This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json) Hash identifier: tGXxCCVyJOY4yJT02qkkC90Zf9JO9ZJszB88/MVQtwI= Subject key identifier: 7E:62:1B:AC:52:A0:D3:83:9B:10:80:B3:AC:9E:CC:55:7D:52:AC:68 Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019B360E0AB7B3A7EB338BC257DBBA9871E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 10:00:48 +0000 Manifest this update: Fri 19 Dec 2025 10:00:48 +0000 Manifest next update: Sat 20 Dec 2025 10:00:48 +0000 Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=) 2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: cojK3AyQyhvpMMCPAGyJNVCNA/VfZXKY5roBzbL42go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:0a:b7:b3:a7:eb:33:8b:c2:57:db:ba:98:71:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Dec 19 10:00:48 2025 GMT Not After : Dec 20 10:00:48 2025 GMT Subject: CN=7e621bac52a0d3839b1080b3ac9ecc557d52ac68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:0a:27:93:90:dc:8b:8d:d5:f2:88:90:e7: 5f:2a:af:9e:b7:a5:9d:77:67:42:6c:78:3c:3f:85: 2c:40:b2:65:80:95:a0:28:59:97:f8:3b:3c:4b:8a: f2:7d:77:0d:d3:f0:c9:4e:de:be:53:58:21:a5:65: 6a:d3:ea:63:70:6c:fb:e0:27:56:8a:3b:60:e2:f9: 84:04:2b:f3:0f:12:c6:d9:69:f0:42:46:27:1b:66: b2:c0:b8:e4:4e:2c:e0:50:d3:1d:04:71:86:d8:4a: 7d:de:e4:d9:02:0a:8a:b3:01:a4:20:bb:84:f2:35: c5:cc:5b:63:87:75:d0:38:31:b8:47:91:ef:12:3b: b8:57:39:dd:a8:3a:90:77:b6:6e:83:f9:70:71:3f: 1b:f4:b3:63:b2:f3:04:66:f4:1d:e6:61:46:dc:3a: 76:8c:57:4e:9e:45:6a:c9:3a:c6:de:7e:b7:e1:79: 87:03:21:a0:6c:e6:f6:05:f0:6e:73:b1:29:b1:6e: 32:41:c8:6d:20:c5:a8:1d:5b:da:3f:70:a9:75:76: 61:51:ae:57:4c:52:e9:6f:af:36:dc:04:73:22:82: dd:71:52:d2:00:ed:32:ab:b3:ef:f7:4a:a1:7b:9a: f9:28:ad:c3:9e:f8:47:53:17:d3:72:cf:1b:8f:34: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:62:1B:AC:52:A0:D3:83:9B:10:80:B3:AC:9E:CC:55:7D:52:AC:68 X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b6:80:dd:4c:19:1d:f2:00:55:18:41:05:97:81:21:5c:f5: 9b:80:cf:2e:cd:ff:c1:3e:8d:d7:24:37:16:85:31:7b:c5:22: a9:8b:0c:3a:a2:d3:d5:b4:54:8e:22:88:73:e9:e4:b4:d7:df: ca:77:84:af:75:d4:6f:fd:af:06:97:94:50:37:8c:cc:98:7d: 95:0a:d5:c9:16:1a:8f:c4:1a:4d:76:40:14:97:3a:09:60:da: 5b:97:1f:96:18:d5:3e:4e:c9:ee:0d:38:7f:10:7c:d1:16:cf: 39:be:fa:fe:d1:8b:f1:92:d7:8b:26:81:fe:16:cf:50:5a:78: 12:07:e6:77:82:2d:e1:88:67:af:94:5f:ab:a1:01:03:a6:4b: 99:f7:d2:15:b8:1b:76:28:e1:3e:15:45:09:1d:ee:8e:e6:a3: dd:e6:93:0d:54:d8:d2:07:8c:e3:c5:35:8a:ff:8c:87:e4:11: 4c:23:47:9b:36:19:05:5d:e8:9f:4f:58:ea:7f:8d:14:f0:04: f0:61:e5:86:79:d7:da:e9:cf:1a:e6:d0:38:c8:e0:ac:97:ee: 51:7a:5b:d0:54:c7:8a:ac:fd:16:66:9a:45:2f:27:0c:bf:60: 3b:de:5d:09:5a:76:4e:89:a2:95:38:9f:d5:a2:d7:79:64:3c: c0:bc:cc:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Dgq3s6frM4vCV9u6mHHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjUxMjE5MTAwMDQ4WhcNMjUxMjIwMTAwMDQ4WjAzMTEwLwYDVQQD Eyg3ZTYyMWJhYzUyYTBkMzgzOWIxMDgwYjNhYzllY2M1NTdkNTJhYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBcKJ5OQ3IuN1fKIkOdfKq+et6Wd d2dCbHg8P4UsQLJlgJWgKFmX+Ds8S4ryfXcN0/DJTt6+U1ghpWVq0+pjcGz74CdW ijtg4vmEBCvzDxLG2WnwQkYnG2aywLjkTizgUNMdBHGG2Ep93uTZAgqKswGkILuE 8jXFzFtjh3XQODG4R5HvEju4VzndqDqQd7Zug/lwcT8b9LNjsvMEZvQd5mFG3Dp2 jFdOnkVqyTrG3n634XmHAyGgbOb2BfBuc7EpsW4yQchtIMWoHVvaP3CpdXZhUa5X TFLpb6823ARzIoLdcVLSAO0yq7Pv90qhe5r5KK3DnvhHUxfTcs8bjzTu+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5iG6xSoNODmxCAs6yezFV9UqxoMB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbaA3UwZ HfIAVRhBBZeBIVz1m4DPLs3/wT6N1yQ3FoUxe8UiqYsMOqLT1bRUjiKIc+nktNff yneEr3XUb/2vBpeUUDeMzJh9lQrVyRYaj8QaTXZAFJc6CWDaW5cflhjVPk7J7g04 fxB80RbPOb76/tGL8ZLXiyaB/hbPUFp4Egfmd4It4Yhnr5Rfq6EBA6ZLmffSFbgb dijhPhVFCR3ujuaj3eaTDVTY0geM48U1iv+Mh+QRTCNHmzYZBV3on09Y6n+NFPAE 8GHlhnnX2unPGubQOMjgrJfuUXpb0FTHiqz9FmaaRS8nDL9gO95dCVp2TomilTif 1aLXeWQ8wLzMtg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:10:24 2025 by rpki-client