This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json) Hash identifier: 0n7TkTm3bZjmZjMYj5x5dukpiXQSwN4AHHvdPzXPJPg= Subject key identifier: C7:28:D8:45:64:0A:F7:43:DE:30:7E:1D:33:7D:61:4C:E0:5F:86:48 Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb Certificate serial: 019AF2095073E5553E10481E067A0DBD62FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:27 +0000 Manifest this update: Sat 06 Dec 2025 05:01:27 +0000 Manifest next update: Sun 07 Dec 2025 05:01:27 +0000 Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: MPxxmDY1HU7GFMlPZYrGJkPoNOMOayzM1NeoRI/CaJg=) 2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=) 3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:50:73:e5:55:3e:10:48:1e:06:7a:0d:bd:62:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb Validity Not Before: Dec 6 05:01:27 2025 GMT Not After : Dec 7 05:01:27 2025 GMT Subject: CN=c728d845640af743de307e1d337d614ce05f8648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:c0:04:17:93:e5:41:f2:5d:0b:54:d1:13: 48:15:da:bf:12:66:cf:f2:31:e4:a4:69:35:b0:16: e4:c8:d0:9d:11:68:52:eb:2e:e6:7d:e4:40:00:57: ef:90:0c:2d:5f:f4:5e:46:fb:12:39:97:a9:3f:f0: bb:fa:5e:19:3d:de:52:67:88:da:40:89:9f:6f:91: 6f:b3:a8:9e:42:3b:f4:f7:cc:a0:ee:4b:cb:9a:66: 42:a4:61:21:cf:09:4e:43:c1:c2:60:7e:0f:d8:5b: 87:5d:a0:bd:0c:20:fc:f5:9f:9b:f0:d2:13:88:f1: be:ac:5b:94:22:72:b7:e9:1d:b7:34:f8:5e:36:5f: 11:c5:e2:4f:64:b8:5b:d2:e1:0b:04:71:be:cd:53: 59:55:6c:11:6e:8d:06:19:e7:7c:e6:79:5c:68:61: c1:35:fe:63:f9:64:5e:83:82:c1:99:a2:b0:b5:05: c6:3d:5b:2c:31:91:56:7d:be:57:32:1c:76:f3:c4: e4:72:fe:15:6b:f1:32:a7:be:52:ee:44:de:60:b7: 9d:8e:f8:a9:ec:6a:ec:21:5a:04:98:bc:b9:14:ea: 67:6f:a1:f3:34:3f:d0:c9:cd:42:9e:de:9a:13:be: c7:4c:6a:48:91:23:1b:9d:72:ed:42:1f:9a:c3:6b: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:28:D8:45:64:0A:F7:43:DE:30:7E:1D:33:7D:61:4C:E0:5F:86:48 X509v3 Authority Key Identifier: keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4a:91:36:28:ec:46:71:d1:91:b5:3f:53:79:59:3a:a9:b2: e4:0e:87:91:e4:f6:e2:b6:26:96:2c:31:ae:e9:e4:ca:e3:a5: b2:26:4d:72:e7:8e:e8:c6:9c:96:23:b7:49:0e:9a:83:98:35: 3d:84:6e:b9:75:78:0f:ee:4c:c3:52:2c:b2:7f:e8:ab:9f:98: 6f:8b:99:75:94:10:37:a9:1c:a9:e2:45:03:c2:f2:41:db:f5: e1:17:25:53:cc:75:8f:b2:12:b1:ca:9c:ba:4f:98:00:91:59: 63:3e:06:c6:e9:4e:85:c4:61:27:6c:58:fb:98:01:7a:e3:56: 4a:66:58:e1:c5:10:62:4b:d5:bf:e9:9d:ff:62:bc:de:44:bd: 98:a2:83:f3:38:e9:25:7c:d2:1a:58:09:89:12:45:46:62:34: 4d:4c:63:ac:33:0a:7c:1c:8c:56:b9:6e:71:7f:78:ce:32:68: f7:1f:a6:f5:b8:f7:c6:8d:17:82:dd:e9:9a:40:ad:fb:66:14: 3a:8f:a7:12:c9:d0:2b:93:f0:11:22:16:66:0f:82:59:17:f2: 93:60:c8:aa:c3:38:1b:34:e1:a8:33:e4:98:f3:db:5b:26:63: 62:52:f2:86:db:e4:67:59:f1:c4:c0:ec:42:a8:8f:e9:88:ed: 99:07:c9:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVBz5VU+EEgeBnoNvWL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2 NzcyYmIwHhcNMjUxMjA2MDUwMTI3WhcNMjUxMjA3MDUwMTI3WjAzMTEwLwYDVQQD EyhjNzI4ZDg0NTY0MGFmNzQzZGUzMDdlMWQzMzdkNjE0Y2UwNWY4NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VbABBeT5UHyXQtU0RNIFdq/EmbP 8jHkpGk1sBbkyNCdEWhS6y7mfeRAAFfvkAwtX/ReRvsSOZepP/C7+l4ZPd5SZ4ja QImfb5Fvs6ieQjv098yg7kvLmmZCpGEhzwlOQ8HCYH4P2FuHXaC9DCD89Z+b8NIT iPG+rFuUInK36R23NPheNl8RxeJPZLhb0uELBHG+zVNZVWwRbo0GGed85nlcaGHB Nf5j+WReg4LBmaKwtQXGPVssMZFWfb5XMhx288Tkcv4Va/Eyp75S7kTeYLedjvip 7GrsIVoEmLy5FOpnb6HzND/Qyc1Cnt6aE77HTGpIkSMbnXLtQh+aw2tzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMco2EVkCvdD3jB+HTN9YUzgX4ZIMB8GA1UdIwQY MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt ZDM4YTc2NjBiNTFlLzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEqRNijs RnHRkbU/U3lZOqmy5A6HkeT24rYmliwxrunkyuOlsiZNcueO6MacliO3SQ6ag5g1 PYRuuXV4D+5Mw1Issn/oq5+Yb4uZdZQQN6kcqeJFA8LyQdv14RclU8x1j7ISscqc uk+YAJFZYz4GxulOhcRhJ2xY+5gBeuNWSmZY4cUQYkvVv+md/2K83kS9mKKD8zjp JXzSGlgJiRJFRmI0TUxjrDMKfByMVrlucX94zjJo9x+m9bj3xo0Xgt3pmkCt+2YU Oo+nEsnQK5PwESIWZg+CWRfyk2DIqsM4GzThqDPkmPPbWyZjYlLyhtvkZ1nxxMDs QqiP6YjtmQfJew== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:29 2025 by rpki-client