This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: C7Kz/Llsb9ista6SNTWmkjSck/DV/PHQbrLD6bmO1lQ= Subject key identifier: FD:05:A7:81:6F:93:B2:37:B1:A6:5C:6B:9F:A6:63:F8:22:27:06:E1 Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019AF1D1E7D14D4D58F68E156AC8615FE14A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 044D Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: uMqtSc9zKGQ+Tafa4Fo9M97NMolSPfn3OR9/QaC0tYU=) 2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e7:d1:4d:4d:58:f6:8e:15:6a:c8:61:5f:e1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=fd05a7816f93b237b1a65c6b9fa663f8222706e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:46:2e:ae:9a:94:92:46:2a:dd:c0:ac:19: c0:ee:03:1a:53:22:c2:17:6b:ba:19:e5:4a:df:99: 92:23:4e:d7:7e:ed:2f:00:0d:dd:a5:09:f9:80:44: 29:cc:aa:14:92:f1:30:1b:4d:fe:35:af:12:04:37: 9a:60:19:f0:78:eb:e8:77:96:6c:50:c8:6e:bb:3a: 52:73:22:95:1c:27:0a:69:f8:31:92:16:a7:38:f2: 77:0e:dd:8f:2a:63:6d:d3:fe:fd:bc:1e:a3:d6:a6: 48:aa:24:b4:f9:6d:31:94:90:e7:2e:c2:b3:dc:5d: 84:db:67:23:2f:da:0b:0a:b0:bd:a8:f3:eb:67:07: d7:58:a7:99:b0:ba:be:25:e5:2b:bd:b1:09:87:d2: 2e:19:fa:5a:56:e4:4c:74:a1:4e:d5:7e:ff:6e:49: 81:fb:19:c9:97:7a:b1:31:04:50:62:63:ca:22:a7: 44:cf:2a:d4:60:8a:0e:4e:96:81:77:97:fc:df:cc: 15:70:8e:3a:8f:b7:af:9c:28:7a:ab:76:69:33:fc: 5a:40:e8:75:ed:8e:1e:44:72:c2:74:51:ea:dc:14: 22:10:c6:17:c5:51:b6:35:b2:b8:b0:4c:c6:d7:21: 70:c5:3f:f9:e8:0f:22:70:4d:b7:fa:4a:47:87:e5: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:A7:81:6F:93:B2:37:B1:A6:5C:6B:9F:A6:63:F8:22:27:06:E1 X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:74:32:45:04:8a:df:7c:09:01:df:c3:90:7f:c2:af:b3:ab: 0d:0e:d1:1e:a1:75:2f:1f:59:8a:59:19:a2:1e:c1:fc:93:a8: 8c:a5:10:b3:8d:44:92:fa:a3:27:e0:16:62:48:24:6c:fe:e1: e7:37:e6:64:95:05:a2:18:37:42:0d:2b:89:41:27:78:ee:6a: 61:f5:b9:f2:3f:11:d9:56:d3:ee:b9:19:62:08:c0:d9:ea:3e: 54:2a:22:3c:8a:c3:68:a1:97:3e:d5:0e:15:48:b0:fc:61:cd: 9f:63:95:dd:dc:49:fe:de:33:0c:2f:49:15:07:00:9d:c5:75: 7b:1f:ec:b1:22:21:35:16:fd:c3:46:e0:a4:35:5a:0a:ca:fd: b6:16:fd:91:63:a4:91:97:36:0d:c8:63:4d:30:a1:e7:10:e0: 70:37:c1:e0:78:c7:07:d2:d3:e1:cb:d3:67:ea:3d:01:c2:22: ac:ed:2d:cb:f9:b3:48:fa:5e:ea:f8:b8:9e:42:69:ac:48:79: 33:77:e5:b3:29:9f:72:de:ad:a3:10:ba:48:1c:1f:4a:05:1a: 85:19:d5:3b:6d:e6:fb:58:0b:cd:dd:8b:65:f2:07:11:21:70: 52:30:22:62:77:53:ca:c6:10:2a:0b:bd:95:61:47:16:0a:8b: 35:a3:eb:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0efRTU1Y9o4VashhX+FKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD EyhmZDA1YTc4MTZmOTNiMjM3YjFhNjVjNmI5ZmE2NjNmODIyMjcwNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2RGLq6alJJGKt3ArBnA7gMaUyLC F2u6GeVK35mSI07Xfu0vAA3dpQn5gEQpzKoUkvEwG03+Na8SBDeaYBnweOvod5Zs UMhuuzpScyKVHCcKafgxkhanOPJ3Dt2PKmNt0/79vB6j1qZIqiS0+W0xlJDnLsKz 3F2E22cjL9oLCrC9qPPrZwfXWKeZsLq+JeUrvbEJh9IuGfpaVuRMdKFO1X7/bkmB +xnJl3qxMQRQYmPKIqdEzyrUYIoOTpaBd5f838wVcI46j7evnCh6q3ZpM/xaQOh1 7Y4eRHLCdFHq3BQiEMYXxVG2NbK4sEzG1yFwxT/56A8icE23+kpHh+VOfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Fp4Fvk7I3saZca5+mY/giJwbhMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXQyRQSK 33wJAd/DkH/Cr7OrDQ7RHqF1Lx9ZilkZoh7B/JOojKUQs41EkvqjJ+AWYkgkbP7h 5zfmZJUFohg3Qg0riUEneO5qYfW58j8R2VbT7rkZYgjA2eo+VCoiPIrDaKGXPtUO FUiw/GHNn2OV3dxJ/t4zDC9JFQcAncV1ex/ssSIhNRb9w0bgpDVaCsr9thb9kWOk kZc2DchjTTCh5xDgcDfB4HjHB9LT4cvTZ+o9AcIirO0ty/mzSPpe6vi4nkJprEh5 M3flsymfct6toxC6SBwfSgUahRnVO23m+1gLzd2LZfIHESFwUjAiYndTysYQKgu9 lWFHFgqLNaPr/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:06 2025 by rpki-client