This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json) Hash identifier: tgQfitBpwhQMcy+oJ8bxn5+Q48/EJ4jeT5yMyjxiOAA= Subject key identifier: A0:C7:B7:0C:B7:9C:95:FA:78:C6:DE:82:E9:85:67:F8:BA:22:11:20 Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba Certificate serial: 019AF1D1DD74273D47BF9BB422351ABF5A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft Manifest number: 047F Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=) 2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: FoHgY7hm0zmFBgHlRS3blHD8M526hORH5Bfr6pKYm2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dd:74:27:3d:47:bf:9b:b4:22:35:1a:bf:5a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=a0c7b70cb79c95fa78c6de82e98567f8ba221120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:b0:5f:42:9d:76:d5:f6:c4:3f:e0:57:04: 9b:bb:0d:f5:8d:7c:fe:87:31:dd:5e:f6:03:cc:e7: 1c:86:3e:65:e3:5f:3c:52:2c:cc:5e:0a:8b:d9:1d: fd:76:5a:bc:c3:e3:cf:e9:46:03:10:69:b1:ac:d8: 78:aa:e3:07:98:de:65:17:67:61:e7:a4:3e:29:8f: a5:83:aa:e6:70:51:33:05:6b:3a:12:00:b3:00:d1: 9c:47:bf:0c:08:46:7d:89:f0:a8:e4:80:02:3e:b3: ab:ee:85:25:d4:ed:5d:e1:c6:e5:3d:34:71:d2:6b: fe:eb:2e:38:aa:70:9f:1e:49:21:6e:5f:d7:3a:e1: 0b:c8:c4:68:ed:b2:52:ff:db:5e:16:50:71:f7:0b: 37:e3:cf:e1:e1:3c:7c:82:8b:27:b5:be:43:ea:c7: dd:9c:d8:02:a2:0e:ae:74:41:98:f8:6c:60:4b:5e: 69:e4:2c:07:82:08:82:e4:0c:81:4b:48:f7:e9:a5: d7:90:74:dc:8e:8c:32:f7:e3:7e:54:f1:b9:36:6e: 16:d6:02:ad:77:42:9b:90:9e:c0:80:8e:7c:ca:d4: de:45:b2:ff:f7:2f:13:a7:a2:67:24:02:81:bd:f3: ca:de:e7:d6:05:0b:dd:8b:23:ba:6f:bb:4e:e7:49: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:B7:0C:B7:9C:95:FA:78:C6:DE:82:E9:85:67:F8:BA:22:11:20 X509v3 Authority Key Identifier: keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:42:5a:40:30:35:81:d3:ef:8b:ac:73:76:6b:c4:ae:ca:0a: c7:c3:f1:9d:ff:64:c6:e4:d8:e5:bf:c3:9c:99:25:2b:21:cf: 13:b1:01:e9:56:1d:22:bd:88:53:d4:5e:2d:c5:c1:5b:de:45: f8:a7:90:25:a3:12:f6:05:6f:f5:18:33:e3:14:e7:84:8d:83: 11:ae:5f:eb:31:46:83:55:77:bb:4c:5b:96:41:89:bb:b1:d1: 3e:0a:17:4e:1a:03:0e:5c:aa:22:9b:18:ed:66:34:d9:65:a6: c9:9e:3c:3e:8d:d2:0c:32:76:85:68:ec:2b:11:f4:26:27:b3: 5c:0c:4a:a2:40:f2:87:a2:bd:fe:cf:96:43:0e:6f:c3:fc:87: 60:57:d3:eb:74:89:cb:59:ac:83:40:ef:79:93:65:cb:cf:25: d9:e5:04:7a:54:e7:a7:3a:5c:de:1a:7e:08:d1:1e:2f:6b:9d: 55:0a:74:a8:d6:bd:34:3d:55:09:1a:c8:ce:57:5c:5c:1f:44: 6e:06:34:7c:44:ba:de:23:21:50:db:c2:4e:5c:6a:b2:62:19: 00:d8:a5:64:27:e1:3b:9d:ed:03:21:ca:b5:90:18:90:ae:2f: ea:48:62:f8:76:a0:32:ec:61:38:63:10:e4:eb:0a:8a:8a:fd: 43:e7:49:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d10Jz1Hv5u0IjUav1piMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4 NDMyYmEwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD EyhhMGM3YjcwY2I3OWM5NWZhNzhjNmRlODJlOTg1NjdmOGJhMjIxMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2miwX0KddtX2xD/gVwSbuw31jXz+ hzHdXvYDzOcchj5l4188UizMXgqL2R39dlq8w+PP6UYDEGmxrNh4quMHmN5lF2dh 56Q+KY+lg6rmcFEzBWs6EgCzANGcR78MCEZ9ifCo5IACPrOr7oUl1O1d4cblPTRx 0mv+6y44qnCfHkkhbl/XOuELyMRo7bJS/9teFlBx9ws348/h4Tx8gosntb5D6sfd nNgCog6udEGY+GxgS15p5CwHggiC5AyBS0j36aXXkHTcjowy9+N+VPG5Nm4W1gKt d0KbkJ7AgI58ytTeRbL/9y8Tp6JnJAKBvfPK3ufWBQvdiyO6b7tO50m+2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDHtwy3nJX6eMbegumFZ/i6IhEgMB8GA1UdIwQY MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0 LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0JaQDA1 gdPvi6xzdmvErsoKx8Pxnf9kxuTY5b/DnJklKyHPE7EB6VYdIr2IU9ReLcXBW95F +KeQJaMS9gVv9Rgz4xTnhI2DEa5f6zFGg1V3u0xblkGJu7HRPgoXThoDDlyqIpsY 7WY02WWmyZ48Po3SDDJ2hWjsKxH0JiezXAxKokDyh6K9/s+WQw5vw/yHYFfT63SJ y1msg0DveZNly88l2eUEelTnpzpc3hp+CNEeL2udVQp0qNa9ND1VCRrIzldcXB9E bgY0fES63iMhUNvCTlxqsmIZANilZCfhO53tAyHKtZAYkK4v6khi+HagMuxhOGMQ 5OsKior9Q+dJGg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:40:03 2025 by rpki-client