This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json) Hash identifier: OJcO3GdZqOSOrNunGREVe+o9RutfdraAT6FG43Idzy4= Subject key identifier: 03:86:4E:84:BC:E8:42:02:C7:C3:DC:A8:0D:CF:92:02:5E:9D:D1:C0 Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Certificate serial: 019AF49BA89F7BD02A6DBCC9B334DC2F04ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft Manifest number: 0D14 Signing time: Sat 06 Dec 2025 17:00:33 +0000 Manifest this update: Sat 06 Dec 2025 17:00:33 +0000 Manifest next update: Sun 07 Dec 2025 17:00:33 +0000 Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: ejlSy/BlkSDEZDOCAJfE4X5Vt4/0TU8IyaCW/Z28uio=) 2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a8:9f:7b:d0:2a:6d:bc:c9:b3:34:dc:2f:04:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Validity Not Before: Dec 6 17:00:33 2025 GMT Not After : Dec 7 17:00:33 2025 GMT Subject: CN=03864e84bce84202c7c3dca80dcf92025e9dd1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d5:2e:1c:4b:e8:24:ea:20:43:62:cf:78:d3: b3:84:94:c6:6b:26:6f:cf:bc:06:e5:da:21:c7:31: 1e:09:36:7a:a2:c9:e4:f8:ce:21:76:fe:27:e5:0a: d8:e2:fe:b3:d0:69:3a:36:25:9c:6b:47:13:b3:c3: d2:e4:5d:ce:d9:c0:5d:b5:a0:ba:4c:34:cc:03:fa: ce:08:4d:d7:26:fb:c1:63:59:84:d5:31:5f:96:ea: 70:47:aa:0f:78:3b:94:f6:82:00:e6:86:bb:57:73: 7b:34:77:91:aa:54:b0:ee:3c:3f:83:c4:96:32:e2: 3a:24:ee:05:ee:10:03:ac:23:72:90:51:71:c9:02: 60:c7:a9:cf:85:a3:f5:25:2d:d6:6f:04:38:91:f9: 7f:47:fa:10:4c:fd:d7:3d:6e:79:82:c0:97:29:35: 88:5c:78:6c:26:86:52:f1:d4:45:70:e7:91:3e:f9: 9a:82:b8:76:d2:05:36:ae:5c:f2:b1:a8:37:ab:41: e0:84:90:bd:56:4b:74:ca:14:ff:aa:30:79:84:da: a7:c6:6a:b0:36:fc:6c:e3:38:d1:17:1d:24:25:fe: b3:72:99:d1:a2:82:84:79:70:3e:1d:24:20:f5:90: 60:04:56:b3:8d:0f:5b:5f:bf:dc:16:04:96:24:1f: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:4E:84:BC:E8:42:02:C7:C3:DC:A8:0D:CF:92:02:5E:9D:D1:C0 X509v3 Authority Key Identifier: keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0a:1c:62:48:3a:08:21:04:72:2b:cf:65:36:69:a9:4e:da: e7:ce:ed:95:48:ca:bc:ea:e4:a0:2d:5a:f8:32:35:52:26:0b: 46:2d:58:03:61:07:95:23:5d:df:0b:50:1a:61:0c:e7:19:40: 9c:1a:78:5e:f4:50:40:72:b9:06:ec:c7:d5:b0:09:6d:64:9e: 0d:96:17:82:61:a7:b7:1e:41:c9:56:1a:26:d1:f0:12:9c:86: f0:b9:1e:97:a3:9c:d2:7a:36:d9:9b:31:ef:3d:f4:e7:05:3b: 15:55:a2:f6:08:33:d2:1a:e3:3e:45:3e:fe:e6:6a:06:d2:e9: ec:5a:1c:11:a3:ef:b9:6a:e0:15:8c:3a:87:9c:b5:03:10:5f: 99:da:af:da:f5:3d:50:7c:b8:4c:19:01:74:a7:38:cc:27:60: 27:2c:bf:b0:a3:5a:29:d0:aa:d8:19:b5:a0:8f:d6:f0:96:2a: 6f:20:d4:a6:44:84:05:e9:4a:89:8d:39:10:a4:b4:b4:0c:d7: fc:7e:17:ce:85:a1:88:1c:32:04:f4:4b:30:37:38:c8:3c:91: d1:53:27:57:37:19:26:96:d1:66:17:f2:2e:27:54:03:b0:4d: 61:14:99:74:8c:fb:7b:7e:e8:d9:ff:2c:d4:2d:a3:35:be:9e: ec:2d:24:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6ife9AqbbzJszTcLwTtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk MWM2NzMwHhcNMjUxMjA2MTcwMDMzWhcNMjUxMjA3MTcwMDMzWjAzMTEwLwYDVQQD EygwMzg2NGU4NGJjZTg0MjAyYzdjM2RjYTgwZGNmOTIwMjVlOWRkMWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodUuHEvoJOogQ2LPeNOzhJTGayZv z7wG5dohxzEeCTZ6osnk+M4hdv4n5QrY4v6z0Gk6NiWca0cTs8PS5F3O2cBdtaC6 TDTMA/rOCE3XJvvBY1mE1TFflupwR6oPeDuU9oIA5oa7V3N7NHeRqlSw7jw/g8SW MuI6JO4F7hADrCNykFFxyQJgx6nPhaP1JS3WbwQ4kfl/R/oQTP3XPW55gsCXKTWI XHhsJoZS8dRFcOeRPvmagrh20gU2rlzysag3q0HghJC9Vkt0yhT/qjB5hNqnxmqw Nvxs4zjRFx0kJf6zcpnRooKEeXA+HSQg9ZBgBFazjQ9bX7/cFgSWJB/KGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOGToS86EICx8PcqA3PkgJendHAMB8GA1UdIwQY MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5 LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAocYkg6 CCEEcivPZTZpqU7a587tlUjKvOrkoC1a+DI1UiYLRi1YA2EHlSNd3wtQGmEM5xlA nBp4XvRQQHK5BuzH1bAJbWSeDZYXgmGntx5ByVYaJtHwEpyG8Lkel6Oc0no22Zsx 7z305wU7FVWi9ggz0hrjPkU+/uZqBtLp7FocEaPvuWrgFYw6h5y1AxBfmdqv2vU9 UHy4TBkBdKc4zCdgJyy/sKNaKdCq2Bm1oI/W8JYqbyDUpkSEBelKiY05EKS0tAzX /H4XzoWhiBwyBPRLMDc4yDyR0VMnVzcZJpbRZhfyLidUA7BNYRSZdIz7e37o2f8s 1C2jNb6e7C0kUg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:35 2025 by rpki-client