This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json) Hash identifier: wnfW/Jn8RDDa0Q2Qe/rZ/uK45AmMHwaJJkXRDEHmhZk= Subject key identifier: FF:56:8E:68:C3:17:04:61:EE:BF:1D:2B:6A:42:72:C9:32:87:5B:35 Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Certificate serial: 019AF19B6C86339FC5397695D43F263784FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft Manifest number: 14A1 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: hibtfAe0Ww3DkZtJd+l4R/vS0aNBNC0nlxp5EMSrOXs=) 2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6c:86:33:9f:c5:39:76:95:d4:3f:26:37:84:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=ff568e68c3170461eebf1d2b6a4272c932875b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:19:4a:d8:e3:aa:84:dc:2d:c7:5f:9d:0f: b1:04:cb:22:b1:d5:1c:50:94:57:86:94:e4:16:0c: 69:56:b0:1e:ff:0c:c2:91:58:84:72:a3:4d:04:70: 88:94:55:1b:c2:54:11:81:75:9f:9e:5b:da:2c:40: fd:db:e7:33:b8:e6:8e:7f:36:e2:88:82:d0:23:c3: 56:1f:ec:2d:a0:53:fe:78:df:7b:26:31:71:2e:4b: 2f:e1:ca:51:f4:ca:65:72:1e:cb:0d:bc:6e:a3:f4: 68:88:98:0f:cb:0e:ac:77:b2:4d:3c:8e:65:e6:55: 05:c9:a8:f1:70:7d:d5:b7:57:9a:d0:02:ac:7b:91: f0:7e:c7:42:c2:be:f7:00:c8:d8:97:3b:17:bb:a6: 65:74:40:f2:80:84:78:f7:90:e2:8a:4e:53:72:a5: 66:fc:5d:91:ea:94:86:66:3f:1b:93:af:a4:b4:96: db:44:da:1f:b9:e7:ac:28:69:72:7a:49:19:a1:79: a7:0d:e1:13:01:c5:e7:c7:bb:ef:60:b2:f6:d9:2f: 1a:56:11:00:dc:85:36:b8:aa:dd:fc:ff:33:f7:cc: 6d:a6:f7:84:01:e1:eb:6c:0f:49:65:24:2b:19:f7: 02:06:6a:53:10:3a:fe:a1:d3:b6:b6:9a:1e:bf:76: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:56:8E:68:C3:17:04:61:EE:BF:1D:2B:6A:42:72:C9:32:87:5B:35 X509v3 Authority Key Identifier: keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c9:6f:1c:bd:fa:49:f3:51:2c:ab:05:bc:93:f1:db:55:43: 51:ec:ec:08:4b:a1:5f:9e:a8:f2:4f:91:84:0f:60:63:75:63: a9:5d:f9:55:31:a5:a0:7f:3c:ce:cb:e4:2f:37:c4:60:ec:4a: b8:fd:ed:42:55:aa:2e:bb:9e:38:ba:f6:e9:00:b2:d5:92:88: e2:9b:aa:f3:9d:d0:27:67:7d:d6:62:7c:6c:a3:93:e7:28:1f: d1:9e:77:e2:af:29:3b:32:d0:25:6e:f7:1f:57:69:35:68:65: 4c:b9:f2:cb:2e:4c:bf:70:a3:aa:e2:fa:72:e5:1f:ad:ba:67: 85:b4:2a:d9:a1:81:98:39:08:55:a4:bf:6e:66:22:b8:20:c8: de:12:38:c2:f5:21:96:76:5b:53:3d:18:4d:3c:59:01:fb:6f: 34:c9:a4:ff:46:58:27:75:d5:c9:14:61:f9:9f:df:d3:3c:78: 66:fe:81:f0:f8:21:a9:e0:79:87:97:96:fc:cb:cc:fc:8b:29: 1c:2d:b3:22:2f:ce:4a:ec:54:91:8d:92:36:1b:77:f6:18:f4: c4:87:ca:63:63:8b:89:0d:3c:85:7d:b5:12:bb:91:00:41:ad: 08:19:03:aa:40:7c:54:8c:ff:f7:9c:4c:50:4b:28:3c:16:49: cc:3f:3a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2yGM5/FOXaV1D8mN4T6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4 YWYzNmYwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhmZjU2OGU2OGMzMTcwNDYxZWViZjFkMmI2YTQyNzJjOTMyODc1YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hkZStjjqoTcLcdfnQ+xBMsisdUc UJRXhpTkFgxpVrAe/wzCkViEcqNNBHCIlFUbwlQRgXWfnlvaLED92+czuOaOfzbi iILQI8NWH+wtoFP+eN97JjFxLksv4cpR9Mplch7LDbxuo/RoiJgPyw6sd7JNPI5l 5lUFyajxcH3Vt1ea0AKse5HwfsdCwr73AMjYlzsXu6ZldEDygIR495Diik5TcqVm /F2R6pSGZj8bk6+ktJbbRNofueesKGlyekkZoXmnDeETAcXnx7vvYLL22S8aVhEA 3IU2uKrd/P8z98xtpveEAeHrbA9JZSQrGfcCBmpTEDr+odO2tpoev3bj0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9WjmjDFwRh7r8dK2pCcskyh1s1MB8GA1UdIwQY MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIclvHL36 SfNRLKsFvJPx21VDUezsCEuhX56o8k+RhA9gY3VjqV35VTGloH88zsvkLzfEYOxK uP3tQlWqLrueOLr26QCy1ZKI4puq853QJ2d91mJ8bKOT5ygf0Z534q8pOzLQJW73 H1dpNWhlTLnyyy5Mv3CjquL6cuUfrbpnhbQq2aGBmDkIVaS/bmYiuCDI3hI4wvUh lnZbUz0YTTxZAftvNMmk/0ZYJ3XVyRRh+Z/f0zx4Zv6B8PghqeB5h5eW/MvM/Isp HC2zIi/OSuxUkY2SNht39hj0xIfKY2OLiQ08hX21EruRAEGtCBkDqkB8VIz/95xM UEsoPBZJzD86EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:47 2025 by rpki-client