This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json) Hash identifier: eQOdISvOehqu1pH5INVup3D0bq8hjcT+o9/nR6MNwrE= Subject key identifier: 68:0A:D3:63:DA:C0:79:38:6D:42:96:9D:46:B6:01:93:1D:C1:9B:0E Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148 Certificate serial: 019B3BA27ED15EC6CD488762D9119461B178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft Manifest number: 0298 Signing time: Sat 20 Dec 2025 12:01:03 +0000 Manifest this update: Sat 20 Dec 2025 12:01:03 +0000 Manifest next update: Sun 21 Dec 2025 12:01:03 +0000 Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: DiRCbS7tAJAqkp5yyUhd93kBl6P5wf0r+JtytDc/xgM=) 2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:7e:d1:5e:c6:cd:48:87:62:d9:11:94:61:b1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148 Validity Not Before: Dec 20 12:01:03 2025 GMT Not After : Dec 21 12:01:03 2025 GMT Subject: CN=680ad363dac079386d42969d46b601931dc19b0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:80:3a:e9:d9:4a:40:48:7e:17:41:11:2f: 7c:a2:05:af:7b:09:5f:cb:ab:e6:45:07:3c:16:64: 98:ce:b4:9c:b9:f2:2f:b8:be:08:8c:c7:c0:f0:90: c7:c8:d4:63:b1:51:6f:58:49:5e:cd:ea:dc:6c:03: 7c:00:83:07:a5:1e:f2:c7:a7:43:5e:6e:f1:53:16: 9f:09:1f:40:fd:c8:d9:91:3f:ce:9a:c6:97:b0:a1: 21:39:1b:6a:5e:ca:05:4c:eb:7a:56:46:93:8e:74: 67:d5:00:d6:bf:ba:83:34:7d:64:bc:84:bd:ae:b7: f4:dc:40:19:21:20:26:c7:51:f1:0f:ed:67:86:3d: bd:2e:3e:8f:7a:97:43:2f:e2:0e:ca:f1:58:84:5e: c4:d7:5a:e6:b2:3f:bb:0d:85:ee:3f:44:b1:d7:78: fd:ee:aa:fa:e2:db:f6:93:40:5f:ce:02:cb:75:2d: 78:1d:0e:c5:aa:8f:0e:db:30:f8:82:97:b0:03:a0: c2:68:62:3d:2a:a0:2f:ae:87:00:6e:38:38:a0:70: 01:2d:8c:87:74:ad:20:b1:29:23:8e:07:34:f6:15: 9c:2b:82:b6:84:55:65:73:5b:8f:66:5f:44:ff:4e: bc:1a:a3:8e:d7:fe:81:7c:6d:14:13:53:d2:31:1a: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:D3:63:DA:C0:79:38:6D:42:96:9D:46:B6:01:93:1D:C1:9B:0E X509v3 Authority Key Identifier: keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:10:9a:80:20:b9:2c:bc:f6:6b:14:70:31:f5:7c:88:c8:b9: 7a:95:75:bc:3c:34:3b:13:d0:16:d6:31:7d:9f:dd:a4:c8:48: e2:7c:18:f7:30:31:c8:ba:da:f3:8c:b4:96:d3:a2:de:76:e3: e2:a9:93:c1:dc:6f:ab:3d:c6:f7:c7:b5:87:ce:c4:05:55:ef: 72:81:77:aa:68:21:60:8a:b1:1d:bf:35:05:a7:1e:ab:46:05: 85:22:79:af:d8:b0:39:33:e4:d7:31:0b:70:99:2d:f0:6d:50: 92:ce:36:e3:a8:dd:81:15:e6:78:64:c8:85:7f:62:39:f9:37: 44:d2:a1:28:0c:28:33:bd:f5:6a:8d:1b:96:ec:2a:7c:47:66: 83:80:dc:f9:7d:06:95:ea:60:b9:45:71:7f:96:88:42:10:ce: 90:37:77:fb:5f:ae:8e:22:25:47:35:b9:63:04:48:b2:bc:d3: af:24:4b:cb:c8:7e:fd:dc:30:80:89:96:04:94:79:d3:4f:dd: 70:c6:64:de:f8:fb:f0:6f:d6:d5:0b:d6:5d:95:73:21:65:99: 6b:97:fd:88:2f:b7:97:23:37:0e:6e:bc:eb:e9:de:fe:16:6f: 96:5c:7c:14:5e:95:54:fd:53:67:ab:b7:1c:bc:3a:53:bd:5e: f8:cc:67:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7on7RXsbNSIdi2RGUYbF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh ZTAxNDgwHhcNMjUxMjIwMTIwMTAzWhcNMjUxMjIxMTIwMTAzWjAzMTEwLwYDVQQD Eyg2ODBhZDM2M2RhYzA3OTM4NmQ0Mjk2OWQ0NmI2MDE5MzFkYzE5YjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAOAOunZSkBIfhdBES98ogWvewlf y6vmRQc8FmSYzrScufIvuL4IjMfA8JDHyNRjsVFvWElezercbAN8AIMHpR7yx6dD Xm7xUxafCR9A/cjZkT/OmsaXsKEhORtqXsoFTOt6VkaTjnRn1QDWv7qDNH1kvIS9 rrf03EAZISAmx1HxD+1nhj29Lj6PepdDL+IOyvFYhF7E11rmsj+7DYXuP0Sx13j9 7qr64tv2k0BfzgLLdS14HQ7Fqo8O2zD4gpewA6DCaGI9KqAvrocAbjg4oHABLYyH dK0gsSkjjgc09hWcK4K2hFVlc1uPZl9E/068GqOO1/6BfG0UE1PSMRoUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgK02PawHk4bUKWnUa2AZMdwZsOMB8GA1UdIwQY MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChCagCC5 LLz2axRwMfV8iMi5epV1vDw0OxPQFtYxfZ/dpMhI4nwY9zAxyLra84y0ltOi3nbj 4qmTwdxvqz3G98e1h87EBVXvcoF3qmghYIqxHb81Baceq0YFhSJ5r9iwOTPk1zEL cJkt8G1Qks4246jdgRXmeGTIhX9iOfk3RNKhKAwoM731ao0bluwqfEdmg4Dc+X0G lepguUVxf5aIQhDOkDd3+1+ujiIlRzW5YwRIsrzTryRLy8h+/dwwgImWBJR500/d cMZk3vj78G/W1QvWXZVzIWWZa5f9iC+3lyM3Dm686+ne/hZvllx8FF6VVP1TZ6u3 HLw6U71e+MxnYA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:31 2025 by rpki-client