This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json) Hash identifier: 81GH6eiGG5fi0uV5ORyDtG+rmHoT3tmMC5PcJsNWIcE= Subject key identifier: 23:58:FB:A3:55:CB:51:CB:73:F8:F9:D9:D2:D9:90:96:D1:58:70:61 Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148 Certificate serial: 019B39B453D30D4C362EA47EE14C689D0FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft Manifest number: 0297 Signing time: Sat 20 Dec 2025 03:01:17 +0000 Manifest this update: Sat 20 Dec 2025 03:01:17 +0000 Manifest next update: Sun 21 Dec 2025 03:01:17 +0000 Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: VbBaSXEZY72v4l3Dc9g1jcbS7mUanZSDyilqJAY1PoI=) 2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:53:d3:0d:4c:36:2e:a4:7e:e1:4c:68:9d:0f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148 Validity Not Before: Dec 20 03:01:17 2025 GMT Not After : Dec 21 03:01:17 2025 GMT Subject: CN=2358fba355cb51cb73f8f9d9d2d99096d1587061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:38:bb:31:d3:a6:0b:ab:62:a7:07:30:e5: aa:ec:f6:85:1c:4a:cd:52:34:90:8c:a5:49:b4:59: be:c9:4e:b7:cf:59:a9:98:59:9d:6d:83:52:f5:58: 04:0a:c8:eb:0b:90:05:c5:07:87:e2:57:bd:30:ed: ad:47:64:eb:a0:5d:e2:71:67:f0:ed:e7:43:86:b8: 35:bb:41:f9:c3:c4:f2:93:07:ee:47:3c:c4:d5:4b: 99:b0:5f:10:84:59:57:bb:96:61:e3:23:a3:16:b0: d3:ed:52:a2:89:f7:6b:da:14:3a:4a:46:bc:87:42: 21:8b:eb:78:5b:63:39:dc:d0:e3:a4:34:f3:79:53: ff:d2:cd:dc:2c:43:dc:6b:f8:e1:56:da:f2:73:34: 65:2e:e3:2d:dc:c3:6e:f7:45:46:fa:49:21:17:15: 18:38:45:29:80:6d:aa:2d:ff:94:8a:70:83:d0:37: 7d:f7:81:f1:51:af:6c:96:09:53:cd:0d:55:81:4f: 29:06:a0:76:4a:12:ff:8d:57:2a:9c:50:86:ac:9c: 7b:6c:96:a8:49:ae:8d:9d:4f:47:03:d6:3f:5f:85: 13:0a:c3:d9:0f:42:bc:57:fa:a0:5d:b0:4c:76:8f: 9e:be:e4:d2:12:9b:e3:68:ca:12:44:ad:4f:b0:a2: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:FB:A3:55:CB:51:CB:73:F8:F9:D9:D2:D9:90:96:D1:58:70:61 X509v3 Authority Key Identifier: keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:7c:67:2f:81:e0:27:a0:bc:5c:ef:e8:84:c0:11:76:33:4b: 0c:d5:bb:5b:67:3d:ee:10:b4:2d:cd:10:1a:2d:61:f1:17:1f: 77:be:47:99:82:da:d2:90:6b:3c:7e:50:dd:ac:45:16:35:4a: b4:4e:0d:01:71:7b:68:18:c2:fc:5c:08:17:f6:17:47:36:91: c6:04:b7:e1:4d:e3:8a:a2:f2:5d:f8:ba:58:19:f6:af:b9:51: 26:36:06:a9:d7:44:5e:be:68:e0:63:19:b0:e3:f0:ad:19:5e: c3:22:4e:02:ef:22:7e:b6:77:fd:61:4f:3b:a3:d8:3c:e7:f3: 5c:b4:27:ff:62:fc:38:0d:97:a2:c2:bc:3a:e3:d0:f0:82:87: bb:7f:67:26:df:2f:be:90:d9:3b:0b:9b:63:f6:b6:09:85:91: b4:8d:3c:cf:b0:9c:72:90:3a:fe:fa:bd:e6:67:20:47:19:ec: 04:a5:5d:9a:56:b7:4e:1c:3c:66:f1:75:d2:42:ca:52:fb:3d: 13:5d:a2:35:ed:d7:a7:c2:8b:e6:96:75:ca:b4:bc:9d:1d:3a: 5a:a7:76:3d:9a:77:ea:0e:23:e1:07:5c:a0:1f:1b:59:75:1a: 8d:1d:35:ea:50:ae:8c:e9:d7:79:55:07:f3:f9:84:d1:14:82: 65:69:70:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tFPTDUw2LqR+4UxonQ/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh ZTAxNDgwHhcNMjUxMjIwMDMwMTE3WhcNMjUxMjIxMDMwMTE3WjAzMTEwLwYDVQQD EygyMzU4ZmJhMzU1Y2I1MWNiNzNmOGY5ZDlkMmQ5OTA5NmQxNTg3MDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0M4uzHTpgurYqcHMOWq7PaFHErN UjSQjKVJtFm+yU63z1mpmFmdbYNS9VgECsjrC5AFxQeH4le9MO2tR2TroF3icWfw 7edDhrg1u0H5w8TykwfuRzzE1UuZsF8QhFlXu5Zh4yOjFrDT7VKiifdr2hQ6Ska8 h0Ihi+t4W2M53NDjpDTzeVP/0s3cLEPca/jhVtryczRlLuMt3MNu90VG+kkhFxUY OEUpgG2qLf+UinCD0Dd994HxUa9slglTzQ1VgU8pBqB2ShL/jVcqnFCGrJx7bJao Sa6NnU9HA9Y/X4UTCsPZD0K8V/qgXbBMdo+evuTSEpvjaMoSRK1PsKIVtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNY+6NVy1HLc/j52dLZkJbRWHBhMB8GA1UdIwQY MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXxnL4Hg J6C8XO/ohMARdjNLDNW7W2c97hC0Lc0QGi1h8Rcfd75HmYLa0pBrPH5Q3axFFjVK tE4NAXF7aBjC/FwIF/YXRzaRxgS34U3jiqLyXfi6WBn2r7lRJjYGqddEXr5o4GMZ sOPwrRlewyJOAu8ifrZ3/WFPO6PYPOfzXLQn/2L8OA2XosK8OuPQ8IKHu39nJt8v vpDZOwubY/a2CYWRtI08z7CccpA6/vq95mcgRxnsBKVdmla3Thw8ZvF10kLKUvs9 E12iNe3Xp8KL5pZ1yrS8nR06Wqd2PZp36g4j4QdcoB8bWXUajR016lCujOnXeVUH 8/mE0RSCZWlwCA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:08 2025 by rpki-client