This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json) Hash identifier: cbd0/m4WnHsocnDi4sHQmi4mY0zJgpotkulIOIghjrw= Subject key identifier: C7:98:B4:8E:64:04:5B:63:20:F9:25:CC:01:2C:A5:0D:EA:14:8B:81 Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Certificate serial: 019B3B3495737A6D7EBFBB61CC0FFE4D1563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft Manifest number: 0473 Signing time: Sat 20 Dec 2025 10:01:00 +0000 Manifest this update: Sat 20 Dec 2025 10:01:00 +0000 Manifest next update: Sun 21 Dec 2025 10:01:00 +0000 Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: uASSl5LOrSUx2leKiMFm38VcIg7r7Cvg4dYnNJneMS4=) 2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:95:73:7a:6d:7e:bf:bb:61:cc:0f:fe:4d:15:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Validity Not Before: Dec 20 10:01:00 2025 GMT Not After : Dec 21 10:01:00 2025 GMT Subject: CN=c798b48e64045b6320f925cc012ca50dea148b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:cc:58:10:63:ab:2e:d2:b7:68:10:a8:60: b5:eb:84:08:0f:ad:ad:4d:a9:2f:5b:9c:99:54:cd: 0f:0d:72:93:1a:78:7f:35:35:84:f7:3b:ca:c6:16: bc:1c:e4:1a:6e:76:72:ca:aa:81:41:a4:60:ca:60: a1:97:6b:36:64:27:bd:ff:6a:9d:86:f8:e0:61:cc: 71:db:83:f7:6a:c3:4f:29:89:e3:94:75:04:1d:27: 8f:68:af:0d:b0:46:ce:2b:08:d8:e2:f6:c5:94:0a: ce:6f:b3:a5:f3:ad:ad:1f:68:d0:86:61:e9:0e:4c: 98:49:81:b6:9a:fb:12:12:cd:d2:58:23:7b:5e:da: 97:64:7a:4b:1a:6a:f4:22:68:92:b1:e1:8a:ca:08: 2f:f3:7d:85:e1:40:58:e8:c2:68:b2:cc:8a:0d:bc: 7d:7d:10:55:6f:9b:81:b7:ad:46:ba:18:12:17:1a: 4c:dd:a3:03:45:60:9b:f7:93:7f:d9:0f:c6:bb:ba: 05:54:9b:9d:3c:93:ec:cf:9d:d1:2a:69:af:2c:fc: 0b:4e:41:fd:e1:11:4b:e1:9c:e5:0d:82:16:54:01: b9:e7:0b:b2:57:ac:bc:68:e4:56:45:4e:62:4d:fc: 04:87:d8:aa:3b:cb:1d:d7:32:d0:21:e6:52:c4:b4: a1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:98:B4:8E:64:04:5B:63:20:F9:25:CC:01:2C:A5:0D:EA:14:8B:81 X509v3 Authority Key Identifier: keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:07:d1:36:8b:8e:b1:a2:10:c0:b8:ae:20:0d:e2:27:0f:99: 12:9f:53:79:d4:83:7c:41:40:da:98:b7:15:d7:27:e9:40:56: c0:d1:e0:5f:44:c2:33:f0:d6:96:27:18:46:a7:f6:2e:9a:08: a5:6c:69:df:df:04:ba:33:15:27:7c:b1:9c:ef:5a:99:e8:b6: 7e:20:85:59:e9:e9:63:92:c8:c5:f0:fc:d6:d4:cc:b2:e2:04: cc:5e:41:43:02:10:07:a3:14:ed:55:d9:40:ad:58:f6:51:da: 4d:ca:d4:85:af:2c:a7:df:08:3d:a8:13:ed:d2:e4:22:df:b1: 63:7f:53:a3:94:68:f2:02:e0:1e:1f:19:f9:71:7f:79:f4:9c: 8f:c0:43:b2:51:3d:72:61:57:79:be:d9:a5:f8:1e:42:40:5f: 4e:be:64:8c:ef:bc:68:ac:5a:f6:d1:cf:b0:a5:38:03:66:53: 4a:6f:83:c3:ea:ff:ec:e9:f7:29:7c:7e:56:ae:67:d9:59:0f: 40:4a:f8:ee:71:95:9c:53:3a:23:9a:e9:d2:58:70:5d:4b:af: fa:cc:ce:53:a8:4f:f2:b1:c9:ac:93:57:6e:8f:a8:d2:b9:cd: 78:50:54:21:72:60:08:7d:d0:f9:7a:ff:4b:c5:fc:0d:b6:bf: 65:ef:57:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJVzem1+v7thzA/+TRVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3 YTk5M2UwHhcNMjUxMjIwMTAwMTAwWhcNMjUxMjIxMTAwMTAwWjAzMTEwLwYDVQQD EyhjNzk4YjQ4ZTY0MDQ1YjYzMjBmOTI1Y2MwMTJjYTUwZGVhMTQ4YjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAHMWBBjqy7St2gQqGC164QID62t TakvW5yZVM0PDXKTGnh/NTWE9zvKxha8HOQabnZyyqqBQaRgymChl2s2ZCe9/2qd hvjgYcxx24P3asNPKYnjlHUEHSePaK8NsEbOKwjY4vbFlArOb7Ol862tH2jQhmHp DkyYSYG2mvsSEs3SWCN7XtqXZHpLGmr0ImiSseGKyggv832F4UBY6MJossyKDbx9 fRBVb5uBt61GuhgSFxpM3aMDRWCb95N/2Q/Gu7oFVJudPJPsz53RKmmvLPwLTkH9 4RFL4ZzlDYIWVAG55wuyV6y8aORWRU5iTfwEh9iqO8sd1zLQIeZSxLShkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeYtI5kBFtjIPklzAEspQ3qFIuBMB8GA1UdIwQY MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwfRNouO saIQwLiuIA3iJw+ZEp9TedSDfEFA2pi3Fdcn6UBWwNHgX0TCM/DWlicYRqf2LpoI pWxp398EujMVJ3yxnO9amei2fiCFWenpY5LIxfD81tTMsuIEzF5BQwIQB6MU7VXZ QK1Y9lHaTcrUha8sp98IPagT7dLkIt+xY39To5Ro8gLgHh8Z+XF/efScj8BDslE9 cmFXeb7ZpfgeQkBfTr5kjO+8aKxa9tHPsKU4A2ZTSm+Dw+r/7On3KXx+Vq5n2VkP QEr47nGVnFM6I5rp0lhwXUuv+szOU6hP8rHJrJNXbo+o0rnNeFBUIXJgCH3Q+Xr/ S8X8Dba/Ze9XMg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:40 2025 by rpki-client