This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft File: 00J0yPw5e9vGx1haFcgyErBQIh8.mft (raw, json) Hash identifier: aFFeaT4FP2l4HzhllQtG0Nmqy2P8TcUusZW1rkmSUoQ= Subject key identifier: 3C:32:92:1B:4B:4A:D6:13:DC:7F:EE:82:F9:DE:13:FA:B7:20:2A:C1 Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f Certificate serial: 019AF49BD02FB32E92B40706EF7C480830ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:00:43 +0000 Manifest this update: Sat 06 Dec 2025 17:00:43 +0000 Manifest next update: Sun 07 Dec 2025 17:00:43 +0000 Files and hashes: 1: 00J0yPw5e9vGx1haFcgyErBQIh8.crl (hash: C/tEJVSXzHw29ir0P7DApCHJ4BBkzPNy/2d6PN7doxU=) 2: JfpCcJQQ7HN-Dv4ophHtkQofaT0.roa (hash: xefZz0TBx0gKqWeUjL3ez873hj1QBBW9YJlq5BqFZZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d0:2f:b3:2e:92:b4:07:06:ef:7c:48:08:30:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f Validity Not Before: Dec 6 17:00:43 2025 GMT Not After : Dec 7 17:00:43 2025 GMT Subject: CN=3c32921b4b4ad613dc7fee82f9de13fab7202ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:88:e8:94:96:63:03:55:d9:e7:83:b9:87: e2:75:3e:11:1c:42:3a:8e:65:4a:d0:db:da:d3:3c: fc:8e:7c:bc:74:7a:d6:a9:53:11:55:d1:bf:8d:b2: c9:1b:86:75:37:75:56:09:18:12:c9:02:96:1d:d8: 61:ae:ec:67:13:20:cf:fc:55:3b:c3:80:b0:ef:56: 78:67:84:7f:7f:7f:71:ee:4e:4c:63:a5:19:75:24: fa:dc:b9:41:68:94:8f:f4:cc:47:94:ee:48:cc:07: db:fc:74:36:ed:bb:d4:fc:fc:64:bf:1a:6b:af:bd: 96:1d:eb:f8:fc:9e:9c:70:71:5a:44:e9:76:3e:27: d8:31:05:be:c7:51:39:0b:0b:5d:f0:4d:ce:6b:fa: dc:81:9f:51:73:16:dc:33:51:3e:05:6a:60:83:31: 16:b3:66:31:b9:f3:27:68:1c:c5:f2:54:70:71:d1: dd:63:df:73:e2:bc:a9:eb:85:d9:a0:ab:89:be:63: 22:56:95:ee:ca:82:49:09:4d:56:95:bb:bf:e8:1d: dc:d4:bf:ca:1c:82:7f:7d:0d:7a:6f:f6:e1:79:1e: 3f:a0:f0:3e:aa:ac:fa:03:c0:b7:3c:8f:d7:2e:83: 1a:45:8d:8e:7b:57:92:36:c7:ec:4b:60:3f:39:3e: c0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:92:1B:4B:4A:D6:13:DC:7F:EE:82:F9:DE:13:FA:B7:20:2A:C1 X509v3 Authority Key Identifier: keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5d:c3:0e:19:bf:6a:29:15:a4:7a:e2:ac:7f:44:cd:90:f7: bf:f8:db:69:5f:a2:05:1b:db:9e:86:59:4e:5a:dd:76:4b:3e: 69:af:54:1f:d4:5f:2c:4f:0b:72:de:6a:4f:45:8c:e1:f2:4f: 6a:4a:31:85:22:4a:e6:86:26:ba:34:18:74:4b:7c:99:4b:a9: e1:7b:d5:90:75:d5:0e:03:5f:3d:29:60:9f:66:74:c4:7f:ac: c9:b2:bb:79:2b:b5:c5:0a:73:25:d9:75:0f:44:53:a7:8f:3f: c9:8c:17:1d:8d:7e:36:a5:0c:42:2e:12:9e:44:d5:1a:2a:c2: 0a:b3:27:03:84:c3:cd:38:24:9a:42:07:b1:c6:25:bc:35:58: e4:cf:ae:94:d2:ce:23:31:ad:af:3f:31:b8:cc:6d:45:45:ea: ac:75:e0:c8:21:55:aa:1d:77:63:95:65:da:dc:44:8b:a7:bf: c3:a8:16:9e:22:e8:e6:cf:44:c2:8c:30:c4:9f:58:5a:d3:0b: dc:e2:eb:89:0f:84:ec:4b:1f:ed:c2:02:c9:ed:74:9f:e3:e6: 81:df:08:77:a4:b6:0e:04:8a:34:85:92:f6:24:fb:f4:dd:37: 8c:8c:3d:8b:4b:5d:b8:98:24:04:45:ff:ee:21:b5:a7:1c:08: 0d:38:39:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9Avsy6StAcG73xICDDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDI3NGM4ZmMzOTdiZGJjNmM3NTg1YTE1YzgzMjEyYjA1 MDIyMWYwHhcNMjUxMjA2MTcwMDQzWhcNMjUxMjA3MTcwMDQzWjAzMTEwLwYDVQQD EygzYzMyOTIxYjRiNGFkNjEzZGM3ZmVlODJmOWRlMTNmYWI3MjAyYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ieI6JSWYwNV2eeDuYfidT4RHEI6 jmVK0Nva0zz8jny8dHrWqVMRVdG/jbLJG4Z1N3VWCRgSyQKWHdhhruxnEyDP/FU7 w4Cw71Z4Z4R/f39x7k5MY6UZdST63LlBaJSP9MxHlO5IzAfb/HQ27bvU/Pxkvxpr r72WHev4/J6ccHFaROl2PifYMQW+x1E5Cwtd8E3Oa/rcgZ9RcxbcM1E+BWpggzEW s2YxufMnaBzF8lRwcdHdY99z4ryp64XZoKuJvmMiVpXuyoJJCU1Wlbu/6B3c1L/K HIJ/fQ16b/bheR4/oPA+qqz6A8C3PI/XLoMaRY2Oe1eSNsfsS2A/OT7AawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwykhtLStYT3H/ugvneE/q3ICrBMB8GA1UdIwQY MBaAFNNCdMj8OXvbxsdYWhXIMhKwUCIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMt NTBhZGJlYWM4Y2I0LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMtNTBhZGJlYWM4Y2I0 LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASl3DDhm/ aikVpHrirH9EzZD3v/jbaV+iBRvbnoZZTlrddks+aa9UH9RfLE8Lct5qT0WM4fJP akoxhSJK5oYmujQYdEt8mUup4XvVkHXVDgNfPSlgn2Z0xH+sybK7eSu1xQpzJdl1 D0RTp48/yYwXHY1+NqUMQi4SnkTVGirCCrMnA4TDzTgkmkIHscYlvDVY5M+ulNLO IzGtrz8xuMxtRUXqrHXgyCFVqh13Y5Vl2txEi6e/w6gWniLo5s9EwowwxJ9YWtML 3OLriQ+E7Esf7cICye10n+Pmgd8Id6S2DgSKNIWS9iT79N03jIw9i0tduJgkBEX/ 7iG1pxwIDTg59w== -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:38 2025 by rpki-client