This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json) Hash identifier: P94Dc769WZGFk3/d3Y4gNeTm/X/OmDjFPdPv3tTXlZU= Subject key identifier: 61:9D:62:F7:68:17:BC:88:B9:06:9C:9F:9E:8E:EA:31:8B:FE:5E:E4 Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b Certificate serial: 019B38D80799CF4CD7CFC6C1549A51D2FAA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft Manifest number: 1716 Signing time: Fri 19 Dec 2025 23:00:40 +0000 Manifest this update: Fri 19 Dec 2025 23:00:40 +0000 Manifest next update: Sat 20 Dec 2025 23:00:40 +0000 Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: OY4y82O/jxcnMB/jtfPxg5zuTMo5Ba/MNfuu0LCVv+I=) 2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:07:99:cf:4c:d7:cf:c6:c1:54:9a:51:d2:fa:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b Validity Not Before: Dec 19 23:00:40 2025 GMT Not After : Dec 20 23:00:40 2025 GMT Subject: CN=619d62f76817bc88b9069c9f9e8eea318bfe5ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:6e:fa:3e:4e:fc:07:65:cf:c5:2a:43:01: 72:a5:df:0b:17:16:f2:31:5d:bc:23:c5:d1:dd:d0: 89:1e:60:3c:a5:f7:b4:6f:00:fe:92:d4:78:c7:54: c5:fd:75:dc:c7:1c:84:ef:00:88:76:8a:9d:32:18: b2:54:65:16:b9:22:70:16:44:cf:fa:e0:4b:74:d9: 78:eb:80:42:3a:dd:f2:23:5b:71:e5:b8:34:78:03: 12:b7:d1:b4:50:15:b1:f4:64:e2:3f:9c:09:f8:d9: a3:dd:a5:51:3f:47:46:a0:70:4f:9f:7a:d2:16:69: 40:3c:c0:3a:63:15:94:af:1a:3d:00:04:a6:fb:26: e2:bc:21:a6:5d:8f:42:54:8b:cc:e6:0f:65:f1:89: 0a:ff:cd:43:db:f1:ab:cd:0b:ca:ee:1d:5e:29:41: cc:32:0b:29:65:08:3f:cb:05:23:87:6c:9e:a1:b5: d2:db:cd:f4:b9:a2:d7:91:b6:d4:79:a9:2e:94:84: 36:c7:06:f9:87:3a:67:df:48:8b:6a:f0:88:91:a7: ff:38:0d:8d:0a:87:cb:d9:18:27:aa:ca:a7:aa:a6: 22:e9:87:9e:b8:db:4e:d1:3c:14:44:0b:3f:ef:eb: 07:d2:a6:b5:e7:27:c2:3f:04:8f:b5:5d:15:99:c5: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9D:62:F7:68:17:BC:88:B9:06:9C:9F:9E:8E:EA:31:8B:FE:5E:E4 X509v3 Authority Key Identifier: keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:4a:15:d2:5a:b1:2a:53:88:b5:5f:68:c0:3d:cd:b3:d1: c0:f1:80:d2:e8:0f:bd:05:85:70:ab:e8:19:18:e2:f0:57:63: 34:ad:c9:50:61:22:29:e6:06:f6:b1:87:6a:ea:20:8e:54:20: b5:1b:1d:19:b1:59:ba:84:57:65:9b:d4:d7:66:86:8e:49:a1: 28:a8:58:39:35:e4:9a:1b:f2:0f:76:fa:9b:19:9f:c2:e7:ae: 71:4a:69:c5:c0:a9:6a:88:98:34:ac:83:b2:ce:18:f4:2c:e6: 12:2f:8f:a9:1d:25:24:1c:d1:4c:c7:0c:58:fc:38:32:89:96: cc:ef:15:fc:fa:72:15:61:87:c4:a3:8b:4d:2b:9c:ef:22:55: 1b:37:06:8b:8b:2b:24:f3:a5:2d:f1:34:ce:f6:35:9b:84:e9: c6:9f:a0:1d:55:23:91:56:f2:5f:a8:cd:6e:3d:4d:5e:bb:38: 16:42:aa:33:ed:9a:72:6c:6a:00:7a:42:19:62:82:89:48:22: 90:02:5f:5d:6b:c6:dc:46:a7:ec:3b:67:ff:02:d4:1e:8e:67: f4:5b:15:ed:3e:c4:1d:8d:31:d9:eb:87:3f:41:22:fd:f1:3d: 6e:f4:25:7a:99:71:0a:75:ba:6d:3a:aa:e1:c8:2f:21:c7:8b: 2b:60:0a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42AeZz0zXz8bBVJpR0vqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NDQ0NGEwODY3ZmNjYTlhMzU2OWMxZmQwOTIxMzM1NDZh MzdmNGIwHhcNMjUxMjE5MjMwMDQwWhcNMjUxMjIwMjMwMDQwWjAzMTEwLwYDVQQD Eyg2MTlkNjJmNzY4MTdiYzg4YjkwNjljOWY5ZThlZWEzMThiZmU1ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7pu+j5O/Adlz8UqQwFypd8LFxby MV28I8XR3dCJHmA8pfe0bwD+ktR4x1TF/XXcxxyE7wCIdoqdMhiyVGUWuSJwFkTP +uBLdNl464BCOt3yI1tx5bg0eAMSt9G0UBWx9GTiP5wJ+Nmj3aVRP0dGoHBPn3rS FmlAPMA6YxWUrxo9AASm+ybivCGmXY9CVIvM5g9l8YkK/81D2/GrzQvK7h1eKUHM MgspZQg/ywUjh2yeobXS2830uaLXkbbUeakulIQ2xwb5hzpn30iLavCIkaf/OA2N CofL2RgnqsqnqqYi6YeeuNtO0TwURAs/7+sH0qa15yfCPwSPtV0VmcU//wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGdYvdoF7yIuQacn56O6jGL/l7kMB8GA1UdIwQY MBaAFPdERKCGf8ypo1acH9CSEzVGo39LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUt NWQyNTI0NGU0YWFkLzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mNjQwNTMtYjkzOC00YzUxLThlYzUtNWQyNTI0NGU0YWFk LzEvOTBSRW9JWl96S21qVnB3ZjBKSVROVWFqZjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHpKFdJa sSpTiLVfaMA9zbPRwPGA0ugPvQWFcKvoGRji8FdjNK3JUGEiKeYG9rGHauogjlQg tRsdGbFZuoRXZZvU12aGjkmhKKhYOTXkmhvyD3b6mxmfwueucUppxcCpaoiYNKyD ss4Y9CzmEi+PqR0lJBzRTMcMWPw4MomWzO8V/PpyFWGHxKOLTSuc7yJVGzcGi4sr JPOlLfE0zvY1m4Tpxp+gHVUjkVbyX6jNbj1NXrs4FkKqM+2acmxqAHpCGWKCiUgi kAJfXWvG3Ean7Dtn/wLUHo5n9FsV7T7EHY0x2euHP0Ei/fE9bvQleplxCnW6bTqq 4cgvIceLK2AK6w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:30 2025 by rpki-client