This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json) Hash identifier: qlph9J5WNwAaGINTtFqR7TT8yoJNdOOubet+9Liwn0w= Subject key identifier: CE:1E:E9:C3:38:CE:A8:0B:BC:6C:D1:00:36:2B:9A:01:58:A7:8A:39 Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019B24761135165C5A6962A2A9ECBD08E81E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft Manifest number: 02A1 Signing time: Tue 16 Dec 2025 00:01:15 +0000 Manifest this update: Tue 16 Dec 2025 00:01:15 +0000 Manifest next update: Wed 17 Dec 2025 00:01:15 +0000 Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: MlankcAcHkD4W5BoXnWixiKM7nfCBh09c98v/cTr2c0=) 2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:11:35:16:5c:5a:69:62:a2:a9:ec:bd:08:e8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Dec 16 00:01:15 2025 GMT Not After : Dec 17 00:01:15 2025 GMT Subject: CN=ce1ee9c338cea80bbc6cd100362b9a0158a78a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a8:f4:a6:0e:81:76:83:61:c8:5d:e3:07:e0: 4c:48:26:d9:1a:fe:a0:db:e8:44:4e:a2:3d:d8:e5: 7b:6e:b8:3e:fa:36:da:03:b4:53:17:5a:6a:03:33: 50:b7:ba:1c:d9:6e:2d:7c:d8:6e:d5:70:38:09:37: e8:bb:1b:24:d5:9c:d6:b6:16:46:4e:cc:13:c8:3e: 91:5c:dd:65:fe:ed:04:de:c2:16:f0:37:a0:bc:be: 0d:fe:46:e2:34:9d:29:f6:e0:d1:31:81:94:da:a5: 34:af:a0:2a:38:d7:3a:3f:91:ab:e1:ab:b8:0b:82: ea:66:b5:d4:e9:a9:a0:27:f7:23:e1:20:4b:a0:ce: 07:fc:ec:97:c0:77:0a:ac:ae:e3:25:07:1e:a7:5f: a2:f0:ea:c1:1d:d3:b2:31:69:3f:70:3f:96:db:a9: a9:ef:dc:44:bb:f9:71:76:39:bc:d9:eb:7d:a7:26: 0d:d9:0f:78:52:90:fd:d1:02:87:9f:6a:06:50:ab: 1a:2d:f4:b4:f1:01:c7:35:75:da:8e:95:51:dc:88: d9:1d:e4:76:d7:f8:66:79:79:d7:bb:f3:e0:f3:d9: ad:10:a8:56:70:3c:b2:dc:35:2a:5a:de:56:93:44: 7d:38:31:cc:0b:b1:be:1a:d7:a4:d0:fd:d5:e0:e3: 32:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1E:E9:C3:38:CE:A8:0B:BC:6C:D1:00:36:2B:9A:01:58:A7:8A:39 X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ad:a5:ab:b0:46:5e:21:c3:92:74:1d:40:9e:b7:53:85:10: 81:88:33:e6:8c:10:0b:fd:70:9a:99:ae:5a:3a:01:89:a0:a7: 7d:1a:b4:85:bc:9c:4a:7f:5d:40:c4:11:2c:81:6f:c8:34:4e: 3a:47:c5:7d:29:4c:7b:d5:eb:d3:db:14:f6:75:89:c1:e3:08: c6:b8:0e:ac:72:df:f2:c7:07:fe:4b:d4:7d:9d:e0:dd:19:9f: 0d:45:6a:bb:5e:d0:09:a2:3a:7a:fc:12:48:a0:02:87:4d:d4: 2c:95:8b:54:df:94:8d:08:14:eb:73:f4:5d:9e:73:a9:35:04: 99:bc:8c:37:a9:48:4c:2c:f6:c0:42:d6:2a:22:af:cb:26:f4: 53:8f:55:f2:ea:fd:b1:67:9f:6b:f4:a4:d9:ff:46:8c:cb:fa: 20:77:9a:5b:64:cd:77:20:4c:ec:8f:ba:2c:1b:cd:d4:b0:ee: ff:de:fe:26:79:0c:09:bd:42:e2:8d:01:e2:c7:24:23:bf:50: 59:54:df:28:5f:5c:9f:7f:e2:0a:86:c0:58:32:8b:2a:83:2b: 86:4f:2f:73:df:52:db:ca:71:93:78:a5:81:96:ec:dc:67:3e: 42:ab:78:8d:7c:0f:02:4d:aa:c5:93:73:87:c6:62:f0:23:6a: 52:0d:00:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdhE1FlxaaWKiqey9COgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjUxMjE2MDAwMTE1WhcNMjUxMjE3MDAwMTE1WjAzMTEwLwYDVQQD EyhjZTFlZTljMzM4Y2VhODBiYmM2Y2QxMDAzNjJiOWEwMTU4YTc4YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKj0pg6BdoNhyF3jB+BMSCbZGv6g 2+hETqI92OV7brg++jbaA7RTF1pqAzNQt7oc2W4tfNhu1XA4CTfouxsk1ZzWthZG TswTyD6RXN1l/u0E3sIW8DegvL4N/kbiNJ0p9uDRMYGU2qU0r6AqONc6P5Gr4au4 C4LqZrXU6amgJ/cj4SBLoM4H/OyXwHcKrK7jJQcep1+i8OrBHdOyMWk/cD+W26mp 79xEu/lxdjm82et9pyYN2Q94UpD90QKHn2oGUKsaLfS08QHHNXXajpVR3IjZHeR2 1/hmeXnXu/Pg89mtEKhWcDyy3DUqWt5Wk0R9ODHMC7G+Gtek0P3V4OMy2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4e6cM4zqgLvGzRADYrmgFYp4o5MB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH62lq7BG XiHDknQdQJ63U4UQgYgz5owQC/1wmpmuWjoBiaCnfRq0hbycSn9dQMQRLIFvyDRO OkfFfSlMe9Xr09sU9nWJweMIxrgOrHLf8scH/kvUfZ3g3RmfDUVqu17QCaI6evwS SKACh03ULJWLVN+UjQgU63P0XZ5zqTUEmbyMN6lITCz2wELWKiKvyyb0U49V8ur9 sWefa/Sk2f9GjMv6IHeaW2TNdyBM7I+6LBvN1LDu/97+JnkMCb1C4o0B4sckI79Q WVTfKF9cn3/iCobAWDKLKoMrhk8vc99S28pxk3ilgZbs3Gc+Qqt4jXwPAk2qxZNz h8Zi8CNqUg0AyA== -----END CERTIFICATE-----Generated at Tue Dec 16 08:59:22 2025 by rpki-client