This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json) Hash identifier: HltONhb4H8TXfAYSd63f6pSeVngjkajIl0lGTg0Dv7U= Subject key identifier: 41:AD:B0:D2:AF:D7:C1:32:09:0B:52:D1:38:55:1A:8D:A8:AA:AF:DC Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Certificate serial: 019AF3528E6B7D796A354A16AE6AE456D339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft Manifest number: 05AD Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: OEcY0SsiqBhvyAKUaGmlVRzwjit6koYCPNgmTZ6TZ6I=) 2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8e:6b:7d:79:6a:35:4a:16:ae:6a:e4:56:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=41adb0d2afd7c132090b52d138551a8da8aaafdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:01:c8:fd:79:79:35:a5:f4:7e:55:2a:41: 96:2c:37:a0:c9:1b:97:4f:cf:e9:9d:bb:04:91:a7: 12:9b:ce:fb:74:91:1a:b9:78:41:47:76:52:08:21: ac:e3:28:d9:c9:22:f5:4f:cf:34:43:21:ad:05:94: c7:53:52:bf:44:6f:f0:42:c2:8e:91:15:a5:78:71: 91:c7:00:84:47:40:64:0d:90:34:4d:77:c6:46:cc: 6c:7f:8d:06:9b:17:e7:06:a3:e1:6f:7e:34:19:fc: d7:f6:d7:6c:cb:5f:33:b3:b2:d6:82:a0:a8:78:71: 32:ec:df:1f:62:e0:31:da:0d:b8:78:80:c3:01:d2: 19:6b:c5:f8:df:a6:f9:97:b4:df:9c:ad:f1:4c:51: 59:0f:3a:6e:64:1b:aa:25:90:12:de:6c:88:d7:5e: 41:98:9b:4a:dd:89:75:48:f4:b2:3b:27:d9:44:8c: 01:6a:b2:b8:b3:bf:16:e8:56:b5:ce:f2:f1:2d:88: 6f:f6:d3:7c:58:2d:bc:2f:51:2d:d1:60:49:77:f8: c3:36:ba:f8:1c:59:a0:64:aa:ce:b6:2a:14:7c:28: 2e:11:d7:1f:94:36:90:a1:2c:e2:9f:fe:fe:a3:cd: 0a:b1:1f:36:57:cc:e2:df:ff:64:7e:bf:f1:ae:ae: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AD:B0:D2:AF:D7:C1:32:09:0B:52:D1:38:55:1A:8D:A8:AA:AF:DC X509v3 Authority Key Identifier: keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:90:16:42:ad:de:83:6d:83:39:af:45:2a:23:01:16:73:97: f9:18:6f:56:fe:40:9e:64:8b:be:5e:f7:7d:54:04:ca:ff:36: 75:e4:c2:99:0f:93:8f:16:e2:d0:91:51:cb:66:30:e3:d1:0f: e6:e2:b2:0e:cf:4a:84:1c:e6:9b:eb:8c:a5:eb:b3:95:9e:43: d2:5c:fc:44:06:a6:d5:c5:96:20:a5:12:22:61:ec:79:50:1c: 58:3b:51:0c:ac:28:91:3e:0c:22:ac:4e:e9:eb:41:ba:5c:b4: ef:f0:52:c5:e9:30:4a:de:f0:99:a1:5d:02:75:bb:3d:26:2f: a5:b4:e9:52:18:6c:6e:93:34:4d:54:b1:8b:31:d4:46:fb:c6: d2:aa:65:5c:b9:e2:2e:04:14:c2:99:48:fc:1c:9a:7d:f6:15: 8a:12:28:2d:68:59:c5:90:d2:b3:f1:cc:b1:ab:3e:cf:f2:90: f0:19:2f:c5:58:4d:65:17:2a:db:98:dc:6e:e1:5b:1a:10:03: dc:e6:3b:ae:0f:8c:9f:f0:b5:e9:75:11:0d:51:6e:d5:7a:5d: 7d:67:c2:3e:35:ab:17:dc:54:29:62:fe:93:05:74:d9:62:22: fc:63:2e:44:ef:e5:db:02:66:60:05:11:7d:b7:1a:72:3a:ea: d6:87:2b:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUo5rfXlqNUoWrmrkVtM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzdkYzY2YTU2M2EzYWYyMWVlMDdhYjMzZThiZmZlN2Fm OTI4OGUwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD Eyg0MWFkYjBkMmFmZDdjMTMyMDkwYjUyZDEzODU1MWE4ZGE4YWFhZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIwByP15eTWl9H5VKkGWLDegyRuX T8/pnbsEkacSm877dJEauXhBR3ZSCCGs4yjZySL1T880QyGtBZTHU1K/RG/wQsKO kRWleHGRxwCER0BkDZA0TXfGRsxsf40GmxfnBqPhb340GfzX9tdsy18zs7LWgqCo eHEy7N8fYuAx2g24eIDDAdIZa8X436b5l7TfnK3xTFFZDzpuZBuqJZAS3myI115B mJtK3Yl1SPSyOyfZRIwBarK4s78W6Fa1zvLxLYhv9tN8WC28L1Et0WBJd/jDNrr4 HFmgZKrOtioUfCguEdcflDaQoSzin/7+o80KsR82V8zi3/9kfr/xrq62lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGtsNKv18EyCQtS0ThVGo2oqq/cMB8GA1UdIwQY MBaAFNN33GalY6OvIe4HqzPov/56+SiOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTkt YWYyNDA0YzI1YWNmLzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTktYWYyNDA0YzI1YWNm LzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5AWQq3e g22DOa9FKiMBFnOX+RhvVv5AnmSLvl73fVQEyv82deTCmQ+Tjxbi0JFRy2Yw49EP 5uKyDs9KhBzmm+uMpeuzlZ5D0lz8RAam1cWWIKUSImHseVAcWDtRDKwokT4MIqxO 6etBuly07/BSxekwSt7wmaFdAnW7PSYvpbTpUhhsbpM0TVSxizHURvvG0qplXLni LgQUwplI/ByaffYVihIoLWhZxZDSs/HMsas+z/KQ8BkvxVhNZRcq25jcbuFbGhAD 3OY7rg+Mn/C16XURDVFu1XpdfWfCPjWrF9xUKWL+kwV02WIi/GMuRO/l2wJmYAUR fbcacjrq1ocrkA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:35 2025 by rpki-client