This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft File: 25ebiYwPWDTLyDimmgXjq-jAKQM.mft (raw, json) Hash identifier: x055J0fvflNmyONiECyj26unkd53o+pp8shU9qhuAi8= Subject key identifier: 4F:38:58:D9:F2:70:53:CF:E5:84:69:DE:44:31:BB:9A:5C:C7:12:72 Authority key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 Certificate issuer: /CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Certificate serial: 019B3BD968BCF8FABCF59E5E599C92999230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft Manifest number: 0B1A Signing time: Sat 20 Dec 2025 13:01:02 +0000 Manifest this update: Sat 20 Dec 2025 13:01:02 +0000 Manifest next update: Sun 21 Dec 2025 13:01:02 +0000 Files and hashes: 1: 25ebiYwPWDTLyDimmgXjq-jAKQM.crl (hash: Uizn491/MnmYWBQ7943eIIPJrot6c6/IupiMePLeKqA=) 2: kQI24cv0NZjcs-NoEtkNWQr945M.roa (hash: lv4kdfvUyBf5e1wmjHgM1hbCJlTmhLUys8Yvw75WiAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:68:bc:f8:fa:bc:f5:9e:5e:59:9c:92:99:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Validity Not Before: Dec 20 13:01:02 2025 GMT Not After : Dec 21 13:01:02 2025 GMT Subject: CN=4f3858d9f27053cfe58469de4431bb9a5cc71272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:24:9d:65:04:2d:90:37:09:ca:2c:51:1c: 5c:2b:fa:31:27:e2:51:e6:7b:6b:1d:17:32:e2:15: 12:5c:e7:3b:8a:9f:cb:c6:74:7e:ba:a0:bc:cd:b3: 17:84:ea:e5:20:65:41:3c:ab:4f:ac:52:52:1f:62: ba:d4:41:47:9c:68:59:24:67:db:11:d3:16:88:da: 0f:d3:75:0c:98:ca:7b:7d:04:be:82:c9:62:32:58: 60:1d:53:f3:81:c1:72:cb:fa:7f:07:24:55:37:bb: 40:e1:f6:f6:a9:63:fc:8f:4f:a4:12:4b:28:c7:58: 76:42:0f:5c:a8:c0:3d:63:a0:c8:dd:49:75:81:ef: 3d:5d:f1:b4:e5:42:6c:91:e9:33:4a:b2:1e:83:68: e9:8c:e8:3c:e3:f2:4f:84:65:21:4f:d3:24:8e:f0: 93:4c:25:a9:88:70:50:18:65:2e:d4:7f:ed:ae:8c: cb:fb:a5:ab:c3:c0:a9:a3:1e:8a:33:b2:a5:69:0a: 3e:4a:3b:8b:cb:46:19:22:87:f7:37:8d:6a:18:28: fc:df:ef:ea:bf:df:00:ff:54:30:d9:80:d0:9b:f2: 60:d6:e4:9b:c1:71:2d:96:97:11:a8:3b:ed:a0:b8: 2b:8d:10:6f:92:dd:bd:98:c1:5c:1e:42:48:6e:d5: d3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:38:58:D9:F2:70:53:CF:E5:84:69:DE:44:31:BB:9A:5C:C7:12:72 X509v3 Authority Key Identifier: keyid:DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:30:45:56:7a:b9:9b:03:d2:cc:36:f2:17:f0:f5:b7:cf:b8: 18:6a:f4:d5:21:38:26:bc:2b:41:51:36:f0:aa:65:ec:04:e7: a1:f6:53:4d:22:b4:e9:a8:7c:63:cc:42:cf:fc:5b:cd:5d:4a: 0e:df:24:83:ac:fc:e3:b0:4e:b8:bd:a7:07:d2:94:ae:3d:6d: 82:52:fc:ce:34:ad:68:3d:a5:ab:a0:23:e5:c7:f2:2e:92:36: 3d:3c:b0:d1:9f:fc:8e:d1:06:49:98:c8:69:a4:f2:01:2d:23: dc:70:ce:a8:27:c8:64:8d:44:02:d2:e7:d9:d1:37:d5:07:f1: 65:8e:4b:25:d7:c7:44:43:ed:9f:2e:3c:b4:2f:60:53:12:0b: c1:d0:a2:17:50:c8:c0:93:56:37:78:fb:0d:0c:90:3d:e6:98: 85:b9:59:d8:e2:18:03:10:7d:6d:ea:4a:f8:2d:e6:d9:48:8b: 6e:ca:dc:41:d7:4a:22:d2:85:82:e9:79:e9:4c:24:43:cd:fc: 8b:81:51:d7:13:e0:5d:55:42:7c:a3:e4:3a:6d:a4:0a:23:ac: 78:da:58:48:97:fc:e0:9c:23:b8:2a:19:cc:3c:8a:58:19:73: e9:48:09:2a:4f:ea:3f:bc:d7:50:17:aa:f7:28:90:ed:bd:d4: f2:56:50:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Wi8+Pq89Z5eWZySmZIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTc5Yjg5OGMwZjU4MzRjYmM4MzhhNjlhMDVlM2FiZThj MDI5MDMwHhcNMjUxMjIwMTMwMTAyWhcNMjUxMjIxMTMwMTAyWjAzMTEwLwYDVQQD Eyg0ZjM4NThkOWYyNzA1M2NmZTU4NDY5ZGU0NDMxYmI5YTVjYzcxMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMwknWUELZA3CcosURxcK/oxJ+JR 5ntrHRcy4hUSXOc7ip/LxnR+uqC8zbMXhOrlIGVBPKtPrFJSH2K61EFHnGhZJGfb EdMWiNoP03UMmMp7fQS+gsliMlhgHVPzgcFyy/p/ByRVN7tA4fb2qWP8j0+kEkso x1h2Qg9cqMA9Y6DI3Ul1ge89XfG05UJskekzSrIeg2jpjOg84/JPhGUhT9MkjvCT TCWpiHBQGGUu1H/trozL+6Wrw8Cpox6KM7KlaQo+SjuLy0YZIof3N41qGCj83+/q v98A/1Qw2YDQm/Jg1uSbwXEtlpcRqDvtoLgrjRBvkt29mMFcHkJIbtXTaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE84WNnycFPP5YRp3kQxu5pcxxJyMB8GA1UdIwQY MBaAFNuXm4mMD1g0y8g4ppoF46vowCkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUt NGNiMjU3ZWUxOTJjLzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kNWZkZTYtMTk1MS00N2I4LWEzMjUtNGNiMjU3ZWUxOTJj LzEvMjVlYmlZd1BXRFRMeURpbW1nWGpxLWpBS1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTBFVnq5 mwPSzDbyF/D1t8+4GGr01SE4JrwrQVE28Kpl7ATnofZTTSK06ah8Y8xCz/xbzV1K Dt8kg6z847BOuL2nB9KUrj1tglL8zjStaD2lq6Aj5cfyLpI2PTyw0Z/8jtEGSZjI aaTyAS0j3HDOqCfIZI1EAtLn2dE31QfxZY5LJdfHREPtny48tC9gUxILwdCiF1DI wJNWN3j7DQyQPeaYhblZ2OIYAxB9bepK+C3m2UiLbsrcQddKItKFgul56UwkQ838 i4FR1xPgXVVCfKPkOm2kCiOseNpYSJf84JwjuCoZzDyKWBlz6UgJKk/qP7zXUBeq 9yiQ7b3U8lZQmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:58 2025 by rpki-client