This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft File: D01Q85DPlFxvpbkAkFtNUX67CRo.mft (raw, json) Hash identifier: VH4QNemwqNwFSlFvq7TMb8WvoOudkUJjKDUoP1DKB6o= Subject key identifier: DE:3F:D3:3B:2E:BB:1F:0C:E5:D4:03:3C:CE:34:EE:69:11:5C:68:43 Authority key identifier: 0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A Certificate issuer: /CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Certificate serial: 019AF0BF73C7511E12F466FC8C73C98EC412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft Manifest number: 04AF Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: 6t_nnlmTXWp3OzIKRqSj0hcN4no.roa (hash: W90ueV41Ar0nzHXhwJLVE6WKCjLM7hges3g+HZc2lOE=) 2: D01Q85DPlFxvpbkAkFtNUX67CRo.crl (hash: 77fTa4lD4Pbnxkiu5FVsRlzt944pHIf86ud6S9Wkadc=) 3: vkoeIYHKBiHw3JW2EwGeByZF2OI.roa (hash: 0gHlaMAsvnnPjNWVDTFa0UhQf6R/7xyb1Ul2Br7gTg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:73:c7:51:1e:12:f4:66:fc:8c:73:c9:8e:c4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4d50f390cf945c6fa5b900905b4d517ebb091a Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=de3fd33b2ebb1f0ce5d4033cce34ee69115c6843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:fe:76:07:ad:5d:24:b5:ff:43:2f:58:94: 46:34:f9:f2:f2:9c:8b:af:3f:45:60:33:93:36:da: b0:cb:0d:f6:0e:41:53:61:4d:36:8c:4e:8b:92:7c: 4c:40:cb:43:34:a3:f3:6f:a7:de:12:7c:ba:07:a3: 28:da:52:5b:92:63:3e:fa:04:ef:52:6e:28:8a:d6: d2:17:80:a5:28:1e:3a:10:fe:dd:49:b0:14:40:34: 66:51:d1:b1:c0:2e:38:3a:43:3c:de:34:ee:2f:15: fe:6e:40:a0:37:e7:8c:d8:04:68:23:2c:ba:4c:0c: d8:f6:0c:71:c7:28:9b:2b:5a:c2:a7:5b:93:86:f9: b9:8c:42:b5:b0:4a:f3:d1:d8:76:a1:f6:84:2a:8a: 91:55:28:c0:38:4a:4a:f0:53:bc:49:2f:32:e2:1b: bc:68:b3:e7:a4:f1:ef:21:0c:76:ea:e4:2d:f4:d8: 8e:7f:c0:55:5c:23:31:b8:0f:fd:f1:26:98:53:66: c3:b2:3e:1d:98:11:bd:e3:3c:01:0b:e2:4e:eb:85: 56:20:78:7b:cd:ba:10:8b:72:2b:e8:93:46:c9:6b: 75:86:ce:61:50:e7:bc:24:3a:cf:57:52:49:ea:c0: b4:1b:25:34:a4:a7:8e:6f:52:59:ab:1b:1d:b7:d2: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3F:D3:3B:2E:BB:1F:0C:E5:D4:03:3C:CE:34:EE:69:11:5C:68:43 X509v3 Authority Key Identifier: keyid:0F:4D:50:F3:90:CF:94:5C:6F:A5:B9:00:90:5B:4D:51:7E:BB:09:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D01Q85DPlFxvpbkAkFtNUX67CRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/32d49c-fbb9-4664-9ab8-f2bdc2275b6e/1/D01Q85DPlFxvpbkAkFtNUX67CRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:76:a4:4c:fc:ce:36:43:a3:07:9c:98:96:aa:18:ea:61:82: 79:dc:19:47:46:16:4b:fa:a9:73:7e:5d:ff:aa:b2:58:fb:99: bb:a3:11:29:56:74:4c:17:03:04:6f:67:e4:fd:c8:73:26:fe: 7e:68:e6:03:af:27:ee:1e:73:89:23:11:0a:6a:de:b5:a0:fd: ff:06:f4:18:e1:48:51:a9:23:84:20:32:d2:cc:38:7a:53:8f: 57:58:94:73:62:67:eb:d2:14:01:0c:5c:d6:28:3d:aa:79:f7: e7:57:85:3d:49:38:49:d4:a4:4a:79:fc:c7:94:c5:7c:93:3c: 8d:a8:61:a8:ef:1d:7f:69:66:f2:69:9e:08:07:8e:b6:b8:3c: 9c:4c:32:0b:04:01:ee:e8:22:7a:f7:d2:b4:be:39:59:77:2a: e9:20:af:38:50:1d:04:54:47:64:c3:b9:5e:4f:26:d2:18:3f: e0:e1:38:2a:e2:40:6d:6f:90:30:9d:ef:73:f3:6e:7a:18:5c: 49:a0:1f:65:8c:0f:53:12:8d:35:30:ef:6c:a9:33:e1:a0:e4: ad:46:39:e6:fb:68:af:30:16:a7:f5:e6:40:2b:26:df:f8:21: 1b:ec:ff:3f:a7:62:87:05:db:5e:e9:c2:4b:a8:a3:85:d6:4f: 24:a8:e4:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3PHUR4S9Gb8jHPJjsQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNGQ1MGYzOTBjZjk0NWM2ZmE1YjkwMDkwNWI0ZDUxN2Vi YjA5MWEwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhkZTNmZDMzYjJlYmIxZjBjZTVkNDAzM2NjZTM0ZWU2OTExNWM2ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4n+dgetXSS1/0MvWJRGNPny8pyL rz9FYDOTNtqwyw32DkFTYU02jE6LknxMQMtDNKPzb6feEny6B6Mo2lJbkmM++gTv Um4oitbSF4ClKB46EP7dSbAUQDRmUdGxwC44OkM83jTuLxX+bkCgN+eM2ARoIyy6 TAzY9gxxxyibK1rCp1uThvm5jEK1sErz0dh2ofaEKoqRVSjAOEpK8FO8SS8y4hu8 aLPnpPHvIQx26uQt9NiOf8BVXCMxuA/98SaYU2bDsj4dmBG94zwBC+JO64VWIHh7 zboQi3Ir6JNGyWt1hs5hUOe8JDrPV1JJ6sC0GyU0pKeOb1JZqxsdt9LvfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4/0zsuux8M5dQDPM407mkRXGhDMB8GA1UdIwQY MBaAFA9NUPOQz5Rcb6W5AJBbTVF+uwkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgt ZjJiZGMyMjc1YjZlLzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zMmQ0OWMtZmJiOS00NjY0LTlhYjgtZjJiZGMyMjc1YjZl LzEvRDAxUTg1RFBsRnh2cGJrQWtGdE5VWDY3Q1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXakTPzO NkOjB5yYlqoY6mGCedwZR0YWS/qpc35d/6qyWPuZu6MRKVZ0TBcDBG9n5P3Icyb+ fmjmA68n7h5ziSMRCmretaD9/wb0GOFIUakjhCAy0sw4elOPV1iUc2Jn69IUAQxc 1ig9qnn351eFPUk4SdSkSnn8x5TFfJM8jahhqO8df2lm8mmeCAeOtrg8nEwyCwQB 7ugievfStL45WXcq6SCvOFAdBFRHZMO5Xk8m0hg/4OE4KuJAbW+QMJ3vc/Nuehhc SaAfZYwPUxKNNTDvbKkz4aDkrUY55vtorzAWp/XmQCsm3/ghG+z/P6dihwXbXunC S6ijhdZPJKjkmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:18 2025 by rpki-client