This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json) Hash identifier: 7ROlSp2FwCz0WuR0YaHTQOym5FvhQVuUf1jlN5eOMeE= Subject key identifier: 0C:B4:F9:C1:D4:26:3F:B0:D6:7E:28:61:7F:A0:46:F0:A8:91:98:0E Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Certificate serial: 019AF1D2219AD3CAC74258771E67C5BB26AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft Manifest number: 066B Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: uh8zJqRcanGS9o3FTzwnD95dW+Kti5GWAtmqDpTC33o=) 2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:21:9a:d3:ca:c7:42:58:77:1e:67:c5:bb:26:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=0cb4f9c1d4263fb0d67e28617fa046f0a891980e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:5d:7a:1b:c1:b3:74:96:f0:fb:e6:b2:c6: 60:e3:f4:63:27:b9:e0:e1:33:94:f3:2c:6c:f3:95: 63:db:89:2d:f8:0e:6c:e2:7d:be:c1:a9:42:1d:cc: 1b:c5:ff:b2:27:47:d3:60:7f:3b:87:1c:7c:51:b5: 5b:28:32:49:be:a4:7b:05:3e:c8:5c:ba:56:25:3e: ed:ff:71:62:e4:0d:c0:41:33:a0:43:d0:07:f6:c7: 34:4c:b8:c1:24:66:3b:32:35:77:46:4c:d9:5a:dd: b0:98:1c:b9:f9:76:39:8b:82:00:cc:02:83:ac:75: 1b:bc:5b:fa:2a:b6:91:c9:73:5f:37:2c:8e:38:df: 8e:47:4f:c3:17:e6:ff:a0:2e:4d:e2:42:5e:49:23: 23:44:42:40:72:f4:0d:f4:24:b7:59:ae:aa:18:05: 4d:84:92:12:fa:07:3b:cc:0c:7b:09:22:43:37:56: 8c:6b:0d:24:2d:fb:92:0d:fd:80:be:17:7a:62:3f: a2:83:6e:ec:6e:46:e3:aa:a4:98:4b:e5:ec:5d:6a: 9d:0d:bb:ec:ab:da:02:14:3a:c8:86:cb:3e:e9:f8: 6b:65:c3:95:35:1b:8b:84:e9:94:67:64:02:df:18: 0a:c1:2c:8f:6d:f2:1d:22:81:7c:09:0f:c9:a0:66: 9c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B4:F9:C1:D4:26:3F:B0:D6:7E:28:61:7F:A0:46:F0:A8:91:98:0E X509v3 Authority Key Identifier: keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:be:0f:80:34:a8:23:43:4e:09:a3:0d:54:a8:1d:12:35:76: b1:f2:32:50:aa:9c:1e:e5:f4:3e:10:bd:bf:67:0f:00:f9:db: 61:9f:d7:02:a4:eb:76:21:4b:c4:43:a5:2c:03:3f:77:10:67: c4:81:0e:d3:09:e4:c0:ec:1e:ef:a8:18:92:40:e0:ab:2c:81: a8:65:b2:18:1b:41:f2:35:d8:f8:e7:e7:d5:d9:e0:40:cd:5a: 12:b7:f4:f5:66:73:5a:26:ec:39:15:b8:24:d7:0d:41:38:22: 81:31:ad:fe:12:48:f1:26:30:d1:ae:d1:1a:a2:a7:b2:c5:56: d1:ae:49:3f:e1:c4:4c:97:8f:44:c7:3d:88:44:04:09:e5:d2: b5:0f:55:d7:ff:8c:bf:50:8d:5c:58:3f:f7:99:d2:11:52:f9: 83:9e:e2:87:6a:50:71:0b:d7:35:2a:b7:94:0a:30:34:ac:21: 21:83:65:67:23:f2:34:59:c9:59:cb:6e:f0:fa:a4:3b:cf:87: 44:be:19:e8:9e:30:3d:38:56:ff:60:8b:fa:ec:03:33:36:9a: 5c:c5:7f:29:68:43:65:b3:ac:d9:3c:b0:36:7b:a8:04:6f:98: f4:29:af:29:9f:1b:d0:af:1e:2e:33:7a:de:62:f6:bd:74:85: bf:7f:09:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iGa08rHQlh3HmfFuyarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4 Mjk2YzcwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD EygwY2I0ZjljMWQ0MjYzZmIwZDY3ZTI4NjE3ZmEwNDZmMGE4OTE5ODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI9dehvBs3SW8PvmssZg4/RjJ7ng 4TOU8yxs85Vj24kt+A5s4n2+walCHcwbxf+yJ0fTYH87hxx8UbVbKDJJvqR7BT7I XLpWJT7t/3Fi5A3AQTOgQ9AH9sc0TLjBJGY7MjV3RkzZWt2wmBy5+XY5i4IAzAKD rHUbvFv6KraRyXNfNyyOON+OR0/DF+b/oC5N4kJeSSMjREJAcvQN9CS3Wa6qGAVN hJIS+gc7zAx7CSJDN1aMaw0kLfuSDf2Avhd6Yj+ig27sbkbjqqSYS+XsXWqdDbvs q9oCFDrIhss+6fhrZcOVNRuLhOmUZ2QC3xgKwSyPbfIdIoF8CQ/JoGac9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAy0+cHUJj+w1n4oYX+gRvCokZgOMB8GA1UdIwQY MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIr4PgDSo I0NOCaMNVKgdEjV2sfIyUKqcHuX0PhC9v2cPAPnbYZ/XAqTrdiFLxEOlLAM/dxBn xIEO0wnkwOwe76gYkkDgqyyBqGWyGBtB8jXY+Ofn1dngQM1aErf09WZzWibsORW4 JNcNQTgigTGt/hJI8SYw0a7RGqKnssVW0a5JP+HETJePRMc9iEQECeXStQ9V1/+M v1CNXFg/95nSEVL5g57ih2pQcQvXNSq3lAowNKwhIYNlZyPyNFnJWctu8PqkO8+H RL4Z6J4wPThW/2CL+uwDMzaaXMV/KWhDZbOs2TywNnuoBG+Y9CmvKZ8b0K8eLjN6 3mL2vXSFv38JIg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:52 2025 by rpki-client