This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json) Hash identifier: Eq0cDFkejyzySBL3qPrKI9Vul7+jEZSum43p7zzPHfY= Subject key identifier: B0:5B:16:3C:8D:0A:C5:19:85:93:37:8D:6B:40:2E:3D:06:17:52:66 Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019AF80B21F50E535C9C473022EF133B1F47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft Manifest number: 028A Signing time: Sun 07 Dec 2025 09:01:10 +0000 Manifest this update: Sun 07 Dec 2025 09:01:10 +0000 Manifest next update: Mon 08 Dec 2025 09:01:10 +0000 Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: zILRuh75mGwoqg0TJKcHyXA+LU1gt/AqjLVoIvRQmDE=) 2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0b:21:f5:0e:53:5c:9c:47:30:22:ef:13:3b:1f:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Dec 7 09:01:10 2025 GMT Not After : Dec 8 09:01:10 2025 GMT Subject: CN=b05b163c8d0ac5198593378d6b402e3d06175266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:0d:d8:28:7f:6b:fe:a2:8d:f8:d7:41:c2: 59:4f:5a:9d:4b:5e:de:ec:ef:d7:c5:1c:ac:d4:8c: 8c:d5:bf:b8:e2:88:f5:35:36:2b:e9:38:b5:9e:d6: 9b:16:3f:e5:3a:b7:e3:18:21:1d:81:8b:46:d9:4b: ad:0d:62:9c:39:bd:a2:08:6f:65:fa:af:74:3d:14: 71:82:4c:1c:1e:5c:f9:28:54:1e:db:e0:5c:0c:ae: ed:14:14:2c:13:ec:7b:24:da:25:3f:44:f5:b7:65: 82:6b:19:78:d8:7d:a9:0e:99:4e:c8:c5:e5:04:a5: 75:d5:b8:80:fc:73:4a:dd:d5:20:8d:06:db:77:24: 15:8d:56:b2:94:8b:5f:8a:b1:a3:ab:c9:15:6d:2c: f8:1c:30:20:3a:51:61:31:b4:e3:22:ca:4c:e4:9f: f3:91:21:39:86:55:59:25:84:18:e3:62:ab:6a:dd: 9b:31:43:ed:17:b9:cf:11:11:01:f3:61:28:36:09: 0f:11:03:fc:0f:c4:ef:4e:75:e4:ad:79:a1:87:f3: a4:7f:a4:4a:87:da:50:cd:98:a2:67:3c:05:e9:0e: eb:39:f7:fa:90:94:4e:6f:2f:86:f8:f5:20:09:cb: f4:38:48:c5:4a:bd:8d:0d:73:e1:00:f3:df:2b:f4: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5B:16:3C:8D:0A:C5:19:85:93:37:8D:6B:40:2E:3D:06:17:52:66 X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b0:43:9e:d5:f9:7a:20:53:f0:b4:c5:64:38:e0:3b:f0:84: 20:7e:61:af:57:90:8d:e1:4d:57:ee:81:a9:76:08:e2:5d:b8: 02:e9:84:9e:c8:73:ff:08:e3:26:81:38:f5:e9:01:33:fc:7b: c8:e6:c9:bf:cf:48:d6:00:b2:20:35:71:0d:ed:71:39:16:f8: 97:32:c5:68:34:39:77:61:3c:14:17:16:fb:06:c4:a7:c1:ce: e5:3b:61:f1:2a:e2:9d:59:06:4b:bc:47:68:60:18:1c:93:46: 77:2f:7b:bd:7e:68:67:55:43:d3:9d:49:03:34:91:2d:c9:48: 01:32:ef:12:97:f0:29:e5:d3:c6:c5:5e:7b:6e:b5:8d:89:74: ee:90:ce:85:5b:dc:23:37:2b:eb:f7:96:b9:45:1c:d7:ce:fb: 91:63:ef:09:0d:3a:2d:f9:08:7f:84:01:94:c5:a2:2a:86:3c: 6b:17:64:75:46:71:ea:dd:29:7c:a7:bb:ff:77:5c:1c:1e:76: 2b:df:05:66:55:e9:4a:76:27:1e:84:f5:8e:7e:11:9a:3c:d1: 8e:4f:08:7d:65:ef:c2:0b:f9:34:76:3d:41:27:8b:4b:e3:e2: 40:a9:cb:70:9d:3e:9b:7f:38:85:0a:b6:58:11:17:97:26:a3: 2b:ab:69:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CyH1DlNcnEcwIu8TOx9HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjUxMjA3MDkwMTEwWhcNMjUxMjA4MDkwMTEwWjAzMTEwLwYDVQQD EyhiMDViMTYzYzhkMGFjNTE5ODU5MzM3OGQ2YjQwMmUzZDA2MTc1MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4kN2Ch/a/6ijfjXQcJZT1qdS17e 7O/XxRys1IyM1b+44oj1NTYr6Ti1ntabFj/lOrfjGCEdgYtG2UutDWKcOb2iCG9l +q90PRRxgkwcHlz5KFQe2+BcDK7tFBQsE+x7JNolP0T1t2WCaxl42H2pDplOyMXl BKV11biA/HNK3dUgjQbbdyQVjVaylItfirGjq8kVbSz4HDAgOlFhMbTjIspM5J/z kSE5hlVZJYQY42Krat2bMUPtF7nPEREB82EoNgkPEQP8D8TvTnXkrXmhh/Okf6RK h9pQzZiiZzwF6Q7rOff6kJROby+G+PUgCcv0OEjFSr2NDXPhAPPfK/SSWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBbFjyNCsUZhZM3jWtALj0GF1JmMB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7BDntX5 eiBT8LTFZDjgO/CEIH5hr1eQjeFNV+6BqXYI4l24AumEnshz/wjjJoE49ekBM/x7 yObJv89I1gCyIDVxDe1xORb4lzLFaDQ5d2E8FBcW+wbEp8HO5Tth8SrinVkGS7xH aGAYHJNGdy97vX5oZ1VD051JAzSRLclIATLvEpfwKeXTxsVee261jYl07pDOhVvc Izcr6/eWuUUc1877kWPvCQ06LfkIf4QBlMWiKoY8axdkdUZx6t0pfKe7/3dcHB52 K98FZlXpSnYnHoT1jn4RmjzRjk8IfWXvwgv5NHY9QSeLS+PiQKnLcJ0+m384hQq2 WBEXlyajK6tpwQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:40:59 2025 by rpki-client