This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json) Hash identifier: LgRon9cJXbl+PsQpHsdhKG+zsK0J/YgNso+xDObLkrM= Subject key identifier: F0:10:FD:1F:8A:19:2E:E3:3F:64:F1:D4:CA:9A:40:E6:93:F8:3B:4D Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738 Certificate serial: 019B2D419B38B26031BF364EA0468ADAD236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 17:00:32 +0000 Manifest this update: Wed 17 Dec 2025 17:00:32 +0000 Manifest next update: Thu 18 Dec 2025 17:00:32 +0000 Files and hashes: 1: 4MlBcLkACtQP09DCmTzQOZzBiyU.roa (hash: VC+StI3JXPJWvc2fZQnaWQlAtRDc6F/BQhSkSjXucPs=) 2: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: g9qJNX4y7i8Q0X3D1UhL9fuCoZem/1bVbBrAsOMRhXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:9b:38:b2:60:31:bf:36:4e:a0:46:8a:da:d2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738 Validity Not Before: Dec 17 17:00:32 2025 GMT Not After : Dec 18 17:00:32 2025 GMT Subject: CN=f010fd1f8a192ee33f64f1d4ca9a40e693f83b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:56:72:c1:22:ab:ac:33:3f:3b:98:cd:9f: c1:33:1c:c8:96:76:2e:41:41:ea:e4:4a:06:b6:e5: 39:3a:b2:12:56:7f:8a:81:23:92:23:73:0e:52:4a: 14:bc:79:79:7f:e2:6f:5f:f7:d5:08:11:ea:15:b9: 24:0c:40:6b:43:34:45:90:4a:cc:3f:f2:f6:61:ca: 59:bf:75:9f:2d:8e:a5:99:a6:66:ba:36:53:99:45: 5c:77:ec:a5:5d:dc:40:3b:df:a0:98:ae:66:ab:33: b4:7b:65:f4:ef:0b:f8:f2:de:d9:3d:6b:13:bd:39: 89:68:b1:2c:89:f8:63:43:0a:d7:7e:ef:1e:6d:47: da:ee:80:97:3b:85:cb:4b:ad:77:b2:05:68:b9:c3: 09:f8:cf:d0:f6:44:d0:26:35:73:d3:93:5b:9d:b6: 1b:e3:c3:72:47:cd:2c:83:8c:8f:3e:04:56:73:d8: 14:5d:1a:68:e9:b4:64:71:21:7c:3b:75:92:00:18: f5:d1:28:e4:a2:2d:96:b6:1c:8d:7e:c1:e0:bc:54: 1d:1f:f9:05:5c:18:a3:00:d0:04:a9:5e:df:67:31: 2b:eb:b5:41:40:00:d3:5c:27:e8:9b:ee:16:38:9a: c0:de:95:55:76:aa:83:d8:76:53:35:be:70:45:57: eb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:10:FD:1F:8A:19:2E:E3:3F:64:F1:D4:CA:9A:40:E6:93:F8:3B:4D X509v3 Authority Key Identifier: keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9b:5e:f9:ee:8a:71:f0:1a:a3:5d:63:7b:77:de:a3:80:8a: bc:e8:72:96:98:4e:65:fa:d2:d6:f6:e4:3d:73:a0:21:37:27: f8:01:61:0b:b7:b0:db:0d:1c:4b:d1:08:84:04:e8:46:84:3b: a1:42:86:db:09:8b:d7:d8:79:12:22:6c:9c:0c:fc:b1:61:1f: 1b:dd:6b:a2:b7:6d:0e:df:b4:28:cb:43:17:6f:81:71:6b:3d: b5:65:9a:79:ad:93:3c:60:b5:db:24:23:56:18:72:75:15:fd: 25:0e:3f:c7:44:13:2e:70:c8:79:cc:4f:1c:3e:f8:1e:49:fc: 25:21:57:a0:e3:d9:82:55:40:fd:3d:ac:86:05:87:0d:96:48: 2a:81:4d:a9:84:f1:b5:6a:6a:4c:bd:68:2a:9b:60:4b:63:35: 99:0f:dd:39:35:dc:58:43:2a:58:d1:7a:26:d0:2d:b8:25:a7: 3e:4f:5c:86:91:68:e7:29:36:7d:70:92:71:5c:30:dc:0e:9e: 9d:60:41:38:59:1f:a1:e3:03:00:27:43:3d:3b:30:d4:0a:f2: 98:47:c9:df:47:3b:3f:05:91:20:6f:1c:10:d4:d4:5d:18:21: 4c:b4:c0:ab:e9:e2:41:b4:54:ce:9d:e1:36:90:f1:c6:f9:6e: f1:90:86:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQZs4smAxvzZOoEaK2tI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi MzE3MzgwHhcNMjUxMjE3MTcwMDMyWhcNMjUxMjE4MTcwMDMyWjAzMTEwLwYDVQQD EyhmMDEwZmQxZjhhMTkyZWUzM2Y2NGYxZDRjYTlhNDBlNjkzZjgzYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf9WcsEiq6wzPzuYzZ/BMxzIlnYu QUHq5EoGtuU5OrISVn+KgSOSI3MOUkoUvHl5f+JvX/fVCBHqFbkkDEBrQzRFkErM P/L2YcpZv3WfLY6lmaZmujZTmUVcd+ylXdxAO9+gmK5mqzO0e2X07wv48t7ZPWsT vTmJaLEsifhjQwrXfu8ebUfa7oCXO4XLS613sgVoucMJ+M/Q9kTQJjVz05NbnbYb 48NyR80sg4yPPgRWc9gUXRpo6bRkcSF8O3WSABj10Sjkoi2WthyNfsHgvFQdH/kF XBijANAEqV7fZzEr67VBQADTXCfom+4WOJrA3pVVdqqD2HZTNb5wRVfr7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAQ/R+KGS7jP2Tx1MqaQOaT+DtNMB8GA1UdIwQY MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt MmQ4NDdhM2Y3ZDJmLzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5te+e6K cfAao11je3feo4CKvOhylphOZfrS1vbkPXOgITcn+AFhC7ew2w0cS9EIhAToRoQ7 oUKG2wmL19h5EiJsnAz8sWEfG91rordtDt+0KMtDF2+BcWs9tWWaea2TPGC12yQj VhhydRX9JQ4/x0QTLnDIecxPHD74Hkn8JSFXoOPZglVA/T2shgWHDZZIKoFNqYTx tWpqTL1oKptgS2M1mQ/dOTXcWEMqWNF6JtAtuCWnPk9chpFo5yk2fXCScVww3A6e nWBBOFkfoeMDACdDPTsw1ArymEfJ30c7PwWRIG8cENTUXRghTLTAq+niQbRUzp3h NpDxxvlu8ZCGaw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:34 2025 by rpki-client