This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json) Hash identifier: mJRMegj4PETdgIEhpViGcYsbaMX4Gawk2y6pykjDTCU= Subject key identifier: 09:B3:8F:08:BA:39:83:13:91:F0:0B:C3:47:59:4C:F6:0C:F1:B0:05 Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66 Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66 Certificate serial: 019B38A13C482D77ABD841B780421EE96EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft Manifest number: 08D2 Signing time: Fri 19 Dec 2025 22:00:49 +0000 Manifest this update: Fri 19 Dec 2025 22:00:49 +0000 Manifest next update: Sat 20 Dec 2025 22:00:49 +0000 Files and hashes: 1: 1AGt6vAj9ZNv2w7Fp5tJobLB8aI.roa (hash: GbnSbQEBgHsaOZrngwqdPSv9qkJB1d7PRyKBT0jDdQQ=) 2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: iTuAVXpqclG9+jGOJd02vLbXCiE5zAMAxw5pvHxdfW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:3c:48:2d:77:ab:d8:41:b7:80:42:1e:e9:6e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66 Validity Not Before: Dec 19 22:00:49 2025 GMT Not After : Dec 20 22:00:49 2025 GMT Subject: CN=09b38f08ba39831391f00bc347594cf60cf1b005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e9:4a:fa:22:c5:37:cd:58:25:ef:b3:3e:31: 14:5a:45:0f:f0:6d:46:59:01:c4:78:59:2f:46:38: b7:21:ad:93:69:89:97:8a:7f:cf:9d:2c:21:7e:3e: 51:01:04:2a:cd:1e:8e:76:c9:9d:4f:a2:16:ce:36: ae:fe:4d:c8:ec:36:ee:56:65:2c:1a:ed:f9:72:43: 7d:c0:be:16:13:41:c6:8a:7b:aa:f5:c1:11:25:d7: e9:d5:2e:ca:07:e9:cc:7e:cd:c4:52:a1:d0:bd:45: b5:28:12:13:30:c1:18:c0:b1:12:e3:67:3e:d4:a0: 16:67:45:26:e2:c7:58:6c:4a:83:0d:3d:5c:2b:fd: 0d:8b:6b:e9:01:fa:e8:35:ec:27:2e:b4:17:52:e2: 89:ab:83:72:37:9c:c4:a0:e9:04:8f:c0:aa:e6:f2: e4:1b:e4:d6:0e:77:5c:b6:6a:84:20:d2:a6:69:f9: ac:03:24:e3:26:6c:b6:53:1f:c4:52:02:5e:2c:30: 12:4c:67:dd:69:5a:d6:47:e9:32:41:97:32:72:4b: 6a:65:7b:30:38:ce:83:08:86:07:04:6c:ba:06:06: f1:66:7c:7b:aa:db:51:8e:6e:6d:7b:20:5b:70:b4: 1d:53:b9:7e:ae:86:1f:70:d1:60:d1:17:e4:70:5b: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:8F:08:BA:39:83:13:91:F0:0B:C3:47:59:4C:F6:0C:F1:B0:05 X509v3 Authority Key Identifier: keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:90:ca:a7:19:2c:d4:55:76:ab:97:35:88:28:31:75:4b:d0: 0a:d7:f0:1f:25:b1:d2:d3:eb:99:83:50:2f:2a:c3:88:57:a3: 32:f9:ad:af:5e:8a:17:a3:e8:1c:7e:ed:34:40:70:c3:82:fc: 31:8d:bc:f9:4a:52:aa:d0:5d:0b:e8:6f:4e:0e:83:73:c9:8f: a2:26:79:1f:3e:14:eb:0c:e8:b3:64:b6:eb:cf:60:7f:35:3f: e8:4f:97:51:12:84:35:7e:87:9a:36:22:47:89:38:51:75:03: e4:ca:c9:71:25:1e:cd:68:4d:14:e6:9a:11:d0:1e:c1:7e:a8: e2:f0:01:7d:68:02:a9:9d:80:0a:d7:e4:71:37:ce:e3:94:4b: 3a:b4:ed:0c:9b:69:07:cf:52:15:a8:ad:29:f9:6e:f7:25:a8: 16:6a:33:a5:e9:09:2a:45:1d:24:fd:4f:74:26:8a:fb:dc:f2: c4:50:15:3d:27:57:e7:1e:9d:37:af:2c:ea:80:56:94:94:8f: e2:7b:12:ca:77:ab:61:72:ab:42:c7:be:c6:46:84:78:66:8a: 39:ad:29:d1:8d:e8:75:ca:be:22:38:02:be:6b:74:13:cd:a2: d3:47:d4:3f:3a:4d:23:6e:2d:15:33:a7:48:37:64:2c:b2:71: 19:b0:05:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oTxILXer2EG3gEIe6W7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZGQyOTdkMDg5OGZmZmRlMjhkNzY5Njc5NWJkYmQ1MjIz ZjhhNjYwHhcNMjUxMjE5MjIwMDQ5WhcNMjUxMjIwMjIwMDQ5WjAzMTEwLwYDVQQD EygwOWIzOGYwOGJhMzk4MzEzOTFmMDBiYzM0NzU5NGNmNjBjZjFiMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+lK+iLFN81YJe+zPjEUWkUP8G1G WQHEeFkvRji3Ia2TaYmXin/PnSwhfj5RAQQqzR6OdsmdT6IWzjau/k3I7DbuVmUs Gu35ckN9wL4WE0HGinuq9cERJdfp1S7KB+nMfs3EUqHQvUW1KBITMMEYwLES42c+ 1KAWZ0Um4sdYbEqDDT1cK/0Ni2vpAfroNewnLrQXUuKJq4NyN5zEoOkEj8Cq5vLk G+TWDndctmqEINKmafmsAyTjJmy2Ux/EUgJeLDASTGfdaVrWR+kyQZcycktqZXsw OM6DCIYHBGy6BgbxZnx7qttRjm5teyBbcLQdU7l+roYfcNFg0RfkcFvz/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmzjwi6OYMTkfALw0dZTPYM8bAFMB8GA1UdIwQY MBaAFMfdKX0ImP/94o12lnlb29UiP4pmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEt MWYzYjViMDU2ZGZjLzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8yNWUwNzktZmNiYy00MThkLWJlYzEtMWYzYjViMDU2ZGZj LzEveDkwcGZRaVlfXzNpalhhV2VWdmIxU0lfaW1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5DKpxks 1FV2q5c1iCgxdUvQCtfwHyWx0tPrmYNQLyrDiFejMvmtr16KF6PoHH7tNEBww4L8 MY28+UpSqtBdC+hvTg6Dc8mPoiZ5Hz4U6wzos2S2689gfzU/6E+XURKENX6HmjYi R4k4UXUD5MrJcSUezWhNFOaaEdAewX6o4vABfWgCqZ2ACtfkcTfO45RLOrTtDJtp B89SFaitKflu9yWoFmozpekJKkUdJP1PdCaK+9zyxFAVPSdX5x6dN68s6oBWlJSP 4nsSynerYXKrQse+xkaEeGaKOa0p0Y3odcq+IjgCvmt0E82i00fUPzpNI24tFTOn SDdkLLJxGbAFVA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:35 2025 by rpki-client