This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json) Hash identifier: l17imU17H79DGuq8+p9tlQLdflw4jQ3mkOH4rz/jOFw= Subject key identifier: CA:DC:F5:1C:DB:B7:0A:91:1A:94:51:EE:7F:63:FF:4C:DA:45:A0:80 Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Certificate serial: 019B198408F03527EF414AE399083321A187 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft Manifest number: 1790 Signing time: Sat 13 Dec 2025 21:00:41 +0000 Manifest this update: Sat 13 Dec 2025 21:00:41 +0000 Manifest next update: Sun 14 Dec 2025 21:00:41 +0000 Files and hashes: 1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=) 2: ToMuWHyiRaajps4vDuhQJOslyAU.roa (hash: ke6Ja8Xs3dkfS5WPMbYkREYjZOPIsKYiNDdqbTUvm8g=) 3: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=) 4: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=) 5: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=) 6: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: HDTj+KKNgm+ynvF7+aClfQG4fFt5sCXYy7zgIxBnEEE=) 7: s_aKE2fwvI0TlJb7EYHJTZWCW7w.roa (hash: fh6F14UFEi/72CmWgxdS2ArW4727YK4EYnZc6mj0zIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:84:08:f0:35:27:ef:41:4a:e3:99:08:33:21:a1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900 Validity Not Before: Dec 13 21:00:41 2025 GMT Not After : Dec 14 21:00:41 2025 GMT Subject: CN=cadcf51cdbb70a911a9451ee7f63ff4cda45a080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:8c:4d:96:cc:db:ba:75:4b:d9:b0:08:c3: 23:6a:2e:43:9d:a6:1a:f0:ef:29:21:55:77:b3:75: 8d:b3:07:94:80:42:b8:fa:ca:8a:ea:3e:c4:63:de: 85:6a:19:d5:bc:a2:e7:1d:93:3e:22:92:55:c7:c6: b2:db:26:d4:2c:3a:6f:72:c2:64:ad:66:57:6c:93: d7:95:22:62:9d:3e:3f:c5:02:13:92:4b:97:f6:97: 76:7c:d4:63:92:13:21:c1:12:79:f9:fe:57:38:7f: ec:ba:26:f6:e4:b1:ab:0b:ba:b3:89:42:5c:04:e2: 59:1c:a0:af:34:7d:e3:88:a0:f3:36:77:ec:60:c1: 65:35:ea:a6:a8:4e:f6:af:19:43:0d:d7:f2:5b:09: bd:7b:70:17:fa:17:c5:3f:88:05:fc:84:de:00:91: 71:5b:28:68:c7:40:c8:9b:4b:46:e7:40:a5:60:1d: 02:f1:ea:6c:fe:80:7c:25:f1:af:3d:2c:18:86:5b: 44:05:09:82:d4:94:3b:33:bd:6c:cc:b9:c7:24:d7: d6:b2:db:5b:e6:29:02:0b:1e:3b:2b:4f:66:c1:3a: de:f4:9c:52:70:aa:c2:c1:51:c4:31:64:08:5e:df: 89:04:5f:fb:b9:7e:bd:06:30:a0:bf:f8:41:fc:48: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DC:F5:1C:DB:B7:0A:91:1A:94:51:EE:7F:63:FF:4C:DA:45:A0:80 X509v3 Authority Key Identifier: keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9e:48:2b:01:9f:f5:55:fc:a1:9d:ad:6a:72:9d:75:fc:de: 52:3e:a6:fd:c8:29:c4:55:e3:dd:07:ee:ae:7c:dd:36:03:bf: 94:75:7b:5b:71:80:5a:1e:06:dc:e6:14:37:bf:e4:5c:09:bc: 95:8b:59:04:3a:43:12:61:ac:fe:00:d8:c7:ef:01:fe:32:71: 1e:9d:29:8f:88:48:88:82:2f:9e:81:43:86:13:8b:c0:3e:11: 2e:0f:97:0a:b4:e5:b1:2d:c1:33:16:89:7b:fc:a9:6e:bb:b7: c9:63:a1:94:cc:a2:5a:fa:3b:1c:70:6f:7a:64:05:5d:fa:21: b1:15:e1:cc:46:a3:26:38:d3:d6:69:20:15:75:28:0e:1c:98: 3f:7f:30:b1:2e:b9:ab:cf:61:fb:bc:31:48:0b:8c:6e:1b:89: c0:55:ba:6e:d2:b8:12:1a:3f:30:50:4e:ca:43:2a:31:a1:84: 7a:03:f5:5a:78:fb:12:d8:de:1c:7b:44:3f:99:29:e5:0e:33: 28:34:e9:8e:ee:f2:ad:75:74:93:42:59:a4:f7:ac:0c:a8:c8: 48:ca:e4:c3:de:c9:37:1c:b5:a9:f1:63:cd:f3:49:79:1d:00: b6:17:33:d1:83:91:1c:f0:85:ac:de:be:1a:2f:d5:df:1f:42: fd:e5:a1:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZhAjwNSfvQUrjmQgzIaGHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlN2Y3NDdkZjVmMjQzNTMxNTRkYzRkNGJmNzBkMmRkY2I1 M2U5MDAwHhcNMjUxMjEzMjEwMDQxWhcNMjUxMjE0MjEwMDQxWjAzMTEwLwYDVQQD EyhjYWRjZjUxY2RiYjcwYTkxMWE5NDUxZWU3ZjYzZmY0Y2RhNDVhMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQeMTZbM27p1S9mwCMMjai5DnaYa 8O8pIVV3s3WNsweUgEK4+sqK6j7EY96FahnVvKLnHZM+IpJVx8ay2ybULDpvcsJk rWZXbJPXlSJinT4/xQITkkuX9pd2fNRjkhMhwRJ5+f5XOH/suib25LGrC7qziUJc BOJZHKCvNH3jiKDzNnfsYMFlNeqmqE72rxlDDdfyWwm9e3AX+hfFP4gF/ITeAJFx Wyhox0DIm0tG50ClYB0C8eps/oB8JfGvPSwYhltEBQmC1JQ7M71szLnHJNfWsttb 5ikCCx47K09mwTre9JxScKrCwVHEMWQIXt+JBF/7uX69BjCgv/hB/EhcLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrc9RzbtwqRGpRR7n9j/0zaRaCAMB8GA1UdIwQY MBaAFK5/dH318kNTFU3E1L9w0t3LU+kAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2Et YzZmMWU2YWM5YmE5LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81OGFmMjQtYzQ1NC00NGIwLWE3Y2EtYzZmMWU2YWM5YmE5 LzEvcm45MGZmWHlRMU1WVGNUVXYzRFMzY3RUNlFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe55IKwGf 9VX8oZ2tanKddfzeUj6m/cgpxFXj3QfurnzdNgO/lHV7W3GAWh4G3OYUN7/kXAm8 lYtZBDpDEmGs/gDYx+8B/jJxHp0pj4hIiIIvnoFDhhOLwD4RLg+XCrTlsS3BMxaJ e/ypbru3yWOhlMyiWvo7HHBvemQFXfohsRXhzEajJjjT1mkgFXUoDhyYP38wsS65 q89h+7wxSAuMbhuJwFW6btK4Eho/MFBOykMqMaGEegP1Wnj7EtjeHHtEP5kp5Q4z KDTpju7yrXV0k0JZpPesDKjISMrkw97JNxy1qfFjzfNJeR0Athcz0YORHPCFrN6+ Gi/V3x9C/eWhgw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:37 2025 by rpki-client