This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json) Hash identifier: qPo/4Wct+YMPlK5lTj9dCoKYvUv7wH+VRIcqavB8BMw= Subject key identifier: 75:2C:C5:1E:EB:83:61:2C:AD:CC:EB:68:01:FF:28:AC:18:83:63:8B Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019AF087FBE298827CAFED159AE9AEC17AC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft Manifest number: 1D Signing time: Fri 05 Dec 2025 22:00:34 +0000 Manifest this update: Fri 05 Dec 2025 22:00:34 +0000 Manifest next update: Sat 06 Dec 2025 22:00:34 +0000 Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: hECGw7UpZl7TSGTLj/Ry15hGa8M7qLqJ4QjEIQ9EO8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:fb:e2:98:82:7c:af:ed:15:9a:e9:ae:c1:7a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Dec 5 22:00:34 2025 GMT Not After : Dec 6 22:00:34 2025 GMT Subject: CN=752cc51eeb83612cadcceb6801ff28ac1883638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:f5:a2:0f:7b:50:46:16:87:57:85:ee:90: 7a:38:74:37:89:f9:b3:cc:8b:2b:e8:2f:66:ea:1f: 52:5d:4a:72:36:42:5a:a7:43:c4:d9:de:9e:25:37: eb:9a:ea:11:19:8b:ee:c9:20:eb:9d:2a:cd:fa:fe: f6:c8:0f:9c:7a:4d:c8:ad:bb:56:36:54:21:95:6f: 53:63:a8:16:93:83:bc:9c:b2:9e:98:30:b6:75:81: f6:16:c2:13:aa:b7:d6:4b:65:7b:21:76:df:80:5b: fb:37:53:8e:bf:cf:3d:5d:11:1b:2f:8e:52:cd:2a: 80:52:85:b5:7a:0e:e2:81:a6:92:34:e9:7c:20:9d: ac:0a:09:7f:31:3f:2b:3d:2d:5f:67:c3:c1:9b:a4: b2:9d:81:be:26:af:ac:bb:18:3c:23:22:d0:ec:d8: 41:d2:43:a8:93:f3:dd:b0:47:1f:09:f9:d2:41:d8: eb:7e:5a:1d:af:06:8f:a2:86:61:d2:4f:81:91:f8: b2:99:d8:23:62:60:56:7b:39:84:b0:94:b9:97:1f: 51:5a:77:4f:86:a1:a9:39:72:28:14:00:78:a3:ac: 66:3b:cf:f0:30:37:cc:b4:be:45:79:a3:7b:26:81: 53:7b:ef:68:06:de:f6:8d:7d:33:b8:73:4f:76:7b: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2C:C5:1E:EB:83:61:2C:AD:CC:EB:68:01:FF:28:AC:18:83:63:8B X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f5:84:f1:4e:34:bf:53:35:b4:e9:26:7a:ea:4a:84:5c:76: cb:44:3c:02:4c:11:4b:39:5c:3f:aa:97:c1:c6:54:f6:f7:52: 7e:ba:0c:f7:81:08:19:76:a0:fa:24:62:4d:3f:77:5a:99:06: 26:77:39:b7:ba:7b:7f:a8:bf:01:d7:0b:b7:c4:1a:6f:89:96: 28:bd:6d:15:47:33:d6:43:ce:77:c1:34:3a:d8:7c:8d:1c:58: 81:09:7b:c4:67:18:8e:e7:2e:f2:48:65:92:88:6e:b1:fe:45: ae:a5:d3:4a:d3:3c:07:c6:6a:88:24:ab:56:a5:84:d5:5d:c3: c0:33:ca:eb:36:0b:88:33:0e:a7:29:1d:19:6d:ac:b2:38:45: 03:c5:c4:b2:77:74:4d:76:6d:74:3f:ae:c8:ae:b6:40:3b:0c: cc:41:ea:19:c6:f3:40:b5:0f:89:0b:08:59:1f:ce:ae:5c:3a: 88:c9:fa:16:48:c0:cb:83:88:f6:5d:67:c8:7d:dd:72:e8:b7: 9f:18:08:d8:ee:22:e1:a3:70:0a:cb:dc:28:79:5b:c6:7d:af: 9d:f8:c8:87:f2:c0:03:86:c5:3f:c1:fe:8f:f9:73:3b:0e:32: 5b:94:f2:40:89:b6:8d:42:56:af:ff:82:a1:fe:8c:9e:88:e2: ef:a6:c6:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/vimIJ8r+0VmumuwXrEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjUxMjA1MjIwMDM0WhcNMjUxMjA2MjIwMDM0WjAzMTEwLwYDVQQD Eyg3NTJjYzUxZWViODM2MTJjYWRjY2ViNjgwMWZmMjhhYzE4ODM2MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCD1og97UEYWh1eF7pB6OHQ3ifmz zIsr6C9m6h9SXUpyNkJap0PE2d6eJTfrmuoRGYvuySDrnSrN+v72yA+cek3IrbtW NlQhlW9TY6gWk4O8nLKemDC2dYH2FsITqrfWS2V7IXbfgFv7N1OOv889XREbL45S zSqAUoW1eg7igaaSNOl8IJ2sCgl/MT8rPS1fZ8PBm6SynYG+Jq+suxg8IyLQ7NhB 0kOok/PdsEcfCfnSQdjrflodrwaPooZh0k+BkfiymdgjYmBWezmEsJS5lx9RWndP hqGpOXIoFAB4o6xmO8/wMDfMtL5FeaN7JoFTe+9oBt72jX0zuHNPdnvKEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUsxR7rg2EsrczraAH/KKwYg2OLMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/WE8U40 v1M1tOkmeupKhFx2y0Q8AkwRSzlcP6qXwcZU9vdSfroM94EIGXag+iRiTT93WpkG Jnc5t7p7f6i/AdcLt8Qab4mWKL1tFUcz1kPOd8E0Oth8jRxYgQl7xGcYjucu8khl kohusf5FrqXTStM8B8ZqiCSrVqWE1V3DwDPK6zYLiDMOpykdGW2ssjhFA8XEsnd0 TXZtdD+uyK62QDsMzEHqGcbzQLUPiQsIWR/Orlw6iMn6FkjAy4OI9l1nyH3dcui3 nxgI2O4i4aNwCsvcKHlbxn2vnfjIh/LAA4bFP8H+j/lzOw4yW5TyQIm2jUJWr/+C of6Mnoji76bGmw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client