This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json) Hash identifier: LwwFcNtJKdspE/v3s4WZyLdLq0lwnW1+OF7rdnfW/IU= Subject key identifier: 52:A6:DB:03:93:13:6C:E8:E8:F0:FD:CE:9B:2E:AC:2E:5A:F0:7E:DC Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103 Certificate serial: 019B4EF245310FDAEAFB1EB9BA66BDC88F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft Manifest number: 02B7 Signing time: Wed 24 Dec 2025 06:00:58 +0000 Manifest this update: Wed 24 Dec 2025 06:00:58 +0000 Manifest next update: Thu 25 Dec 2025 06:00:58 +0000 Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: oYENg2D7V6iwGCLDsFvVZkVqsHzxz7fugWgx2r9D5rc=) 2: 8ls1IYf4jQgBfxPe5pEbNm_NZ0o.roa (hash: rz6mEuTJKM68i99abhpJpeLaSY9D73ABA1sM9jV+L58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:45:31:0f:da:ea:fb:1e:b9:ba:66:bd:c8:8f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103 Validity Not Before: Dec 24 06:00:58 2025 GMT Not After : Dec 25 06:00:58 2025 GMT Subject: CN=52a6db0393136ce8e8f0fdce9b2eac2e5af07edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:36:cb:44:a6:f0:46:6b:e6:1a:d8:64:e7: 0a:ec:6f:4d:3f:4e:a9:72:ee:a1:74:f1:8f:55:f7: be:3b:17:9f:fc:cc:d2:c9:79:2c:08:f5:d7:3a:75: 41:36:d6:09:40:bb:fa:c2:53:06:1b:15:93:b2:48: 60:08:3a:b1:3c:97:5b:e9:7a:c5:f5:29:34:ed:85: 75:3a:26:51:fb:7e:9c:db:bf:c5:f4:39:ab:df:4b: bf:b8:ad:cf:ad:77:71:ba:a0:ad:67:2e:cc:78:4a: 1e:2d:8b:54:36:84:8d:5e:bc:50:dd:16:b0:7b:32: 1b:0d:49:7b:0f:c5:7b:e4:f2:b3:73:5a:0b:3b:f1: d0:5c:84:9a:56:0c:73:6f:0a:98:20:00:ef:12:af: 4e:c9:c9:f3:3a:d8:06:a2:10:45:c9:ab:d3:7a:90: 58:d6:91:6d:3d:b2:b0:a2:b9:ee:15:3d:4f:51:da: 52:45:54:01:45:c2:52:5e:f0:c0:e5:77:76:f8:cb: 22:4b:10:ff:3a:2e:4e:b4:06:b5:a2:1f:f6:03:4b: cc:26:6d:5d:b4:91:84:fd:66:e8:b7:e9:57:72:9d: 9c:ac:49:8c:b0:bc:2a:69:dc:c3:3c:e8:43:8a:50: 1f:cd:c8:cc:0b:78:a9:b3:9b:13:7a:67:77:82:06: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A6:DB:03:93:13:6C:E8:E8:F0:FD:CE:9B:2E:AC:2E:5A:F0:7E:DC X509v3 Authority Key Identifier: keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:2f:24:ad:4c:7a:3c:03:3f:0a:21:21:63:15:e0:e5:a7:4c: f5:ad:1a:af:2e:56:24:29:51:ad:01:a3:80:0f:87:55:ec:05: 77:6c:f1:a1:79:14:1a:cd:d6:f9:fd:cc:f1:81:e9:81:38:08: 95:bb:2c:f1:a0:ba:26:88:ee:c0:c0:3b:1e:98:68:1d:34:20: bc:af:66:65:60:00:63:2f:be:c2:c1:d5:67:bd:fc:41:bb:4c: 5c:80:7e:4a:01:5a:3b:24:00:26:a1:95:ad:30:64:08:75:29: 9d:71:ef:ad:b9:99:d7:5c:13:f8:b2:0b:39:b7:9d:c1:67:0c: de:9f:1e:22:fc:27:83:65:f3:7c:c3:c6:88:f4:0b:bd:d8:61: a9:8e:27:30:00:ab:8b:6e:73:3b:13:e6:3a:66:8a:69:48:54: b6:f5:c9:4a:bc:02:fd:79:9a:41:3f:8e:cc:e7:a4:d0:3c:cd: f3:0b:83:e4:7b:c3:e6:7d:f5:26:bb:ca:7f:fa:a1:f1:88:94: 52:cf:e3:ed:5c:40:fd:2d:07:16:73:99:e2:53:cc:cc:f9:89: 01:ec:f9:1c:4c:81:d3:53:a6:b1:28:a0:f1:c6:2e:05:55:22: 8a:5c:1f:96:3d:91:69:39:f2:12:2e:46:79:11:ce:ef:bf:b4: 98:1a:f4:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8kUxD9rq+x65uma9yI8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOTlmMzMwYmUzMTQ3YjRkYTkwZDExNGEzY2Y0MjA1ZmE0 NTExMDMwHhcNMjUxMjI0MDYwMDU4WhcNMjUxMjI1MDYwMDU4WjAzMTEwLwYDVQQD Eyg1MmE2ZGIwMzkzMTM2Y2U4ZThmMGZkY2U5YjJlYWMyZTVhZjA3ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMg2y0Sm8EZr5hrYZOcK7G9NP06p cu6hdPGPVfe+Oxef/MzSyXksCPXXOnVBNtYJQLv6wlMGGxWTskhgCDqxPJdb6XrF 9Sk07YV1OiZR+36c27/F9Dmr30u/uK3PrXdxuqCtZy7MeEoeLYtUNoSNXrxQ3Raw ezIbDUl7D8V75PKzc1oLO/HQXISaVgxzbwqYIADvEq9OycnzOtgGohBFyavTepBY 1pFtPbKwornuFT1PUdpSRVQBRcJSXvDA5Xd2+MsiSxD/Oi5OtAa1oh/2A0vMJm1d tJGE/Wbot+lXcp2crEmMsLwqadzDPOhDilAfzcjMC3ips5sTemd3ggaiJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKm2wOTE2zo6PD9zpsurC5a8H7cMB8GA1UdIwQY MBaAFNuZ8zC+MUe02pDRFKPPQgX6RREDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQt ZDRkYmQ1ZTIwNGY3LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zMDhjMDktMDAzNC00NDg2LTgyNzQtZDRkYmQ1ZTIwNGY3 LzEvMjVuek1MNHhSN1Rha05FVW84OUNCZnBGRVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArC8krUx6 PAM/CiEhYxXg5adM9a0ary5WJClRrQGjgA+HVewFd2zxoXkUGs3W+f3M8YHpgTgI lbss8aC6JojuwMA7HphoHTQgvK9mZWAAYy++wsHVZ738QbtMXIB+SgFaOyQAJqGV rTBkCHUpnXHvrbmZ11wT+LILObedwWcM3p8eIvwng2XzfMPGiPQLvdhhqY4nMACr i25zOxPmOmaKaUhUtvXJSrwC/XmaQT+OzOek0DzN8wuD5HvD5n31JrvKf/qh8YiU Us/j7VxA/S0HFnOZ4lPMzPmJAez5HEyB01OmsSig8cYuBVUiilwflj2RaTnyEi5G eRHO77+0mBr06w== -----END CERTIFICATE-----Generated at Wed Dec 24 10:30:46 2025 by rpki-client