This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json) Hash identifier: 44aENlTiwNGIEB0zcUUkqRGT4riFg4Cj1rtiXo8o5bY= Subject key identifier: 41:3D:9F:D8:67:5B:F2:41:35:1C:79:50:AF:3A:45:8B:02:92:F4:C0 Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019AF276B6883E680E24B43098391C6AD0A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=) 2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: ZmuaWtWiBp3kamh1Lq0TRercidvjDXEhl8MUTzBrmAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b6:88:3e:68:0e:24:b4:30:98:39:1c:6a:d0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=413d9fd8675bf241351c7950af3a458b0292f4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7a:02:e6:1d:5c:2b:a7:b2:ab:ec:00:f8:ee: c1:6d:3f:df:a2:c8:6a:e7:82:64:fa:c0:77:03:13: 72:45:4c:89:14:b9:95:36:ea:24:e8:39:39:d9:bf: 10:12:9c:ff:fa:b4:3a:ac:f7:b5:44:b0:e1:49:b3: 34:4c:8a:ff:6c:91:0e:1b:ba:81:53:a6:34:6a:81: 5e:90:3b:59:8e:12:08:bb:a0:11:c0:9f:37:5c:68: cb:98:61:90:b8:23:85:a9:a6:11:aa:5f:95:ca:7f: f9:4a:5b:8d:4e:a8:84:fb:d9:d5:24:b1:25:e1:f2: bd:41:9a:e1:2d:03:b4:1d:c1:cc:7e:b1:16:8e:29: 6a:34:18:fa:3c:73:11:c6:e7:d7:3a:00:da:7f:2b: 8f:bc:75:e7:21:5f:6d:4d:94:04:da:bf:1d:0e:24: e6:52:91:d1:98:c8:51:60:ec:fd:9d:87:1b:cc:e4: f3:5d:8b:89:5c:49:72:63:f4:b6:bf:1f:2f:5c:31: 84:a0:fc:67:82:4f:16:43:c0:01:85:ed:64:c3:81: 51:19:9f:4c:0c:cc:13:57:7b:61:4d:5a:4d:3c:fc: 13:6d:20:5a:30:08:ae:b9:8e:91:9b:ab:11:b6:42: 96:02:34:2e:0b:e9:4b:25:7d:60:ec:5a:30:49:28: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:9F:D8:67:5B:F2:41:35:1C:79:50:AF:3A:45:8B:02:92:F4:C0 X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c7:b1:6f:78:92:4d:3a:7b:fc:94:f7:13:36:05:a3:57:3c: 24:e9:7f:56:72:b5:47:e2:dc:bb:37:14:a5:3a:a3:3f:d1:64: 03:c0:6b:4d:af:b2:f2:ff:ba:22:5d:ac:8d:c8:f8:92:0b:3f: a3:8e:27:c7:f9:90:cc:32:30:d9:38:2f:18:ec:6c:63:9f:14: 82:34:23:8c:cf:fa:f5:38:39:a4:93:c4:7c:d4:15:84:30:ab: 0b:9d:ab:6c:da:b7:5b:27:f2:a0:81:fc:5c:f3:a9:df:52:7b: 3f:4d:3b:cc:f7:39:ed:f0:89:fa:35:01:6f:4a:f2:1a:82:3a: 3e:13:e5:e3:39:f9:33:a0:bb:41:15:91:c2:fc:62:0c:21:f8: 52:76:c8:5a:78:e2:09:d4:d1:6a:17:01:13:eb:0a:b4:80:bc: 74:7f:e2:ba:a9:71:a0:55:12:72:8b:86:3c:84:d1:9b:1c:ba: 6a:a6:f8:9c:e8:60:d5:39:a0:00:ab:ba:6b:5b:3c:93:b4:ef: 69:5c:17:5d:30:e0:98:cf:8b:00:23:dd:5b:2a:db:2d:94:fb: 98:14:40:4d:a5:86:bc:04:35:bb:d9:7c:94:57:c6:f6:ee:24: 6c:1c:16:6b:86:de:7d:f0:ba:aa:d3:b7:17:30:82:ee:16:88: 80:24:66:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydraIPmgOJLQwmDkcatCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD Eyg0MTNkOWZkODY3NWJmMjQxMzUxYzc5NTBhZjNhNDU4YjAyOTJmNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XoC5h1cK6eyq+wA+O7BbT/foshq 54Jk+sB3AxNyRUyJFLmVNuok6Dk52b8QEpz/+rQ6rPe1RLDhSbM0TIr/bJEOG7qB U6Y0aoFekDtZjhIIu6ARwJ83XGjLmGGQuCOFqaYRql+Vyn/5SluNTqiE+9nVJLEl 4fK9QZrhLQO0HcHMfrEWjilqNBj6PHMRxufXOgDafyuPvHXnIV9tTZQE2r8dDiTm UpHRmMhRYOz9nYcbzOTzXYuJXElyY/S2vx8vXDGEoPxngk8WQ8ABhe1kw4FRGZ9M DMwTV3thTVpNPPwTbSBaMAiuuY6Rm6sRtkKWAjQuC+lLJX1g7FowSSgf9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE9n9hnW/JBNRx5UK86RYsCkvTAMB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMexb3iS TTp7/JT3EzYFo1c8JOl/VnK1R+LcuzcUpTqjP9FkA8BrTa+y8v+6Il2sjcj4kgs/ o44nx/mQzDIw2TgvGOxsY58UgjQjjM/69Tg5pJPEfNQVhDCrC52rbNq3WyfyoIH8 XPOp31J7P007zPc57fCJ+jUBb0ryGoI6PhPl4zn5M6C7QRWRwvxiDCH4UnbIWnji CdTRahcBE+sKtIC8dH/iuqlxoFUScouGPITRmxy6aqb4nOhg1TmgAKu6a1s8k7Tv aVwXXTDgmM+LACPdWyrbLZT7mBRATaWGvAQ1u9l8lFfG9u4kbBwWa4beffC6qtO3 FzCC7haIgCRm2w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:23 2025 by rpki-client