This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft File: c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json) Hash identifier: IZ3I5ENAWubdH0nU3L+g24E8HONUrM4PE4EjRdr0cn8= Subject key identifier: 6D:D2:74:BE:83:5A:02:D2:EE:CD:DB:41:51:83:C0:08:12:B5:0F:04 Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E Certificate issuer: /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Certificate serial: 019B3BD9EBED31C0C1761F089E4509E37D7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 13:01:36 +0000 Manifest this update: Sat 20 Dec 2025 13:01:36 +0000 Manifest next update: Sun 21 Dec 2025 13:01:36 +0000 Files and hashes: 1: UT_ZqedtuCB3HHv5lCRNjDUnZHE.roa (hash: /rFlwg+a07MXWPZmqC8xSpbpKsUCk+WTtzjGaygl83Y=) 2: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: GGuiqfrhFoIqHVc8p1wofrfeQPdGI37ZRpJhJi3wRIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:eb:ed:31:c0:c1:76:1f:08:9e:45:09:e3:7d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e Validity Not Before: Dec 20 13:01:36 2025 GMT Not After : Dec 21 13:01:36 2025 GMT Subject: CN=6dd274be835a02d2eecddb415183c00812b50f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:df:16:a5:7c:46:aa:58:a5:d2:37:de:fe:88: 4d:3c:52:34:b3:be:c3:0b:fd:f8:2b:c9:70:22:b3: a0:40:5b:38:31:b6:15:50:8a:1e:c4:f6:52:59:65: 5e:08:6a:8b:7e:18:46:63:c6:73:ec:f1:28:6b:af: 93:f5:c6:6a:a1:e9:17:d1:ac:14:d2:93:6d:19:3f: b1:99:84:07:45:0a:48:ec:ab:3f:17:b1:9c:f7:9d: be:95:d7:bc:03:bf:36:d4:63:20:09:0c:2e:77:a7: 94:76:0a:34:02:64:b0:ca:f5:24:18:42:24:9e:2f: b9:f8:88:38:be:23:a0:e6:e6:6a:8d:02:4e:c3:e9: 80:15:7e:75:d1:f7:fd:63:55:fe:1f:a3:e8:d9:4d: 1a:de:2a:a7:b4:33:97:48:30:5c:5f:1c:1c:4a:8b: a7:35:22:ff:44:10:17:2a:70:89:18:b8:bf:8d:9d: ac:7c:97:f3:ee:17:97:55:f6:10:6a:9a:d1:a1:ef: 20:d1:79:79:3d:f4:eb:d6:ba:0f:cb:5d:2e:42:72: 32:1c:c2:1d:2e:cb:01:45:c8:06:c4:db:d9:56:ec: c7:83:c7:b9:9b:c9:9c:31:0b:25:7c:10:a9:7d:f0: 2f:fd:90:c3:7c:45:07:35:af:fb:d9:1b:31:8d:f7: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:74:BE:83:5A:02:D2:EE:CD:DB:41:51:83:C0:08:12:B5:0F:04 X509v3 Authority Key Identifier: keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:2a:69:8f:56:c1:b7:1a:95:c5:51:29:9a:f5:50:49:c1:59: 99:ff:44:df:c6:e6:e1:47:8e:1e:6b:9e:65:df:5a:e7:0a:05: 04:a6:03:c6:8f:2c:7d:8e:89:33:55:c5:a0:67:3e:a1:17:67: 07:89:62:42:ac:b4:a7:04:9f:a0:6d:ba:60:d6:ec:35:23:ad: c8:60:e7:a3:d7:c9:e5:c9:a0:ea:d9:1f:2b:db:f8:98:f5:6a: 43:59:ec:ca:b7:92:ef:14:03:cc:dc:d8:5e:b1:74:3e:13:38: 0d:6b:1c:68:60:d9:af:16:e6:ab:ba:cd:fc:5d:44:74:cf:84: ca:45:30:9d:af:bf:8a:0d:af:6b:11:a1:1e:11:0d:e7:5d:02: a2:ab:bd:e5:97:b9:a3:40:0a:09:33:3c:c6:44:9d:99:22:ec: e4:53:d0:2e:a8:3b:bc:f3:d0:09:57:7f:3a:7a:e2:06:95:07: bf:16:ce:1b:8c:de:c8:34:73:3c:08:c5:65:1d:04:64:8f:fe: eb:8c:06:68:3e:51:4b:e3:7b:f9:44:56:e5:55:a7:e7:8c:ee: af:b3:f7:ee:86:e9:d8:cb:d2:b6:b6:de:08:4d:3f:9c:2d:bf: a2:53:af:83:b8:e9:39:5a:f6:7c:98:c0:00:f8:a9:79:7c:aa: 45:6f:b7:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72evtMcDBdh8InkUJ4316MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGQyODk0NTY4YWViZDA1YWQ2NDMyZDUzY2Y3MGUyY2Q3 ODhlNmUwHhcNMjUxMjIwMTMwMTM2WhcNMjUxMjIxMTMwMTM2WjAzMTEwLwYDVQQD Eyg2ZGQyNzRiZTgzNWEwMmQyZWVjZGRiNDE1MTgzYzAwODEyYjUwZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA898WpXxGqlil0jfe/ohNPFI0s77D C/34K8lwIrOgQFs4MbYVUIoexPZSWWVeCGqLfhhGY8Zz7PEoa6+T9cZqoekX0awU 0pNtGT+xmYQHRQpI7Ks/F7Gc952+lde8A7821GMgCQwud6eUdgo0AmSwyvUkGEIk ni+5+Ig4viOg5uZqjQJOw+mAFX510ff9Y1X+H6Po2U0a3iqntDOXSDBcXxwcSoun NSL/RBAXKnCJGLi/jZ2sfJfz7heXVfYQaprRoe8g0Xl5PfTr1roPy10uQnIyHMId LssBRcgGxNvZVuzHg8e5m8mcMQslfBCpffAv/ZDDfEUHNa/72Rsxjfeh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3SdL6DWgLS7s3bQVGDwAgStQ8EMB8GA1UdIwQY MBaAFHPdKJRWiuvQWtZDLVPPcOLNeI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgt YTY3ZGNhOGEwODhjLzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hMWQyMGUtNTBhMi00NGRjLWIxZTgtYTY3ZGNhOGEwODhj LzEvYzkwb2xGYUs2OUJhMWtNdFU4OXc0czE0am00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxCppj1bB txqVxVEpmvVQScFZmf9E38bm4UeOHmueZd9a5woFBKYDxo8sfY6JM1XFoGc+oRdn B4liQqy0pwSfoG26YNbsNSOtyGDno9fJ5cmg6tkfK9v4mPVqQ1nsyreS7xQDzNzY XrF0PhM4DWscaGDZrxbmq7rN/F1EdM+EykUwna+/ig2vaxGhHhEN510Coqu95Ze5 o0AKCTM8xkSdmSLs5FPQLqg7vPPQCVd/OnriBpUHvxbOG4zeyDRzPAjFZR0EZI/+ 64wGaD5RS+N7+URW5VWn54zur7P37obp2MvStrbeCE0/nC2/olOvg7jpOVr2fJjA APipeXyqRW+3KA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:34:57 2025 by rpki-client