This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json) Hash identifier: gAHgoRIHt/QF1aB+CzGgp64lOt68w4gvqojPhSZVI5k= Subject key identifier: DC:99:EB:8A:6A:88:2F:90:50:3C:93:D6:49:A7:40:63:89:AC:98:9F Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66 Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66 Certificate serial: 019AF31C241721F2EB19779BBBC41E737C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft Manifest number: 08AE Signing time: Sat 06 Dec 2025 10:01:38 +0000 Manifest this update: Sat 06 Dec 2025 10:01:38 +0000 Manifest next update: Sun 07 Dec 2025 10:01:38 +0000 Files and hashes: 1: 1AGt6vAj9ZNv2w7Fp5tJobLB8aI.roa (hash: GbnSbQEBgHsaOZrngwqdPSv9qkJB1d7PRyKBT0jDdQQ=) 2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: IVAvIhMYzoT5Uo2zrFs7yJ1qrW2pLMfhSFYrGPGSU8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:24:17:21:f2:eb:19:77:9b:bb:c4:1e:73:7c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66 Validity Not Before: Dec 6 10:01:38 2025 GMT Not After : Dec 7 10:01:38 2025 GMT Subject: CN=dc99eb8a6a882f90503c93d649a7406389ac989f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:86:91:56:f0:03:ae:fb:f5:ea:bc:cc:05:7d: ec:ee:39:99:2a:8f:dd:33:fc:a9:73:ca:b8:dc:94: 5b:11:b7:18:38:fd:2c:7c:3b:07:6f:70:9e:e0:4d: aa:0a:47:2e:08:90:81:33:82:35:0b:00:0a:95:1e: 4a:2b:7b:bb:13:c0:45:42:98:fa:85:aa:f6:3f:21: 6b:1e:e7:3b:09:0c:12:51:f3:c2:21:f9:b7:39:d0: 30:8d:4b:28:4b:1d:fb:75:6e:f2:d6:dc:3b:09:f6: 6e:f0:27:b5:87:41:ca:1b:c4:fa:aa:c6:3f:73:50: 3d:ec:41:00:88:63:34:34:fd:c3:f9:4d:23:82:51: d4:59:1f:ac:05:a6:91:23:25:94:d7:70:28:e6:8d: 23:56:4a:93:68:0f:b1:02:f5:0c:54:f5:f7:a9:72: 0f:5b:cf:54:44:47:d8:bb:e5:d3:a0:b6:34:16:16: af:4c:9f:02:a0:1a:0b:3a:20:e2:72:6b:84:b0:e9: bb:a1:fc:5d:1c:14:ee:3a:f4:1a:06:68:ec:d7:ce: 87:be:78:e4:7b:ab:b3:bc:37:6a:13:3b:29:0a:89: 89:4c:be:ac:73:78:e2:74:cc:80:4e:05:98:dd:27: 9a:7b:63:60:5d:04:8f:50:7d:a7:cf:7e:d7:67:14: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:99:EB:8A:6A:88:2F:90:50:3C:93:D6:49:A7:40:63:89:AC:98:9F X509v3 Authority Key Identifier: keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:35:81:97:08:64:ac:40:dc:fd:b9:c1:a6:f0:bd:cb:9b:18: f0:c6:f8:23:7c:11:e5:59:65:6b:6f:f0:41:2e:5a:9f:1e:cd: 5d:81:18:bb:6b:9d:62:e5:a7:ee:cd:55:25:fd:f4:18:64:cf: 1e:67:cb:6f:00:56:85:b4:33:a8:e4:42:bb:c3:02:d4:9c:1e: 5f:0b:e9:16:d2:53:f9:bb:38:74:12:6d:69:c1:a5:4a:91:2f: 68:ab:3c:4b:a1:65:a7:f2:a7:92:6f:8b:6a:e3:1a:36:e6:41: 79:ce:a7:32:7f:9c:8f:b3:2b:10:fe:62:2b:2a:c4:df:80:29: 82:b9:8e:04:ec:c1:72:aa:18:32:28:c8:15:28:b7:a2:0f:74: 79:30:90:94:ef:ca:d5:b9:55:8e:8a:a1:12:cc:77:a1:1d:41: d7:94:e0:24:c2:94:8f:98:30:9b:e6:4e:ba:5b:ff:5f:94:97: c9:00:b0:0d:5a:f3:dc:d7:61:f1:a4:cb:db:75:06:d0:7e:43: db:46:5c:86:98:67:4d:cc:5e:47:2e:6c:75:49:12:e8:71:2d: 70:ad:a8:5b:00:ae:f8:e4:82:dd:dc:b8:16:b5:af:5c:49:19: a7:15:55:52:aa:b2:98:ef:8f:4e:7f:ad:82:d4:36:0b:49:b6: cd:1d:79:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCQXIfLrGXebu8Qec3xBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZGQyOTdkMDg5OGZmZmRlMjhkNzY5Njc5NWJkYmQ1MjIz ZjhhNjYwHhcNMjUxMjA2MTAwMTM4WhcNMjUxMjA3MTAwMTM4WjAzMTEwLwYDVQQD EyhkYzk5ZWI4YTZhODgyZjkwNTAzYzkzZDY0OWE3NDA2Mzg5YWM5ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4aRVvADrvv16rzMBX3s7jmZKo/d M/ypc8q43JRbEbcYOP0sfDsHb3Ce4E2qCkcuCJCBM4I1CwAKlR5KK3u7E8BFQpj6 har2PyFrHuc7CQwSUfPCIfm3OdAwjUsoSx37dW7y1tw7CfZu8Ce1h0HKG8T6qsY/ c1A97EEAiGM0NP3D+U0jglHUWR+sBaaRIyWU13Ao5o0jVkqTaA+xAvUMVPX3qXIP W89UREfYu+XToLY0FhavTJ8CoBoLOiDicmuEsOm7ofxdHBTuOvQaBmjs186Hvnjk e6uzvDdqEzspComJTL6sc3jidMyATgWY3Seae2NgXQSPUH2nz37XZxQ3DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyZ64pqiC+QUDyT1kmnQGOJrJifMB8GA1UdIwQY MBaAFMfdKX0ImP/94o12lnlb29UiP4pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEt MWYzYjViMDU2ZGZjLzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEtMWYzYjViMDU2ZGZj LzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTWBlwhk rEDc/bnBpvC9y5sY8Mb4I3wR5Vlla2/wQS5anx7NXYEYu2udYuWn7s1VJf30GGTP HmfLbwBWhbQzqORCu8MC1JweXwvpFtJT+bs4dBJtacGlSpEvaKs8S6Flp/Knkm+L auMaNuZBec6nMn+cj7MrEP5iKyrE34ApgrmOBOzBcqoYMijIFSi3og90eTCQlO/K 1blVjoqhEsx3oR1B15TgJMKUj5gwm+ZOulv/X5SXyQCwDVrz3Ndh8aTL23UG0H5D 20ZchphnTcxeRy5sdUkS6HEtcK2oWwCu+OSC3dy4FrWvXEkZpxVVUqqymO+PTn+t gtQ2C0m2zR153w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:10 2025 by rpki-client