This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft File: 0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json) Hash identifier: Es3iSu06XVApcD5WNLibUIGsjL2wleholbZUIyG7j8A= Subject key identifier: DB:FC:BE:FA:9E:AB:8E:03:4F:A2:48:E4:4C:96:97:3F:56:A4:12:12 Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 Certificate issuer: /CN=d05581472b92a85a90caa1e47d7223d788ae0148 Certificate serial: 019B11262660E342CB62EF517F1AECF7E52B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft Manifest number: 0282 Signing time: Fri 12 Dec 2025 06:01:11 +0000 Manifest this update: Fri 12 Dec 2025 06:01:11 +0000 Manifest next update: Sat 13 Dec 2025 06:01:11 +0000 Files and hashes: 1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: f03wLHZcToeNhRkXQv1F8ZryDYwqL1gUgfr0MjzMlwQ=) 2: Tdi0Hj6bQsB2NE33pvFHyR4UnH4.roa (hash: QY4nN2KRRzSRBGH5wO5xXZyBIH3qA69otudacqD4SWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:26:60:e3:42:cb:62:ef:51:7f:1a:ec:f7:e5:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148 Validity Not Before: Dec 12 06:01:11 2025 GMT Not After : Dec 13 06:01:11 2025 GMT Subject: CN=dbfcbefa9eab8e034fa248e44c96973f56a41212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:3a:82:c8:6d:22:e7:7f:a2:80:90:a8:3d: a7:1d:1b:6f:8d:0a:dd:82:97:62:41:74:b9:71:3c: c1:75:f7:70:d2:16:f7:47:a2:7a:da:95:db:62:b1: 48:f2:79:42:01:41:9d:d9:85:d0:53:13:b6:a8:b7: 73:76:c1:74:bd:0f:31:0a:64:65:47:ef:93:3e:1b: 95:81:4e:03:fd:c6:da:81:2e:0d:dd:16:36:0f:e1: 4f:b5:a2:3a:c7:79:ce:a1:3a:41:a3:51:f1:2c:f5: c9:44:a4:bd:23:64:0e:72:52:f3:73:9d:0e:1c:29: 3b:eb:ba:4b:d0:ea:1c:23:7b:32:16:f1:c2:f7:fd: 15:86:96:61:af:fc:92:aa:7b:5d:f1:7a:b5:c6:91: 0a:d5:4e:8b:75:38:47:04:e5:bf:b2:09:bb:40:02: 26:73:08:ad:52:22:3f:9e:32:41:99:9d:74:66:61: 0c:c1:a0:08:c4:5e:a2:7e:a0:68:20:e4:ba:ed:72: ba:0a:1f:b3:0e:c6:ab:22:42:93:eb:f4:97:76:eb: 1b:34:88:57:a4:b3:8a:c8:90:c2:91:be:e8:11:aa: 3b:ac:39:ef:cf:1c:63:8a:05:1e:96:97:8c:4c:fc: 2d:4c:25:de:86:16:5e:53:74:b2:b9:d0:84:2a:74: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FC:BE:FA:9E:AB:8E:03:4F:A2:48:E4:4C:96:97:3F:56:A4:12:12 X509v3 Authority Key Identifier: keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:0e:84:70:fa:b9:ce:7a:b7:31:84:fa:4f:e8:60:99:e3:0b: 23:de:12:38:fb:32:77:db:fe:0c:4e:98:23:87:3d:ee:6d:7a: 17:21:d6:56:e9:15:3c:48:0b:a7:d1:25:dd:c1:77:e4:6c:fa: b5:8b:57:24:6d:20:a2:4a:4a:b0:36:d2:55:7f:a4:20:b6:41: 43:9a:46:7f:08:c7:f8:2a:c5:c1:c8:95:9e:93:e5:bc:f4:76: 66:3b:3c:c6:b5:2f:b8:fe:cc:5d:7c:b2:28:ff:e2:ca:d4:61: 52:9c:31:9b:51:21:1d:84:de:52:11:22:3b:c6:31:60:77:e7: aa:1f:e5:09:24:a2:dc:ea:bc:b3:8b:f9:60:8b:d0:fc:6b:b7: d9:0b:6f:08:56:c1:93:2c:7c:d8:f7:22:cd:1b:64:3f:a8:67: 7a:50:a1:24:71:d7:61:20:e5:1e:22:c1:ad:74:0e:29:8d:70: 3d:35:9b:2b:4a:46:63:ff:ee:cb:78:24:0a:36:04:4b:06:83: ae:c1:6e:d6:c4:85:83:f2:2f:31:50:33:fe:83:39:7e:a8:5a: 9b:f9:94:37:8d:93:66:92:92:99:3d:9e:11:e6:6a:e1:6c:a6: 7d:c3:75:e8:3d:84:4b:93:62:70:f1:c1:25:08:a3:79:f1:5d: e6:61:12:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJiZg40LLYu9Rfxrs9+UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNTU4MTQ3MmI5MmE4NWE5MGNhYTFlNDdkNzIyM2Q3ODhh ZTAxNDgwHhcNMjUxMjEyMDYwMTExWhcNMjUxMjEzMDYwMTExWjAzMTEwLwYDVQQD EyhkYmZjYmVmYTllYWI4ZTAzNGZhMjQ4ZTQ0Yzk2OTczZjU2YTQxMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Q6gshtIud/ooCQqD2nHRtvjQrd gpdiQXS5cTzBdfdw0hb3R6J62pXbYrFI8nlCAUGd2YXQUxO2qLdzdsF0vQ8xCmRl R++TPhuVgU4D/cbagS4N3RY2D+FPtaI6x3nOoTpBo1HxLPXJRKS9I2QOclLzc50O HCk767pL0OocI3syFvHC9/0VhpZhr/ySqntd8Xq1xpEK1U6LdThHBOW/sgm7QAIm cwitUiI/njJBmZ10ZmEMwaAIxF6ifqBoIOS67XK6Ch+zDsarIkKT6/SXdusbNIhX pLOKyJDCkb7oEao7rDnvzxxjigUelpeMTPwtTCXehhZeU3SyudCEKnRpIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNv8vvqeq44DT6JI5EyWlz9WpBISMB8GA1UdIwQY MBaAFNBVgUcrkqhakMqh5H1yI9eIrgFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYt M2JkYWFjYjlkMDhkLzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hMDg3NDgtODYyMi00ZTg2LTgyZWYtM2JkYWFjYjlkMDhk LzEvMEZXQlJ5dVNxRnFReXFIa2ZYSWoxNGl1QVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg6EcPq5 znq3MYT6T+hgmeMLI94SOPsyd9v+DE6YI4c97m16FyHWVukVPEgLp9El3cF35Gz6 tYtXJG0gokpKsDbSVX+kILZBQ5pGfwjH+CrFwciVnpPlvPR2Zjs8xrUvuP7MXXyy KP/iytRhUpwxm1EhHYTeUhEiO8YxYHfnqh/lCSSi3Oq8s4v5YIvQ/Gu32QtvCFbB kyx82PcizRtkP6hnelChJHHXYSDlHiLBrXQOKY1wPTWbK0pGY//uy3gkCjYESwaD rsFu1sSFg/IvMVAz/oM5fqham/mUN42TZpKSmT2eEeZq4WymfcN16D2ES5NicPHB JQijefFd5mESxA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:27 2025 by rpki-client