This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: 9iXDjFu06jDTi/BHnq1CujvJtXg9BaIHZhq7fmuhEyg= Subject key identifier: 8A:3B:98:2E:C8:52:E8:F4:4A:99:B2:E2:B8:17:16:EA:27:DD:A7:9E Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019B44DC61D8985731ED05BDB7045353CC80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 0478 Signing time: Mon 22 Dec 2025 07:00:52 +0000 Manifest this update: Mon 22 Dec 2025 07:00:52 +0000 Manifest next update: Tue 23 Dec 2025 07:00:52 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: SxxGTO1B1oBegFryZVlzqZj0pUq5i2RYaz8eDT6DICI=) 2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:61:d8:98:57:31:ed:05:bd:b7:04:53:53:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Dec 22 07:00:52 2025 GMT Not After : Dec 23 07:00:52 2025 GMT Subject: CN=8a3b982ec852e8f44a99b2e2b81716ea27dda79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:8a:f0:9d:2e:81:40:22:b5:4f:3c:d2:cf: 14:af:6b:df:c4:93:2d:99:19:83:4c:41:3e:e1:37: c1:3a:ab:46:ed:8c:cd:0f:15:51:ff:21:54:9d:eb: 18:5a:d3:a3:e1:c1:e2:b4:90:bc:f6:ae:ca:84:64: 3f:21:cb:d1:18:50:80:ea:4a:2b:18:96:94:03:e9: b7:49:1d:bc:46:78:b8:38:67:ab:e5:19:92:ed:1c: 8e:22:80:b6:4d:63:bb:03:c5:2e:9a:07:4f:95:9f: 4b:66:80:40:7e:99:27:2e:3c:ba:f8:8a:6e:46:f4: f9:32:37:66:b3:2c:03:dd:ae:e5:2d:69:f1:0b:a6: 2d:43:f4:3e:f1:94:20:f0:60:ac:b8:cf:e8:82:73: 5f:fb:fc:81:77:67:de:6d:9a:a1:44:dc:40:40:70: 96:cd:71:07:c0:4b:b8:1f:75:d8:20:ed:a7:a5:80: d8:49:44:d9:7d:11:7b:c1:b5:28:c9:59:c5:5a:a6: 27:65:48:b3:01:23:6b:53:eb:de:37:a4:ac:1c:cb: 07:85:ec:d7:ee:c3:38:0f:cb:75:36:0d:c7:4b:1c: 80:cc:0e:f3:85:89:55:5e:b8:00:41:ae:07:a6:40: a7:ca:95:9c:0d:23:7b:a3:b8:0b:95:71:27:72:74: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:98:2E:C8:52:E8:F4:4A:99:B2:E2:B8:17:16:EA:27:DD:A7:9E X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cc:22:f5:5d:dd:37:2b:aa:b8:13:52:ef:0c:03:b3:42:95: a6:69:d6:e3:e0:09:63:81:64:be:61:bb:35:9f:14:d2:1f:fb: ad:c6:cd:ef:99:84:35:bb:eb:b7:37:b2:bc:0a:c4:6a:00:3d: d8:86:e9:f5:7f:6f:bb:6e:3a:c9:db:54:30:4d:0f:5c:2e:9d: 93:40:58:0b:8f:cf:be:44:88:b8:07:3e:41:cd:aa:37:30:18: 88:fd:5e:3e:b5:97:86:32:b3:38:7a:9f:24:f7:45:7b:22:7e: ef:dd:31:a7:11:ec:78:59:4a:9b:9e:a3:a9:f8:60:33:1d:55: a7:b6:a5:44:18:f6:4b:02:e7:d4:ac:f1:92:ca:51:cb:d4:a8: a8:68:23:19:0e:6f:50:a2:5e:35:05:c1:c7:ca:8b:cc:47:e7: 84:b8:e7:59:e9:99:db:e1:d1:22:21:b4:01:2e:2d:e6:23:a2: a4:2a:c2:c9:41:23:4c:fc:cf:ca:fb:20:ef:11:56:62:80:73: ce:03:78:bc:15:49:5d:1b:02:c9:40:0f:e3:69:10:84:e5:e8: 47:d2:80:1f:d2:59:89:b0:2a:25:81:64:20:7d:e6:7a:17:9b: f0:4f:f5:76:51:bb:61:3c:cd:f9:3b:f5:f2:4c:6d:5a:56:7c: 26:5c:9e:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3GHYmFcx7QW9twRTU8yAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjUxMjIyMDcwMDUyWhcNMjUxMjIzMDcwMDUyWjAzMTEwLwYDVQQD Eyg4YTNiOTgyZWM4NTJlOGY0NGE5OWIyZTJiODE3MTZlYTI3ZGRhNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyniK8J0ugUAitU880s8Ur2vfxJMt mRmDTEE+4TfBOqtG7YzNDxVR/yFUnesYWtOj4cHitJC89q7KhGQ/IcvRGFCA6kor GJaUA+m3SR28Rni4OGer5RmS7RyOIoC2TWO7A8UumgdPlZ9LZoBAfpknLjy6+Ipu RvT5MjdmsywD3a7lLWnxC6YtQ/Q+8ZQg8GCsuM/ognNf+/yBd2febZqhRNxAQHCW zXEHwEu4H3XYIO2npYDYSUTZfRF7wbUoyVnFWqYnZUizASNrU+veN6SsHMsHhezX 7sM4D8t1Ng3HSxyAzA7zhYlVXrgAQa4HpkCnypWcDSN7o7gLlXEncnQF2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo7mC7IUuj0Spmy4rgXFuon3aeeMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeswi9V3d NyuquBNS7wwDs0KVpmnW4+AJY4FkvmG7NZ8U0h/7rcbN75mENbvrtzeyvArEagA9 2Ibp9X9vu246ydtUME0PXC6dk0BYC4/PvkSIuAc+Qc2qNzAYiP1ePrWXhjKzOHqf JPdFeyJ+790xpxHseFlKm56jqfhgMx1Vp7alRBj2SwLn1KzxkspRy9SoqGgjGQ5v UKJeNQXBx8qLzEfnhLjnWemZ2+HRIiG0AS4t5iOipCrCyUEjTPzPyvsg7xFWYoBz zgN4vBVJXRsCyUAP42kQhOXoR9KAH9JZibAqJYFkIH3meheb8E/1dlG7YTzN+Tv1 8kxtWlZ8JlyeMg== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:25 2025 by rpki-client