This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json) Hash identifier: 07gtAoEJQws8u8jOBUibCzfuvJ+Dm/gUb1EgwlGvUVA= Subject key identifier: 42:7C:37:5E:82:2D:5E:50:47:6C:ED:7B:1D:1C:D5:F8:6A:77:24:D5 Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23 Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723 Certificate serial: 019AF0BF4CA29ABDB47A9796F9BC4BE81D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft Manifest number: 0237 Signing time: Fri 05 Dec 2025 23:00:59 +0000 Manifest this update: Fri 05 Dec 2025 23:00:59 +0000 Manifest next update: Sat 06 Dec 2025 23:00:59 +0000 Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: GphmUurTGic9VavUQn1MuNy7d4+XJNaoiNW6EYeixOc=) 2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=) 3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:4c:a2:9a:bd:b4:7a:97:96:f9:bc:4b:e8:1d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723 Validity Not Before: Dec 5 23:00:59 2025 GMT Not After : Dec 6 23:00:59 2025 GMT Subject: CN=427c375e822d5e50476ced7b1d1cd5f86a7724d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:aa:10:e7:58:a4:2b:2f:a8:30:49:5a:dc: d5:b0:bc:7d:dd:c2:34:b2:24:08:c1:9d:46:83:4f: ef:e9:28:8b:fb:9b:65:57:95:62:58:9c:9f:78:2d: bc:91:54:1d:df:65:a2:a1:6a:37:fa:7a:07:85:f5: a4:ea:b0:15:35:8c:7b:cb:20:d0:1d:91:f5:fd:7a: 7d:67:60:c1:71:00:ed:fd:13:d4:af:3a:d8:63:77: 2e:68:9b:50:d3:b4:2d:09:b6:a6:e0:c5:02:06:f0: 84:a8:a8:03:0f:60:b0:95:fa:28:7d:6e:bf:61:ef: b0:e8:46:2b:48:55:48:5d:d6:72:b0:d1:b3:ce:d8: a0:b7:2a:ed:06:b2:7f:44:ca:62:52:f7:e3:be:be: 4d:e5:89:32:3f:e0:6a:14:02:2d:de:ed:c0:64:9e: ec:ba:26:ed:be:44:b7:bb:68:01:03:10:97:6c:93: 68:3a:eb:c2:7a:10:ab:8e:b2:a5:48:48:cc:aa:93: 95:95:25:10:0a:0c:bb:5e:08:15:94:82:33:db:12: ef:8c:e7:8a:30:46:1d:26:8b:69:83:0d:ac:81:bc: 14:68:97:e0:1e:82:9e:df:43:a9:dc:8c:12:dd:cd: ae:b1:f2:ba:b7:2d:fa:4f:2c:06:b8:57:bf:a1:d3: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:37:5E:82:2D:5E:50:47:6C:ED:7B:1D:1C:D5:F8:6A:77:24:D5 X509v3 Authority Key Identifier: keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9a:fd:8f:43:2d:01:55:1d:85:7b:e8:be:4d:ee:05:fb:3f: 11:86:57:1f:43:20:59:42:50:aa:c1:93:e5:39:21:c9:a1:d7: 73:5e:87:b1:5f:9e:5e:fb:fa:0d:7d:dd:cd:6c:90:4d:02:09: 74:2a:a7:81:16:ea:35:7d:59:97:ba:1c:74:45:e8:9d:4f:dc: 12:27:a1:25:e0:6e:7e:bc:f3:ce:2e:a0:0a:f1:11:69:c8:ba: c8:0a:8c:e3:d6:e3:77:79:ea:a7:23:36:3d:71:8e:35:c6:d5: d7:5e:79:5b:f8:26:01:21:90:a5:c9:c3:a1:94:9d:1d:3c:bf: 28:62:a4:4a:97:57:92:4d:22:07:f9:ef:b4:1a:91:78:ea:14: 71:40:2a:3a:e1:7e:d8:13:b5:bf:25:89:3c:0d:b5:1a:9e:5e: e6:8c:ce:ac:e1:7d:86:64:85:6e:96:a5:7e:fc:78:3a:80:5a: 07:1f:ae:84:b8:bb:17:36:be:4d:61:c1:48:4a:81:8f:2f:d4: 3d:68:bd:90:30:73:5e:6c:c2:cb:df:0e:07:86:bd:10:70:67: b8:4a:fc:11:38:ee:21:8d:f5:c3:0e:b6:87:93:1d:30:e5:38: 1c:94:51:f8:7e:2f:23:b8:fc:6d:cb:83:22:45:8f:48:a4:aa: 8d:f3:ff:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0yimr20epeW+bxL6B2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZGQwNWViN2JkOTQ1YzY1ZGYxODczNTUyZGNjOTBjYjJl MTc3MjMwHhcNMjUxMjA1MjMwMDU5WhcNMjUxMjA2MjMwMDU5WjAzMTEwLwYDVQQD Eyg0MjdjMzc1ZTgyMmQ1ZTUwNDc2Y2VkN2IxZDFjZDVmODZhNzcyNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4SqEOdYpCsvqDBJWtzVsLx93cI0 siQIwZ1Gg0/v6SiL+5tlV5ViWJyfeC28kVQd32WioWo3+noHhfWk6rAVNYx7yyDQ HZH1/Xp9Z2DBcQDt/RPUrzrYY3cuaJtQ07QtCbam4MUCBvCEqKgDD2CwlfoofW6/ Ye+w6EYrSFVIXdZysNGzztigtyrtBrJ/RMpiUvfjvr5N5YkyP+BqFAIt3u3AZJ7s uibtvkS3u2gBAxCXbJNoOuvCehCrjrKlSEjMqpOVlSUQCgy7XggVlIIz2xLvjOeK MEYdJotpgw2sgbwUaJfgHoKe30Op3IwS3c2usfK6ty36TywGuFe/odNBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ8N16CLV5QR2ztex0c1fhqdyTVMB8GA1UdIwQY MBaAFCPdBet72UXGXfGHNVLcyQyy4XcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUt YzRhM2EwYTVhOWIxLzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUtYzRhM2EwYTVhOWIx LzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpr9j0Mt AVUdhXvovk3uBfs/EYZXH0MgWUJQqsGT5TkhyaHXc16HsV+eXvv6DX3dzWyQTQIJ dCqngRbqNX1Zl7ocdEXonU/cEiehJeBufrzzzi6gCvERaci6yAqM49bjd3nqpyM2 PXGONcbV1155W/gmASGQpcnDoZSdHTy/KGKkSpdXkk0iB/nvtBqReOoUcUAqOuF+ 2BO1vyWJPA21Gp5e5ozOrOF9hmSFbpalfvx4OoBaBx+uhLi7Fza+TWHBSEqBjy/U PWi9kDBzXmzCy98OB4a9EHBnuEr8ETjuIY31ww62h5MdMOU4HJRR+H4vI7j8bcuD IkWPSKSqjfP/RA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:04 2025 by rpki-client