This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json) Hash identifier: vKFlne4vApZFvWeyETwyCh9Tz8AwvLR8ITaVrKF4k8Q= Subject key identifier: 30:8B:0B:C7:1C:95:80:D1:CF:5B:E9:AE:57:2D:8A:5D:3F:F2:0B:C3 Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Certificate serial: 019B3456661FF2828104F05EA98FB8BD1282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft Manifest number: 0D35 Signing time: Fri 19 Dec 2025 02:00:35 +0000 Manifest this update: Fri 19 Dec 2025 02:00:35 +0000 Manifest next update: Sat 20 Dec 2025 02:00:35 +0000 Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: DxJQtHDcFDiyy97b0nA+iyi80OxUb1zTtobqlaR7g08=) 2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:66:1f:f2:82:81:04:f0:5e:a9:8f:b8:bd:12:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Validity Not Before: Dec 19 02:00:35 2025 GMT Not After : Dec 20 02:00:35 2025 GMT Subject: CN=308b0bc71c9580d1cf5be9ae572d8a5d3ff20bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f8:ee:5f:4f:32:7a:9d:29:68:f8:64:30:74: 62:de:b4:6c:5e:c4:34:62:2a:6a:b4:6e:82:98:b1: bf:e5:61:13:e9:ee:60:5e:36:1c:21:f9:5e:56:94: 6d:fe:24:85:a9:2a:5e:03:c8:39:61:79:b5:c2:d8: f5:8e:64:75:74:51:40:54:88:0f:2e:ef:10:23:d9: 82:52:ff:51:18:fa:02:5a:d2:40:39:af:a4:20:31: ab:57:b7:67:f1:3d:e7:7c:3a:90:0d:4a:e4:02:b7: 85:6b:0b:db:c3:59:c7:51:c1:68:e1:f8:ee:65:c0: 50:35:85:04:14:82:23:90:87:aa:f6:b9:c2:76:56: 8e:68:bc:92:a6:ec:8e:6f:f1:53:26:9b:07:2f:de: b8:4d:b6:9e:c3:a8:af:b1:15:d9:1f:1f:0d:2f:1f: 2a:bc:a3:a9:40:38:8a:49:a0:eb:25:a0:ea:60:1a: 27:ea:e0:77:9c:75:56:fb:db:a9:04:af:13:93:12: 4b:3d:c9:51:66:85:66:c2:0c:79:23:92:f6:c1:f3: 8e:b4:82:6f:1b:5a:37:0a:19:61:ab:a9:ba:d1:a9: 5d:4a:da:2c:45:55:0e:8e:9b:66:05:5c:0f:49:37: 7b:e6:d0:27:91:81:72:31:1c:13:58:24:c1:d8:0f: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:0B:C7:1C:95:80:D1:CF:5B:E9:AE:57:2D:8A:5D:3F:F2:0B:C3 X509v3 Authority Key Identifier: keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:96:d1:27:c4:6c:5e:55:eb:99:e2:67:9e:22:36:6b:0a:33: be:22:72:31:8c:77:97:bf:63:09:12:d8:0c:9e:fa:3f:32:c3: 89:9c:a9:bf:ad:62:12:9a:84:25:91:16:38:e0:a9:a2:ef:93: 95:85:ee:46:95:1e:0d:85:fc:eb:a1:2a:b4:ca:53:cc:69:2e: 11:d0:1c:3a:11:57:cc:cf:ad:b0:67:9c:a1:d8:c3:30:47:b7: d6:a2:f9:88:b2:2c:18:f0:40:ce:aa:cf:17:67:99:69:af:72: 4f:f8:00:f5:70:d2:d7:70:c0:79:0c:84:bd:f5:bc:44:e7:8c: 5a:7c:9c:66:26:30:4d:e4:28:ec:c1:9b:94:f7:27:63:5a:95: ac:d4:db:6f:b3:d4:24:65:8f:01:f8:91:ba:46:47:87:23:d1: b5:5e:76:8c:71:f4:c1:49:36:b6:86:8e:61:eb:1f:c4:f5:57: b8:6b:fa:6b:69:fa:64:97:e3:79:ad:2a:c3:08:65:23:43:10: 4d:21:d9:f6:ae:09:e1:04:72:57:dc:51:88:00:1b:f9:be:62: 6b:98:9a:59:16:8f:fd:4f:37:f4:23:f2:63:b8:84:92:43:d4: f9:bb:ea:6b:63:ca:8e:67:73:19:77:0d:3d:9a:a5:c8:bc:77: 92:cb:c4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmYf8oKBBPBeqY+4vRKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk MWM2NzMwHhcNMjUxMjE5MDIwMDM1WhcNMjUxMjIwMDIwMDM1WjAzMTEwLwYDVQQD EygzMDhiMGJjNzFjOTU4MGQxY2Y1YmU5YWU1NzJkOGE1ZDNmZjIwYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fjuX08yep0paPhkMHRi3rRsXsQ0 YipqtG6CmLG/5WET6e5gXjYcIfleVpRt/iSFqSpeA8g5YXm1wtj1jmR1dFFAVIgP Lu8QI9mCUv9RGPoCWtJAOa+kIDGrV7dn8T3nfDqQDUrkAreFawvbw1nHUcFo4fju ZcBQNYUEFIIjkIeq9rnCdlaOaLySpuyOb/FTJpsHL964Tbaew6ivsRXZHx8NLx8q vKOpQDiKSaDrJaDqYBon6uB3nHVW+9upBK8TkxJLPclRZoVmwgx5I5L2wfOOtIJv G1o3Chlhq6m60aldStosRVUOjptmBVwPSTd75tAnkYFyMRwTWCTB2A9dbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCLC8cclYDRz1vprlctil0/8gvDMB8GA1UdIwQY MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt MjMyYjRiNDY1N2U5LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5 LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZbRJ8Rs XlXrmeJnniI2awozviJyMYx3l79jCRLYDJ76PzLDiZypv61iEpqEJZEWOOCpou+T lYXuRpUeDYX866EqtMpTzGkuEdAcOhFXzM+tsGecodjDMEe31qL5iLIsGPBAzqrP F2eZaa9yT/gA9XDS13DAeQyEvfW8ROeMWnycZiYwTeQo7MGblPcnY1qVrNTbb7PU JGWPAfiRukZHhyPRtV52jHH0wUk2toaOYesfxPVXuGv6a2n6ZJfjea0qwwhlI0MQ TSHZ9q4J4QRyV9xRiAAb+b5ia5iaWRaP/U839CPyY7iEkkPU+bvqa2PKjmdzGXcN PZqlyLx3ksvEaw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:20 2025 by rpki-client