This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft File: 0ffNDsTDvFTFlDEwfuw27wOCdzM.mft (raw, json) Hash identifier: VTFHC9PxRv4TjTCsXyKzx8wHzoCaMCI37EvUILGVuSw= Subject key identifier: 5D:D2:8D:02:1D:B7:F6:B3:98:04:7F:34:EF:96:1B:5E:28:A3:2D:FD Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Certificate serial: 019B33444450018E82B31D94A733D61A5E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 21:01:10 +0000 Manifest this update: Thu 18 Dec 2025 21:01:10 +0000 Manifest next update: Fri 19 Dec 2025 21:01:10 +0000 Files and hashes: 1: 0ffNDsTDvFTFlDEwfuw27wOCdzM.crl (hash: LAGdzJeCheUgB/a9VAU4xJJL3CUMoYOz+7+T+vE3NA4=) 2: On0cxXdpQvZ_jJI1Rkh3ZfuLUxc.roa (hash: 9kDdHzwM7pfMm0bFoQEb02mFtUGZEAgcsF0RvK2rnzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:44:50:01:8e:82:b3:1d:94:a7:33:d6:1a:5e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733 Validity Not Before: Dec 18 21:01:10 2025 GMT Not After : Dec 19 21:01:10 2025 GMT Subject: CN=5dd28d021db7f6b398047f34ef961b5e28a32dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:41:ee:ed:62:16:ae:e6:cb:bb:3b:0f:d6: 87:22:2a:0e:d9:87:11:6e:5a:b6:f0:89:37:db:3e: 99:94:c0:15:ff:51:3d:d6:38:1d:b1:5d:8f:eb:e7: b1:65:2e:df:5d:c2:f4:56:80:9a:eb:03:f7:72:c8: 0b:62:6b:c1:e6:9f:d0:be:04:ee:50:99:c3:b0:d3: 73:d8:5e:d9:93:00:30:f3:06:21:2c:b1:5a:f1:17: 02:dd:32:46:55:a8:b8:9e:90:55:d3:b3:79:de:ea: d7:c5:d6:68:dd:1c:aa:5f:57:23:67:09:be:ee:4b: bd:2c:61:3f:90:3b:13:cc:ae:44:f7:f2:c2:c1:a1: e6:b9:46:40:21:bc:ee:ac:ae:f7:aa:62:b8:49:4b: 6a:33:96:74:bd:6f:ba:d3:01:50:e0:40:c7:90:df: f8:b9:3c:02:a4:b1:9c:18:b8:07:75:dc:87:00:3f: 21:70:0a:4f:00:26:db:fe:ee:8c:ae:1e:d5:63:22: ab:c1:04:5f:e7:8c:2a:bd:36:b1:e3:66:ac:20:72: 64:ab:1d:db:6d:8f:14:f9:3c:f2:b2:54:2a:fd:a9: df:0c:2b:60:2f:ee:a3:09:a4:74:de:d0:84:68:3b: ac:b7:f5:99:e0:ed:1e:d2:f1:86:e8:21:39:0c:6c: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:8D:02:1D:B7:F6:B3:98:04:7F:34:EF:96:1B:5E:28:A3:2D:FD X509v3 Authority Key Identifier: keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3c:44:92:04:a3:48:11:42:f0:96:c3:9a:1c:0f:8e:36:84: ca:dd:70:99:7e:6f:07:20:19:b0:24:15:83:9a:6e:92:ab:69: 7e:f3:68:e0:9a:a6:e7:bd:77:4d:eb:d3:8d:e1:dd:26:a4:ef: 59:8d:39:9a:7a:c2:d1:2a:0e:83:f7:e8:35:2f:d9:ee:3e:b0: 6c:ea:b8:db:64:3b:4d:d1:7d:43:a2:91:c1:0a:99:f4:4e:ea: 1b:4c:28:ed:63:60:a9:16:75:5d:99:7f:8d:ec:a7:1c:e5:36: e8:f7:f3:c9:f0:44:d5:1d:14:d5:4e:53:9a:10:9c:89:4a:11: 7c:b3:0c:ca:ab:4a:a3:78:bc:16:41:86:a7:e1:a6:cd:63:a0: 10:84:23:f8:30:71:c9:54:34:c1:2b:e4:71:2b:dc:bd:ce:8c: 7e:87:9c:03:09:19:a0:95:15:a1:ff:5a:83:1c:be:68:a5:99: 80:0e:4e:ed:ff:bc:d2:a2:ce:fd:57:b0:ca:31:9a:9e:50:6d: 25:7a:ad:bd:ea:05:4e:3d:3a:d6:46:5d:b0:ba:c0:b0:69:92: f9:60:ce:20:34:7c:c6:8e:bd:da:84:3f:99:df:9b:45:f3:02: 6d:c9:2a:6e:05:3f:6a:7d:96:8f:1f:3c:83:ba:47:9a:45:9e: c1:c3:13:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRERQAY6Csx2UpzPWGl41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjdjZDBlYzRjM2JjNTRjNTk0MzEzMDdlZWMzNmVmMDM4 Mjc3MzMwHhcNMjUxMjE4MjEwMTEwWhcNMjUxMjE5MjEwMTEwWjAzMTEwLwYDVQQD Eyg1ZGQyOGQwMjFkYjdmNmIzOTgwNDdmMzRlZjk2MWI1ZTI4YTMyZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5hB7u1iFq7my7s7D9aHIioO2YcR blq28Ik32z6ZlMAV/1E91jgdsV2P6+exZS7fXcL0VoCa6wP3csgLYmvB5p/QvgTu UJnDsNNz2F7ZkwAw8wYhLLFa8RcC3TJGVai4npBV07N53urXxdZo3RyqX1cjZwm+ 7ku9LGE/kDsTzK5E9/LCwaHmuUZAIbzurK73qmK4SUtqM5Z0vW+60wFQ4EDHkN/4 uTwCpLGcGLgHddyHAD8hcApPACbb/u6Mrh7VYyKrwQRf54wqvTax42asIHJkqx3b bY8U+TzyslQq/anfDCtgL+6jCaR03tCEaDust/WZ4O0e0vGG6CE5DGx9NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3SjQIdt/azmAR/NO+WG14ooy39MB8GA1UdIwQY MBaAFNH3zQ7Ew7xUxZQxMH7sNu8DgnczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgt OWNiNWQ4OGZkZDM5LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wMjRkNDctNDdiMi00MGI1LWEyYjgtOWNiNWQ4OGZkZDM5 LzEvMGZmTkRzVER2RlRGbERFd2Z1dzI3d09DZHpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTxEkgSj SBFC8JbDmhwPjjaEyt1wmX5vByAZsCQVg5pukqtpfvNo4Jqm5713TevTjeHdJqTv WY05mnrC0SoOg/foNS/Z7j6wbOq422Q7TdF9Q6KRwQqZ9E7qG0wo7WNgqRZ1XZl/ jeynHOU26PfzyfBE1R0U1U5TmhCciUoRfLMMyqtKo3i8FkGGp+GmzWOgEIQj+DBx yVQ0wSvkcSvcvc6MfoecAwkZoJUVof9agxy+aKWZgA5O7f+80qLO/VewyjGanlBt JXqtveoFTj061kZdsLrAsGmS+WDOIDR8xo692oQ/md+bRfMCbckqbgU/an2Wjx88 g7pHmkWewcMT1A== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:25 2025 by rpki-client