This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json) Hash identifier: opscke0NdGklXQ1JCstAiNLNibo79+q0ASB7xiZBQl0= Subject key identifier: D5:52:E0:12:C9:28:D7:B6:C3:F2:79:CF:65:39:92:F1:BF:A0:0D:21 Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019B2C2F6ADEFF04AAD1DB2E00FC4B241688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft Manifest number: 02A5 Signing time: Wed 17 Dec 2025 12:01:03 +0000 Manifest this update: Wed 17 Dec 2025 12:01:03 +0000 Manifest next update: Thu 18 Dec 2025 12:01:03 +0000 Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: MzPlUf7o77BZ4yvhsOmzIHTqn8Kdwld1eOISpGnZkRg=) 2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:6a:de:ff:04:aa:d1:db:2e:00:fc:4b:24:16:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Dec 17 12:01:03 2025 GMT Not After : Dec 18 12:01:03 2025 GMT Subject: CN=d552e012c928d7b6c3f279cf653992f1bfa00d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:16:b3:03:48:b1:46:a2:f1:2f:69:75:ae: 51:aa:98:5b:2f:94:37:e3:5e:29:d4:95:cb:ee:66: 04:4f:3a:e2:48:e5:69:50:95:70:d4:9a:b7:f1:7c: 81:b5:dc:f5:92:2f:95:61:91:77:3f:3f:4b:1d:55: c3:fd:7f:da:f5:09:ae:d3:de:91:f9:ea:eb:73:a3: 30:a8:25:ae:e0:54:a8:85:db:aa:ed:29:c4:f2:f0: 05:41:00:99:d0:e9:ec:8c:05:55:5e:f0:0f:3b:a6: e9:49:ec:47:e0:77:0a:d6:83:82:31:e0:f4:70:18: c6:10:e3:ac:f0:d8:f4:9b:88:6a:9d:7d:d4:8e:7e: 9c:c0:d4:c0:c9:d2:eb:14:d1:59:2b:92:49:38:62: 0d:13:4e:94:4c:d5:1b:3b:39:4d:51:ea:08:a2:b2: 2b:61:69:81:2d:c9:36:28:f5:53:cd:4c:4b:75:e9: ba:47:57:5b:0e:d2:25:f6:68:3e:40:80:f9:72:e5: be:95:12:91:1b:8f:98:6e:3f:8c:38:3d:e2:e3:28: 11:05:10:8e:91:62:94:0a:b4:35:06:53:92:e4:08: 77:f8:4c:5c:8e:fe:2c:32:91:e9:f4:50:36:10:a4: 14:a3:09:1f:65:23:03:97:a9:11:f4:2f:a0:cb:e7: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:E0:12:C9:28:D7:B6:C3:F2:79:CF:65:39:92:F1:BF:A0:0D:21 X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:44:96:a7:3c:ea:96:a8:61:53:2d:d1:00:f6:d3:28:7f: 47:12:9e:9d:9e:a4:1a:bc:82:1e:60:36:89:0f:ce:b1:c3:50: 73:0b:16:38:b8:60:d8:68:8f:a8:81:ed:1f:97:ce:99:a1:6f: cf:ed:a9:b1:ae:80:0b:e2:ae:6e:89:c1:74:d2:b2:b2:de:06: b8:13:aa:3a:35:70:1d:b7:c5:61:e0:5c:6e:fc:55:fe:ee:dc: fe:e9:cf:69:fc:fe:68:4b:92:8d:f8:ea:d0:48:05:95:98:f3: f7:fc:df:94:b3:81:f9:4d:78:1c:f0:7c:60:c0:26:cd:ce:17: 4e:f0:ea:a3:83:c5:cc:c8:b5:72:f0:63:4a:0c:fd:5f:1f:62: a9:c1:61:a4:88:a8:37:7c:43:4c:cb:88:94:e1:2d:44:cf:e1: dc:70:6c:6a:83:d1:5e:f3:32:1f:29:4c:1d:35:f0:15:74:20: 8a:de:36:4e:f3:64:49:3f:25:b0:c1:f0:6f:ac:a7:c0:16:19: 62:9b:cd:55:40:60:6c:ee:0d:e0:a1:66:a2:84:7a:f8:f5:e4: b4:b6:71:06:90:74:1b:c0:25:7f:cf:63:a6:3e:7f:be:ff:a3: b7:e5:3d:6c:31:ab:fa:20:10:ec:ea:c4:74:84:2b:be:e6:aa: ae:86:7c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL2re/wSq0dsuAPxLJBaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjUxMjE3MTIwMTAzWhcNMjUxMjE4MTIwMTAzWjAzMTEwLwYDVQQD EyhkNTUyZTAxMmM5MjhkN2I2YzNmMjc5Y2Y2NTM5OTJmMWJmYTAwZDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9oWswNIsUai8S9pda5RqphbL5Q3 414p1JXL7mYETzriSOVpUJVw1Jq38XyBtdz1ki+VYZF3Pz9LHVXD/X/a9Qmu096R +errc6MwqCWu4FSohduq7SnE8vAFQQCZ0OnsjAVVXvAPO6bpSexH4HcK1oOCMeD0 cBjGEOOs8Nj0m4hqnX3Ujn6cwNTAydLrFNFZK5JJOGINE06UTNUbOzlNUeoIorIr YWmBLck2KPVTzUxLdem6R1dbDtIl9mg+QID5cuW+lRKRG4+Ybj+MOD3i4ygRBRCO kWKUCrQ1BlOS5Ah3+Excjv4sMpHp9FA2EKQUowkfZSMDl6kR9C+gy+dStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVS4BLJKNe2w/J5z2U5kvG/oA0hMB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp5Elqc8 6paoYVMt0QD20yh/RxKenZ6kGryCHmA2iQ/OscNQcwsWOLhg2GiPqIHtH5fOmaFv z+2psa6AC+KubonBdNKyst4GuBOqOjVwHbfFYeBcbvxV/u7c/unPafz+aEuSjfjq 0EgFlZjz9/zflLOB+U14HPB8YMAmzc4XTvDqo4PFzMi1cvBjSgz9Xx9iqcFhpIio N3xDTMuIlOEtRM/h3HBsaoPRXvMyHylMHTXwFXQgit42TvNkST8lsMHwb6ynwBYZ YpvNVUBgbO4N4KFmooR6+PXktLZxBpB0G8Alf89jpj5/vv+jt+U9bDGr+iAQ7OrE dIQrvuaqroZ8Ag== -----END CERTIFICATE-----Generated at Wed Dec 17 16:41:49 2025 by rpki-client