This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json) Hash identifier: 6uCNDNI/3ldX0eR9Rp0zmwMqCkwmvRbHsdfujFExutc= Subject key identifier: 07:7C:E0:1D:B3:7F:4B:5A:82:DD:C7:3E:F1:94:1B:DE:E3:F3:2E:9F Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Certificate serial: 019B72C7462F962A1A167E1CE701C87DA17B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft Manifest number: 0428 Signing time: Wed 31 Dec 2025 05:00:20 +0000 Manifest this update: Wed 31 Dec 2025 05:00:20 +0000 Manifest next update: Thu 01 Jan 2026 05:00:20 +0000 Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=) 2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: fH29T6TNN5coHcKNOksXmrUJSLk3+28502OCU2T/VtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:46:2f:96:2a:1a:16:7e:1c:e7:01:c8:7d:a1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Validity Not Before: Dec 31 05:00:20 2025 GMT Not After : Jan 1 05:00:20 2026 GMT Subject: CN=077ce01db37f4b5a82ddc73ef1941bdee3f32e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:9c:f0:76:90:d5:ef:55:dc:bd:f2:37:ce: 0e:9b:c0:e1:fe:fb:3c:31:e9:9f:6c:09:fa:7e:e2: b7:ef:c3:46:2b:f6:30:bf:c5:88:1c:4a:50:15:18: 32:49:2e:6e:da:6b:6c:1d:89:6e:e3:0a:9e:a4:bd: d5:cc:e7:ab:d2:50:31:0c:43:2d:5c:0d:41:4b:05: 8e:bd:99:85:ec:4b:22:83:47:95:6f:ce:d0:21:46: d5:5c:ce:cd:c7:12:74:ed:fe:98:ec:7d:f0:dd:4f: a6:ef:58:74:13:c0:1d:32:e1:a1:1d:7f:9e:d9:d8: a7:02:05:0d:f6:89:a4:fa:fb:4f:e4:85:25:8f:3d: 3e:de:d6:fa:d9:a1:47:32:14:a5:1a:82:e4:a5:45: b3:9a:6e:25:2e:dd:c8:04:92:e9:f6:7d:e6:7c:f2: e1:10:05:11:61:d6:11:02:93:d9:c8:28:22:43:dd: f2:e6:9a:61:a5:f3:21:aa:a3:e4:77:10:df:30:de: 5b:e3:40:08:55:70:63:73:fc:7a:a0:5e:bd:96:60: c6:7f:08:86:f1:cc:85:84:9e:30:70:4c:40:ea:30: ad:d3:ce:45:f1:bc:29:e4:ea:6c:a1:7e:25:48:ef: cf:00:ad:f9:02:22:0e:fc:bd:7f:30:0e:91:81:28: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:E0:1D:B3:7F:4B:5A:82:DD:C7:3E:F1:94:1B:DE:E3:F3:2E:9F X509v3 Authority Key Identifier: keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9f:d2:c2:2b:24:8a:a9:f0:d7:e0:f0:51:5e:42:fc:65:2d: 23:0c:3b:cf:12:0b:e7:2e:f9:9c:23:d6:b7:01:7a:a7:6d:4f: 5d:2e:a5:9b:8f:c3:1e:6a:12:8a:d9:37:33:7d:a7:fd:f4:9f: 92:d0:66:03:9d:0c:a8:67:67:0d:fc:f4:cc:3a:85:30:2f:cb: 06:89:e5:74:2d:b3:a6:a2:3e:c7:47:75:f4:cd:00:18:c3:3f: d1:4c:b4:c7:54:5e:f8:b9:3c:46:f9:16:03:85:89:4c:b0:d1: b8:2b:2f:e5:c0:ba:a5:fc:57:7e:46:d6:07:d6:dc:7d:9f:af: 54:ce:83:bb:6b:96:8e:6e:43:88:1b:51:8d:86:d7:36:03:eb: 28:07:99:2e:e3:ba:4f:cb:04:32:bb:42:44:b7:9d:bc:b2:0a: 2c:84:ae:53:d0:5d:40:94:f9:3a:08:5c:50:40:b4:05:88:29: 71:7e:49:05:9b:d5:29:55:d4:16:32:b6:1e:53:11:11:37:8b: 1a:fb:24:7c:04:a1:f5:dc:98:30:91:3b:e8:09:08:5c:c7:67: eb:3c:f4:97:0b:65:50:61:15:3e:3e:21:79:50:79:dd:8f:b8: 02:54:6a:b8:39:cc:3e:96:e5:a4:11:e3:b0:96:ee:ce:b6:13: 32:e2:76:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx0YvlioaFn4c5wHIfaF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx ODEyMjcwHhcNMjUxMjMxMDUwMDIwWhcNMjYwMTAxMDUwMDIwWjAzMTEwLwYDVQQD EygwNzdjZTAxZGIzN2Y0YjVhODJkZGM3M2VmMTk0MWJkZWUzZjMyZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiOc8HaQ1e9V3L3yN84Om8Dh/vs8 MemfbAn6fuK378NGK/Ywv8WIHEpQFRgySS5u2mtsHYlu4wqepL3VzOer0lAxDEMt XA1BSwWOvZmF7Esig0eVb87QIUbVXM7NxxJ07f6Y7H3w3U+m71h0E8AdMuGhHX+e 2dinAgUN9omk+vtP5IUljz0+3tb62aFHMhSlGoLkpUWzmm4lLt3IBJLp9n3mfPLh EAURYdYRApPZyCgiQ93y5pphpfMhqqPkdxDfMN5b40AIVXBjc/x6oF69lmDGfwiG 8cyFhJ4wcExA6jCt085F8bwp5OpsoX4lSO/PAK35AiIO/L1/MA6RgSgARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAd84B2zf0tagt3HPvGUG97j8y6fMB8GA1UdIwQY MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ/Swisk iqnw1+DwUV5C/GUtIww7zxIL5y75nCPWtwF6p21PXS6lm4/DHmoSitk3M32n/fSf ktBmA50MqGdnDfz0zDqFMC/LBonldC2zpqI+x0d19M0AGMM/0Uy0x1Re+Lk8RvkW A4WJTLDRuCsv5cC6pfxXfkbWB9bcfZ+vVM6Du2uWjm5DiBtRjYbXNgPrKAeZLuO6 T8sEMrtCRLedvLIKLISuU9BdQJT5OghcUEC0BYgpcX5JBZvVKVXUFjK2HlMRETeL GvskfASh9dyYMJE76AkIXMdn6zz0lwtlUGEVPj4heVB53Y+4AlRquDnMPpblpBHj sJbuzrYTMuJ2lg== -----END CERTIFICATE-----Generated at Wed Dec 31 09:07:25 2025 by rpki-client