This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json) Hash identifier: ZYsz5sxYHKni1lHiyl0eCYhFsN3fbx3PWzH97lhEsYY= Subject key identifier: 3E:17:5E:F6:75:3E:5A:D9:F2:E2:A1:B1:6F:4D:7D:56:1A:3B:E9:C3 Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Certificate serial: 019AF19AA4BCAB43BC23217753BED303BC3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: XDecStGLkHLfzF2wWrmWrFUc+RkuNCOP3XsGBAhcU0s=) 2: On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa (hash: 9kDdHzwM7pfMm0bFoQEb02mFtUGZEAgcsF0RvK2rnzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a4:bc:ab:43:bc:23:21:77:53:be:d3:03:bc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=3e175ef6753e5ad9f2e2a1b16f4d7d561a3be9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:58:ca:1e:90:9a:59:1a:23:57:e8:09:00: e7:45:79:7e:56:85:7a:96:18:53:b0:95:3c:c5:78: 8b:e3:86:ba:18:de:ff:ee:34:55:d0:fe:42:ec:86: 84:99:72:54:e0:56:4b:e1:10:4b:51:72:ed:fb:af: bf:46:6a:d7:e0:1a:a9:4c:67:b6:92:63:db:5d:75: c9:ff:53:ce:d2:b8:66:07:43:b7:84:2c:e4:b0:c0: d8:97:47:3d:89:f0:4a:37:e4:4c:da:eb:50:c7:a5: ce:e0:6b:29:94:4c:1e:25:df:a7:d1:2e:7d:9c:08: 7d:c3:1d:22:38:0c:9e:cf:ab:05:ca:11:ac:81:cd: 8f:12:81:8a:f7:c0:a0:35:53:94:77:24:5f:fc:9a: 51:b1:ed:a5:4d:ca:3b:cd:b9:b6:c7:7f:42:77:b0: 10:d7:ed:5a:6b:b4:53:ca:c0:44:32:f3:f3:b7:df: 84:aa:96:7e:13:3b:ac:97:af:08:e1:f6:d5:4e:66: e2:61:c2:d8:d0:d5:b2:67:b2:e5:02:06:b4:cc:6f: 1b:43:30:63:ae:73:f6:93:0b:ed:8a:5e:50:0d:dc: c3:9c:c0:ee:d4:07:6b:81:fc:3c:e2:2e:e8:85:a8: 70:2c:18:ed:71:55:de:4b:b9:60:3c:4a:01:66:1d: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:17:5E:F6:75:3E:5A:D9:F2:E2:A1:B1:6F:4D:7D:56:1A:3B:E9:C3 X509v3 Authority Key Identifier: keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9a:1a:2f:14:f5:d2:94:c4:53:26:53:89:2f:ca:8c:3d:a6: 31:83:3f:4b:2b:02:3c:42:f7:eb:20:b5:1e:3c:13:cd:c6:ac: a5:db:a8:11:d1:81:46:15:70:00:fb:f7:9b:d1:e3:32:01:aa: ae:00:58:61:42:ce:cd:c5:7e:3c:38:b0:d0:4e:ee:00:cf:6e: 19:42:ba:8c:52:04:83:98:26:1f:71:4d:d1:de:56:db:d1:72: 52:7a:76:d3:ed:28:ff:9a:44:f5:d5:c2:7a:d7:b7:94:b9:52: dd:ee:5c:15:2b:ee:7c:f1:60:fc:7f:01:df:24:fc:37:6a:76: b5:0c:b4:97:fc:7a:8a:b1:aa:c7:31:a8:16:0f:de:e7:5c:6b: 17:ce:a9:67:bd:e0:79:59:2c:a1:7b:18:96:0c:70:68:23:51: 77:04:db:b5:88:0f:71:e1:29:ee:99:27:aa:30:e2:f0:87:ff: b2:e8:28:44:cd:ce:f7:f1:72:2e:75:9a:2c:f7:9c:f2:4f:28: 86:da:65:62:a5:5c:36:5f:ef:85:89:9f:71:75:f8:a3:19:9c: 5c:fb:a3:1e:d3:a1:bb:4b:8b:e7:3b:a5:de:5e:04:95:f9:5e: 3b:41:57:b3:74:e5:8b:e0:d2:9d:78:d4:e5:fd:ea:4a:c5:05: dd:ec:d6:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqS8q0O8IyF3U77TA7w6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4 Mjc3MzMwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD EygzZTE3NWVmNjc1M2U1YWQ5ZjJlMmExYjE2ZjRkN2Q1NjFhM2JlOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP5Yyh6QmlkaI1foCQDnRXl+VoV6 lhhTsJU8xXiL44a6GN7/7jRV0P5C7IaEmXJU4FZL4RBLUXLt+6+/RmrX4BqpTGe2 kmPbXXXJ/1PO0rhmB0O3hCzksMDYl0c9ifBKN+RM2utQx6XO4GsplEweJd+n0S59 nAh9wx0iOAyez6sFyhGsgc2PEoGK98CgNVOUdyRf/JpRse2lTco7zbm2x39Cd7AQ 1+1aa7RTysBEMvPzt9+EqpZ+Ezusl68I4fbVTmbiYcLY0NWyZ7LlAga0zG8bQzBj rnP2kwvtil5QDdzDnMDu1Adrgfw84i7ohahwLBjtcVXeS7lgPEoBZh0TTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4XXvZ1PlrZ8uKhsW9NfVYaO+nDMB8GA1UdIwQY MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt OWNiNWQ4OGZkZDM5LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5 LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpoaLxT1 0pTEUyZTiS/KjD2mMYM/SysCPEL36yC1HjwTzcaspduoEdGBRhVwAPv3m9HjMgGq rgBYYULOzcV+PDiw0E7uAM9uGUK6jFIEg5gmH3FN0d5W29FyUnp20+0o/5pE9dXC ete3lLlS3e5cFSvufPFg/H8B3yT8N2p2tQy0l/x6irGqxzGoFg/e51xrF86pZ73g eVksoXsYlgxwaCNRdwTbtYgPceEp7pknqjDi8If/sugoRM3O9/FyLnWaLPec8k8o htplYqVcNl/vhYmfcXX4oxmcXPujHtOhu0uL5zul3l4ElfleO0FXs3Tli+DSnXjU 5f3qSsUF3ezWgw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:06 2025 by rpki-client