This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json) Hash identifier: 1qBbOdTEbQitFYRrxJYhjoBiwWCoIjYbj6gnnoCsVDw= Subject key identifier: 04:F1:A5:60:7B:59:03:4E:55:0D:3A:84:BA:74:4F:15:8B:92:A2:1E Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Certificate serial: 019AF352081481F684C558D5B062CCDDCC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft Manifest number: 03E6 Signing time: Sat 06 Dec 2025 11:00:30 +0000 Manifest this update: Sat 06 Dec 2025 11:00:30 +0000 Manifest next update: Sun 07 Dec 2025 11:00:30 +0000 Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=) 2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: KQjBp8jDQCWc+jdQ62bwqfTAdVu9LVsO6ZJ6jcrDOkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:08:14:81:f6:84:c5:58:d5:b0:62:cc:dd:cc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Validity Not Before: Dec 6 11:00:30 2025 GMT Not After : Dec 7 11:00:30 2025 GMT Subject: CN=04f1a5607b59034e550d3a84ba744f158b92a21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:a3:42:55:96:6b:09:34:64:b0:98:e1:0d: 37:b1:d2:c8:ff:ac:16:94:d4:c5:8d:cd:ae:b1:82: 52:01:1a:13:80:d6:02:e7:a0:21:24:34:dd:9f:66: 0f:7c:06:9f:00:44:4d:17:20:bc:18:e8:82:d7:fb: 01:8a:7e:ab:60:b0:ab:76:b1:e1:ba:73:07:8e:3a: 5c:38:94:60:d7:1f:ae:86:46:69:d1:07:10:90:f3: 8c:bc:3d:4c:fd:20:cb:06:96:23:f9:ac:58:7a:d4: bc:8a:cf:8e:22:70:dc:a7:91:08:46:24:f6:9f:08: f1:29:ed:2a:8a:de:2a:0f:0f:ae:cb:55:00:03:5b: 45:f2:71:62:40:0f:20:03:ce:81:a1:e6:b9:41:4a: f5:4b:4e:29:3e:53:cc:05:e9:b2:53:d3:07:4a:1b: ab:7a:e4:ed:a3:64:f1:2c:29:4e:2f:f2:24:2c:52: 22:de:3b:b7:19:5d:28:c4:2e:25:6a:e7:37:b5:71: 93:e0:d2:78:ce:3a:ee:85:5a:9a:0d:74:b6:7f:05: 50:94:cf:0d:6e:e7:dc:06:4a:a5:f9:ea:c3:51:b9: 23:b7:31:63:a0:92:58:f7:1b:a2:33:92:7d:f2:b8: 48:9f:d4:29:c9:af:82:a6:ed:b6:fa:ed:cf:b8:63: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F1:A5:60:7B:59:03:4E:55:0D:3A:84:BA:74:4F:15:8B:92:A2:1E X509v3 Authority Key Identifier: keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:db:ea:ba:0d:48:b6:b8:89:ba:f9:a8:74:19:64:1e:4b:8a: 2e:3c:20:57:bf:dc:65:b7:55:a9:89:23:ca:12:8d:b6:99:f2: 54:6b:af:74:56:e7:97:3a:1c:2a:92:43:8f:dc:f8:f7:1e:99: 71:da:1e:f9:26:c6:5c:42:1f:64:f8:d1:c2:6a:3a:ee:8e:5a: d4:57:e9:b7:a5:ef:1a:a9:e6:38:17:ae:9d:7f:58:de:a8:cd: 66:3a:eb:c3:40:51:fe:38:27:bb:46:ba:0f:31:e0:68:dc:71: 33:65:72:fc:d7:85:95:85:31:bf:c9:12:cb:33:5d:50:26:89: da:00:5c:2d:b6:22:e3:09:a1:33:08:a5:7b:e8:f9:01:7c:14: 3f:39:2d:a3:3d:cc:59:9c:25:e0:58:74:c3:23:7f:d1:8b:aa: 0d:a8:89:3c:eb:ea:a0:fe:f3:2f:14:88:74:21:b1:54:e8:5b: 48:b3:c8:34:4a:2e:5e:b5:55:95:74:7f:7a:e1:8b:fa:de:79: ee:b3:d6:ce:75:16:b2:02:77:f7:5f:08:34:5a:54:6c:cc:06: 5a:b7:47:0c:40:38:da:0b:08:17:56:59:d5:78:8a:0d:da:4f: 90:04:09:9f:5c:5a:2f:cc:5b:2f:ed:d4:44:50:a0:ad:03:1d: 90:5c:74:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUggUgfaExVjVsGLM3cxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx ODEyMjcwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD EygwNGYxYTU2MDdiNTkwMzRlNTUwZDNhODRiYTc0NGYxNThiOTJhMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKjQlWWawk0ZLCY4Q03sdLI/6wW lNTFjc2usYJSARoTgNYC56AhJDTdn2YPfAafAERNFyC8GOiC1/sBin6rYLCrdrHh unMHjjpcOJRg1x+uhkZp0QcQkPOMvD1M/SDLBpYj+axYetS8is+OInDcp5EIRiT2 nwjxKe0qit4qDw+uy1UAA1tF8nFiQA8gA86Boea5QUr1S04pPlPMBemyU9MHShur euTto2TxLClOL/IkLFIi3ju3GV0oxC4lauc3tXGT4NJ4zjruhVqaDXS2fwVQlM8N bufcBkql+erDUbkjtzFjoJJY9xuiM5J98rhIn9Qpya+Cpu22+u3PuGPhEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATxpWB7WQNOVQ06hLp0TxWLkqIeMB8GA1UdIwQY MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNvqug1I triJuvmodBlkHkuKLjwgV7/cZbdVqYkjyhKNtpnyVGuvdFbnlzocKpJDj9z49x6Z cdoe+SbGXEIfZPjRwmo67o5a1Ffpt6XvGqnmOBeunX9Y3qjNZjrrw0BR/jgnu0a6 DzHgaNxxM2Vy/NeFlYUxv8kSyzNdUCaJ2gBcLbYi4wmhMwile+j5AXwUPzktoz3M WZwl4Fh0wyN/0YuqDaiJPOvqoP7zLxSIdCGxVOhbSLPINEouXrVVlXR/euGL+t55 7rPWznUWsgJ3918INFpUbMwGWrdHDEA42gsIF1ZZ1XiKDdpPkAQJn1xaL8xbL+3U RFCgrQMdkFx09w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:12 2025 by rpki-client