This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json) Hash identifier: g/LfFsix7CbTbzpO4V4KFoSwLtoh2uUimUTIzi8bWus= Subject key identifier: 7B:DF:B0:E5:F5:0A:48:94:81:93:99:F2:D6:CA:8D:9C:0B:13:D6:36 Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d Certificate serial: 019B30429C885222118F3F38583241011238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft Manifest number: 0FE3 Signing time: Thu 18 Dec 2025 07:00:30 +0000 Manifest this update: Thu 18 Dec 2025 07:00:30 +0000 Manifest next update: Fri 19 Dec 2025 07:00:30 +0000 Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: WdpK0z00fW0OM3pixtHb0aPtlEL1R26j+Th+oGUvncw=) 2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:42:9c:88:52:22:11:8f:3f:38:58:32:41:01:12:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d Validity Not Before: Dec 18 07:00:30 2025 GMT Not After : Dec 19 07:00:30 2025 GMT Subject: CN=7bdfb0e5f50a4894819399f2d6ca8d9c0b13d636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5a:5c:ae:94:61:8e:d1:aa:56:d6:a3:4c:c1: 1d:e2:cf:7e:3b:d7:12:fc:6f:a3:76:b7:ae:ed:65: d5:f2:4a:98:e3:95:fc:43:94:11:21:91:da:a1:49: c7:c2:1d:19:53:f0:81:5c:c3:dd:6d:17:5c:68:b2: bb:f7:84:8c:95:c6:2a:a9:62:75:27:a8:b1:24:d7: d9:c7:f2:f7:29:72:5c:62:78:30:41:b0:c4:b9:be: d7:94:cc:5e:9e:31:ed:a9:f0:d1:98:ea:e4:01:00: 76:f3:e7:c9:84:12:fe:66:c1:fc:85:70:4c:b4:ef: 51:fb:0d:3d:3f:49:3a:dd:06:e0:2c:cb:01:fc:06: 51:e1:c5:4d:89:72:1d:01:9e:7e:a5:63:94:2f:9a: aa:43:0d:20:ec:8a:75:9f:ec:a1:6a:39:ad:d1:15: 4b:d5:18:c0:08:39:79:44:dc:de:ed:b6:92:5b:98: 27:c7:e4:79:8b:55:a8:9d:d2:9f:0d:1c:ba:38:00: 63:b2:72:39:8f:b2:2f:f8:9d:ac:1c:c2:aa:58:de: b8:e8:fd:33:e7:48:a7:33:31:b6:f5:04:4c:01:6d: 49:6b:ed:7f:e0:3a:f1:fc:79:07:4f:df:20:e7:c5: 82:6d:9c:af:17:a5:0b:2a:61:4c:d0:0a:53:3a:4c: db:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:B0:E5:F5:0A:48:94:81:93:99:F2:D6:CA:8D:9C:0B:13:D6:36 X509v3 Authority Key Identifier: keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3e:d3:ca:7a:97:e8:a3:15:b4:a1:d1:14:5e:9e:ec:98:63: 99:b8:51:03:76:a8:5c:ab:d7:ec:2d:11:e7:98:31:a2:fa:df: e9:dd:00:37:da:1f:7c:e6:0a:7b:37:ad:c9:e5:9e:88:26:5b: 88:82:72:e0:73:e5:fc:40:4c:a3:b3:56:01:f9:f9:a4:0b:6e: f1:4f:db:2a:24:58:98:31:f4:ef:f1:0e:2b:fc:5a:e2:c0:8c: 86:59:b0:35:2f:eb:10:42:60:fa:05:83:7f:cc:e4:1a:ba:8b: c9:45:e7:1a:d3:21:19:94:2e:c1:98:0b:14:f8:83:94:a1:a5: f3:b0:38:97:45:5d:c3:be:02:75:18:cd:82:86:cd:31:16:15: ed:26:04:90:17:03:81:88:0c:12:9e:70:1d:af:8d:6f:2a:f8: c0:99:87:53:53:27:2a:4a:c4:3b:4b:78:da:3c:84:35:44:aa: f9:9b:97:8c:df:61:1a:54:01:1f:52:c9:37:b8:c9:8c:47:89: 49:c2:ea:48:71:a4:37:32:51:33:63:64:67:ab:ce:a2:b4:4a: de:d6:5a:a6:d9:c3:6f:2c:8f:d3:f2:2f:93:72:ad:a3:56:f7: 23:62:b0:03:13:bf:0a:1b:7a:da:c9:40:e4:25:25:48:77:05: 74:09:87:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQpyIUiIRjz84WDJBARI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjZlNDM3MDExMWNmYmY5Njg0MDQ4NTQyMjdiODA5Mjg1 MTQ1MGQwHhcNMjUxMjE4MDcwMDMwWhcNMjUxMjE5MDcwMDMwWjAzMTEwLwYDVQQD Eyg3YmRmYjBlNWY1MGE0ODk0ODE5Mzk5ZjJkNmNhOGQ5YzBiMTNkNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FpcrpRhjtGqVtajTMEd4s9+O9cS /G+jdreu7WXV8kqY45X8Q5QRIZHaoUnHwh0ZU/CBXMPdbRdcaLK794SMlcYqqWJ1 J6ixJNfZx/L3KXJcYngwQbDEub7XlMxenjHtqfDRmOrkAQB28+fJhBL+ZsH8hXBM tO9R+w09P0k63QbgLMsB/AZR4cVNiXIdAZ5+pWOUL5qqQw0g7Ip1n+yhajmt0RVL 1RjACDl5RNze7baSW5gnx+R5i1WondKfDRy6OABjsnI5j7Iv+J2sHMKqWN646P0z 50inMzG29QRMAW1Ja+1/4Drx/HkHT98g58WCbZyvF6ULKmFM0ApTOkzbCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvfsOX1CkiUgZOZ8tbKjZwLE9Y2MB8GA1UdIwQY MBaAFNH25DcBEc+/loQEhUInuAkoUUUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEt NGFhNTM5YTMwZDIxLzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81OWQ0ZTktNjYyYy00MzVhLWIzNTEtNGFhNTM5YTMwZDIx LzEvMGZia053RVJ6Ny1XaEFTRlFpZTRDU2hSUlEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACj7TynqX 6KMVtKHRFF6e7JhjmbhRA3aoXKvX7C0R55gxovrf6d0AN9offOYKezetyeWeiCZb iIJy4HPl/EBMo7NWAfn5pAtu8U/bKiRYmDH07/EOK/xa4sCMhlmwNS/rEEJg+gWD f8zkGrqLyUXnGtMhGZQuwZgLFPiDlKGl87A4l0Vdw74CdRjNgobNMRYV7SYEkBcD gYgMEp5wHa+Nbyr4wJmHU1MnKkrEO0t42jyENUSq+ZuXjN9hGlQBH1LJN7jJjEeJ ScLqSHGkNzJRM2NkZ6vOorRK3tZaptnDbyyP0/Ivk3Kto1b3I2KwAxO/Cht62slA 5CUlSHcFdAmHJw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:19:33 2025 by rpki-client