This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json) Hash identifier: ADgDoSvD+RCchic0kiB7rl1JKv3ptTooLY9wmUmvFI0= Subject key identifier: 08:FE:FB:5B:8E:9F:8B:90:2D:41:CF:04:0E:8A:43:81:83:59:00:30 Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Certificate serial: 019B2BF879D25BD4A05950D047AC61FFD467 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft Manifest number: 06F2 Signing time: Wed 17 Dec 2025 11:01:02 +0000 Manifest this update: Wed 17 Dec 2025 11:01:02 +0000 Manifest next update: Thu 18 Dec 2025 11:01:02 +0000 Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: KLAxnEiRSFCSFQ7ARQ3ZE2nMNGt8rzCMqpWFp4RhttE=) 2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:79:d2:5b:d4:a0:59:50:d0:47:ac:61:ff:d4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Validity Not Before: Dec 17 11:01:02 2025 GMT Not After : Dec 18 11:01:02 2025 GMT Subject: CN=08fefb5b8e9f8b902d41cf040e8a438183590030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:46:20:34:46:31:16:23:a5:ec:50:5c:e0: e8:07:90:85:38:1e:d9:5b:17:16:52:ed:c7:ce:e7: 05:94:38:17:13:9e:e5:dc:9e:d8:42:73:cd:35:1e: fb:e0:99:05:95:03:56:a5:dd:e3:7e:1e:cd:59:e0: c5:ca:f4:41:97:9a:3c:83:0f:c9:7e:c6:3a:45:cc: 59:b8:09:89:99:32:01:14:64:a7:e9:9d:f1:e2:1a: 1b:b7:39:6c:bb:41:2b:c5:1d:b1:bf:d5:91:69:8b: e6:c8:ef:e6:a2:38:98:04:72:4c:63:4a:d2:c8:b0: 42:2b:8b:a5:d3:6b:42:52:fb:40:83:c0:a3:41:97: 92:07:9d:ef:78:68:e1:ec:42:7b:5c:3b:d6:e1:71: 67:a3:73:35:23:60:ad:0c:64:76:1d:c2:01:1a:71: 76:52:46:d8:d9:a4:3f:65:7b:d5:62:39:74:e0:fb: 3f:dd:1e:4d:c9:7c:d8:84:9f:17:ee:25:b8:1b:fb: 1f:c8:19:48:74:ef:83:e2:80:f6:53:9c:27:5d:16: e9:c9:a6:87:fa:7d:64:03:ca:5d:aa:5c:20:3a:58: 44:3c:a7:a7:47:40:58:d4:6c:fd:08:92:98:92:3a: 44:2f:36:ae:4e:f4:14:4b:21:b2:59:55:e2:a9:f9: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:FB:5B:8E:9F:8B:90:2D:41:CF:04:0E:8A:43:81:83:59:00:30 X509v3 Authority Key Identifier: keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:04:a1:5d:3a:0e:a7:31:df:43:4f:a1:94:33:35:77:b7:6e: c9:e0:26:e9:47:ec:d5:46:c0:21:cb:ae:3e:a0:97:97:34:92: 5a:68:3a:f9:f5:ee:96:8b:01:90:e3:11:60:61:f7:97:7f:dc: cb:a7:28:92:17:a7:63:6d:c1:2b:8c:79:3c:6d:c7:a8:15:5c: 3d:f6:43:c3:df:6b:00:4b:22:4c:b2:5a:77:34:bf:f9:d2:1f: 08:63:b6:ff:32:9d:2b:b1:e5:2e:11:75:94:2c:bc:f4:ad:da: a0:c1:00:fa:15:0c:7f:42:19:35:2c:92:44:5f:b5:42:b0:57: d5:6f:71:6e:e3:cf:27:d1:d1:af:c3:e9:59:3e:0a:39:91:86: 34:35:d9:8c:13:e1:c4:79:13:31:d1:56:44:e9:c9:d9:64:5d: 4d:d8:c4:26:1c:b4:eb:6f:0b:8f:d5:a3:9c:90:f2:79:25:db: c8:f6:91:16:5e:34:67:6d:9a:1f:d5:82:0c:97:c1:cd:a8:f0: 52:09:f8:32:e8:48:49:ce:4c:fe:34:fa:23:cf:82:47:87:e2: b2:b6:ca:bc:4a:e3:1a:45:20:65:ab:49:8c:0d:02:e9:23:2b: 03:f4:29:24:c7:a7:fb:73:d9:fb:fa:e5:fc:a9:f9:95:e6:5a: 84:77:9f:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HnSW9SgWVDQR6xh/9RnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1 M2IzZTQwHhcNMjUxMjE3MTEwMTAyWhcNMjUxMjE4MTEwMTAyWjAzMTEwLwYDVQQD EygwOGZlZmI1YjhlOWY4YjkwMmQ0MWNmMDQwZThhNDM4MTgzNTkwMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBtGIDRGMRYjpexQXODoB5CFOB7Z WxcWUu3HzucFlDgXE57l3J7YQnPNNR774JkFlQNWpd3jfh7NWeDFyvRBl5o8gw/J fsY6RcxZuAmJmTIBFGSn6Z3x4hobtzlsu0ErxR2xv9WRaYvmyO/mojiYBHJMY0rS yLBCK4ul02tCUvtAg8CjQZeSB53veGjh7EJ7XDvW4XFno3M1I2CtDGR2HcIBGnF2 UkbY2aQ/ZXvVYjl04Ps/3R5NyXzYhJ8X7iW4G/sfyBlIdO+D4oD2U5wnXRbpyaaH +n1kA8pdqlwgOlhEPKenR0BY1Gz9CJKYkjpELzauTvQUSyGyWVXiqfmTNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj++1uOn4uQLUHPBA6KQ4GDWQAwMB8GA1UdIwQY MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt ZDY0N2RjOGE1NmI2LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2 LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQShXToO pzHfQ0+hlDM1d7duyeAm6Ufs1UbAIcuuPqCXlzSSWmg6+fXulosBkOMRYGH3l3/c y6cokhenY23BK4x5PG3HqBVcPfZDw99rAEsiTLJadzS/+dIfCGO2/zKdK7HlLhF1 lCy89K3aoMEA+hUMf0IZNSySRF+1QrBX1W9xbuPPJ9HRr8PpWT4KOZGGNDXZjBPh xHkTMdFWROnJ2WRdTdjEJhy0628Lj9WjnJDyeSXbyPaRFl40Z22aH9WCDJfBzajw Ugn4MuhISc5M/jT6I8+CR4fisrbKvErjGkUgZatJjA0C6SMrA/QpJMen+3PZ+/rl /Kn5leZahHefvQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:15 2025 by rpki-client