This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft File: 01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json) Hash identifier: PJGEyrrOIcz3bbj8KngqghAm1I6vvutj2AECymU2Rq4= Subject key identifier: F3:92:A7:21:CA:BD:09:38:EF:93:86:47:D6:FE:59:C0:BA:C6:E5:53 Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 Certificate issuer: /CN=d3530c144f592cfa891babf195a817900cd6d916 Certificate serial: 019AF50A2895B42CD5CA649264143FFAECAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft Manifest number: 0218 Signing time: Sat 06 Dec 2025 19:01:14 +0000 Manifest this update: Sat 06 Dec 2025 19:01:14 +0000 Manifest next update: Sun 07 Dec 2025 19:01:14 +0000 Files and hashes: 1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: 1IUYHipXCteFN6lKGEyrooQ1UzpDMmhwmjgd4QfRBAg=) 2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:28:95:b4:2c:d5:ca:64:92:64:14:3f:fa:ec:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916 Validity Not Before: Dec 6 19:01:14 2025 GMT Not After : Dec 7 19:01:14 2025 GMT Subject: CN=f392a721cabd0938ef938647d6fe59c0bac6e553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:93:6d:72:da:21:5f:17:04:5b:8d:4d:b3:68: 24:d0:a3:47:8f:e8:de:3c:fa:19:5f:56:d4:6b:2f: 5b:bf:cf:ad:44:64:19:d4:db:b1:4e:46:21:04:1c: 45:2e:74:55:e1:3c:e0:04:e6:4b:f8:47:1e:47:8c: 87:53:41:83:dc:6f:f4:a9:b9:73:b1:97:50:be:c6: 6c:19:fb:a3:a9:7c:bf:41:95:da:4b:51:aa:13:0f: 92:5b:eb:da:97:79:40:bc:cd:56:bf:4b:1f:9c:1e: 74:a4:c0:9f:fe:a3:fd:5c:d0:95:13:a0:14:47:8b: 60:e9:9a:ca:19:78:e9:b6:35:f2:e6:f7:5b:0d:d4: 8f:a3:f7:46:88:89:7b:a6:b4:3f:78:bc:d6:e5:96: 90:85:42:90:7d:8e:73:3d:50:9d:8d:95:65:66:7c: 7f:95:71:ec:54:74:28:ae:0a:43:d2:aa:06:cc:c9: 64:50:1e:73:b9:31:c6:68:3a:2e:1b:72:f1:78:a1: 6a:ac:4b:97:43:f8:6e:9c:d6:23:57:0d:f3:a1:b3: 2f:62:8b:a6:b2:78:bf:7d:cb:29:8f:e5:9c:46:62: 15:c6:fa:06:5b:8c:96:a7:e8:14:d0:aa:23:60:45: 73:51:2d:d1:be:2c:11:3d:a4:91:eb:9b:a7:c1:40: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:92:A7:21:CA:BD:09:38:EF:93:86:47:D6:FE:59:C0:BA:C6:E5:53 X509v3 Authority Key Identifier: keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c7:ae:24:b6:f5:dd:7a:7e:af:3d:f1:84:4e:cd:9e:df:1c: 7b:5a:c8:0b:18:f0:9c:c3:36:6a:1f:b7:c3:fa:11:3b:4e:53: f0:e3:32:16:71:84:44:f6:78:96:e8:07:41:f8:87:cd:03:e6: c2:38:fa:14:c6:c8:4f:3d:8e:c5:1b:ab:6a:4e:4d:04:fb:15: 6f:6d:24:4a:cb:e9:fb:ff:66:ab:10:0e:a0:07:80:7d:c2:9a: 35:2a:45:b4:14:76:9d:31:98:9e:8c:35:ad:ec:85:0e:f8:ff: 2c:64:7c:f8:6d:87:15:e5:8d:96:a4:27:0a:63:22:64:17:b4: 02:3b:d7:75:e1:ee:11:9e:03:9f:9e:c5:ad:bc:a1:ec:d2:87: 2f:77:7b:ec:16:b1:b3:c9:23:94:78:e5:7b:4f:4b:db:78:a9: 29:b9:77:de:42:73:29:20:c8:c9:bf:fa:dc:48:26:ed:d2:58: 98:77:22:b0:a2:6f:84:90:05:38:ed:fb:20:e9:d3:f2:7f:ad: 03:8c:1f:85:6d:00:c4:f9:c0:da:3d:e9:b0:ca:0b:49:e8:2c: 10:13:30:b7:d9:13:d5:48:6e:30:34:58:6d:15:b8:d9:40:6c: b1:74:ce:d0:9d:43:63:02:4f:6c:d6:2d:31:ed:9f:97:dd:eb: 80:73:7c:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CiiVtCzVymSSZBQ/+uyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTMwYzE0NGY1OTJjZmE4OTFiYWJmMTk1YTgxNzkwMGNk NmQ5MTYwHhcNMjUxMjA2MTkwMTE0WhcNMjUxMjA3MTkwMTE0WjAzMTEwLwYDVQQD EyhmMzkyYTcyMWNhYmQwOTM4ZWY5Mzg2NDdkNmZlNTljMGJhYzZlNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JNtctohXxcEW41Ns2gk0KNHj+je PPoZX1bUay9bv8+tRGQZ1NuxTkYhBBxFLnRV4TzgBOZL+EceR4yHU0GD3G/0qblz sZdQvsZsGfujqXy/QZXaS1GqEw+SW+val3lAvM1Wv0sfnB50pMCf/qP9XNCVE6AU R4tg6ZrKGXjptjXy5vdbDdSPo/dGiIl7prQ/eLzW5ZaQhUKQfY5zPVCdjZVlZnx/ lXHsVHQorgpD0qoGzMlkUB5zuTHGaDouG3LxeKFqrEuXQ/hunNYjVw3zobMvYoum sni/fcspj+WcRmIVxvoGW4yWp+gU0KojYEVzUS3RviwRPaSR65unwUAhDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOSpyHKvQk475OGR9b+WcC6xuVTMB8GA1UdIwQY MBaAFNNTDBRPWSz6iRur8ZWoF5AM1tkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYt NmJhNzk5NTdlODYyLzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kM2NjODAtYzFkZS00OThmLTg4ZWYtNmJhNzk5NTdlODYy LzEvMDFNTUZFOVpMUHFKRzZ2eGxhZ1hrQXpXMlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMeuJLb1 3Xp+rz3xhE7Nnt8ce1rICxjwnMM2ah+3w/oRO05T8OMyFnGERPZ4lugHQfiHzQPm wjj6FMbITz2OxRurak5NBPsVb20kSsvp+/9mqxAOoAeAfcKaNSpFtBR2nTGYnow1 reyFDvj/LGR8+G2HFeWNlqQnCmMiZBe0AjvXdeHuEZ4Dn57Frbyh7NKHL3d77Bax s8kjlHjle09L23ipKbl33kJzKSDIyb/63Egm7dJYmHcisKJvhJAFOO37IOnT8n+t A4wfhW0AxPnA2j3psMoLSegsEBMwt9kT1UhuMDRYbRW42UBssXTO0J1DYwJPbNYt Me2fl93rgHN8ow== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:58 2025 by rpki-client