This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft File: s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json) Hash identifier: GgUpefyVUiU3KFOu8RxgZopAPJM6XuroSPzywarbtXs= Subject key identifier: 71:31:37:2E:F1:49:50:3D:53:E8:F5:E8:FE:A5:FB:A4:AB:FF:43:42 Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95 Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895 Certificate serial: 019B323149D86D65E98F3B2F63C18E34CB12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft Manifest number: 0F8E Signing time: Thu 18 Dec 2025 16:00:49 +0000 Manifest this update: Thu 18 Dec 2025 16:00:49 +0000 Manifest next update: Fri 19 Dec 2025 16:00:49 +0000 Files and hashes: 1: DUVtp5rmZWhjlPTwXejQEd3V8J4.roa (hash: qTcPo/VJaQTji8d15MDDjiWvnKJ389xtHOegN0VgXp0=) 2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: sXAmJi6Jw8E9/fhNWECcDYBNtPhmd8JohpqQYWaspNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:49:d8:6d:65:e9:8f:3b:2f:63:c1:8e:34:cb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895 Validity Not Before: Dec 18 16:00:49 2025 GMT Not After : Dec 19 16:00:49 2025 GMT Subject: CN=7131372ef149503d53e8f5e8fea5fba4abff4342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c5:3b:a4:3f:5a:af:f1:7a:00:74:24:2e:6a: 99:0e:a4:48:6d:8c:e3:ba:e7:84:8a:b6:72:46:8c: 29:74:a8:d2:f4:c2:ae:7c:95:9e:84:18:82:3a:9a: 23:74:69:fb:97:cd:0b:8a:aa:82:5a:1b:23:86:98: 08:f2:a7:d5:bb:f2:07:02:d3:64:3e:8e:ff:3f:5d: 95:2a:d2:b7:98:75:f9:32:ba:54:58:9e:a3:65:61: 80:02:f4:6b:e3:af:f4:96:32:21:fe:1f:05:f0:66: 0e:08:64:90:ed:4c:c2:68:ef:33:d8:eb:f0:c9:87: 25:22:41:d7:0a:da:c3:16:0c:7b:ae:20:89:66:fe: 21:b7:07:64:04:7a:0d:96:51:a2:24:a6:79:ac:05: 9c:77:3d:4f:15:69:8e:b7:b4:54:94:82:47:56:51: e0:5d:aa:44:33:33:e1:4e:1c:ce:60:58:18:45:ac: ec:db:85:5a:05:dc:93:53:dc:06:c2:e5:b5:55:14: e4:2c:ba:0e:1a:ef:24:a4:df:39:9d:19:66:22:40: 53:79:7e:a9:6e:43:11:be:c1:bd:f8:90:76:10:a9: a7:56:64:8d:96:a3:3f:fd:23:16:a0:86:cf:bd:86: 8c:c2:e9:7f:45:53:34:c0:1f:2b:e0:c0:84:68:d4: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:37:2E:F1:49:50:3D:53:E8:F5:E8:FE:A5:FB:A4:AB:FF:43:42 X509v3 Authority Key Identifier: keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:24:dd:dc:41:ae:a2:4a:1d:f1:e3:a3:70:85:07:f0:26:42: b7:8f:7c:b7:c2:9b:2b:53:b7:1b:5e:4d:ee:9b:fa:cf:0e:3b: 42:d1:37:01:f4:b7:4b:0e:12:4e:04:7d:5e:9c:2d:9a:2a:8f: 49:f9:e1:e0:14:d1:3b:a6:f5:60:f3:ed:5b:1f:e6:13:89:73: 50:1c:96:60:e5:e1:8b:f0:dc:73:7d:20:6d:e0:78:c6:7d:51: 89:ab:7d:53:fe:98:58:e6:aa:bb:9b:44:0c:bd:f8:57:29:f0: cd:33:6c:2e:17:a8:6f:72:39:8c:c6:c1:b6:e2:4c:98:19:d7: 26:a8:23:99:f2:36:9f:fd:b0:4c:19:c5:cd:60:b9:32:5c:da: 80:02:07:91:e1:fa:8c:61:e3:78:c8:3f:81:ef:9f:d2:96:63: 35:be:be:ad:55:86:20:c7:5b:fa:de:c2:78:d7:d4:8d:06:7c: b1:10:61:d3:13:68:d1:3c:b8:ba:14:25:73:cc:60:8d:05:d9: 6e:f0:2f:e2:cd:a5:80:25:2a:5d:de:6a:9e:04:a6:b9:a5:6d: 54:67:f2:bb:b8:49:e6:27:a9:39:9d:85:b5:ac:67:ce:5f:92: e0:43:1a:07:03:9b:d7:8f:f1:e2:39:28:f8:38:9f:f7:32:6d: 23:08:02:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMUnYbWXpjzsvY8GONMsSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZGQxMWQzNDZiNjNiYjFlYjIyYTA3YzI2Y2MxMjkxYTJh MDY4OTUwHhcNMjUxMjE4MTYwMDQ5WhcNMjUxMjE5MTYwMDQ5WjAzMTEwLwYDVQQD Eyg3MTMxMzcyZWYxNDk1MDNkNTNlOGY1ZThmZWE1ZmJhNGFiZmY0MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8U7pD9ar/F6AHQkLmqZDqRIbYzj uueEirZyRowpdKjS9MKufJWehBiCOpojdGn7l80LiqqCWhsjhpgI8qfVu/IHAtNk Po7/P12VKtK3mHX5MrpUWJ6jZWGAAvRr46/0ljIh/h8F8GYOCGSQ7UzCaO8z2Ovw yYclIkHXCtrDFgx7riCJZv4htwdkBHoNllGiJKZ5rAWcdz1PFWmOt7RUlIJHVlHg XapEMzPhThzOYFgYRazs24VaBdyTU9wGwuW1VRTkLLoOGu8kpN85nRlmIkBTeX6p bkMRvsG9+JB2EKmnVmSNlqM//SMWoIbPvYaMwul/RVM0wB8r4MCEaNRwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHExNy7xSVA9U+j16P6l+6Sr/0NCMB8GA1UdIwQY MBaAFLPdEdNGtjux6yKgfCbMEpGioGiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEt OGJiYzIyNmU2YzQ1LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNDE4OTgtZGEwOC00NjlkLWJlMWEtOGJiYzIyNmU2YzQ1 LzEvczkwUjAwYTJPN0hySXFCOEpzd1NrYUtnYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSTd3EGu okod8eOjcIUH8CZCt498t8KbK1O3G15N7pv6zw47QtE3AfS3Sw4STgR9XpwtmiqP Sfnh4BTRO6b1YPPtWx/mE4lzUByWYOXhi/Dcc30gbeB4xn1Riat9U/6YWOaqu5tE DL34VynwzTNsLheob3I5jMbBtuJMmBnXJqgjmfI2n/2wTBnFzWC5MlzagAIHkeH6 jGHjeMg/ge+f0pZjNb6+rVWGIMdb+t7CeNfUjQZ8sRBh0xNo0Ty4uhQlc8xgjQXZ bvAv4s2lgCUqXd5qngSmuaVtVGfyu7hJ5iepOZ2Ftaxnzl+S4EMaBwOb14/x4jko +Dif9zJtIwgCMQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:57 2025 by rpki-client