This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json) Hash identifier: L58GvDpjmqjexC9dR2ID1aTuBuEyvlI+ojhEa5hkvsA= Subject key identifier: 40:A2:F1:CD:50:1D:60:4C:A8:E9:28:6E:E8:B3:CB:A8:EB:89:4F:41 Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Certificate serial: 019B3DFEBAF634BFFB65663DC577F3A0D6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft Manifest number: 05E2 Signing time: Sat 20 Dec 2025 23:01:02 +0000 Manifest this update: Sat 20 Dec 2025 23:01:02 +0000 Manifest next update: Sun 21 Dec 2025 23:01:02 +0000 Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=) 2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: fKK/fX/vjruIcP15z6YjAIMOBoM27igCtsusss63FF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:ba:f6:34:bf:fb:65:66:3d:c5:77:f3:a0:d6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Validity Not Before: Dec 20 23:01:02 2025 GMT Not After : Dec 21 23:01:02 2025 GMT Subject: CN=40a2f1cd501d604ca8e9286ee8b3cba8eb894f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d9:73:87:15:79:71:9b:2a:04:fb:1f:9b:ba: 70:42:c3:bb:82:39:58:fc:39:8f:e6:9a:cc:75:c2: 8b:28:bf:72:60:63:f7:28:30:a4:8e:09:a8:87:36: 54:ee:26:7c:1d:03:11:ad:04:d4:8f:b7:72:88:18: e2:51:97:f0:2f:7e:b0:de:31:e6:48:77:a0:a6:86: 33:15:4b:37:70:5b:de:33:81:94:97:fe:64:b3:15: 8d:92:70:62:ca:e8:b7:ee:f1:21:86:e1:e4:77:f7: 49:23:5e:a9:a9:89:ae:0b:82:1b:be:e3:ac:13:ee: 16:db:ac:a0:31:53:5d:5c:80:f6:66:96:9d:e3:05: 09:47:da:9e:dd:d9:46:f0:08:57:47:82:c2:38:3e: 73:80:4e:4b:64:92:88:2b:4a:e4:84:fc:11:29:e5: 32:be:cc:35:e6:aa:cb:fe:fc:fb:b6:62:7a:80:04: 84:bd:93:66:37:d3:9d:f9:53:4e:13:bf:74:81:06: b2:63:c5:27:59:94:f2:00:47:b6:55:a3:cf:42:eb: e3:a4:99:b2:c1:cb:c1:6a:6b:c3:44:a6:14:7e:3d: 5a:47:dc:c1:d9:c9:43:e5:50:a7:1a:a9:dd:73:5b: 19:f2:0e:a7:ef:05:d1:19:9b:0a:eb:34:7c:10:54: c1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A2:F1:CD:50:1D:60:4C:A8:E9:28:6E:E8:B3:CB:A8:EB:89:4F:41 X509v3 Authority Key Identifier: keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:90:f5:f4:75:21:7a:ea:d3:f9:6f:9a:2b:a4:38:d4:26:09: db:89:4e:ee:2c:d0:f7:e7:36:62:70:e4:be:e7:32:3d:e0:21: ae:ab:c8:d1:69:3c:05:ca:03:7a:85:f8:9f:e6:4b:d6:68:b9: c9:8a:67:c2:95:ca:e3:44:10:62:86:29:76:06:e2:74:6d:db: e1:60:0d:02:73:bd:9c:03:f5:9d:99:02:2c:e4:cd:c5:76:07: 59:a0:60:08:fb:9a:74:d5:cf:f1:87:45:4d:16:20:d5:7a:08: 7d:05:df:0a:1c:cd:76:d6:4a:9a:9d:46:4b:5c:d2:ea:8d:e8: a5:eb:48:53:9f:25:da:1a:e3:ed:93:24:75:d9:e7:12:fd:15: 0f:86:19:9d:b2:4a:8d:a5:34:2f:eb:67:7b:5c:3a:d8:bd:57: 49:e6:55:c9:9c:c6:c3:08:be:51:66:e9:5c:db:93:46:34:e0: b8:c2:1d:c4:57:f9:f4:e4:d1:a7:64:45:d5:3e:c4:f4:22:85: 56:97:94:ed:d8:44:11:40:02:64:de:1a:31:78:c4:90:f3:60: ae:51:01:be:c3:3a:cc:70:aa:a3:0b:aa:bf:55:56:1a:34:18: af:ca:a3:19:ab:49:0a:79:5e:86:fc:c8:35:81:15:3f:1e:30: cb:f0:38:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rr2NL/7ZWY9xXfzoNbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl OTU5NmMwHhcNMjUxMjIwMjMwMTAyWhcNMjUxMjIxMjMwMTAyWjAzMTEwLwYDVQQD Eyg0MGEyZjFjZDUwMWQ2MDRjYThlOTI4NmVlOGIzY2JhOGViODk0ZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9lzhxV5cZsqBPsfm7pwQsO7gjlY /DmP5prMdcKLKL9yYGP3KDCkjgmohzZU7iZ8HQMRrQTUj7dyiBjiUZfwL36w3jHm SHegpoYzFUs3cFveM4GUl/5ksxWNknBiyui37vEhhuHkd/dJI16pqYmuC4IbvuOs E+4W26ygMVNdXID2Zpad4wUJR9qe3dlG8AhXR4LCOD5zgE5LZJKIK0rkhPwRKeUy vsw15qrL/vz7tmJ6gASEvZNmN9Od+VNOE790gQayY8UnWZTyAEe2VaPPQuvjpJmy wcvBamvDRKYUfj1aR9zB2clD5VCnGqndc1sZ8g6n7wXRGZsK6zR8EFTB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECi8c1QHWBMqOkobuizy6jriU9BMB8GA1UdIwQY MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1 LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZD19HUh eurT+W+aK6Q41CYJ24lO7izQ9+c2YnDkvucyPeAhrqvI0Wk8BcoDeoX4n+ZL1mi5 yYpnwpXK40QQYoYpdgbidG3b4WANAnO9nAP1nZkCLOTNxXYHWaBgCPuadNXP8YdF TRYg1XoIfQXfChzNdtZKmp1GS1zS6o3opetIU58l2hrj7ZMkddnnEv0VD4YZnbJK jaU0L+tne1w62L1XSeZVyZzGwwi+UWbpXNuTRjTguMIdxFf59OTRp2RF1T7E9CKF VpeU7dhEEUACZN4aMXjEkPNgrlEBvsM6zHCqowuqv1VWGjQYr8qjGatJCnlehvzI NYEVPx4wy/A44w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:54:07 2025 by rpki-client