This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json) Hash identifier: bTdv4GrAMi0cq6o8aw/gY7mS+cs5AX/bsh+FBxJXnjc= Subject key identifier: 1B:A7:D2:23:D4:48:A6:74:B2:D7:1C:D8:AA:14:40:43:B9:0F:68:F0 Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d Certificate serial: 019AF276F9E9A791AC0946C371815EC22397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft Manifest number: 0FC3 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: vq6OAjgUR6+wW0v/Xg1Ed7AzcRTdoVNjK2aHsGcALTs=) 2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f9:e9:a7:91:ac:09:46:c3:71:81:5e:c2:23:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=1ba7d223d448a674b2d71cd8aa144043b90f68f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:35:88:fb:1d:f5:e7:5e:83:82:05:54:38: ce:38:1c:90:59:0c:2f:8d:bf:1f:a8:b7:9a:94:20: d8:15:2e:f4:5e:d2:70:dd:25:15:4d:15:41:9b:06: 21:cf:15:cb:2d:47:cf:3c:45:09:29:b0:3b:a9:83: eb:99:60:2b:45:65:b9:79:c5:0f:74:b3:01:b5:c7: 32:80:79:c3:02:6d:04:06:5d:56:7c:e2:71:ca:71: 4b:ab:3e:1a:ca:51:27:f4:c4:03:b2:3d:77:fb:9b: 39:5f:d7:cd:8c:59:00:5a:00:f8:fe:46:2b:76:3e: 3e:97:b6:d8:a9:05:32:5b:ad:43:da:97:dc:3d:e2: 5d:90:80:82:d4:94:6b:86:b4:a9:8f:38:a4:2c:a1: d8:46:27:12:08:a7:a6:5f:62:8c:0b:8c:b7:81:c9: 76:4e:36:86:92:e4:70:a5:b7:37:2b:42:19:9c:97: ce:bd:65:6c:6b:bf:f0:ee:6c:71:52:76:65:c9:ba: df:ae:d5:69:7b:55:99:f2:66:e3:2c:22:e9:8c:72: 90:5b:24:d7:3b:bf:9f:ac:5f:79:dc:2c:7e:e5:0a: 0a:1c:7e:1a:c4:45:a3:b5:74:b5:64:b9:fd:30:e9: 3a:07:dc:47:4d:09:91:74:6b:3b:4c:84:21:c6:9f: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A7:D2:23:D4:48:A6:74:B2:D7:1C:D8:AA:14:40:43:B9:0F:68:F0 X509v3 Authority Key Identifier: keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:48:97:d2:5d:c4:e2:7c:a7:96:5d:30:98:af:9b:99:6f:95: bc:18:5b:8e:a2:c0:01:0c:94:4d:88:43:11:12:a8:40:a2:9f: a4:f3:86:44:76:62:fe:47:e3:a0:66:92:44:16:9e:c4:93:33: ef:23:c5:dd:84:07:bc:81:59:e3:a4:1b:b1:bc:11:bd:f9:73: 75:f9:51:b1:2d:a1:71:77:a8:aa:aa:a4:5e:66:42:a6:2c:0e: d7:76:59:82:25:9d:91:aa:23:f4:36:6c:89:92:2b:79:54:a5: eb:fc:4b:0a:cd:84:85:f8:a7:0c:a9:8b:64:4e:d9:f4:bc:91: bf:c5:30:94:31:d3:48:ec:d9:c1:15:37:fa:96:86:86:ee:dc: cd:14:4e:d1:07:6e:f4:ee:1f:94:e6:68:7c:cb:6e:c6:c1:37: 34:d8:c9:e7:a6:cd:bb:24:a5:0b:af:bd:f1:6f:7a:0c:e0:3d: 38:ac:c7:db:42:92:41:2c:8f:f0:c7:3d:7c:01:e5:dd:17:c7: c4:9f:5e:b4:bd:07:fd:8e:37:3b:42:e5:3f:96:2d:43:37:54: 1f:5b:ac:99:03:10:d9:ef:8b:15:d5:f1:cb:f6:73:8a:88:85: 0a:78:54:a1:43:e3:f6:83:f9:92:5c:32:1b:fb:6b:97:cf:c2: 1e:e4:86:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvnpp5GsCUbDcYFewiOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1 MTQ1MGQwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD EygxYmE3ZDIyM2Q0NDhhNjc0YjJkNzFjZDhhYTE0NDA0M2I5MGY2OGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIM1iPsd9edeg4IFVDjOOByQWQwv jb8fqLealCDYFS70XtJw3SUVTRVBmwYhzxXLLUfPPEUJKbA7qYPrmWArRWW5ecUP dLMBtccygHnDAm0EBl1WfOJxynFLqz4aylEn9MQDsj13+5s5X9fNjFkAWgD4/kYr dj4+l7bYqQUyW61D2pfcPeJdkICC1JRrhrSpjzikLKHYRicSCKemX2KMC4y3gcl2 TjaGkuRwpbc3K0IZnJfOvWVsa7/w7mxxUnZlybrfrtVpe1WZ8mbjLCLpjHKQWyTX O7+frF953Cx+5QoKHH4axEWjtXS1ZLn9MOk6B9xHTQmRdGs7TIQhxp9G9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBun0iPUSKZ0stcc2KoUQEO5D2jwMB8GA1UdIwQY MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0iX0l3E 4nynll0wmK+bmW+VvBhbjqLAAQyUTYhDERKoQKKfpPOGRHZi/kfjoGaSRBaexJMz 7yPF3YQHvIFZ46QbsbwRvflzdflRsS2hcXeoqqqkXmZCpiwO13ZZgiWdkaoj9DZs iZIreVSl6/xLCs2EhfinDKmLZE7Z9LyRv8UwlDHTSOzZwRU3+paGhu7czRRO0Qdu 9O4flOZofMtuxsE3NNjJ56bNuySlC6+98W96DOA9OKzH20KSQSyP8Mc9fAHl3RfH xJ9etL0H/Y43O0LlP5YtQzdUH1usmQMQ2e+LFdXxy/ZzioiFCnhUoUPj9oP5klwy G/trl8/CHuSG6w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:55 2025 by rpki-client