df:9c:ae:46:f7:2b:d8:58:e3:41:b7:bf: 14:f4:8f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM29C+FLy7HOuNkd6eXFyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjUxMjExMTAwMTMwWhcNMjUxMjEyMTAwMTMwWjAzMTEwLwYDVQQD EyhmMDhjOGZjMGYwYjY2NWZiMjM0NzBiZGE5YmEyYzk4YmMxOTJhZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEJDXib09dEOrvxSS7lEIhfks3kp syPdvOD9iwOb3xKmBVhslq057G+U7JZV8U9r0GK/ycvw5B2OzXtpVvqBVPJHQ0Ni eAm82n8XhhYh9chQcFcmz8ywk5DjRFcB/+LLCAk3mWs871sArZ1CNRI2cVO2uMNn 4ljIcJCfq1SasVLf/NfrAz4DScDhFR2/xBaQFEgfGjiqw4FSovDCMXxTe34IbclS thsBN9lDU3ag+IdLb6NBpkyZCB2aB7IBXmPXTixpgDjui64qpZ3cEAmxW6RlDtcQ DwtMtVFtmrmp1uumoA9E4NWHcm9yJAQfgiO7rZRCoFSB23IHV2f7YKOAgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCMj8DwtmX7I0cL2puiyYvBkq7dMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAP4cPWvC wrPuLZw/K3TCnh7Hx2T4kRCMINWHYCrgCcCH9KABfLM+1yhKbFqY7Mtl/jO9MS+h wEMsKK4TUDTKUhPj1pRIwza4dg8X2+YAw5pfa3D1fdffHHIW7vU7Z4LRvYDu/YuU B+wKCXfimIOjTHYzihtxrNNAdhcUwPKshSzG7RivVfGSSIngMoxeDMm3XjXJyidF RZ2233FA9tx/t1VC7EwKYDk/6AYZoV8D/dZhMC+sx9s6cCa1KuuUm1OUF+YjGvT+ mGtxZQdeSiQvUKQSOAcWTVB6fqhe61pgSgnbaskW/RgWcbn46gGnww3p35yuRvcr 2FjjQbe/FPSP/A== -----END CERTIFICATE-----Generated at Thu Dec 11 19:22:41 2025 by rpki-client