This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft File: 25r5Hp6xW2dqlvCvZUzAMogVSho.mft (raw, json) Hash identifier: SecKMfiE3dTc2+1MfEU+5LPkHa+/BbWUJvdjsXYZFhE= Subject key identifier: 55:9D:17:3C:41:A8:5B:CE:1A:E6:7F:8D:03:41:F1:F9:3E:6C:3A:55 Authority key identifier: DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A Certificate issuer: /CN=db9af91e9eb15b676a96f0af654cc03288154a1a Certificate serial: 019B4091D22D833F5B9E23582896A438FF17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft Manifest number: 0B98 Signing time: Sun 21 Dec 2025 11:00:56 +0000 Manifest this update: Sun 21 Dec 2025 11:00:56 +0000 Manifest next update: Mon 22 Dec 2025 11:00:56 +0000 Files and hashes: 1: 25r5Hp6xW2dqlvCvZUzAMogVSho.crl (hash: xMxqGT3g74Wqmau40X+at+u0MULRYxNQK2yM6+a7VFo=) 2: TO36gbkW8COMg60JGW_q2Qlywo0.roa (hash: 2OdoAiYhktu2AQ1JAmSAkg5zx91Aj8ZuNYg+AMvWEQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:d2:2d:83:3f:5b:9e:23:58:28:96:a4:38:ff:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9af91e9eb15b676a96f0af654cc03288154a1a Validity Not Before: Dec 21 11:00:56 2025 GMT Not After : Dec 22 11:00:56 2025 GMT Subject: CN=559d173c41a85bce1ae67f8d0341f1f93e6c3a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:de:b4:a5:60:73:9e:15:54:4c:32:3b:dc:10: 1d:79:6b:c4:e9:3e:e1:a7:1d:39:91:a0:12:2c:db: 7f:11:af:f4:de:46:63:f6:18:b5:45:23:ee:ae:fd: 33:8d:71:ba:e7:9c:74:b0:1d:71:b0:05:88:94:87: ac:4b:08:d8:a2:01:c4:cc:2b:6d:54:1e:76:07:ec: cb:65:e7:c8:c4:6b:60:5a:28:0a:ed:19:91:91:20: 67:4a:6f:fe:80:b3:55:e9:30:d5:1b:ec:82:d7:72: ec:9f:58:f5:49:85:4c:9d:9e:7f:14:6a:4a:bf:59: 53:d2:dc:ae:e4:07:04:83:8a:8b:c8:aa:77:86:8a: c2:b0:dc:74:f4:40:a0:2d:38:78:92:e9:e7:9a:3c: 30:01:ad:13:fc:e6:df:d0:b6:f0:fe:a7:66:4c:20: c6:c6:57:55:e3:87:2d:18:6a:84:ef:bf:35:20:7c: 5f:9f:d2:4f:be:9b:bf:b3:48:aa:c0:20:be:f4:03: 2d:04:60:92:7a:4d:fe:09:f2:24:45:59:93:37:b4: 65:a4:8f:7d:fb:08:c8:b1:1a:6e:1b:1c:10:34:ec: 32:f4:a0:0b:54:f0:c2:c5:4a:b5:4c:9f:07:07:ac: 97:36:42:c1:cf:de:80:cc:42:37:8b:fa:e1:f1:66: 0b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9D:17:3C:41:A8:5B:CE:1A:E6:7F:8D:03:41:F1:F9:3E:6C:3A:55 X509v3 Authority Key Identifier: keyid:DB:9A:F9:1E:9E:B1:5B:67:6A:96:F0:AF:65:4C:C0:32:88:15:4A:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25r5Hp6xW2dqlvCvZUzAMogVSho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cdbfeb-7ac1-4da1-8d40-f935fc0f20d5/1/25r5Hp6xW2dqlvCvZUzAMogVSho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8c:5a:f7:03:17:91:62:cb:9b:5a:c3:f1:3a:4e:5b:de:76: 04:4a:b7:d6:dc:c0:3a:d2:eb:a1:50:72:9a:d3:20:9b:ec:5c: b1:fe:e7:98:27:8b:93:66:db:89:2c:bc:1c:26:52:8b:ab:a9: a3:c0:63:2b:ec:ec:e2:c3:1d:e4:5d:3e:b8:5b:ae:07:4f:d4: 37:91:59:0a:81:a6:b8:15:1a:27:5f:38:1c:52:b4:01:ed:dd: 14:d6:6e:af:ae:1a:0a:10:db:c0:dc:7c:1e:23:52:bd:2f:66: 11:c8:6d:62:58:f0:19:e2:ad:8a:14:54:44:d1:96:d9:79:16: e8:eb:bc:9d:d9:30:15:0a:14:bb:64:d3:50:1d:9d:14:1b:de: 6a:9c:83:5c:e3:1b:5d:aa:35:b5:c2:4a:d7:0d:02:07:cf:3e: 7e:29:a7:68:3e:6c:f5:cb:66:c6:c0:49:d1:0b:e3:51:b7:91: de:e2:04:34:25:72:4b:b8:28:ab:85:77:61:f7:d1:92:1d:0d: 8d:b3:0f:29:cf:df:df:54:6c:89:7e:26:6e:18:28:3a:b3:42: fe:75:7b:00:49:37:00:14:e3:4b:c6:d4:0b:60:9a:49:17:84: a1:01:2c:e9:bc:6a:7b:8a:ae:ee:30:3a:6a:2c:ed:5e:f9:2f: aa:81:2d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkdItgz9bniNYKJakOP8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWFmOTFlOWViMTViNjc2YTk2ZjBhZjY1NGNjMDMyODgx NTRhMWEwHhcNMjUxMjIxMTEwMDU2WhcNMjUxMjIyMTEwMDU2WjAzMTEwLwYDVQQD Eyg1NTlkMTczYzQxYTg1YmNlMWFlNjdmOGQwMzQxZjFmOTNlNmMzYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl960pWBznhVUTDI73BAdeWvE6T7h px05kaASLNt/Ea/03kZj9hi1RSPurv0zjXG655x0sB1xsAWIlIesSwjYogHEzCtt VB52B+zLZefIxGtgWigK7RmRkSBnSm/+gLNV6TDVG+yC13Lsn1j1SYVMnZ5/FGpK v1lT0tyu5AcEg4qLyKp3horCsNx09ECgLTh4kunnmjwwAa0T/Obf0Lbw/qdmTCDG xldV44ctGGqE7781IHxfn9JPvpu/s0iqwCC+9AMtBGCSek3+CfIkRVmTN7RlpI99 +wjIsRpuGxwQNOwy9KALVPDCxUq1TJ8HB6yXNkLBz96AzEI3i/rh8WYL+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFWdFzxBqFvOGuZ/jQNB8fk+bDpVMB8GA1UdIwQY MBaAFNua+R6esVtnapbwr2VMwDKIFUoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAt ZjkzNWZjMGYyMGQ1LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZGJmZWItN2FjMS00ZGExLThkNDAtZjkzNWZjMGYyMGQ1 LzEvMjVyNUhwNnhXMmRxbHZDdlpVekFNb2dWU2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYxa9wMX kWLLm1rD8TpOW952BEq31tzAOtLroVBymtMgm+xcsf7nmCeLk2bbiSy8HCZSi6up o8BjK+zs4sMd5F0+uFuuB0/UN5FZCoGmuBUaJ184HFK0Ae3dFNZur64aChDbwNx8 HiNSvS9mEchtYljwGeKtihRURNGW2XkW6Ou8ndkwFQoUu2TTUB2dFBveapyDXOMb Xao1tcJK1w0CB88+fimnaD5s9ctmxsBJ0QvjUbeR3uIENCVyS7goq4V3YffRkh0N jbMPKc/f31RsiX4mbhgoOrNC/nV7AEk3ABTjS8bUC2CaSReEoQEs6bxqe4qu7jA6 aiztXvkvqoEtKg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:16:53 2025 by rpki-client