This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: TMg5EPx4MqFhdBxagzM7dpLMDa/W0+slBOU6fd8iQJI= Subject key identifier: 4D:A7:29:EC:92:36:90:D4:32:86:88:FA:FC:DE:CE:9A:AE:15:08:FF Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019AF42E6C79150E91DDDC93507DEF0A847A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0655 Signing time: Sat 06 Dec 2025 15:01:14 +0000 Manifest this update: Sat 06 Dec 2025 15:01:14 +0000 Manifest next update: Sun 07 Dec 2025 15:01:14 +0000 Files and hashes: 1: 06Lo3TEshbdLYbOiItMhIrRRP7Y.roa (hash: UneRobUa0HOEvhDKQSJldaXTwM77pPlsoKNgn+2tT6w=) 2: 1-pnnUKWpCO7g-oyYSyyU_EoGV_c.roa (hash: nZP6B6GRqHHfjfeYVyMFTNBoRQupuuOfgOI2fjJzj7s=) 3: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 4: 6zV97dJ4xQGri5YZtNgkYLMqa5k.roa (hash: djZiLuc0yQH0F11utvsJqgMrXcwZTVdReJ+W5OxQEEs=) 5: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 6: 9HcnWARQjSSonGaamiNJGNhyVC4.roa (hash: D9oNz9Yh8nwsaWTmgScYDOQEy6klcI9lva9L7TyjeYQ=) 7: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=) 8: 9zJ2hJjXPxauM3NG3rzNVJeoSc4.roa (hash: prR3pdFJh121k8Lg4Z/DLaSXpLFJpLMeuLa6MKpGkzQ=) 9: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=) 10: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=) 11: Dezi1ijDOF-OPCEDHru1fKdXRlk.roa (hash: ijUREuRxLB0hmc4ZeMzkTD/bxEwJJjlncyvAzDp+NgQ=) 12: GjLk-JXzV4LCBuAE_XfkaXw16vM.roa (hash: WuPTSoS0qyougNrZZYqRCaLwzDYDlBqZgcNOAc8v8nY=) 13: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 14: IvRgmT2reOzeuytZym-ijAGPPBk.roa (hash: dSmrvci4sQWpc2gVp+CZfEWf5dBDbTlu7yUnaMUzc1w=) 15: JxZ2PV2RYnx-i5FgEdX8_ua6vLk.roa (hash: knnuID3189A1YGf/2FgAAdsJ3ixY4wa1onnycZbuIbI=) 16: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=) 17: NHdPBfPmipm0yEKY4SmuyEobyDE.roa (hash: 3eNKl/tbRAzpwL64wIm+yHmzOKILIVY2CUnjotC/1vQ=) 18: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=) 19: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=) 20: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=) 21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: 8xLqeSTEOZvxxhk75vHSiXG1q9p71M22aR3oU52CXNA=) 22: fMNp0WawB9aiZNJhENwtDIMKv6s.roa (hash: kX9bqTf62TSE/EgEllfWIXr155ziuFoEFR2CWnne/68=) 23: fiCGtzKKE-k-7cha3uNWaHMAwQE.roa (hash: DG4Oq1uFkwkg9DHh3q1fJzBn5icOEgMS7FPAHL+4K8o=) 24: tjlqpM7Grwa3ntR0hkW62RQoiUs.roa (hash: Hlku91Metogu7Ir6NyRMT083wklWP/gul25jTIpxWHw=) 25: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) 26: w4fdgcM_VAZQqEjdsKX2MaMiGZs.roa (hash: YDrr6E1j35eer9d2XxL6nLYIzyCqbmfyxlWv4gXRs3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:6c:79:15:0e:91:dd:dc:93:50:7d:ef:0a:84:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 6 15:01:14 2025 GMT Not After : Dec 7 15:01:14 2025 GMT Subject: CN=4da729ec923690d4328688fafcdece9aae1508ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:4e:6b:ae:51:51:91:c8:7e:81:68:6a:7e: bb:b8:df:4a:01:65:89:47:f6:6f:fe:a3:b6:54:e0: 75:87:09:55:fe:7a:3c:42:f5:25:53:23:42:08:d9: 04:fd:e9:98:22:e1:be:50:c2:3f:67:bf:36:cd:44: 81:21:14:c0:93:04:da:6f:f8:19:e5:02:8c:63:d3: b4:eb:ed:42:a7:00:df:00:01:73:87:d2:f9:be:a1: ec:b9:66:03:41:cb:d1:05:78:6e:b5:76:5e:c0:95: 7a:cf:66:d8:8d:d9:4b:79:97:b0:b6:ce:75:2b:35: 0b:4c:4c:db:32:df:f7:09:10:db:76:24:8e:4b:f5: df:50:86:50:42:44:9f:b2:52:df:d6:14:ee:c8:55: 46:8a:c6:fe:af:4c:2e:f2:cf:79:01:c2:39:c6:a3: 7f:61:52:ee:a2:d5:9c:3a:1b:4f:b9:9e:b6:13:24: ef:9a:7e:4c:58:38:0e:4c:93:f6:22:d1:0b:e7:fc: e6:a3:02:ff:d7:59:2a:7f:3c:55:29:bf:b2:a5:ba: b9:5b:fc:8f:35:62:3e:44:bd:c3:77:51:16:00:9b: b2:a0:cf:e5:fe:5d:cb:13:00:58:15:5f:65:60:89: f1:19:75:46:c5:f7:4b:a1:49:20:fb:e4:e0:09:af: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:29:EC:92:36:90:D4:32:86:88:FA:FC:DE:CE:9A:AE:15:08:FF X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:a1:88:e2:3d:27:73:81:92:86:c3:5c:1a:a0:df:d5:c8:f9: 80:fa:d9:5e:34:82:ad:db:ca:19:8d:f0:df:aa:dd:b0:05:63: bc:3b:c1:45:d5:80:23:44:97:af:9a:6c:53:d1:08:24:e7:10: 8c:8e:b3:57:ac:c8:4e:d6:10:d5:a0:cb:aa:3c:7d:d0:08:a6: bb:a8:76:81:c6:13:da:cd:fe:01:07:e2:29:cd:86:d2:8a:df: e6:44:dc:91:dd:b7:de:63:a0:f8:5d:68:34:0d:90:e5:08:d9: 3f:34:fc:de:9c:5d:73:30:ce:e8:fb:36:0d:fa:a8:31:48:99: 70:0d:b8:ab:80:e6:fe:25:36:b5:b6:a8:10:55:22:8a:b2:3a: fe:9a:95:65:f4:c8:5a:07:fa:56:8f:80:29:9e:93:66:b4:42: de:1b:67:af:99:95:94:a3:53:f8:f6:30:7b:d7:aa:8f:7f:cd: 69:78:8a:2c:ef:27:a4:06:b4:01:fa:a2:9a:b4:bb:65:b3:29: 37:33:b7:15:4f:b9:fe:67:a3:21:08:3a:f6:88:0e:fd:d9:bc: 74:98:08:da:bc:37:b0:0e:cf:7e:a6:b1:b8:61:f9:7b:ae:3e: 1b:47:1f:8a:b2:a3:e9:2b:61:e8:10:fc:12:50:21:39:10:09: c6:c9:a0:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lmx5FQ6R3dyTUH3vCoR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjA2MTUwMTE0WhcNMjUxMjA3MTUwMTE0WjAzMTEwLwYDVQQD Eyg0ZGE3MjllYzkyMzY5MGQ0MzI4Njg4ZmFmY2RlY2U5YWFlMTUwOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1tOa65RUZHIfoFoan67uN9KAWWJ R/Zv/qO2VOB1hwlV/no8QvUlUyNCCNkE/emYIuG+UMI/Z782zUSBIRTAkwTab/gZ 5QKMY9O06+1CpwDfAAFzh9L5vqHsuWYDQcvRBXhutXZewJV6z2bYjdlLeZewts51 KzULTEzbMt/3CRDbdiSOS/XfUIZQQkSfslLf1hTuyFVGisb+r0wu8s95AcI5xqN/ YVLuotWcOhtPuZ62EyTvmn5MWDgOTJP2ItEL5/zmowL/11kqfzxVKb+ypbq5W/yP NWI+RL3Dd1EWAJuyoM/l/l3LEwBYFV9lYInxGXVGxfdLoUkg++TgCa/yqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2nKeySNpDUMoaI+vzezpquFQj/MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6GI4j0n c4GShsNcGqDf1cj5gPrZXjSCrdvKGY3w36rdsAVjvDvBRdWAI0SXr5psU9EIJOcQ jI6zV6zITtYQ1aDLqjx90Aimu6h2gcYT2s3+AQfiKc2G0orf5kTckd233mOg+F1o NA2Q5QjZPzT83pxdczDO6Ps2DfqoMUiZcA24q4Dm/iU2tbaoEFUiirI6/pqVZfTI Wgf6Vo+AKZ6TZrRC3htnr5mVlKNT+PYwe9eqj3/NaXiKLO8npAa0AfqimrS7ZbMp NzO3FU+5/mejIQg69ogO/dm8dJgI2rw3sA7PfqaxuGH5e64+G0cfirKj6Sth6BD8 ElAhORAJxsmggg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:57 2025 by rpki-client