This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json) Hash identifier: vSrkQ2Pvx5iq3GCweCc2e6YpOETeEglM77fzSA28v0Y= Subject key identifier: 0F:F4:BF:22:23:46:61:2E:EE:F6:4E:C1:35:A3:82:A3:54:66:0B:83 Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019AF209A0A650E9ADF702E7F23F1843D583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft Manifest number: 0C Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: qCS5cLp1/avkl2LJRP2M2ed1MwYoELK+Xt71LJLxi3s=) 2: FH7sO2w4buuUxe4Xni3YZHcOAgs.roa (hash: kJoB+cGjyVW2fni2uIlOIfUSADoKT5LoOeBxc8WKnUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a0:a6:50:e9:ad:f7:02:e7:f2:3f:18:43:d5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=0ff4bf222346612eeef64ec135a382a354660b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d9:a3:60:c2:e3:e4:ab:70:33:30:c2:13:aa: e9:67:7b:04:a6:c4:3a:4d:63:25:6f:6d:df:08:ea: b5:22:7d:da:4f:0a:c5:84:f5:02:49:f0:f5:69:2e: 14:ee:8f:51:e7:c2:22:50:71:6d:32:4e:0e:35:dc: cb:a4:ff:4f:17:e5:8b:8f:d9:e0:e0:91:f0:9d:07: ba:26:f3:6b:32:b7:77:05:10:f3:aa:87:8b:e7:89: ad:aa:65:6f:21:97:31:fd:fd:4b:c6:88:6f:b8:52: ac:86:66:cd:cc:59:aa:7d:d5:d1:db:bd:31:be:c3: 83:7d:f7:16:f9:18:d3:1f:7c:2c:9f:1e:77:ff:e3: 33:60:7d:5a:6b:f4:07:d5:df:12:c7:e4:0b:1a:66: 20:6c:42:13:87:86:31:0b:ec:61:42:79:67:b7:87: 45:2d:2e:e8:aa:90:d1:8d:e5:85:bf:3b:17:fe:de: 0a:56:ae:ac:9a:d8:17:ba:8b:85:e9:87:88:57:a4: 66:d3:16:7f:77:86:97:38:92:a4:b8:52:af:9a:a2: b3:d4:46:03:0b:c9:47:83:b7:ee:e4:4a:3d:06:01: 8d:90:18:be:d0:fa:f0:58:e5:7b:50:c7:b2:23:e2: 66:39:77:dc:df:cd:6c:e8:aa:cf:ca:ba:c5:45:a0: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F4:BF:22:23:46:61:2E:EE:F6:4E:C1:35:A3:82:A3:54:66:0B:83 X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fc:0a:08:c1:19:ba:79:6b:9b:53:46:4f:8b:e2:ad:3d:e8: ce:27:50:90:a8:43:cd:01:64:0e:d6:70:f0:43:45:1b:bf:80: 74:17:30:46:a4:a1:cf:d2:5a:e7:83:e9:94:bd:45:2f:db:36: 33:87:d7:69:ff:cb:74:0d:46:48:07:08:f5:6b:27:d5:9d:1d: 56:19:1c:d4:e9:32:38:00:ee:f5:1f:2b:67:c2:39:86:54:f9: e4:33:6b:8d:ba:7b:bd:3d:20:69:03:1a:a0:c2:9f:87:13:6a: 6f:24:5b:61:9c:5e:7d:20:d6:30:f3:2b:7c:2e:89:f9:23:b8: 16:0f:b5:49:9b:dd:44:c9:2f:bf:0f:1d:84:45:d9:b4:33:e5: 0c:e5:e6:76:0e:dd:26:1a:bc:c8:b0:5f:74:05:4e:be:cc:22: d2:8d:ec:24:59:6b:16:dc:ab:ea:fc:92:3f:6b:77:3a:bb:90: 12:79:29:87:5c:6d:03:3b:a7:1d:77:90:4e:53:f5:d1:96:d8: d6:46:0b:1b:e7:ea:e1:04:c4:f9:b7:b9:7b:e0:4c:de:b9:cb: 85:d0:8f:52:4f:0a:bb:ae:e3:26:91:ec:72:fd:42:fd:47:84: e6:38:3e:13:8c:3c:76:8b:f2:d9:63:11:fa:aa:32:37:6d:5a: 61:ec:42:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaCmUOmt9wLn8j8YQ9WDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EygwZmY0YmYyMjIzNDY2MTJlZWVmNjRlYzEzNWEzODJhMzU0NjYwYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltmjYMLj5KtwMzDCE6rpZ3sEpsQ6 TWMlb23fCOq1In3aTwrFhPUCSfD1aS4U7o9R58IiUHFtMk4ONdzLpP9PF+WLj9ng 4JHwnQe6JvNrMrd3BRDzqoeL54mtqmVvIZcx/f1LxohvuFKshmbNzFmqfdXR270x vsODffcW+RjTH3wsnx53/+MzYH1aa/QH1d8Sx+QLGmYgbEITh4YxC+xhQnlnt4dF LS7oqpDRjeWFvzsX/t4KVq6smtgXuouF6YeIV6Rm0xZ/d4aXOJKkuFKvmqKz1EYD C8lHg7fu5Eo9BgGNkBi+0PrwWOV7UMeyI+JmOXfc381s6KrPyrrFRaCw5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/0vyIjRmEu7vZOwTWjgqNUZguDMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevwKCMEZ unlrm1NGT4virT3ozidQkKhDzQFkDtZw8ENFG7+AdBcwRqShz9Ja54PplL1FL9s2 M4fXaf/LdA1GSAcI9Wsn1Z0dVhkc1OkyOADu9R8rZ8I5hlT55DNrjbp7vT0gaQMa oMKfhxNqbyRbYZxefSDWMPMrfC6J+SO4Fg+1SZvdRMkvvw8dhEXZtDPlDOXmdg7d Jhq8yLBfdAVOvswi0o3sJFlrFtyr6vySP2t3OruQEnkph1xtAzunHXeQTlP10ZbY 1kYLG+fq4QTE+be5e+BM3rnLhdCPUk8Ku67jJpHscv1C/UeE5jg+E4w8dovy2WMR +qoyN21aYexCeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:12:08 2025 by rpki-client