This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft File: 90IFIPikG7BNbRsPQBQOVT-K828.mft (raw, json) Hash identifier: OegjEN8g6Vds4YMTu4PwyiaIcRfaEf6LiAxoKnZn17c= Subject key identifier: 2C:C8:BE:D6:65:5F:5A:92:04:38:2A:76:81:C8:B9:A6:7E:6C:49:DA Authority key identifier: F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F Certificate issuer: /CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Certificate serial: 019B44A5F73C4BCD409CE34499E6BE8C0D5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft Manifest number: 14CC Signing time: Mon 22 Dec 2025 06:01:25 +0000 Manifest this update: Mon 22 Dec 2025 06:01:25 +0000 Manifest next update: Tue 23 Dec 2025 06:01:25 +0000 Files and hashes: 1: 90IFIPikG7BNbRsPQBQOVT-K828.crl (hash: CDzXe62eKILkm5XIQ6gYmIdED8CQRkAly8p6QphVvZQ=) 2: LFGeCWEJqK41lBLfNDSrvcd-R7M.roa (hash: D3t7Jj+dB85c4h6RAmcwzdWk3BwbQNg/lUXAv4WmqH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:f7:3c:4b:cd:40:9c:e3:44:99:e6:be:8c:0d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7420520f8a41bb04d6d1b0f40140e553f8af36f Validity Not Before: Dec 22 06:01:25 2025 GMT Not After : Dec 23 06:01:25 2025 GMT Subject: CN=2cc8bed6655f5a9204382a7681c8b9a67e6c49da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:eb:34:e7:59:b3:95:6d:c7:3a:db:c0:7a:ec: a3:a6:5e:bf:2c:dc:4e:af:81:92:00:c2:ef:0f:ce: 47:e6:f7:d3:1a:a8:46:ab:70:da:37:c0:da:c7:64: bc:fe:f2:c2:18:43:68:9e:9f:c4:3c:ba:65:7d:04: 45:2d:44:b7:2a:67:a1:1a:57:46:b3:84:f8:ba:aa: 7b:16:50:5e:41:eb:3f:2f:cb:0a:23:47:10:7a:ed: 04:c2:f4:dc:42:73:c5:52:95:52:80:df:0d:72:d7: 3e:8b:3f:65:be:51:0c:41:99:e3:cb:15:2e:32:a6: 6e:b0:76:74:6a:7e:c6:f1:af:c0:18:8a:da:c3:dc: cc:fc:e1:dd:aa:c0:3f:ba:b6:44:62:1d:28:61:fc: 9f:18:01:13:e3:77:d6:6d:42:9b:22:ed:ca:ee:33: 77:61:4b:c3:7a:3a:0c:cc:79:1d:fc:5c:aa:0c:32: 05:6d:59:85:67:a6:75:66:21:ff:43:fe:ad:61:7d: 58:90:30:0c:4a:85:f5:42:e3:20:07:05:59:31:90: 90:3c:84:32:d1:ee:1c:24:5c:8d:89:18:4d:13:95: a8:bf:9a:43:8e:76:ad:8c:60:03:f7:ed:c0:45:30: 15:bb:d2:f6:30:9e:35:56:a0:f7:f7:f3:91:70:e4: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C8:BE:D6:65:5F:5A:92:04:38:2A:76:81:C8:B9:A6:7E:6C:49:DA X509v3 Authority Key Identifier: keyid:F7:42:05:20:F8:A4:1B:B0:4D:6D:1B:0F:40:14:0E:55:3F:8A:F3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90IFIPikG7BNbRsPQBQOVT-K828.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2ab9c8-0446-4105-8bff-08be3ee6d8aa/1/90IFIPikG7BNbRsPQBQOVT-K828.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:de:55:9e:87:e2:cc:21:d9:b9:33:24:b8:d4:9f:8c:7d:fc: 06:1a:5c:4e:60:bd:44:a3:e2:bc:23:e1:56:02:46:60:78:18: e7:f8:a4:59:70:2a:94:34:08:99:e6:19:73:aa:e7:fe:fe:b2: 8e:19:d1:e8:37:98:76:f8:91:63:3b:85:1f:85:07:2e:cb:b2: 1e:a0:e8:5e:fb:51:0a:c6:77:82:6b:52:87:4a:a6:ce:88:ac: 62:a1:77:d2:96:35:5c:64:57:8a:ef:0b:58:3b:eb:78:a5:8d: 92:c5:db:d7:95:d4:14:f6:65:38:d0:1f:44:c0:37:80:13:a6: f8:fe:07:3f:8d:57:54:5c:1c:6d:eb:d3:57:55:4e:ab:35:33: 6e:f2:42:e8:4a:52:05:fe:1d:bb:41:70:96:52:ca:fc:65:fc: ea:36:0f:f6:6b:96:13:d5:de:de:38:ad:ff:58:f4:f4:50:76: 6a:e9:80:50:50:23:06:62:aa:b6:30:e2:6e:83:cb:f1:eb:84: 51:04:d4:1c:ea:42:73:e0:0a:82:08:83:14:a3:6d:14:86:29: 26:3d:b7:4a:03:7c:6b:cf:08:a0:56:2a:c4:e0:67:8a:9d:29: d3:26:87:b2:3f:66:b9:de:81:a3:32:7f:e9:38:d2:79:10:c5: 8b:b4:37:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfc8S81AnONEmea+jA1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDIwNTIwZjhhNDFiYjA0ZDZkMWIwZjQwMTQwZTU1M2Y4 YWYzNmYwHhcNMjUxMjIyMDYwMTI1WhcNMjUxMjIzMDYwMTI1WjAzMTEwLwYDVQQD EygyY2M4YmVkNjY1NWY1YTkyMDQzODJhNzY4MWM4YjlhNjdlNmM0OWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOs051mzlW3HOtvAeuyjpl6/LNxO r4GSAMLvD85H5vfTGqhGq3DaN8Dax2S8/vLCGENonp/EPLplfQRFLUS3KmehGldG s4T4uqp7FlBeQes/L8sKI0cQeu0EwvTcQnPFUpVSgN8Nctc+iz9lvlEMQZnjyxUu MqZusHZ0an7G8a/AGIraw9zM/OHdqsA/urZEYh0oYfyfGAET43fWbUKbIu3K7jN3 YUvDejoMzHkd/FyqDDIFbVmFZ6Z1ZiH/Q/6tYX1YkDAMSoX1QuMgBwVZMZCQPIQy 0e4cJFyNiRhNE5Wov5pDjnatjGAD9+3ARTAVu9L2MJ41VqD39/ORcOT8iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzIvtZlX1qSBDgqdoHIuaZ+bEnaMB8GA1UdIwQY MBaAFPdCBSD4pBuwTW0bD0AUDlU/ivNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYt MDhiZTNlZTZkOGFhLzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYWI5YzgtMDQ0Ni00MTA1LThiZmYtMDhiZTNlZTZkOGFh LzEvOTBJRklQaWtHN0JOYlJzUFFCUU9WVC1LODI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN5Vnofi zCHZuTMkuNSfjH38BhpcTmC9RKPivCPhVgJGYHgY5/ikWXAqlDQImeYZc6rn/v6y jhnR6DeYdviRYzuFH4UHLsuyHqDoXvtRCsZ3gmtSh0qmzoisYqF30pY1XGRXiu8L WDvreKWNksXb15XUFPZlONAfRMA3gBOm+P4HP41XVFwcbevTV1VOqzUzbvJC6EpS Bf4du0FwllLK/GX86jYP9muWE9Xe3jit/1j09FB2aumAUFAjBmKqtjDiboPL8euE UQTUHOpCc+AKggiDFKNtFIYpJj23SgN8a88IoFYqxOBnip0p0yaHsj9mud6BozJ/ 6TjSeRDFi7Q34g== -----END CERTIFICATE-----Generated at Mon Dec 22 11:36:01 2025 by rpki-client