This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json) Hash identifier: 3nLFTao+fAbixJ4FAFTEZK93h5YHHw7/PbKBkfBlruw= Subject key identifier: 60:70:F4:C0:AE:08:E3:31:D3:72:00:C1:EB:FB:73:29:23:0D:E3:30 Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93 Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293 Certificate serial: 019AF12D2F0766371317C8594A0649948012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: JYOWt0lXvhrmNsJdGqldUFiE990MVq2y5TVu/EJFlzM=) 2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2f:07:66:37:13:17:c8:59:4a:06:49:94:80:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293 Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=6070f4c0ae08e331d37200c1ebfb7329230de330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:49:16:fb:67:48:90:2d:58:e6:f9:76:7e:08: 06:12:a7:f0:33:65:ee:59:1a:4e:03:ed:72:34:07: 59:c0:d3:45:ed:40:e1:18:58:af:a6:f9:27:ea:e7: 49:2d:a0:05:1c:72:e1:36:fd:c4:e5:a6:e9:08:f4: c3:d2:2a:85:6c:71:35:f3:be:39:cb:98:57:52:72: d7:16:19:65:8a:ad:ff:bd:48:37:e6:69:ef:00:65: 8e:59:f6:9f:77:ba:1e:82:d5:b2:7e:59:22:27:cc: 61:9b:58:a4:07:00:8d:e5:47:52:2e:ce:9e:21:b1: d0:92:cb:37:f6:ac:c8:0b:9a:8d:b4:39:b2:10:06: ee:63:69:a5:de:00:3c:c4:7e:95:22:19:3b:e1:3f: 52:62:e1:d3:56:f8:a7:35:72:a0:88:81:48:7f:0c: 1d:56:96:3e:27:05:99:4a:67:17:da:70:7c:20:c4: 85:f5:2e:21:e1:ec:67:f2:30:e8:09:e0:d5:59:2e: cb:1a:76:23:b3:74:8b:92:d7:d7:d9:a7:21:59:35: fd:8e:46:2d:9c:59:5b:81:15:c7:01:6b:c3:25:5b: 1c:bf:36:a9:dd:80:cb:c0:38:7b:74:96:e3:29:16: b7:6f:00:3a:b1:89:41:8a:b5:16:7c:32:96:5d:e5: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:70:F4:C0:AE:08:E3:31:D3:72:00:C1:EB:FB:73:29:23:0D:E3:30 X509v3 Authority Key Identifier: keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6f:f0:b2:25:12:13:b4:ac:8b:9f:bd:d8:64:4e:80:9b:a5: f7:55:e1:e7:73:41:35:f4:54:12:ec:3a:73:f1:ea:e3:95:1d: 64:a3:22:0f:67:a6:c6:64:c8:35:7b:2b:c9:60:33:47:85:20: 15:3e:c4:17:87:1b:7e:08:14:7e:2e:b7:31:74:de:36:ea:ff: 85:da:21:fd:5c:84:a2:96:b2:1b:c6:54:9a:5e:9d:b3:0f:2c: 24:24:5c:e2:20:fb:f3:09:20:b5:11:38:d3:23:70:bc:67:81: e7:ce:3d:93:57:ec:2e:54:26:5f:0e:b6:9a:75:5f:a2:3d:4f: 61:a3:34:b3:87:b7:e5:bb:ad:45:e3:c5:52:2d:9f:a3:3c:d2: 96:e1:31:6b:17:b7:48:bc:ab:49:4e:cd:db:0d:47:21:ab:f9: de:d4:86:9b:ea:79:96:fe:64:72:6e:67:2d:60:e6:41:e3:c9: 2f:bf:3b:c2:d3:4f:20:33:7d:dd:f5:ea:87:c0:83:e6:29:a1: af:cd:28:96:d4:d5:ee:61:61:80:b8:53:51:96:65:d2:10:74: 6b:92:1e:5c:71:15:90:e9:45:4f:a6:2f:23:de:54:b8:81:6e: 76:9b:ab:c0:7d:df:86:a5:23:51:7c:38:7c:0e:82:a1:3d:fe: be:b3:46:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS8HZjcTF8hZSgZJlIASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzU4YzNlYzcxZmMxOWE2YWM5ODQ2YmFmNGRlNTk4MzYz NTcyOTMwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD Eyg2MDcwZjRjMGFlMDhlMzMxZDM3MjAwYzFlYmZiNzMyOTIzMGRlMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEkW+2dIkC1Y5vl2fggGEqfwM2Xu WRpOA+1yNAdZwNNF7UDhGFivpvkn6udJLaAFHHLhNv3E5abpCPTD0iqFbHE18745 y5hXUnLXFhlliq3/vUg35mnvAGWOWfafd7oegtWyflkiJ8xhm1ikBwCN5UdSLs6e IbHQkss39qzIC5qNtDmyEAbuY2ml3gA8xH6VIhk74T9SYuHTVvinNXKgiIFIfwwd VpY+JwWZSmcX2nB8IMSF9S4h4exn8jDoCeDVWS7LGnYjs3SLktfX2achWTX9jkYt nFlbgRXHAWvDJVscvzap3YDLwDh7dJbjKRa3bwA6sYlBirUWfDKWXeX/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBw9MCuCOMx03IAwev7cykjDeMwMB8GA1UdIwQY MBaAFNM1jD7HH8GaasmEa69N5Zg2NXKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUt MjNhODRlZWRkOTU2LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kMDFkNTgtNTQxOC00MjE3LTg5YWUtMjNhODRlZWRkOTU2 LzEvMHpXTVBzY2Z3WnBxeVlScnIwM2xtRFkxY3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEm/wsiUS E7Ssi5+92GROgJul91Xh53NBNfRUEuw6c/Hq45UdZKMiD2emxmTINXsryWAzR4Ug FT7EF4cbfggUfi63MXTeNur/hdoh/VyEopayG8ZUml6dsw8sJCRc4iD78wkgtRE4 0yNwvGeB5849k1fsLlQmXw62mnVfoj1PYaM0s4e35butRePFUi2fozzSluExaxe3 SLyrSU7N2w1HIav53tSGm+p5lv5kcm5nLWDmQePJL787wtNPIDN93fXqh8CD5imh r80oltTV7mFhgLhTUZZl0hB0a5IeXHEVkOlFT6YvI95UuIFudpurwH3fhqUjUXw4 fA6CoT3+vrNGmg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:54 2025 by rpki-client