This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json) Hash identifier: 9oecGU7L7Pi4ZFdLwnmefWC7h2d+uEE6a+q+e2efe2Y= Subject key identifier: 3C:0C:3A:92:C3:EC:DA:1A:33:79:1F:10:57:AA:F9:B1:60:4F:C0:D9 Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Certificate serial: 019AF12DB3F88E2E800AD86CBB1AFCDD7AFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft Manifest number: 0EFE Signing time: Sat 06 Dec 2025 01:01:35 +0000 Manifest this update: Sat 06 Dec 2025 01:01:35 +0000 Manifest next update: Sun 07 Dec 2025 01:01:35 +0000 Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: Vw1RJBzHnsFY03UA5wgLMtjCcpWx2RHUUjSIEB+XNf0=) 2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b3:f8:8e:2e:80:0a:d8:6c:bb:1a:fc:dd:7a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Validity Not Before: Dec 6 01:01:35 2025 GMT Not After : Dec 7 01:01:35 2025 GMT Subject: CN=3c0c3a92c3ecda1a33791f1057aaf9b1604fc0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:56:5a:4a:0d:62:17:32:5f:43:5a:7f:2e: d2:cc:90:94:79:72:db:24:26:9a:07:23:15:3e:d2: 59:cf:e4:fe:4c:f3:f9:d5:37:65:11:49:01:bf:c5: 15:f8:80:3f:d6:9b:2e:ac:2f:66:1e:cc:a1:cc:45: dc:ea:8a:a6:ee:3f:7d:9d:ff:ab:9c:d8:65:3c:51: 1c:9f:cf:20:43:c9:7d:2d:54:84:a0:35:23:61:56: 3e:23:0c:a2:40:64:88:5f:c9:4d:c9:d9:79:d6:9c: 35:42:60:c9:23:50:b8:a5:19:f9:a7:26:c9:6e:f3: 44:25:4e:df:34:91:62:53:8f:1d:57:48:2b:14:76: 27:ff:51:5e:18:5c:96:d7:87:bc:4b:e8:f7:37:b6: 5a:4c:49:db:16:1f:97:23:26:3d:4c:17:3e:63:87: cb:db:07:60:62:c1:5f:ad:73:7a:5c:e7:08:da:8c: b1:a6:11:f0:be:32:f0:77:a0:a5:d0:9a:f5:d6:f7: a5:d9:9a:ab:20:9e:7f:fa:82:22:cb:a9:5b:b3:5a: 0e:2b:d3:95:bc:c0:1f:a7:0c:15:1b:d7:54:2e:9d: f8:89:6e:1b:1e:4a:23:55:90:ff:d6:04:2b:82:25: 5d:37:9a:c6:ae:2d:19:73:b1:42:b9:58:47:bb:e7: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0C:3A:92:C3:EC:DA:1A:33:79:1F:10:57:AA:F9:B1:60:4F:C0:D9 X509v3 Authority Key Identifier: keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c8:7d:ec:2d:26:8d:c8:57:a8:2c:6a:ee:9c:33:ca:db:aa: be:c4:67:f0:5d:a7:0c:b2:84:25:06:18:22:db:e8:6d:cd:57: 43:fc:07:1e:6a:5c:d5:79:ed:fa:b4:42:7d:de:c1:4a:fe:ab: e1:c1:c9:77:4b:ff:81:0e:d0:92:be:df:f1:54:ab:7d:da:a0: 50:3d:fd:0e:bd:8b:0f:81:da:9d:3b:c4:36:d8:4c:48:77:bb: 15:8d:f1:ac:9b:5b:cb:0d:79:0f:56:1c:94:16:c5:f4:3f:c5: 00:34:34:ef:32:e0:0f:95:a7:65:49:20:8e:1f:90:22:73:a0: 5b:a6:ce:47:95:ab:2d:fc:a4:00:c1:1a:13:4c:49:d9:aa:ad: a6:f7:f7:69:2f:15:8f:d7:10:b0:fb:0c:b8:92:af:d1:61:4f: 52:00:db:3c:52:75:7b:0e:f6:7d:a3:6a:3c:e4:78:9f:9b:77: 5f:b1:1a:38:fe:dd:ad:68:f2:40:58:fb:d7:27:dc:1a:f4:7c: 64:6e:53:07:cd:33:06:02:7e:d2:9b:62:87:f4:0b:75:da:7c: 7f:83:d5:f0:e3:47:4e:1c:78:de:a3:e3:45:2d:ab:f5:5e:a4: 80:a8:c6:c4:d7:ac:c6:b9:47:22:16:1e:59:9b:0e:84:41:69: 61:d4:73:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbP4ji6ACthsuxr83Xr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk MmY4MGIwHhcNMjUxMjA2MDEwMTM1WhcNMjUxMjA3MDEwMTM1WjAzMTEwLwYDVQQD EygzYzBjM2E5MmMzZWNkYTFhMzM3OTFmMTA1N2FhZjliMTYwNGZjMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/BWWkoNYhcyX0Nafy7SzJCUeXLb JCaaByMVPtJZz+T+TPP51TdlEUkBv8UV+IA/1psurC9mHsyhzEXc6oqm7j99nf+r nNhlPFEcn88gQ8l9LVSEoDUjYVY+IwyiQGSIX8lNydl51pw1QmDJI1C4pRn5pybJ bvNEJU7fNJFiU48dV0grFHYn/1FeGFyW14e8S+j3N7ZaTEnbFh+XIyY9TBc+Y4fL 2wdgYsFfrXN6XOcI2oyxphHwvjLwd6Cl0Jr11vel2ZqrIJ5/+oIiy6lbs1oOK9OV vMAfpwwVG9dULp34iW4bHkojVZD/1gQrgiVdN5rGri0Zc7FCuVhHu+fPqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwMOpLD7NoaM3kfEFeq+bFgT8DZMB8GA1UdIwQY MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMh97C0m jchXqCxq7pwzytuqvsRn8F2nDLKEJQYYItvobc1XQ/wHHmpc1Xnt+rRCfd7BSv6r 4cHJd0v/gQ7Qkr7f8VSrfdqgUD39Dr2LD4HanTvENthMSHe7FY3xrJtbyw15D1Yc lBbF9D/FADQ07zLgD5WnZUkgjh+QInOgW6bOR5WrLfykAMEaE0xJ2aqtpvf3aS8V j9cQsPsMuJKv0WFPUgDbPFJ1ew72faNqPOR4n5t3X7EaOP7drWjyQFj71yfcGvR8 ZG5TB80zBgJ+0ptih/QLddp8f4PV8ONHThx43qPjRS2r9V6kgKjGxNesxrlHIhYe WZsOhEFpYdRzHw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:44 2025 by rpki-client