This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json) Hash identifier: 1+/Slm2GFW3OomZLHbzJbW+1GRgYeJhL5HY8AKgAFoI= Subject key identifier: 9A:88:0F:91:D7:5B:2B:1A:24:50:0F:D2:0E:9E:32:CD:F7:29:6B:CE Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Certificate serial: 019AF2ADB6E4F3074600E0D640A9C4DA9044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft Manifest number: 05BB Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=) 2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: uduFsugzSNs5dJuSYK47DUGg+TLdocABO6/OZLkLztw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b6:e4:f3:07:46:00:e0:d6:40:a9:c4:da:90:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=9a880f91d75b2b1a24500fd20e9e32cdf7296bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a8:ee:ca:e2:59:1c:e3:ff:4c:76:f9:23:b8: b6:71:81:4f:8b:15:f6:e2:e6:7d:b4:8f:ea:bb:76: 8c:62:20:60:82:5d:22:66:dd:99:65:13:f0:f8:58: 59:b4:61:1e:ac:43:e0:02:ca:c0:8e:db:31:77:b4: 99:f9:8e:b3:10:ff:73:b0:2c:3f:c5:9f:0b:38:d8: b4:59:a5:ca:4c:dc:37:22:3c:71:97:0b:8d:d5:35: d8:33:97:92:6f:c0:4a:4b:93:ed:cc:06:63:1e:06: 0c:1e:0a:2e:2a:43:10:0e:01:4f:f5:d2:84:15:36: 52:93:7d:b6:f1:de:b4:27:7a:26:bb:c8:e2:5c:d0: f7:24:09:6a:3d:a5:0f:88:0a:3a:14:95:0e:5d:42: 34:01:4e:ec:cb:1a:32:c7:48:cb:55:bf:32:26:11: 8c:1d:c2:93:55:62:7f:d5:23:96:26:0a:12:ab:e8: be:b4:0a:b9:a5:81:08:84:f6:35:8d:28:97:29:a7: d8:9d:92:96:c2:35:c3:0b:b3:02:22:92:35:a8:28: c4:38:62:c9:d0:7c:f6:35:ae:3e:00:6f:37:7b:d8: 1a:1e:32:8f:ed:9f:72:5e:8c:9d:bb:f1:37:cc:6e: 27:12:db:40:f1:5a:f5:7a:08:bb:3a:bb:12:7e:4a: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:0F:91:D7:5B:2B:1A:24:50:0F:D2:0E:9E:32:CD:F7:29:6B:CE X509v3 Authority Key Identifier: keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:71:89:5c:c2:b9:1f:87:9b:7c:03:0b:ff:63:1d:ea:0c:59: 87:9e:8c:9d:1a:60:45:8d:2f:cc:e4:a3:df:4c:89:ac:f5:7f: 8e:65:36:41:b0:b2:47:fa:96:d5:c2:32:07:f3:f9:07:c4:31: 96:eb:c2:69:93:15:12:b5:ef:86:e5:0a:a5:1e:fe:b3:6b:51: de:4e:d4:b0:55:90:6b:6f:fd:15:23:5f:b2:eb:da:82:80:1a: c0:d6:6c:7e:9e:aa:3b:25:98:ea:15:2a:38:86:a8:84:cd:eb: 10:2c:19:da:c8:d0:e1:28:46:76:e5:11:45:02:cf:47:dd:22: 53:f6:a2:76:7d:7f:0d:34:74:0b:cb:42:c3:cb:ae:01:7c:6b: ff:29:e3:50:df:df:04:f3:ae:bb:71:0e:84:2a:b5:6f:2b:6c: 44:0c:77:5c:f2:4d:65:ac:0a:5e:f1:43:d9:a0:68:59:4e:20: 0f:de:58:51:6a:82:2b:9e:97:c2:8d:42:5c:7e:eb:61:39:ec: cc:24:70:6a:87:fe:96:f0:4b:11:ac:e2:b1:f6:cf:35:ab:51: b5:f8:e0:c1:9a:90:67:84:b1:a2:e8:0f:6d:d4:a0:4b:35:f2: c3:41:2e:fd:cd:f7:50:3e:b6:8f:95:4c:b3:48:5c:18:c8:0c: 18:4f:01:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbbk8wdGAODWQKnE2pBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl OTU5NmMwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg5YTg4MGY5MWQ3NWIyYjFhMjQ1MDBmZDIwZTllMzJjZGY3Mjk2YmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qjuyuJZHOP/THb5I7i2cYFPixX2 4uZ9tI/qu3aMYiBggl0iZt2ZZRPw+FhZtGEerEPgAsrAjtsxd7SZ+Y6zEP9zsCw/ xZ8LONi0WaXKTNw3IjxxlwuN1TXYM5eSb8BKS5PtzAZjHgYMHgouKkMQDgFP9dKE FTZSk3228d60J3omu8jiXND3JAlqPaUPiAo6FJUOXUI0AU7syxoyx0jLVb8yJhGM HcKTVWJ/1SOWJgoSq+i+tAq5pYEIhPY1jSiXKafYnZKWwjXDC7MCIpI1qCjEOGLJ 0Hz2Na4+AG83e9gaHjKP7Z9yXoydu/E3zG4nEttA8Vr1egi7OrsSfkqpBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqID5HXWysaJFAP0g6eMs33KWvOMB8GA1UdIwQY MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1 LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHGJXMK5 H4ebfAML/2Md6gxZh56MnRpgRY0vzOSj30yJrPV/jmU2QbCyR/qW1cIyB/P5B8Qx luvCaZMVErXvhuUKpR7+s2tR3k7UsFWQa2/9FSNfsuvagoAawNZsfp6qOyWY6hUq OIaohM3rECwZ2sjQ4ShGduURRQLPR90iU/aidn1/DTR0C8tCw8uuAXxr/ynjUN/f BPOuu3EOhCq1bytsRAx3XPJNZawKXvFD2aBoWU4gD95YUWqCK56Xwo1CXH7rYTns zCRwaof+lvBLEazisfbPNatRtfjgwZqQZ4SxougPbdSgSzXyw0Eu/c33UD62j5VM s0hcGMgMGE8BnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:24 2025 by rpki-client