This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json) Hash identifier: yROEgymcOUdoCXn29LmViDhOlT7gOvI+lpbPbpgmWvc= Subject key identifier: F0:7B:38:F0:55:5F:5D:A4:FF:50:BD:E1:8D:3E:81:7C:B2:9A:28:40 Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9 Certificate serial: 019AF50A0D41223EE75581F80E012C10A96A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft Manifest number: 0FCA Signing time: Sat 06 Dec 2025 19:01:07 +0000 Manifest this update: Sat 06 Dec 2025 19:01:07 +0000 Manifest next update: Sun 07 Dec 2025 19:01:07 +0000 Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: 5bkUlpWsDF+EK1UJoBXTN/NBFOIVrj548jOX7hhCyuk=) 2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=) 3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:0d:41:22:3e:e7:55:81:f8:0e:01:2c:10:a9:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9 Validity Not Before: Dec 6 19:01:07 2025 GMT Not After : Dec 7 19:01:07 2025 GMT Subject: CN=f07b38f0555f5da4ff50bde18d3e817cb29a2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d0:03:f0:f6:db:84:a0:a2:22:c9:20:26:33: bb:29:9f:0b:62:3d:42:35:24:bd:e8:08:81:1e:bc: 69:4a:54:e9:45:c9:b6:f1:dc:2d:8d:c9:65:c2:bf: bc:72:af:5a:96:f7:e8:5a:f7:82:76:3c:09:ab:10: 39:2c:b2:20:c1:e5:28:b9:e2:4f:8f:5a:fb:87:34: 24:b1:b4:d4:a7:21:7e:1c:20:06:2c:8c:69:9f:0a: 6c:16:a0:f8:be:20:ae:6f:c4:69:b3:e1:50:66:35: 8d:b7:ea:13:26:c1:db:ea:91:bd:8c:2f:87:ef:85: c9:ec:63:65:72:5c:a6:e2:15:6f:c9:65:e2:0d:6a: f0:09:72:75:4c:32:e5:30:19:bd:99:0c:2f:d4:30: d2:50:a9:2d:96:d1:a4:bf:f6:4c:41:44:8f:52:81: 3f:39:18:f8:73:1a:85:8d:69:47:e7:1f:c1:42:0f: e5:71:73:a3:47:2b:2e:0e:d2:8c:86:88:a3:08:df: 77:d2:a6:f7:d4:a5:6b:e5:e4:e9:52:fe:4c:ca:33: 53:37:4d:70:d0:84:c6:b8:c6:3d:88:de:b8:18:cf: 48:43:da:5b:21:cb:a2:e9:50:b5:bf:a0:3a:ba:fe: f2:26:d8:a9:19:e2:59:5f:18:6e:f6:76:57:b9:ba: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:38:F0:55:5F:5D:A4:FF:50:BD:E1:8D:3E:81:7C:B2:9A:28:40 X509v3 Authority Key Identifier: keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9e:6d:34:8a:9d:63:f7:b3:e5:1b:dd:8a:74:75:ab:43:84: 58:66:54:4d:4d:10:86:e5:4e:a1:6e:36:a0:5d:b0:a2:ca:ab: 62:2b:fa:50:cd:f6:3f:e3:8c:54:b4:9a:c0:a4:0e:54:64:55: 59:54:3b:a8:47:20:53:09:52:06:be:cb:2d:c6:61:b9:4c:dc: 2f:e1:2c:1d:25:38:83:1b:5f:2d:f2:32:1f:3a:ae:34:1a:1e: 47:8f:60:a8:96:97:f8:96:38:4e:b1:4f:23:d2:34:b9:f1:f8: 96:41:e6:1c:84:10:09:6a:5a:23:09:8f:21:70:73:a5:d6:0f: c9:b0:b6:6c:c9:4a:a4:ec:e8:0e:50:cb:ac:6f:ec:cd:c6:e2: 05:f7:81:0c:3c:64:de:2d:44:fd:5c:36:0a:8b:f2:bc:61:a9: 54:ef:57:c0:ed:d7:5e:0b:07:e8:c9:92:c1:9c:6a:c2:11:44: 6d:93:70:58:fe:cf:99:6e:5f:78:1c:ec:0a:85:b4:6a:28:a2: bb:5f:9a:6f:de:2e:7b:22:99:32:c7:17:97:3b:ef:0a:91:c5: c7:ae:19:0a:cf:c5:e2:b8:68:3b:97:cf:3c:80:ba:c4:1a:75: ef:dd:2d:af:58:63:42:1a:ed:09:bf:2d:33:4c:b8:94:1e:8f: 09:51:52:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cg1BIj7nVYH4DgEsEKlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw MjEzYTkwHhcNMjUxMjA2MTkwMTA3WhcNMjUxMjA3MTkwMTA3WjAzMTEwLwYDVQQD EyhmMDdiMzhmMDU1NWY1ZGE0ZmY1MGJkZTE4ZDNlODE3Y2IyOWEyODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9AD8PbbhKCiIskgJjO7KZ8LYj1C NSS96AiBHrxpSlTpRcm28dwtjcllwr+8cq9alvfoWveCdjwJqxA5LLIgweUoueJP j1r7hzQksbTUpyF+HCAGLIxpnwpsFqD4viCub8Rps+FQZjWNt+oTJsHb6pG9jC+H 74XJ7GNlclym4hVvyWXiDWrwCXJ1TDLlMBm9mQwv1DDSUKktltGkv/ZMQUSPUoE/ ORj4cxqFjWlH5x/BQg/lcXOjRysuDtKMhoijCN930qb31KVr5eTpUv5MyjNTN01w 0ITGuMY9iN64GM9IQ9pbIcui6VC1v6A6uv7yJtipGeJZXxhu9nZXubqFbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB7OPBVX12k/1C94Y0+gXyymihAMB8GA1UdIwQY MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5 LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd55tNIqd Y/ez5RvdinR1q0OEWGZUTU0QhuVOoW42oF2wosqrYiv6UM32P+OMVLSawKQOVGRV WVQ7qEcgUwlSBr7LLcZhuUzcL+EsHSU4gxtfLfIyHzquNBoeR49gqJaX+JY4TrFP I9I0ufH4lkHmHIQQCWpaIwmPIXBzpdYPybC2bMlKpOzoDlDLrG/szcbiBfeBDDxk 3i1E/Vw2CovyvGGpVO9XwO3XXgsH6MmSwZxqwhFEbZNwWP7PmW5feBzsCoW0aiii u1+ab94ueyKZMscXlzvvCpHFx64ZCs/F4rhoO5fPPIC6xBp1790tr1hjQhrtCb8t M0y4lB6PCVFSPA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:09 2025 by rpki-client