This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json) Hash identifier: 2NZnxntYVGAIRpgvH7IINy5vYgbzvlADVD74a4lkHvw= Subject key identifier: 3F:F6:C7:02:0A:E9:21:55:D9:56:94:6D:27:70:F1:CB:90:39:84:19 Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Certificate serial: 019AF208ED3835A7492CD01E579413686F2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft Manifest number: 0C5D Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=) 2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=) 3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=) 4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: ODM6bsxob0VuosNgd7Ad5BLYMiSRcw+hl+5Q9glgQeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:38:35:a7:49:2c:d0:1e:57:94:13:68:6f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934 Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=3ff6c7020ae92155d956946d2770f1cb90398419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:21:bd:ff:66:aa:96:12:5a:1c:b0:03:a0: 49:62:1f:dc:3a:3b:6c:bb:3f:0c:21:81:65:23:ed: 2a:ea:ac:97:7e:87:ab:16:b1:70:50:77:2b:dc:67: 17:c2:1a:84:53:2e:cf:19:5b:fc:c4:72:03:fd:b6: ca:d5:84:a9:2e:1f:16:3c:09:24:f0:14:90:7a:8b: ec:c8:48:12:54:d7:dc:87:5d:42:29:26:b2:39:7f: e5:8b:51:5d:35:fc:40:c5:84:13:d6:d8:f2:a5:b1: ad:ba:80:05:50:72:2f:e1:ae:e9:ec:ef:2b:f0:12: 0b:e4:ac:aa:e0:8c:55:94:41:17:1f:64:36:ae:df: 1f:3b:95:96:86:90:65:a8:dc:29:94:82:48:94:48: 2b:e1:b0:14:a5:33:98:7e:40:4e:50:57:e7:7f:a9: ec:1e:4d:a5:9a:a0:e1:b5:ca:6f:4f:b1:a4:95:98: 62:62:6e:03:7b:19:fb:bd:65:75:12:78:3b:b4:85: fb:8e:82:a0:e7:96:ad:05:1c:11:74:4b:e7:c9:6b: f1:8a:21:fc:8a:3f:0a:fb:07:f1:84:5f:59:26:95: c9:0a:af:a2:50:16:c2:10:1e:b6:35:8c:8b:f5:18: 3f:83:b3:81:c3:5a:4b:57:39:64:d1:7a:3d:a8:d9: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F6:C7:02:0A:E9:21:55:D9:56:94:6D:27:70:F1:CB:90:39:84:19 X509v3 Authority Key Identifier: keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:42:4b:48:3e:ec:1f:ba:66:b7:61:53:73:64:10:53:8d:0d: f5:64:8d:15:ad:81:47:88:95:5a:b5:70:0a:13:61:6a:bd:8f: f1:85:d8:3f:b2:0d:37:1c:a9:8c:c9:34:54:5d:e4:5c:ea:67: a7:46:58:86:e3:a6:51:22:ed:2d:1a:77:b0:ad:60:0e:64:f3: e0:b3:c2:2d:19:99:60:90:0b:62:74:b0:84:d2:fd:a4:2a:3d: 70:b2:ad:92:5e:39:74:00:df:34:36:c8:48:ec:29:cb:e0:f9: c4:ad:3b:84:8b:61:30:30:9a:40:c5:d5:eb:c3:27:41:f7:2f: b8:3e:71:59:ba:be:87:63:89:d5:6b:e3:08:d9:e2:2d:8b:c3: 14:d1:23:60:3c:74:c7:18:16:e8:da:53:31:8e:e5:9f:b3:25: f5:7a:62:b3:a7:a1:54:56:b0:ab:39:d7:3d:71:0b:b3:23:30: c3:0e:16:c5:05:06:19:f4:8a:e9:bc:b4:b6:f2:0b:6f:65:31: 5b:30:e5:c1:49:a5:ae:3a:09:8f:b8:66:6c:77:1a:79:03:6e: 0c:fe:7e:8e:70:a5:97:0b:d8:1b:27:4f:03:94:8a:75:07:cc: 0f:2d:84:56:14:ff:a7:83:bc:d4:0f:91:7d:67:4d:16:c3:ee: 15:d2:ff:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO04NadJLNAeV5QTaG8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0 YzA5MzQwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD EygzZmY2YzcwMjBhZTkyMTU1ZDk1Njk0NmQyNzcwZjFjYjkwMzk4NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzYhvf9mqpYSWhywA6BJYh/cOjts uz8MIYFlI+0q6qyXfoerFrFwUHcr3GcXwhqEUy7PGVv8xHID/bbK1YSpLh8WPAkk 8BSQeovsyEgSVNfch11CKSayOX/li1FdNfxAxYQT1tjypbGtuoAFUHIv4a7p7O8r 8BIL5Kyq4IxVlEEXH2Q2rt8fO5WWhpBlqNwplIJIlEgr4bAUpTOYfkBOUFfnf6ns Hk2lmqDhtcpvT7GklZhiYm4Dexn7vWV1Eng7tIX7joKg55atBRwRdEvnyWvxiiH8 ij8K+wfxhF9ZJpXJCq+iUBbCEB62NYyL9Rg/g7OBw1pLVzlk0Xo9qNntQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/2xwIK6SFV2VaUbSdw8cuQOYQZMB8GA1UdIwQY MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0 LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkJLSD7s H7pmt2FTc2QQU40N9WSNFa2BR4iVWrVwChNhar2P8YXYP7INNxypjMk0VF3kXOpn p0ZYhuOmUSLtLRp3sK1gDmTz4LPCLRmZYJALYnSwhNL9pCo9cLKtkl45dADfNDbI SOwpy+D5xK07hIthMDCaQMXV68MnQfcvuD5xWbq+h2OJ1WvjCNniLYvDFNEjYDx0 xxgW6NpTMY7ln7Ml9Xpis6ehVFawqznXPXELsyMwww4WxQUGGfSK6by0tvILb2Ux WzDlwUmlrjoJj7hmbHcaeQNuDP5+jnCllwvYGydPA5SKdQfMDy2EVhT/p4O81A+R fWdNFsPuFdL/Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:02 2025 by rpki-client