This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json) Hash identifier: liL2drrrr10xtqSSgtYAjBeqlPeHxyQiZF8aWdVNL70= Subject key identifier: A0:18:CE:68:D7:C0:00:30:9C:A4:AE:3F:1B:AD:ED:7B:E2:A8:AF:D1 Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Certificate serial: 019B5B9AD10BEEBD5B31267B3661D040188F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft Manifest number: 041C Signing time: Fri 26 Dec 2025 17:00:31 +0000 Manifest this update: Fri 26 Dec 2025 17:00:31 +0000 Manifest next update: Sat 27 Dec 2025 17:00:31 +0000 Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=) 2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: EbyyvSsUzFtyMFNLFcRCy7HE+wQH8+Nh3BybBRKDfUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9a:d1:0b:ee:bd:5b:31:26:7b:36:61:d0:40:18:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227 Validity Not Before: Dec 26 17:00:31 2025 GMT Not After : Dec 27 17:00:31 2025 GMT Subject: CN=a018ce68d7c000309ca4ae3f1baded7be2a8afd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:4a:1c:ad:12:65:19:fc:b0:68:99:9f:40: dd:76:58:a5:c2:cf:8f:fe:6d:aa:cd:f7:ed:0e:d2: db:be:c3:25:41:69:3f:20:1f:4c:67:bb:df:30:83: 2a:65:df:ec:2a:51:4d:21:f2:d6:37:84:9f:06:c3: 3c:70:15:ef:5d:85:28:fc:7e:ec:b7:50:22:0e:38: 3b:38:f5:73:28:74:9d:a8:3f:3f:d7:b0:d5:bd:cc: 9d:03:a6:bb:ad:1a:f1:e7:e4:44:32:de:60:b8:06: 75:bf:de:00:c2:fd:a0:78:ca:dc:30:ab:fb:e1:2b: 7a:f9:8c:0d:b8:54:c9:ae:79:04:55:7a:1c:02:e6: 3f:04:57:14:05:13:09:83:fc:ff:3f:5c:ae:65:c9: de:97:b5:30:86:0d:eb:69:d7:ee:5b:b7:66:e2:1b: 09:23:18:b7:a0:5f:50:72:53:93:1d:59:f5:74:d4: 2c:df:68:b7:54:16:18:d0:56:f0:41:c4:10:b9:ea: 6e:01:50:44:94:6f:df:5e:5f:23:13:37:23:c5:9c: 07:26:d0:f7:a4:b0:e4:5b:bb:2a:b1:01:9f:25:dc: 69:20:7a:44:5f:48:77:a0:69:59:0d:8f:a6:ac:b6: 25:1c:03:3e:e3:e5:e5:4d:8b:ed:83:48:fb:3c:7a: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:18:CE:68:D7:C0:00:30:9C:A4:AE:3F:1B:AD:ED:7B:E2:A8:AF:D1 X509v3 Authority Key Identifier: keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:1b:6f:8a:cc:05:27:94:88:f9:43:a2:8f:cf:99:48:09: 4b:1f:e0:54:46:9e:52:39:65:8a:d5:ff:ea:94:ca:7f:55:52: e7:20:ea:ba:f2:e7:c9:65:be:f5:38:6c:54:a7:ff:8d:d1:4f: 1f:eb:ec:24:e4:eb:bc:f4:f0:9c:d0:dc:1b:3b:64:ee:04:4b: a0:8a:8e:fc:04:fa:ce:9a:1e:5f:ee:b1:a7:8d:c3:68:1a:c9: ef:fe:65:84:85:50:4a:4b:2d:15:eb:6d:6c:7f:c3:14:e6:a1: 90:54:71:f8:a0:db:0d:f0:13:46:18:32:0a:68:b0:2d:95:8c: 0b:f3:fd:f7:62:64:0e:05:73:62:b0:cc:34:9f:9e:7c:95:aa: 69:e9:df:6b:9f:fe:00:dd:9f:ae:08:9a:3e:a9:64:3c:fd:03: fb:5d:a2:09:38:a9:f9:58:00:2c:90:0f:7a:c2:4a:cf:73:47: b0:06:c2:55:97:91:a9:83:ca:d0:74:fa:83:6d:4b:5b:21:33: 30:7c:01:6d:2c:00:4a:b0:f1:7b:01:6f:99:1b:e9:86:f0:c1: 89:89:12:33:53:b9:54:27:c3:d9:5c:f5:f7:93:10:2c:ad:f1: 05:e0:5d:3d:84:dc:df:74:f3:93:26:0e:d8:c5:4f:13:99:fb: c9:51:88:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmtEL7r1bMSZ7NmHQQBiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx ODEyMjcwHhcNMjUxMjI2MTcwMDMxWhcNMjUxMjI3MTcwMDMxWjAzMTEwLwYDVQQD EyhhMDE4Y2U2OGQ3YzAwMDMwOWNhNGFlM2YxYmFkZWQ3YmUyYThhZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa5KHK0SZRn8sGiZn0Dddlilws+P /m2qzfftDtLbvsMlQWk/IB9MZ7vfMIMqZd/sKlFNIfLWN4SfBsM8cBXvXYUo/H7s t1AiDjg7OPVzKHSdqD8/17DVvcydA6a7rRrx5+REMt5guAZ1v94Awv2geMrcMKv7 4St6+YwNuFTJrnkEVXocAuY/BFcUBRMJg/z/P1yuZcnel7Uwhg3radfuW7dm4hsJ Ixi3oF9QclOTHVn1dNQs32i3VBYY0FbwQcQQuepuAVBElG/fXl8jEzcjxZwHJtD3 pLDkW7sqsQGfJdxpIHpEX0h3oGlZDY+mrLYlHAM+4+XlTYvtg0j7PHpTtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAYzmjXwAAwnKSuPxut7XviqK/RMB8GA1UdIwQY MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINcbb4rM BSeUiPlDoo/PmUgJSx/gVEaeUjllitX/6pTKf1VS5yDquvLnyWW+9ThsVKf/jdFP H+vsJOTrvPTwnNDcGztk7gRLoIqO/AT6zpoeX+6xp43DaBrJ7/5lhIVQSkstFett bH/DFOahkFRx+KDbDfATRhgyCmiwLZWMC/P992JkDgVzYrDMNJ+efJWqaenfa5/+ AN2frgiaPqlkPP0D+12iCTip+VgALJAPesJKz3NHsAbCVZeRqYPK0HT6g21LWyEz MHwBbSwASrDxewFvmRvphvDBiYkSM1O5VCfD2Vz195MQLK3xBeBdPYTc33TzkyYO 2MVPE5n7yVGIbw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:27 2025 by rpki-client