This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json) Hash identifier: tbwKDGx8w5aeyEj5JYUxhkhBYwW90ot487391chW4Z4= Subject key identifier: D1:E1:13:19:45:99:3C:1C:58:3F:47:2F:E3:A9:0D:7C:AA:30:51:54 Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Certificate serial: 019AF2AD5D3919F531F1F6D75370686575C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=) 2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: q8roC2EAePNT3Brg08wY7s76NH53YsBEEHC9VuUOj7g=) 3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5d:39:19:f5:31:f1:f6:d7:53:70:68:65:75:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054 Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=d1e1131945993c1c583f472fe3a90d7caa305154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:15:fc:2d:b9:e4:a3:b2:af:3e:46:16:d5: d6:f4:0b:64:fc:a2:28:a8:42:d1:81:3f:57:19:76: 38:de:75:fc:6d:91:48:f7:2c:bc:d8:dd:4d:8c:af: bf:f8:99:49:4b:79:30:e2:0d:ba:a4:4f:56:c2:d9: d8:3c:6d:b7:1c:73:fd:f4:ce:5a:f7:37:d9:f8:f1: fa:8d:cc:8a:06:76:49:ac:2b:e4:28:cb:bc:e7:f3: 5f:ee:09:2c:dd:9d:3c:be:bc:4b:34:b3:5e:95:1c: 4e:1d:0f:ef:7a:7d:92:1f:0a:aa:84:c2:d8:22:3a: 7d:46:2d:7d:a2:c4:1d:0c:b1:2d:d4:28:d5:30:db: ee:23:75:8e:4d:57:b5:99:0a:54:dc:cd:00:af:ce: 04:69:e5:56:7c:f2:bc:04:af:38:f5:a6:55:c2:63: 3f:be:71:95:94:d3:e7:19:fa:c4:64:9c:16:52:db: 4e:a2:16:ce:e6:aa:f5:ca:c3:03:16:40:05:47:d7: 7c:08:1d:5a:61:56:80:7b:65:33:95:0d:2f:0f:fa: e7:b7:9a:a3:fd:0c:5d:4a:11:d0:1f:13:cb:a4:ad: 2a:16:4f:69:c6:ac:10:e9:5d:c6:bc:b6:22:1f:40: c4:28:4e:b3:2e:b2:9c:7e:0d:85:fe:cd:1f:9d:90: a2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:13:19:45:99:3C:1C:58:3F:47:2F:E3:A9:0D:7C:AA:30:51:54 X509v3 Authority Key Identifier: keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:92:b3:bb:15:65:0f:77:3e:01:27:45:fa:1c:88:98:76: 2f:1a:8f:55:28:43:b0:f5:1e:97:47:df:d2:8e:00:f7:91:73: e7:52:fb:73:30:68:c0:75:d6:3c:0b:75:4f:43:ef:86:e8:56: e9:5c:a2:13:a1:dc:76:e3:5a:fe:d3:1c:59:87:b6:b3:1e:88: 2b:18:66:10:1d:35:35:ff:d9:a3:7a:b1:23:c5:bf:c3:26:b0: 65:b2:98:1f:10:bf:77:6e:bc:4d:25:e9:af:77:4c:c8:db:d4: e4:49:9f:0d:02:46:d7:9c:1d:6d:c6:bf:0f:74:65:70:08:c0: dd:35:1c:eb:bd:b6:a0:b3:39:20:75:bc:4c:95:62:be:a1:78: 1b:53:d2:4b:e9:f2:51:96:cb:c8:c9:53:4f:dd:5b:4b:cb:ea: 8a:12:89:59:6c:3d:e9:b7:0f:b1:fc:c4:51:51:e1:06:7c:8a: 5a:a3:5b:e0:49:11:17:64:50:52:8b:84:75:d6:be:71:46:62: 4f:29:85:13:c3:24:ff:4e:5c:03:95:e8:1b:a8:e8:09:87:2b: 8c:95:12:6e:c3:06:45:5b:4f:d6:c9:34:49:71:4e:40:d3:9e: bc:5d:b5:19:3c:42:50:82:c9:0d:ad:51:e9:ce:5a:d3:9b:c1: 89:e9:f9:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV05GfUx8fbXU3BoZXXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3 YmQwNTQwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EyhkMWUxMTMxOTQ1OTkzYzFjNTgzZjQ3MmZlM2E5MGQ3Y2FhMzA1MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtcV/C255KOyrz5GFtXW9Atk/KIo qELRgT9XGXY43nX8bZFI9yy82N1NjK+/+JlJS3kw4g26pE9WwtnYPG23HHP99M5a 9zfZ+PH6jcyKBnZJrCvkKMu85/Nf7gks3Z08vrxLNLNelRxOHQ/ven2SHwqqhMLY Ijp9Ri19osQdDLEt1CjVMNvuI3WOTVe1mQpU3M0Ar84EaeVWfPK8BK849aZVwmM/ vnGVlNPnGfrEZJwWUttOohbO5qr1ysMDFkAFR9d8CB1aYVaAe2UzlQ0vD/rnt5qj /QxdShHQHxPLpK0qFk9pxqwQ6V3GvLYiH0DEKE6zLrKcfg2F/s0fnZCicwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHhExlFmTwcWD9HL+OpDXyqMFFUMB8GA1UdIwQY MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3 LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfySSs7sV ZQ93PgEnRfociJh2LxqPVShDsPUel0ff0o4A95Fz51L7czBowHXWPAt1T0PvhuhW 6VyiE6HcduNa/tMcWYe2sx6IKxhmEB01Nf/Zo3qxI8W/wyawZbKYHxC/d268TSXp r3dMyNvU5EmfDQJG15wdbca/D3RlcAjA3TUc6722oLM5IHW8TJVivqF4G1PSS+ny UZbLyMlTT91bS8vqihKJWWw96bcPsfzEUVHhBnyKWqNb4EkRF2RQUouEdda+cUZi TymFE8Mk/05cA5XoG6joCYcrjJUSbsMGRVtP1sk0SXFOQNOevF21GTxCUILJDa1R 6c5a05vBien5YQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:27:22 2025 by rpki-client