This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json) Hash identifier: XiXorRKYa9h1S3DEE0YCRBqS+BW1W1nXhySS58h6JZY= Subject key identifier: 35:10:68:4B:39:01:45:B1:D6:AC:5A:D2:08:11:19:2B:98:B1:CB:62 Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738 Certificate serial: 019AF72EEBFD4F401661E094A06F3FFBE7E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 05:00:38 +0000 Manifest this update: Sun 07 Dec 2025 05:00:38 +0000 Manifest next update: Mon 08 Dec 2025 05:00:38 +0000 Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=) 2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: msQ8LXMHA/sduO0lyvC1/utRLDJKM9V7o3Lcs/UNtJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:eb:fd:4f:40:16:61:e0:94:a0:6f:3f:fb:e7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738 Validity Not Before: Dec 7 05:00:38 2025 GMT Not After : Dec 8 05:00:38 2025 GMT Subject: CN=3510684b390145b1d6ac5ad20811192b98b1cb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4b:15:a3:ce:54:84:b9:59:3c:08:10:d7:5e: 8a:0c:8d:ed:eb:90:8e:0e:b7:98:83:a3:e4:f0:42: d5:c0:b6:35:9d:8a:ff:04:a2:1f:02:55:78:03:9f: ef:7e:b9:ed:6a:23:af:60:c4:0c:f8:43:42:02:33: 9a:f9:dd:ea:14:91:b1:aa:f7:c5:cf:18:89:c7:dd: 11:b0:30:cd:60:af:49:13:2a:43:17:17:f6:f2:39: 87:72:3e:dd:14:c8:db:0f:8a:30:56:20:08:61:4c: 2d:0c:95:e3:ce:c0:a8:c6:fa:80:b8:e2:0c:4e:63: 4c:6b:5d:0c:0e:18:b4:e2:21:5c:56:d4:19:6d:46: 84:ff:48:b1:63:3a:a3:2a:b1:1e:db:94:2a:24:1d: c4:04:28:04:fb:86:81:5c:1b:e8:02:d7:b0:c5:ad: 8f:cf:e6:e0:cb:46:b1:a2:68:45:ef:f7:c4:48:24: 5f:fa:de:1b:36:fa:1f:e0:6c:60:5e:2d:93:94:24: 3e:0b:02:8a:9d:46:02:f9:16:cc:b8:30:a5:ce:5d: 98:8d:57:42:40:32:8c:62:d5:90:f4:4b:6a:93:cd: 4c:02:32:50:05:ed:b1:03:f5:11:f2:02:df:71:89: 7c:39:9e:d9:cc:05:71:cb:8b:af:f4:ca:a7:10:fa: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:68:4B:39:01:45:B1:D6:AC:5A:D2:08:11:19:2B:98:B1:CB:62 X509v3 Authority Key Identifier: keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:30:8d:09:32:45:c4:70:89:58:d5:51:a3:a7:e9:e9:6e: d0:21:a2:40:3a:40:3a:2c:c0:3a:2d:bd:f2:d8:32:29:00:b6: 5b:c0:94:a3:ee:a8:cf:9a:cf:ad:6e:17:96:58:53:fd:c9:3d: 01:f8:d7:20:8f:95:09:e6:d6:a2:4e:5a:ea:7a:04:a4:86:0b: 96:d6:5f:50:d0:28:cf:67:b9:96:ef:15:d0:5a:5c:5e:54:2b: bb:d6:3a:a1:3e:95:0d:0e:20:04:7d:9c:e1:a0:8e:8a:c1:2d: 94:3d:6a:48:1e:40:c9:0d:a9:29:2c:70:49:c6:67:d1:b4:41: c3:fb:e5:90:5e:a1:82:24:e2:e0:5a:fb:99:f3:02:4d:60:f1: 69:7a:46:58:6a:cc:db:e8:5a:bf:72:36:f9:99:64:c9:ec:62: 04:19:ec:4e:50:bd:6b:72:4f:7e:37:58:b5:06:c2:b9:89:9a: ed:7b:cf:f9:f3:f4:33:86:c6:f6:0b:62:0b:8d:ca:6e:b9:96: 6f:48:da:b5:54:59:0b:fc:46:ce:45:30:fc:6d:f4:8d:a5:6a: 02:6d:54:72:34:4c:ce:89:57:4a:b5:08:03:a3:ba:b7:2e:85: 81:fa:33:cf:2d:cd:99:83:d4:02:82:31:4f:e8:35:8d:ca:6c: d2:e0:e3:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3Luv9T0AWYeCUoG8/++fmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi MzE3MzgwHhcNMjUxMjA3MDUwMDM4WhcNMjUxMjA4MDUwMDM4WjAzMTEwLwYDVQQD EygzNTEwNjg0YjM5MDE0NWIxZDZhYzVhZDIwODExMTkyYjk4YjFjYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ksVo85UhLlZPAgQ116KDI3t65CO DreYg6Pk8ELVwLY1nYr/BKIfAlV4A5/vfrntaiOvYMQM+ENCAjOa+d3qFJGxqvfF zxiJx90RsDDNYK9JEypDFxf28jmHcj7dFMjbD4owViAIYUwtDJXjzsCoxvqAuOIM TmNMa10MDhi04iFcVtQZbUaE/0ixYzqjKrEe25QqJB3EBCgE+4aBXBvoAtewxa2P z+bgy0axomhF7/fESCRf+t4bNvof4GxgXi2TlCQ+CwKKnUYC+RbMuDClzl2YjVdC QDKMYtWQ9Etqk81MAjJQBe2xA/UR8gLfcYl8OZ7ZzAVxy4uv9MqnEPosYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUQaEs5AUWx1qxa0ggRGSuYsctiMB8GA1UdIwQY MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt MmQ4NDdhM2Y3ZDJmLzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwowjQky RcRwiVjVUaOn6elu0CGiQDpAOizAOi298tgyKQC2W8CUo+6oz5rPrW4XllhT/ck9 AfjXII+VCebWok5a6noEpIYLltZfUNAoz2e5lu8V0FpcXlQru9Y6oT6VDQ4gBH2c 4aCOisEtlD1qSB5AyQ2pKSxwScZn0bRBw/vlkF6hgiTi4Fr7mfMCTWDxaXpGWGrM 2+hav3I2+ZlkyexiBBnsTlC9a3JPfjdYtQbCuYma7XvP+fP0M4bG9gtiC43KbrmW b0jatVRZC/xGzkUw/G30jaVqAm1UcjRMzolXSrUIA6O6ty6Fgfozzy3NmYPUAoIx T+g1jcps0uDjHw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:10:34 2025 by rpki-client