This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json) Hash identifier: 9Z/pextMxOlfysq5mlP6tqLvFm0585d6a4KwM5wPqJQ= Subject key identifier: 2C:0B:9B:52:04:FE:D8:2D:BD:E7:82:5C:38:A2:B6:05:55:62:01:5E Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Certificate serial: 019B2F9EB8F6ACFE6FEE607E47FEB19FD917 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft Manifest number: 068B Signing time: Thu 18 Dec 2025 04:01:29 +0000 Manifest this update: Thu 18 Dec 2025 04:01:29 +0000 Manifest next update: Fri 19 Dec 2025 04:01:29 +0000 Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: VC76od376/80KK/4eHUbjlLhp0SVh43ONegKeOW6ch0=) 2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:b8:f6:ac:fe:6f:ee:60:7e:47:fe:b1:9f:d9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7 Validity Not Before: Dec 18 04:01:29 2025 GMT Not After : Dec 19 04:01:29 2025 GMT Subject: CN=2c0b9b5204fed82dbde7825c38a2b6055562015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:43:be:5d:3b:8f:db:52:b7:4e:9f:3d:97: 13:24:5e:57:5a:b2:5a:da:85:07:ef:e1:df:b2:e0: 26:a6:aa:be:ae:95:2f:03:4f:e6:c8:6f:3a:7a:4a: 35:60:38:6c:a2:47:e7:80:37:b6:25:fa:61:1b:0b: 08:a4:e5:d7:39:50:f6:29:16:ad:df:58:6e:61:94: 8d:b9:0a:fd:f8:1c:d3:c5:50:2a:41:c3:fc:9f:28: 34:c0:ef:da:d4:c9:91:5c:d2:0a:92:63:ab:25:58: 11:1e:18:32:66:e2:73:0d:d9:b9:bd:5b:44:87:05: 12:8e:7b:5c:40:0c:7f:3d:ce:3d:18:a3:a6:28:ff: 74:18:1f:e1:67:30:ee:f2:17:85:4d:8a:92:ab:f2: 78:ec:2e:68:82:b1:77:34:93:b0:ea:fd:24:10:a4: 31:a6:2e:3c:93:4c:e8:aa:18:e8:f6:26:34:86:51: 66:f6:c1:31:07:09:6d:dd:92:84:38:93:fe:e6:ad: d6:64:ab:48:ec:d9:4d:6c:2a:03:f7:b1:ef:34:29: ff:2a:ff:23:8b:ef:d2:97:cd:00:b3:fb:f2:1e:69: 25:b7:34:93:fa:b4:93:da:0a:d3:e1:0c:75:f8:03: d5:9e:ac:7c:e3:16:37:8e:9c:8f:17:6c:df:91:0f: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0B:9B:52:04:FE:D8:2D:BD:E7:82:5C:38:A2:B6:05:55:62:01:5E X509v3 Authority Key Identifier: keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:29:45:41:d0:4a:15:71:c1:4b:dd:b2:b3:8e:a1:53:57:9e: 21:f5:d9:52:d6:02:c2:8d:8d:cf:96:a4:56:a7:a5:05:a6:60: 22:6d:e9:22:60:63:72:db:2b:ba:24:6e:cd:77:bb:9b:4e:de: 12:7b:25:29:b3:81:3c:f9:d1:c1:77:73:13:b3:f7:54:35:8e: e4:ca:dd:4f:f8:1f:39:fa:c9:40:91:20:5e:e2:93:1b:b8:00: fc:03:48:f3:6b:fd:e4:f3:1c:58:83:ea:c6:79:99:d7:fb:8c: 4d:ec:df:7c:49:f5:bd:3c:b7:6a:d8:50:41:08:fc:8d:11:84: 1c:6d:60:d9:96:10:28:10:85:67:68:e6:c5:9e:e4:35:d6:19: 6b:0c:c2:62:e5:af:c4:cd:a7:e8:fd:5b:5e:02:da:80:89:ce: 7b:93:7a:87:fa:09:b7:3c:68:22:ea:66:08:45:b3:37:5b:00: 25:7f:3b:c7:46:06:18:68:7e:f6:2a:57:ec:33:5d:6b:df:4a: 03:d1:5c:6c:de:9d:9d:a9:37:a7:d2:66:1f:3f:97:31:22:ef: ac:ef:f8:c8:4a:5c:0e:57:af:e0:5c:b3:6d:c3:4f:27:2d:eb: 56:bb:cf:c3:9d:b5:3c:e6:d6:94:31:5f:c8:41:fb:52:04:19: 24:83:6d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnrj2rP5v7mB+R/6xn9kXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4 Mjk2YzcwHhcNMjUxMjE4MDQwMTI5WhcNMjUxMjE5MDQwMTI5WjAzMTEwLwYDVQQD EygyYzBiOWI1MjA0ZmVkODJkYmRlNzgyNWMzOGEyYjYwNTU1NjIwMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL9Dvl07j9tSt06fPZcTJF5XWrJa 2oUH7+HfsuAmpqq+rpUvA0/myG86eko1YDhsokfngDe2JfphGwsIpOXXOVD2KRat 31huYZSNuQr9+BzTxVAqQcP8nyg0wO/a1MmRXNIKkmOrJVgRHhgyZuJzDdm5vVtE hwUSjntcQAx/Pc49GKOmKP90GB/hZzDu8heFTYqSq/J47C5ogrF3NJOw6v0kEKQx pi48k0zoqhjo9iY0hlFm9sExBwlt3ZKEOJP+5q3WZKtI7NlNbCoD97HvNCn/Kv8j i+/Sl80As/vyHmkltzST+rST2grT4Qx1+APVnqx84xY3jpyPF2zfkQ9MRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwLm1IE/tgtveeCXDiitgVVYgFeMB8GA1UdIwQY MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWClFQdBK FXHBS92ys46hU1eeIfXZUtYCwo2Nz5akVqelBaZgIm3pImBjctsruiRuzXe7m07e EnslKbOBPPnRwXdzE7P3VDWO5MrdT/gfOfrJQJEgXuKTG7gA/ANI82v95PMcWIPq xnmZ1/uMTezffEn1vTy3athQQQj8jRGEHG1g2ZYQKBCFZ2jmxZ7kNdYZawzCYuWv xM2n6P1bXgLagInOe5N6h/oJtzxoIupmCEWzN1sAJX87x0YGGGh+9ipX7DNda99K A9FcbN6dnak3p9JmHz+XMSLvrO/4yEpcDlev4FyzbcNPJy3rVrvPw521PObWlDFf yEH7UgQZJINtkg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:58:18 2025 by rpki-client