This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json) Hash identifier: 3J7XWC0flwNvkzXe8Qu5J46OWlHL2iOk2NggdqnbeS4= Subject key identifier: 01:25:C0:28:2D:F5:5F:84:A3:40:79:B5:D1:83:E6:81:00:DF:D3:61 Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019B397D8C42DF4A605CDD4746D72682F93E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft Manifest number: 31 Signing time: Sat 20 Dec 2025 02:01:27 +0000 Manifest this update: Sat 20 Dec 2025 02:01:27 +0000 Manifest next update: Sun 21 Dec 2025 02:01:27 +0000 Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: S12Z/O9wRLSCgd35FJGE3IEiL4Fo09OmtJ+4++1Bd08=) 2: FH7sO2w4buuUxe4Xni3YZHcOAgs.roa (hash: kJoB+cGjyVW2fni2uIlOIfUSADoKT5LoOeBxc8WKnUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:8c:42:df:4a:60:5c:dd:47:46:d7:26:82:f9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Dec 20 02:01:27 2025 GMT Not After : Dec 21 02:01:27 2025 GMT Subject: CN=0125c0282df55f84a34079b5d183e68100dfd361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:7a:62:d4:9b:69:9f:2e:df:38:22:ed:62: 04:8b:90:59:41:79:a1:a4:d3:f5:5b:d8:27:15:0d: d9:37:13:37:8d:f9:a6:5e:81:ab:7b:31:e4:a5:53: 2a:51:fc:f0:24:40:ba:da:97:ca:78:84:c3:7b:c5: bf:c9:55:f3:2a:29:cf:13:6a:89:04:af:3c:8a:de: 29:79:38:55:a4:d1:a0:53:58:02:b7:fe:15:3a:a8: 1c:29:de:15:3c:7a:da:75:bb:83:8b:21:50:9d:48: bf:8f:0e:e1:a4:5c:b6:e7:05:7a:53:06:99:f3:10: ac:00:5f:b6:57:26:11:c2:d6:1c:4b:67:03:45:f2: 0d:12:7a:5f:5f:5b:c6:cd:6a:ec:67:58:d8:56:8a: 6b:bc:ef:bd:74:32:e5:c0:0d:3f:fd:cb:88:78:ee: 2b:2a:7b:37:05:a2:a4:f8:24:93:d3:34:33:19:0b: 68:d9:63:58:e5:f4:0f:db:a7:dc:dd:12:c2:5b:02: f7:75:f4:e3:ee:71:e8:84:51:48:b2:05:85:29:ff: e6:d0:62:b0:78:c2:db:f0:c1:33:0e:30:32:4b:30: ea:25:92:8c:d4:33:d8:b0:ca:15:b4:35:c1:ff:52: 75:9d:64:a3:87:19:3f:26:a5:15:d7:28:52:62:89: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:C0:28:2D:F5:5F:84:A3:40:79:B5:D1:83:E6:81:00:DF:D3:61 X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:33:26:1d:0b:7e:cd:af:0f:c7:0c:b2:ce:58:fe:70:eb:88: e8:6e:43:4f:90:b6:f4:38:7f:80:f6:48:6d:a3:97:4f:98:0d: 89:90:c8:4d:50:97:82:65:d3:41:a5:e8:b7:37:8e:a0:f4:93: 71:53:33:77:23:87:45:c3:45:34:9c:ff:d8:62:6b:70:5b:04: cd:bb:8e:75:d7:c5:5b:0c:c0:4f:d8:72:fa:2c:da:e2:c3:21: 3e:2a:38:66:8c:c6:e7:e3:6d:e7:72:af:96:52:f9:d9:82:a8: fe:09:70:b3:47:51:3d:c6:a5:0e:f0:34:11:b7:20:16:3a:99: b2:a0:8b:0b:30:45:15:fa:2c:e6:24:4f:5b:fe:64:b5:ab:8a: 96:0a:c6:43:52:77:fb:6e:c4:2e:e9:b4:57:d5:fd:7c:fd:8c: 49:0a:3e:7b:75:9b:cd:88:3f:fc:34:0c:a1:2b:54:54:b5:f4: 40:9d:3e:3f:8b:af:bb:65:19:8e:d2:20:70:f8:2d:cc:05:6f: aa:d2:a3:d6:d1:6b:e6:1a:a9:4d:a5:0c:bd:b3:a8:7b:2b:7d: fc:bb:e5:a4:b1:59:76:fc:15:83:46:9d:27:84:49:42:a2:5d: 96:42:54:3b:aa:28:38:e1:99:a0:03:29:18:0f:1d:0a:6b:3e: e4:07:29:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fYxC30pgXN1HRtcmgvk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjUxMjIwMDIwMTI3WhcNMjUxMjIxMDIwMTI3WjAzMTEwLwYDVQQD EygwMTI1YzAyODJkZjU1Zjg0YTM0MDc5YjVkMTgzZTY4MTAwZGZkMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBd6YtSbaZ8u3zgi7WIEi5BZQXmh pNP1W9gnFQ3ZNxM3jfmmXoGrezHkpVMqUfzwJEC62pfKeITDe8W/yVXzKinPE2qJ BK88it4peThVpNGgU1gCt/4VOqgcKd4VPHradbuDiyFQnUi/jw7hpFy25wV6UwaZ 8xCsAF+2VyYRwtYcS2cDRfINEnpfX1vGzWrsZ1jYVoprvO+9dDLlwA0//cuIeO4r Kns3BaKk+CST0zQzGQto2WNY5fQP26fc3RLCWwL3dfTj7nHohFFIsgWFKf/m0GKw eMLb8MEzDjAySzDqJZKM1DPYsMoVtDXB/1J1nWSjhxk/JqUV1yhSYonyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAElwCgt9V+Eo0B5tdGD5oEA39NhMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczMmHQt+ za8Pxwyyzlj+cOuI6G5DT5C29Dh/gPZIbaOXT5gNiZDITVCXgmXTQaXotzeOoPST cVMzdyOHRcNFNJz/2GJrcFsEzbuOddfFWwzAT9hy+iza4sMhPio4ZozG5+Nt53Kv llL52YKo/glws0dRPcalDvA0EbcgFjqZsqCLCzBFFfos5iRPW/5ktauKlgrGQ1J3 +27ELum0V9X9fP2MSQo+e3WbzYg//DQMoStUVLX0QJ0+P4uvu2UZjtIgcPgtzAVv qtKj1tFr5hqpTaUMvbOoeyt9/LvlpLFZdvwVg0adJ4RJQqJdlkJUO6ooOOGZoAMp GA8dCms+5AcpOw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:47 2025 by rpki-client