This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json) Hash identifier: HcnyKk2qNbb2666fCaI/1amPcHpvpl+/XVBeCPfgBk4= Subject key identifier: 25:F6:26:94:F2:AA:7B:C1:73:5F:8E:B5:3A:5F:A7:C4:DE:AC:E7:E7 Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Certificate serial: 019B4324D9CF472DCC5AF917B747C32F7EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft Manifest number: 0B25 Signing time: Sun 21 Dec 2025 23:00:47 +0000 Manifest this update: Sun 21 Dec 2025 23:00:47 +0000 Manifest next update: Mon 22 Dec 2025 23:00:47 +0000 Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=) 2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=) 3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: C8MN9ZS3j53W47yio4b9GZIt1L311vTSOYY2DsYWXzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:d9:cf:47:2d:cc:5a:f9:17:b7:47:c3:2f:7e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7 Validity Not Before: Dec 21 23:00:47 2025 GMT Not After : Dec 22 23:00:47 2025 GMT Subject: CN=25f62694f2aa7bc1735f8eb53a5fa7c4deace7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:3a:8a:43:12:23:42:d0:be:7c:de:a3:a3: 1a:67:80:3d:47:4d:b7:f0:44:4d:27:9f:1a:e2:43: 69:7b:fa:91:94:7c:c4:54:ea:31:84:f8:14:4c:6d: a1:28:54:29:5e:57:c0:3f:13:33:6e:dd:a8:4c:2e: 59:74:4f:b9:1a:72:39:54:b9:c8:f4:d9:d7:0e:48: 01:54:e6:83:99:ca:5c:d4:a7:da:f2:be:32:74:b3: bc:11:9e:0d:3b:eb:22:47:09:d9:d6:ad:39:a6:b4: 20:d4:70:bd:f6:bc:8c:8f:46:d2:2e:96:0b:50:e6: 0a:75:ae:4e:7e:55:bf:3c:0b:d5:c5:56:df:98:e7: d9:4c:d0:fb:fd:42:de:f6:3a:33:03:05:a7:aa:a8: 5c:91:29:da:8f:71:44:60:00:93:91:0c:07:6f:27: 47:29:6e:38:eb:86:69:e2:c5:53:ff:7f:c2:db:bf: d6:3e:cf:b5:e0:01:5e:d5:70:58:05:8e:0e:80:38: 25:3e:3f:c1:64:34:06:f5:3b:4a:97:cf:53:f1:0c: e6:6e:ce:0c:fa:9e:4c:96:f4:b3:4d:24:e9:a9:f9: 02:22:ea:0a:81:79:e2:66:be:a5:68:f0:d9:a0:89: 69:f1:ec:2c:de:cd:43:11:e9:fe:31:47:0c:44:3c: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F6:26:94:F2:AA:7B:C1:73:5F:8E:B5:3A:5F:A7:C4:DE:AC:E7:E7 X509v3 Authority Key Identifier: keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f0:43:f1:36:c6:5e:8c:81:a1:80:e7:d5:9a:ad:d4:66:60: 53:d3:7c:4f:78:20:f3:9d:30:74:60:98:68:9f:a2:d9:ac:5b: 9a:12:98:34:d3:d3:86:10:bc:f8:5c:da:5c:bc:0a:f7:b6:b8: 73:7c:3b:37:9f:40:84:06:c4:c7:16:84:32:d0:e4:3b:eb:40: da:c8:ad:19:c1:22:97:d6:0e:07:98:ce:d6:b0:97:52:ca:0b: e1:ba:4f:4c:b9:74:d8:a0:63:a1:77:41:59:e3:5c:90:9f:fe: ff:78:35:bf:fc:31:42:98:81:83:f4:85:7e:88:34:13:3f:21: 60:3a:97:11:5a:f9:61:4a:69:e4:aa:6f:3a:92:53:39:5c:a4: 54:fc:53:69:73:59:91:bc:bb:6a:81:2d:b1:a1:c7:d9:94:fb: a8:80:19:90:7e:9e:94:dc:3b:4a:54:a4:55:ae:55:0f:23:e4: d6:12:f0:21:bc:b1:19:00:92:91:39:ff:0b:27:48:9c:5c:08: 64:de:06:6e:5a:07:dc:64:fa:10:a9:49:29:63:28:81:93:35: 34:97:05:0a:4a:4e:2c:57:0d:9e:37:9c:7c:f4:2d:0d:15:60: 31:71:80:6c:02:0c:8e:1e:58:76:44:f6:ac:4e:41:25:9f:de: ff:71:4b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJNnPRy3MWvkXt0fDL36sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5 Y2NmYjcwHhcNMjUxMjIxMjMwMDQ3WhcNMjUxMjIyMjMwMDQ3WjAzMTEwLwYDVQQD EygyNWY2MjY5NGYyYWE3YmMxNzM1ZjhlYjUzYTVmYTdjNGRlYWNlN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGw6ikMSI0LQvnzeo6MaZ4A9R023 8ERNJ58a4kNpe/qRlHzEVOoxhPgUTG2hKFQpXlfAPxMzbt2oTC5ZdE+5GnI5VLnI 9NnXDkgBVOaDmcpc1Kfa8r4ydLO8EZ4NO+siRwnZ1q05prQg1HC99ryMj0bSLpYL UOYKda5OflW/PAvVxVbfmOfZTND7/ULe9jozAwWnqqhckSnaj3FEYACTkQwHbydH KW4464Zp4sVT/3/C27/WPs+14AFe1XBYBY4OgDglPj/BZDQG9TtKl89T8Qzmbs4M +p5MlvSzTSTpqfkCIuoKgXniZr6laPDZoIlp8ews3s1DEen+MUcMRDyQNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCX2JpTyqnvBc1+OtTpfp8TerOfnMB8GA1UdIwQY MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt MjUwN2RiMzJjMWM0LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0 LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPBD8TbG XoyBoYDn1Zqt1GZgU9N8T3gg850wdGCYaJ+i2axbmhKYNNPThhC8+FzaXLwK97a4 c3w7N59AhAbExxaEMtDkO+tA2sitGcEil9YOB5jO1rCXUsoL4bpPTLl02KBjoXdB WeNckJ/+/3g1v/wxQpiBg/SFfog0Ez8hYDqXEVr5YUpp5KpvOpJTOVykVPxTaXNZ kby7aoEtsaHH2ZT7qIAZkH6elNw7SlSkVa5VDyPk1hLwIbyxGQCSkTn/CydInFwI ZN4GbloH3GT6EKlJKWMogZM1NJcFCkpOLFcNnjecfPQtDRVgMXGAbAIMjh5YdkT2 rE5BJZ/e/3FLkQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:52 2025 by rpki-client