This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json) Hash identifier: b5xPvRkixSzUM20EXbIB+1xgIXLF2tU5zKqp1ickjF0= Subject key identifier: 5F:2F:CE:AF:A9:9B:FA:53:14:D7:54:75:B9:82:7D:87:47:02:2F:42 Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b Certificate serial: 019AF3522D7CDE55893A8A3FF0427F5C9986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 11:00:40 +0000 Manifest this update: Sat 06 Dec 2025 11:00:40 +0000 Manifest next update: Sun 07 Dec 2025 11:00:40 +0000 Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: UBgnC5ZaqkKEETjYcEKosjB3qONdpNCz2g5qOUQW0TU=) 2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:2d:7c:de:55:89:3a:8a:3f:f0:42:7f:5c:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b Validity Not Before: Dec 6 11:00:40 2025 GMT Not After : Dec 7 11:00:40 2025 GMT Subject: CN=5f2fceafa99bfa5314d75475b9827d8747022f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:a0:ac:74:79:e5:96:e6:7d:d5:9c:b6:b0: fb:91:f8:8e:9e:39:50:d1:1b:a4:a9:43:b1:ba:6e: c0:fb:c7:37:52:ca:83:0e:ed:c1:fa:6b:3e:83:29: a1:c2:3e:c9:7e:37:35:62:5f:e4:9b:df:ff:07:55: 28:c9:95:94:62:12:e1:04:22:a9:23:ea:b1:31:95: 00:26:62:67:ea:f3:fc:83:bc:c9:75:95:a1:be:7f: 90:6b:11:ee:fe:91:33:60:57:22:f8:32:c2:68:be: 60:93:f7:40:43:d2:fa:0c:46:5c:31:85:c4:f6:00: 6a:2f:13:1b:0f:b3:b8:7f:93:f5:f1:e6:d9:85:43: db:b3:10:88:fb:3a:67:0c:c8:b4:8d:56:c2:a2:40: 84:c0:f5:48:9d:90:82:59:79:fd:5a:9c:8d:ec:0c: 8b:dc:ae:d7:de:fc:36:5d:f3:17:7f:76:8d:0a:9c: cf:56:b7:c4:25:30:84:91:21:f3:c6:5b:25:4b:74: 9d:d3:b8:b5:c8:bc:91:fd:16:53:20:cc:85:ba:b9: 04:9f:20:20:8f:a3:61:c4:70:60:37:3b:78:ec:ff: 4a:6d:e1:3f:ea:ba:82:ce:df:62:44:52:21:8b:ad: 6f:5d:d5:88:92:3c:a5:6d:30:3e:66:2f:e3:8d:fb: 1a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2F:CE:AF:A9:9B:FA:53:14:D7:54:75:B9:82:7D:87:47:02:2F:42 X509v3 Authority Key Identifier: keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:1b:78:9e:dc:2f:59:a9:ac:e4:09:52:8e:ce:22:f3:e1:08: c0:33:b1:d4:c1:ca:ef:1c:c4:0d:33:5b:bd:0b:10:c0:59:52: 2e:21:48:63:a4:60:fb:6d:40:52:cf:1f:ce:16:d5:40:5b:7e: 94:7a:e0:13:73:75:98:b7:7a:c3:23:50:fc:80:ae:d9:ad:e2: 27:21:0a:7b:79:a5:ea:95:4b:8a:d2:ce:34:83:39:a7:00:5a: 40:2b:2c:74:21:c2:8b:b4:d7:a1:28:be:92:46:d1:d1:5a:7c: fe:e6:c4:cb:7c:3c:64:5b:91:5f:fd:dc:80:bc:17:de:5f:69: d0:da:22:72:af:56:58:e8:27:58:40:12:17:eb:8a:b4:9b:23: d8:64:c7:3d:fd:73:d5:ec:b2:ff:bb:80:71:74:f9:ac:d5:e3: f0:98:9d:80:63:dd:16:cc:9c:12:c1:88:9d:f4:a4:ac:ea:29: 35:f9:e2:37:5e:9a:41:43:a9:cd:d3:a0:34:66:9d:83:fa:14: 45:f7:57:11:30:37:41:9a:fe:6e:b2:41:d7:d3:fe:f1:ea:f3: 30:7b:11:88:7a:9d:57:25:ef:ec:41:d3:55:c0:85:d2:9c:11: 5a:e7:aa:ca:2f:aa:e1:c7:58:14:07:87:17:8b:6b:f9:5d:fa: 19:79:59:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUi183lWJOoo/8EJ/XJmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh MzdmNGIwHhcNMjUxMjA2MTEwMDQwWhcNMjUxMjA3MTEwMDQwWjAzMTEwLwYDVQQD Eyg1ZjJmY2VhZmE5OWJmYTUzMTRkNzU0NzViOTgyN2Q4NzQ3MDIyZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+2grHR55ZbmfdWctrD7kfiOnjlQ 0RukqUOxum7A+8c3UsqDDu3B+ms+gymhwj7Jfjc1Yl/km9//B1UoyZWUYhLhBCKp I+qxMZUAJmJn6vP8g7zJdZWhvn+QaxHu/pEzYFci+DLCaL5gk/dAQ9L6DEZcMYXE 9gBqLxMbD7O4f5P18ebZhUPbsxCI+zpnDMi0jVbCokCEwPVInZCCWXn9WpyN7AyL 3K7X3vw2XfMXf3aNCpzPVrfEJTCEkSHzxlslS3Sd07i1yLyR/RZTIMyFurkEnyAg j6NhxHBgNzt47P9KbeE/6rqCzt9iRFIhi61vXdWIkjylbTA+Zi/jjfsavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8vzq+pm/pTFNdUdbmCfYdHAi9CMB8GA1UdIwQY MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt NWQyNTI0NGU0YWFkLzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAht4ntwv Wams5AlSjs4i8+EIwDOx1MHK7xzEDTNbvQsQwFlSLiFIY6Rg+21AUs8fzhbVQFt+ lHrgE3N1mLd6wyNQ/ICu2a3iJyEKe3ml6pVLitLONIM5pwBaQCssdCHCi7TXoSi+ kkbR0Vp8/ubEy3w8ZFuRX/3cgLwX3l9p0Noicq9WWOgnWEASF+uKtJsj2GTHPf1z 1eyy/7uAcXT5rNXj8JidgGPdFsycEsGInfSkrOopNfniN16aQUOpzdOgNGadg/oU RfdXETA3QZr+brJB19P+8erzMHsRiHqdVyXv7EHTVcCF0pwRWueqyi+q4cdYFAeH F4tr+V36GXlZqg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:47 2025 by rpki-client