This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft File: 90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json) Hash identifier: kN9THsG5uOCHFDbI3x7Ok5Udaa6gGxvTYIoszUqgnOA= Subject key identifier: 48:74:33:64:0D:EC:7D:A9:A6:F7:51:06:54:96:44:59:5F:C4:F9:54 Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Certificate issuer: /CN=f747ead1fa9a135c65057ca412d893bb82e91429 Certificate serial: 019B3BA232715B88B30038593CFABE867368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft Manifest number: 44 Signing time: Sat 20 Dec 2025 12:00:44 +0000 Manifest this update: Sat 20 Dec 2025 12:00:44 +0000 Manifest next update: Sun 21 Dec 2025 12:00:44 +0000 Files and hashes: 1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: JC7JAPUgri2fQCs74ghIYV+iE3qzO6yyvo8R7qvqprg=) 2: aYOE3QzdGavKOpdIiLw8wF8XiJ8.roa (hash: vWr6BftrdyWJD+hB0G6lD/tYnqXK0+OgPKOWHS3L0YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:32:71:5b:88:b3:00:38:59:3c:fa:be:86:73:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Validity Not Before: Dec 20 12:00:44 2025 GMT Not After : Dec 21 12:00:44 2025 GMT Subject: CN=487433640dec7da9a6f75106549644595fc4f954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:19:63:a0:f3:11:79:f6:cc:4d:c9:07:a9: 87:c9:f3:8e:e3:c5:9b:76:5f:a9:b5:0d:61:85:fc: 99:e1:3b:90:4d:2d:b9:7d:22:2e:6d:26:54:89:b6: f1:49:c5:c0:05:99:67:4f:b1:cf:94:f4:80:0b:05: 4c:31:62:a0:b2:3b:d5:bb:d0:61:8d:18:04:6c:33: a8:d0:f8:75:77:86:31:2e:ae:65:99:95:e6:51:13: f8:83:a5:3d:11:26:81:38:f2:8d:a2:c8:64:ed:0d: b0:ba:f6:1d:b6:28:57:26:85:c4:bb:51:a7:92:6b: 3c:bf:2f:2a:d1:f1:5b:27:2a:c9:2f:16:19:9c:37: 68:30:ce:d7:0e:db:94:ff:a4:fa:48:0a:74:2e:8c: 08:9d:e4:dc:55:f6:9b:98:de:5c:13:4f:5d:1f:72: 74:cc:1f:b7:21:8f:e5:63:ad:e3:0c:27:4c:bc:69: 13:0e:6e:1b:44:5d:bb:7a:bf:c2:0c:28:2d:74:77: 30:71:3f:32:67:d0:4a:f0:40:20:b3:24:71:0c:ac: ca:6c:17:2d:ec:01:d3:e5:28:5d:29:cc:df:a6:78: ae:8f:b0:23:2b:d9:17:1d:67:ad:8e:f8:a7:9a:73: 6f:b9:17:65:54:d6:d0:c4:ff:59:01:04:41:43:4d: df:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:74:33:64:0D:EC:7D:A9:A6:F7:51:06:54:96:44:59:5F:C4:F9:54 X509v3 Authority Key Identifier: keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7c:62:e7:6a:da:f9:58:e1:ef:c9:fd:5d:22:68:e2:ef:39: b9:51:8a:11:1f:e7:0d:e2:d1:79:85:15:d7:45:eb:45:74:f1: 72:13:57:18:22:71:d3:c0:4c:bc:9f:e0:23:3c:71:6d:91:40: 1e:d7:9a:55:9c:85:18:55:56:6f:6a:c6:6e:b4:16:04:f5:5e: 3e:d0:85:23:ee:b7:cf:7c:16:08:97:00:ad:eb:9f:ec:c6:4b: 86:ea:b8:c0:52:17:9e:a5:cd:11:34:22:d9:84:48:57:9d:1a: eb:9f:b6:d4:e9:9f:62:ad:6c:25:4b:03:a0:30:fe:75:f7:51: fe:fa:50:fa:b4:7e:b4:1c:76:fc:62:01:69:7a:48:77:a8:b2: cc:28:54:f6:2e:be:22:54:8a:63:c0:b6:48:e2:51:da:46:83: c7:5d:92:36:73:ca:0f:6f:85:4f:f3:33:7d:81:27:d8:f3:63: 23:8a:f0:2b:27:85:fc:db:1f:db:11:da:f7:ba:c6:42:29:2c: 2c:af:fb:1d:58:a6:d5:97:53:fc:22:c1:4d:7a:ee:2a:5c:47: be:56:e6:bb:21:b7:cb:41:2a:44:59:48:8f:f9:8d:3a:f0:f1: 49:0d:49:65:5f:f1:24:e4:c5:b6:21:8c:8c:a9:42:7d:88:6b: b8:fe:32:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojJxW4izADhZPPq+hnNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDdlYWQxZmE5YTEzNWM2NTA1N2NhNDEyZDg5M2JiODJl OTE0MjkwHhcNMjUxMjIwMTIwMDQ0WhcNMjUxMjIxMTIwMDQ0WjAzMTEwLwYDVQQD Eyg0ODc0MzM2NDBkZWM3ZGE5YTZmNzUxMDY1NDk2NDQ1OTVmYzRmOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriIZY6DzEXn2zE3JB6mHyfOO48Wb dl+ptQ1hhfyZ4TuQTS25fSIubSZUibbxScXABZlnT7HPlPSACwVMMWKgsjvVu9Bh jRgEbDOo0Ph1d4YxLq5lmZXmURP4g6U9ESaBOPKNoshk7Q2wuvYdtihXJoXEu1Gn kms8vy8q0fFbJyrJLxYZnDdoMM7XDtuU/6T6SAp0LowIneTcVfabmN5cE09dH3J0 zB+3IY/lY63jDCdMvGkTDm4bRF27er/CDCgtdHcwcT8yZ9BK8EAgsyRxDKzKbBct 7AHT5ShdKczfpniuj7AjK9kXHWetjvinmnNvuRdlVNbQxP9ZAQRBQ03fsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh0M2QN7H2ppvdRBlSWRFlfxPlUMB8GA1UdIwQY MBaAFPdH6tH6mhNcZQV8pBLYk7uC6RQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMt YjkxN2Y4M2YxZThjLzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8wNDc4OWMtYWUwNC00Yjk4LTkwOWMtYjkxN2Y4M2YxZThj LzEvOTBmcTBmcWFFMXhsQlh5a0V0aVR1NExwRkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXxi52ra +Vjh78n9XSJo4u85uVGKER/nDeLReYUV10XrRXTxchNXGCJx08BMvJ/gIzxxbZFA HteaVZyFGFVWb2rGbrQWBPVePtCFI+63z3wWCJcAreuf7MZLhuq4wFIXnqXNETQi 2YRIV50a65+21OmfYq1sJUsDoDD+dfdR/vpQ+rR+tBx2/GIBaXpId6iyzChU9i6+ IlSKY8C2SOJR2kaDx12SNnPKD2+FT/MzfYEn2PNjI4rwKyeF/Nsf2xHa97rGQiks LK/7HVim1ZdT/CLBTXruKlxHvlbmuyG3y0EqRFlIj/mNOvDxSQ1JZV/xJOTFtiGM jKlCfYhruP4yhw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:07:42 2025 by rpki-client