This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json) Hash identifier: 03EsznIAaxg6ECiXwV+ENFNH5FYs+3jvat97bhR9VKg= Subject key identifier: EB:C3:30:C5:31:69:4C:B5:E7:3F:D9:EC:C2:4D:E0:93:E4:51:1F:91 Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a Certificate serial: 019AF16465E768EED22385FCF8C25909AD61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: KH/cgJ6z+nAWI9oiGKo+y0mm+V6Spf8Rct886m7gRD4=) 2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:65:e7:68:ee:d2:23:85:fc:f8:c2:59:09:ad:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=ebc330c531694cb5e73fd9ecc24de093e4511f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f2:5c:23:82:a0:d5:48:64:7b:2d:8e:1d:6a: 21:ad:44:ce:81:0f:b4:6a:a9:31:21:b1:a8:84:e9: d1:eb:9c:96:95:02:ae:99:4e:53:a3:46:0e:7d:85: 52:17:83:e7:a4:1c:5c:b3:77:be:90:a0:8f:f4:16: 5c:d6:45:5c:9a:49:9f:f5:28:4d:cd:08:2c:39:f1: 72:5c:8f:5e:d2:fb:f7:b0:8e:0f:88:1c:35:80:e4: 4f:d8:98:4b:28:7b:28:b3:b9:3d:08:a0:30:f5:0d: b0:5d:d0:ee:cd:14:f6:31:5f:32:82:bb:c7:0c:88: 60:3b:a2:56:88:94:61:7a:20:d8:f6:95:a1:6c:2f: c7:7e:71:98:cc:73:cb:24:ae:3d:46:cb:3c:93:1f: 2b:9f:54:86:dd:72:62:19:02:66:d7:92:18:82:b6: 04:69:e8:6b:65:b8:92:e4:ab:92:fc:93:f8:1d:aa: 86:d0:b0:ef:b9:e5:2b:59:ef:65:0a:60:8e:54:21: 4d:6b:ba:e6:bb:28:78:ac:6e:92:77:c6:31:6f:56: f1:a3:3f:b4:d0:fa:02:d9:0e:37:a4:03:a2:59:1d: 52:2b:27:fe:e5:3e:33:66:0a:62:b7:01:99:9f:d6: f0:b5:97:e0:0c:2c:ae:22:f6:ff:b2:77:56:37:a8: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C3:30:C5:31:69:4C:B5:E7:3F:D9:EC:C2:4D:E0:93:E4:51:1F:91 X509v3 Authority Key Identifier: keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bf:37:8b:01:76:63:7f:b0:ce:70:bf:d9:54:ee:a5:4b:77: 87:37:8c:c5:2a:70:ae:5d:72:c6:72:82:ba:41:cc:bd:79:c3: e2:41:4a:26:39:93:35:bb:5c:2d:d0:2e:b6:ee:51:5f:03:22: bd:67:d8:ac:cb:c4:89:93:e1:21:e3:bd:9a:b9:e0:75:13:78: fe:c8:4b:74:f0:b4:ed:31:10:03:15:88:aa:89:4d:cc:fd:ca: 86:b3:8f:81:a2:a8:47:1f:73:3f:3b:f8:28:bc:5f:ce:f3:45: 2a:1d:af:b2:2b:6c:fb:fa:dc:dd:ab:ea:08:28:8c:a5:78:a5: 1b:f6:37:9f:8c:82:30:b3:c6:9e:4d:74:d7:51:0f:a5:da:56: b2:be:09:4c:c3:74:50:75:71:5e:c4:45:69:dc:98:2d:8d:ab: 1f:e3:df:2c:74:b0:6c:3b:2d:7b:6b:da:9f:99:f9:e6:24:57: 5b:6a:d7:1f:6f:c4:7c:3f:15:f1:74:90:53:59:17:35:4b:9f: 49:66:e1:3d:07:e5:ae:f7:46:17:8a:21:59:23:f8:e4:45:77: ee:ed:04:f5:0f:20:a5:8e:69:bc:93:04:2f:40:49:99:66:c8: 14:17:6d:04:d4:04:08:66:a3:5f:a2:c4:93:da:9a:b3:0e:b1: ce:b5:49:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGXnaO7SI4X8+MJZCa1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx NTRhMWEwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD EyhlYmMzMzBjNTMxNjk0Y2I1ZTczZmQ5ZWNjMjRkZTA5M2U0NTExZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPJcI4Kg1Uhkey2OHWohrUTOgQ+0 aqkxIbGohOnR65yWlQKumU5To0YOfYVSF4PnpBxcs3e+kKCP9BZc1kVcmkmf9ShN zQgsOfFyXI9e0vv3sI4PiBw1gORP2JhLKHsos7k9CKAw9Q2wXdDuzRT2MV8ygrvH DIhgO6JWiJRheiDY9pWhbC/HfnGYzHPLJK49Rss8kx8rn1SG3XJiGQJm15IYgrYE aehrZbiS5KuS/JP4HaqG0LDvueUrWe9lCmCOVCFNa7rmuyh4rG6Sd8Yxb1bxoz+0 0PoC2Q43pAOiWR1SKyf+5T4zZgpitwGZn9bwtZfgDCyuIvb/sndWN6jqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvDMMUxaUy15z/Z7MJN4JPkUR+RMB8GA1UdIwQY MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1 LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgr83iwF2 Y3+wznC/2VTupUt3hzeMxSpwrl1yxnKCukHMvXnD4kFKJjmTNbtcLdAutu5RXwMi vWfYrMvEiZPhIeO9mrngdRN4/shLdPC07TEQAxWIqolNzP3KhrOPgaKoRx9zPzv4 KLxfzvNFKh2vsits+/rc3avqCCiMpXilG/Y3n4yCMLPGnk1011EPpdpWsr4JTMN0 UHVxXsRFadyYLY2rH+PfLHSwbDste2van5n55iRXW2rXH2/EfD8V8XSQU1kXNUuf SWbhPQflrvdGF4ohWSP45EV37u0E9Q8gpY5pvJMEL0BJmWbIFBdtBNQECGajX6LE k9qasw6xzrVJXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client