This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json) Hash identifier: Y6IfEOd14Bwecn9t4bnEa3xMjJm+YNor8sVr9desYrw= Subject key identifier: F4:C1:A5:3C:E2:54:C6:67:FE:70:DA:0B:8B:4E:2A:B7:D7:B5:76:D0 Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98 Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298 Certificate serial: 019AF19B2B93B208C25EB367888B687766D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: 7ChxWrlGrlsFkmYRAO9ka2b6FNLUPlxSFh/lAUpRoJM=) 2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2b:93:b2:08:c2:5e:b3:67:88:8b:68:77:66:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=f4c1a53ce254c667fe70da0b8b4e2ab7d7b576d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2d:f1:eb:73:50:00:30:13:09:12:c8:ab:de: 99:4e:bf:fe:e4:9c:1f:0f:5d:3d:63:df:89:49:6e: 5e:0c:26:03:bc:a0:99:3a:93:15:81:0d:5b:32:70: 7b:a2:8c:4b:36:bc:28:8b:4f:55:53:53:19:07:bb: de:4a:d7:ca:21:cc:b9:47:76:e4:75:1d:fd:1e:38: fe:38:aa:1f:d2:85:8d:0a:bd:0f:01:03:bf:1c:d5: e7:b8:3f:4a:96:e2:e3:ef:1d:b0:6b:f0:47:55:45: a1:d3:5a:88:75:20:dc:b1:7e:2d:4e:7a:48:d9:13: 64:5d:b1:e9:5b:9a:fe:36:67:56:b2:85:ab:55:ce: b3:9c:1a:ee:89:d0:e8:82:a4:85:ac:67:42:01:75: 3d:e4:d2:27:0c:fc:67:02:4d:41:0c:46:2c:7c:9d: 76:d5:ed:b2:7f:53:c2:e9:be:84:a8:65:4a:5b:e9: 7d:9b:56:ee:e0:f1:ef:9b:44:d9:99:25:8e:9e:1c: 6c:23:1e:7e:c5:66:c6:36:ac:3d:53:a1:f6:08:c8: 9c:18:10:c9:dc:b5:42:dc:0a:19:9d:4d:ef:43:83: aa:7f:51:3d:92:54:71:52:b6:fd:30:dd:8a:5d:ea: 48:dd:eb:14:f4:cf:40:3e:b6:7c:b3:74:b7:69:2f: ec:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C1:A5:3C:E2:54:C6:67:FE:70:DA:0B:8B:4E:2A:B7:D7:B5:76:D0 X509v3 Authority Key Identifier: keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2a:1e:03:17:b3:9f:5d:fd:f7:a6:c2:fa:35:34:b6:fe:a2: 87:9f:c0:c6:f9:2e:23:83:dc:af:6a:d3:00:99:33:ad:87:6c: e5:d4:44:c0:74:ab:2d:d8:10:7e:eb:33:79:34:f3:bd:f6:42: 9a:74:db:3d:77:fd:ff:51:ba:e3:60:83:34:96:14:fa:22:69: 4d:75:2f:79:5c:c0:ad:ef:03:9c:db:78:1a:81:00:b8:b5:fa: 03:85:80:29:0c:bc:2d:4b:7a:f8:29:f3:f0:ce:5c:0f:b9:91: 51:af:e9:20:cd:52:7f:b4:cb:a2:3f:c3:91:b4:d1:01:6c:e4: 81:b7:59:cd:3f:35:15:05:e6:c7:61:8d:fd:cf:08:1d:3d:84: 3d:b2:a6:5d:89:69:a4:fd:12:34:f2:b5:8e:8a:08:80:57:f0: fd:89:fe:9e:e8:89:6e:cf:04:e6:d2:37:a9:df:7a:15:45:1b: 5c:91:01:bd:90:bb:d2:6f:36:69:84:a0:ea:2d:61:85:6c:13: 68:4d:ec:e0:fa:9c:d0:9c:52:29:f5:8f:58:85:5b:e0:21:75: d6:65:80:e6:9a:65:b4:05:1d:02:49:b2:4b:9e:0c:b7:dc:d5: 87:9a:8c:a6:c6:cf:d1:df:64:94:d2:ff:8f:13:7c:3b:5c:46: 6d:03:6c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyuTsgjCXrNniItod2bUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ODE1YzdkMGU4NjNjMjE3ODBmOGJmNGI5ZWNjM2E5YzY0 NTkyOTgwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EyhmNGMxYTUzY2UyNTRjNjY3ZmU3MGRhMGI4YjRlMmFiN2Q3YjU3NmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS3x63NQADATCRLIq96ZTr/+5Jwf D109Y9+JSW5eDCYDvKCZOpMVgQ1bMnB7ooxLNrwoi09VU1MZB7veStfKIcy5R3bk dR39Hjj+OKof0oWNCr0PAQO/HNXnuD9KluLj7x2wa/BHVUWh01qIdSDcsX4tTnpI 2RNkXbHpW5r+NmdWsoWrVc6znBruidDogqSFrGdCAXU95NInDPxnAk1BDEYsfJ12 1e2yf1PC6b6EqGVKW+l9m1bu4PHvm0TZmSWOnhxsIx5+xWbGNqw9U6H2CMicGBDJ 3LVC3AoZnU3vQ4Oqf1E9klRxUrb9MN2KXepI3esU9M9APrZ8s3S3aS/svQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTBpTziVMZn/nDaC4tOKrfXtXbQMB8GA1UdIwQY MBaAFHaBXH0OhjwheA+L9Lnsw6nGRZKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEt ZTU0NzM5NWQ2YjQ3LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEtZTU0NzM5NWQ2YjQ3 LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSoeAxez n13996bC+jU0tv6ih5/AxvkuI4Pcr2rTAJkzrYds5dREwHSrLdgQfuszeTTzvfZC mnTbPXf9/1G642CDNJYU+iJpTXUveVzAre8DnNt4GoEAuLX6A4WAKQy8LUt6+Cnz 8M5cD7mRUa/pIM1Sf7TLoj/DkbTRAWzkgbdZzT81FQXmx2GN/c8IHT2EPbKmXYlp pP0SNPK1jooIgFfw/Yn+nuiJbs8E5tI3qd96FUUbXJEBvZC70m82aYSg6i1hhWwT aE3s4Pqc0JxSKfWPWIVb4CF11mWA5ppltAUdAkmyS54Mt9zVh5qMpsbP0d9klNL/ jxN8O1xGbQNs0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:58 2025 by rpki-client