This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft File: D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft (raw, json) Hash identifier: be5fiuTNKHvfhnn7Ssjtbl/w0LiEtUbnvTBs1z//V/Y= Subject key identifier: C8:41:FA:70:4D:7D:77:CC:66:0F:F3:D8:EF:DF:AC:2B:7F:2A:E6:F2 Authority key identifier: 0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4 Certificate issuer: /CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4 Certificate serial: 019AF2765EFEEB092F555F16931D26F10DB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft Manifest number: 1B Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl (hash: yXPQUinxmYPLsIr0xqsmcZ9dCidFV5lLA6Hq60pRq+M=) 2: Sf9NlL9u0gQktP7IoLN4vYHJsgM.roa (hash: ppXLp3rl84ATGcOkgVXnAwMIjcmYz64iVP17eQHXfwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:5e:fe:eb:09:2f:55:5f:16:93:1d:26:f1:0d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4207ce80855a5cc97c0ba473b95872c7c193c4 Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=c841fa704d7d77cc660ff3d8efdfac2b7f2ae6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6b:53:f3:8b:05:ff:9a:f2:fd:4c:4f:d4:22: 6f:d6:19:4e:8c:27:14:b5:93:24:24:69:1a:77:47: ab:c2:6e:6f:e4:0a:7b:0b:c8:ed:cb:3c:e8:3a:18: a7:f7:fe:60:6b:ce:91:24:2e:f1:d7:ea:2a:7b:ea: f7:1e:4d:0b:43:0a:db:38:d8:3c:e0:1d:7c:16:46: 29:b8:d0:1b:c6:ed:05:f7:27:30:06:d3:ac:1d:cc: 80:97:1e:55:b6:91:cd:01:9c:45:89:b7:33:5b:cc: 63:70:d4:da:16:c0:e7:37:f2:63:4b:4b:72:de:d9: 96:84:df:bf:60:b4:f4:b9:58:3d:1e:f9:c2:a7:8b: ba:52:4e:a4:2f:9c:8f:11:e1:b9:d2:00:df:62:59: d1:40:b2:3a:c6:46:82:6d:b4:e1:e6:e1:1c:fe:99: 20:00:a6:6d:c4:b6:40:93:f5:c7:6b:a4:3d:5b:3c: 73:d3:12:1f:1a:fc:21:0e:7b:d5:3f:0b:f9:f3:c0: db:71:a9:11:d6:40:6f:55:02:21:01:50:fa:40:dc: b2:16:0c:80:d6:36:0e:9e:c9:cd:c3:bf:5b:36:5c: c3:a3:f9:88:6a:85:7e:a8:c8:46:3f:6d:92:d6:ea: 3e:f2:14:f3:7b:12:b7:48:57:12:c5:3e:14:9b:89: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:41:FA:70:4D:7D:77:CC:66:0F:F3:D8:EF:DF:AC:2B:7F:2A:E6:F2 X509v3 Authority Key Identifier: keyid:0F:42:07:CE:80:85:5A:5C:C9:7C:0B:A4:73:B9:58:72:C7:C1:93:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0IHzoCFWlzJfAukc7lYcsfBk8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/901957-4e71-4cf3-acb8-fb2c8a814347/1/D0IHzoCFWlzJfAukc7lYcsfBk8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2d:47:01:88:7d:77:ca:cf:34:83:29:b9:f1:06:ee:41:0a: 50:6b:43:b8:c8:d6:46:3b:e1:95:d7:4c:68:87:b2:10:33:bd: bf:3e:16:b2:67:f8:f4:9f:e9:13:9d:1b:b3:41:15:a2:32:87: 02:fb:dc:ba:92:dd:8f:64:12:10:dd:45:e0:b5:90:92:97:18: ae:88:94:3b:80:6e:a8:d7:f5:36:82:a1:08:99:05:96:8c:5f: 64:e6:45:6c:ef:e5:86:08:b1:af:2c:e7:2e:5b:de:a7:15:f8: c2:b4:80:a3:05:5b:2a:5d:f1:ba:17:cd:ed:32:fa:11:90:61: 20:2a:ec:3b:44:af:a5:70:91:27:89:43:d3:a4:99:ea:65:be: c3:eb:cc:d2:b2:7c:5e:a8:b0:84:87:a7:17:db:75:0b:18:0f: 93:05:7d:05:3d:8c:2a:e6:75:90:51:7b:92:25:43:ae:bb:51: 14:0a:6b:4b:af:61:46:b3:7b:8b:37:a9:c8:4e:76:3f:f9:36: 91:2b:92:b5:18:59:ec:42:7f:d1:55:8c:e5:d4:e0:6e:f8:3b: dd:67:dd:a2:d5:f8:a0:ba:3b:c7:49:3f:8b:3f:2c:33:d0:ac: 8c:65:3a:b9:13:6e:9f:28:56:83:33:83:4f:67:81:f6:bd:2f: d1:eb:9b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydl7+6wkvVV8Wkx0m8Q2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDIwN2NlODA4NTVhNWNjOTdjMGJhNDczYjk1ODcyYzdj MTkzYzQwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhjODQxZmE3MDRkN2Q3N2NjNjYwZmYzZDhlZmRmYWMyYjdmMmFlNmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GtT84sF/5ry/UxP1CJv1hlOjCcU tZMkJGkad0erwm5v5Ap7C8jtyzzoOhin9/5ga86RJC7x1+oqe+r3Hk0LQwrbONg8 4B18FkYpuNAbxu0F9ycwBtOsHcyAlx5VtpHNAZxFibczW8xjcNTaFsDnN/JjS0ty 3tmWhN+/YLT0uVg9HvnCp4u6Uk6kL5yPEeG50gDfYlnRQLI6xkaCbbTh5uEc/pkg AKZtxLZAk/XHa6Q9Wzxz0xIfGvwhDnvVPwv588DbcakR1kBvVQIhAVD6QNyyFgyA 1jYOnsnNw79bNlzDo/mIaoV+qMhGP22S1uo+8hTzexK3SFcSxT4Um4kVTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhB+nBNfXfMZg/z2O/frCt/KubyMB8GA1UdIwQY MBaAFA9CB86AhVpcyXwLpHO5WHLHwZPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgt ZmIyYzhhODE0MzQ3LzEvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85MDE5NTctNGU3MS00Y2YzLWFjYjgtZmIyYzhhODE0MzQ3 LzEvRDBJSHpvQ0ZXbHpKZkF1a2M3bFljc2ZCazhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC1HAYh9 d8rPNIMpufEG7kEKUGtDuMjWRjvhlddMaIeyEDO9vz4Wsmf49J/pE50bs0EVojKH AvvcupLdj2QSEN1F4LWQkpcYroiUO4BuqNf1NoKhCJkFloxfZOZFbO/lhgixryzn LlvepxX4wrSAowVbKl3xuhfN7TL6EZBhICrsO0SvpXCRJ4lD06SZ6mW+w+vM0rJ8 XqiwhIenF9t1CxgPkwV9BT2MKuZ1kFF7kiVDrrtRFAprS69hRrN7izepyE52P/k2 kSuStRhZ7EJ/0VWM5dTgbvg73WfdotX4oLo7x0k/iz8sM9CsjGU6uRNunyhWgzOD T2eB9r0v0eubCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:59 2025 by rpki-client