This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json) Hash identifier: WCOyVYxHcvdYJyTuoAEypzp1ZMAhyQe7V0tLv863TPY= Subject key identifier: A0:C1:97:11:8D:33:E2:61:4E:43:24:C6:DB:20:48:AC:67:02:70:A6 Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148 Certificate serial: 019B6053CBB63B17C0D57A6A7D1427AB0953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft Manifest number: 02AB Signing time: Sat 27 Dec 2025 15:01:02 +0000 Manifest this update: Sat 27 Dec 2025 15:01:02 +0000 Manifest next update: Sun 28 Dec 2025 15:01:02 +0000 Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: J8Ucg7wzZZtx8JZAbhWPQ+PpI4ZJ2BnQvl+2T/QNzGo=) 2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:cb:b6:3b:17:c0:d5:7a:6a:7d:14:27:ab:09:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148 Validity Not Before: Dec 27 15:01:02 2025 GMT Not After : Dec 28 15:01:02 2025 GMT Subject: CN=a0c197118d33e2614e4324c6db2048ac670270a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:06:b5:2d:2e:15:dc:e7:30:54:87:34:fe: 8a:c6:2f:d4:3c:df:ab:39:5c:3a:bd:ad:10:16:2c: 9e:8e:b6:a3:8f:26:51:39:68:a3:64:ed:97:7f:99: b7:15:1d:7a:8f:a9:99:45:32:e2:ca:34:88:41:88: 40:8a:df:8e:f0:a0:5b:f1:be:e9:ba:b3:8e:df:f9: b2:e7:50:4d:e2:af:67:df:b5:73:01:bd:7f:57:5e: f1:5f:4f:24:5e:ab:bc:1d:0a:13:c4:2c:18:3f:9f: ce:45:20:86:25:df:ef:33:42:08:02:86:4c:89:99: db:7c:92:3e:ca:3f:5a:a3:3d:65:ee:f5:e4:04:f5: 90:84:8d:6c:72:3f:5a:4b:a1:56:33:a1:1e:61:78: ac:9e:91:67:4d:82:b9:46:cd:26:a8:14:50:95:19: 9c:aa:2e:f6:d7:33:7f:55:7a:27:bd:50:65:65:b5: c7:9a:95:d1:90:b0:bf:d6:93:12:82:25:d9:22:b8: 2e:30:8f:7f:8e:17:ec:23:ef:a9:c5:46:0c:75:f1: c5:25:e2:8c:09:b4:23:fd:28:d1:f3:1d:61:2a:70: ca:4d:3f:72:f7:40:6d:5d:2a:39:fe:ca:e5:f1:82: 78:ee:7b:98:5f:53:71:8d:72:b6:69:5e:26:af:d7: f3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:97:11:8D:33:E2:61:4E:43:24:C6:DB:20:48:AC:67:02:70:A6 X509v3 Authority Key Identifier: keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f4:e4:31:6f:37:c8:34:7d:8d:1f:b5:8d:1d:9f:be:a7:c5:5b: 27:70:a0:19:91:d0:26:fa:e9:05:c6:31:61:da:b0:32:38:82: b9:e9:41:c8:11:06:b5:2b:64:1d:3e:18:df:ab:36:7b:c8:6e: 51:e5:04:34:31:07:5d:ba:98:56:7b:1f:49:04:72:ac:39:b0: c3:a0:80:eb:d6:25:97:9a:b5:62:f7:a3:e2:aa:d7:31:48:9e: c8:e7:d4:41:cd:32:a2:43:a0:a6:e8:e8:61:b1:59:c5:94:b8: 6d:28:ee:21:05:e1:03:93:7e:72:b1:cd:e1:47:dd:66:8f:86: db:1b:6b:a8:c4:5f:a8:b0:ef:3a:ee:a8:ce:9c:ed:89:42:03: e6:de:c6:21:4b:4c:38:a2:56:59:08:da:6b:6b:81:c8:56:79: 2d:27:df:44:86:63:e2:7f:40:56:4a:62:f8:7a:d0:86:4d:1a: f4:d8:8a:bb:95:ec:07:b5:ce:d9:d1:39:2c:15:0f:3a:09:c8: e2:34:03:6f:7d:fe:4c:d3:d6:04:9e:64:55:02:3d:71:e6:f3: 50:41:c8:3e:bc:1e:d2:96:1f:68:ea:20:89:d6:f4:0d:21:5a: 4e:0a:34:1a:e3:82:b0:91:10:fd:ea:ec:40:58:11:f1:1d:85: 0b:03:1b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU8u2OxfA1XpqfRQnqwlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh ZTAxNDgwHhcNMjUxMjI3MTUwMTAyWhcNMjUxMjI4MTUwMTAyWjAzMTEwLwYDVQQD EyhhMGMxOTcxMThkMzNlMjYxNGU0MzI0YzZkYjIwNDhhYzY3MDI3MGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV0GtS0uFdznMFSHNP6Kxi/UPN+r OVw6va0QFiyejrajjyZROWijZO2Xf5m3FR16j6mZRTLiyjSIQYhAit+O8KBb8b7p urOO3/my51BN4q9n37VzAb1/V17xX08kXqu8HQoTxCwYP5/ORSCGJd/vM0IIAoZM iZnbfJI+yj9aoz1l7vXkBPWQhI1scj9aS6FWM6EeYXisnpFnTYK5Rs0mqBRQlRmc qi721zN/VXonvVBlZbXHmpXRkLC/1pMSgiXZIrguMI9/jhfsI++pxUYMdfHFJeKM CbQj/SjR8x1hKnDKTT9y90BtXSo5/srl8YJ47nuYX1NxjXK2aV4mr9fzJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDBlxGNM+JhTkMkxtsgSKxnAnCmMB8GA1UdIwQY MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9OQxbzfI NH2NH7WNHZ++p8VbJ3CgGZHQJvrpBcYxYdqwMjiCuelByBEGtStkHT4Y36s2e8hu UeUENDEHXbqYVnsfSQRyrDmww6CA69Yll5q1Yvej4qrXMUieyOfUQc0yokOgpujo YbFZxZS4bSjuIQXhA5N+crHN4UfdZo+G2xtrqMRfqLDvOu6ozpztiUID5t7GIUtM OKJWWQjaa2uByFZ5LSffRIZj4n9AVkpi+HrQhk0a9NiKu5XsB7XO2dE5LBUPOgnI 4jQDb33+TNPWBJ5kVQI9cebzUEHIPrwe0pYfaOogidb0DSFaTgo0GuOCsJEQ/ers QFgR8R2FCwMbVg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:38:27 2025 by rpki-client