This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json) Hash identifier: fMzMrhqqnzA1Bn9e30dUca1QVboMrD5tjMKk2XPxm9w= Subject key identifier: 4B:41:DF:C8:69:AE:E1:32:7F:EE:56:94:4D:7C:9A:0C:CB:B0:04:88 Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Certificate serial: 019B0DB71B208E0F11832EFD9999BFD0D178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft Manifest number: 05C9 Signing time: Thu 11 Dec 2025 14:01:02 +0000 Manifest this update: Thu 11 Dec 2025 14:01:02 +0000 Manifest next update: Fri 12 Dec 2025 14:01:02 +0000 Files and hashes: 1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=) 2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: L0FSKnON4CPLl9WhmoRnqHmtQJ9dnmJ+DHd/ckWB8ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:1b:20:8e:0f:11:83:2e:fd:99:99:bf:d0:d1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c Validity Not Before: Dec 11 14:01:02 2025 GMT Not After : Dec 12 14:01:02 2025 GMT Subject: CN=4b41dfc869aee1327fee56944d7c9a0ccbb00488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:e0:02:d0:19:99:f0:cd:5a:fa:ab:10:9f: aa:e0:7c:95:f4:13:ac:45:01:26:07:c7:12:c3:f3: 71:63:db:35:d1:a3:a6:01:6d:9f:95:57:59:a1:f4: 21:87:65:fc:be:b4:bd:61:5d:9d:ce:ee:74:ef:d2: 82:e3:0e:c7:5d:4d:70:3c:e4:ca:7a:28:c3:a8:32: 5b:77:49:d0:63:ef:c1:1a:24:13:41:61:97:e1:30: 50:51:89:cf:6e:57:f2:43:ed:b7:f2:58:a3:1a:a4: c6:ef:93:1a:6e:8b:95:1e:e6:37:4a:43:98:d6:e7: a4:6f:cb:24:9e:4d:fc:d3:4b:7e:10:2f:1a:75:1b: 13:3f:24:08:46:5c:64:0b:02:15:b4:7b:b1:d9:1f: 64:9f:fb:12:69:61:e7:cc:63:6c:22:76:04:fd:24: 7e:10:e1:f6:bc:1a:89:76:07:04:3f:80:2b:3b:82: 68:d6:26:c2:22:21:cd:b0:96:43:b4:55:4a:a6:3c: 78:4a:82:f5:dd:2f:e6:c8:a9:dc:31:80:91:78:79: 0f:21:5b:ac:20:4e:ae:25:df:a3:92:3b:41:73:94: 97:53:76:df:1a:8e:b5:93:98:da:ec:81:92:66:e0: 0e:36:26:00:52:22:13:f5:6c:12:04:76:77:48:00: b2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:41:DF:C8:69:AE:E1:32:7F:EE:56:94:4D:7C:9A:0C:CB:B0:04:88 X509v3 Authority Key Identifier: keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fe:3f:8b:3f:ea:f3:8e:2e:01:d4:c9:ee:7a:02:07:25:9b: 51:c7:03:7c:17:e2:12:12:6d:cf:64:16:fd:ae:24:78:a4:a9: 26:39:4b:33:80:93:3b:f1:4f:a5:cb:a3:6c:be:08:0c:da:99: 3e:e0:00:0b:1d:81:f5:b2:35:3c:74:7f:1c:67:b4:77:8a:ae: cc:84:03:64:64:e0:40:7d:d3:98:00:68:06:e2:c6:59:0d:3c: a5:f7:61:08:2f:a9:5c:47:26:8b:ed:f7:e7:6f:84:3b:15:a4: 67:b5:75:be:2f:b0:0d:e5:44:6a:ed:5a:22:2f:e9:4d:10:86: cc:3c:7a:10:55:60:be:03:5f:30:19:20:8a:be:59:18:96:f1: 0c:33:df:ba:14:ff:26:ac:8a:02:21:9b:bc:74:11:c8:10:98: 9d:67:8c:ee:7e:b3:22:51:cd:dd:68:7e:3f:f8:72:4d:fa:c2: fa:d1:65:d7:eb:16:b4:27:e0:a5:a6:f7:16:7c:96:c7:4d:9c: b2:21:41:cc:0b:77:89:6c:dc:d9:c2:ab:ac:4a:3a:1d:dc:28: 9c:64:84:d7:ff:16:dc:96:9a:4a:7a:35:f5:dc:f6:a1:ad:8a: 50:0f:b5:7b:5f:05:57:79:7f:e4:ad:4e:3c:3d:c7:b4:44:ca: 31:43:af:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtxsgjg8Rgy79mZm/0NF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl OTU5NmMwHhcNMjUxMjExMTQwMTAyWhcNMjUxMjEyMTQwMTAyWjAzMTEwLwYDVQQD Eyg0YjQxZGZjODY5YWVlMTMyN2ZlZTU2OTQ0ZDdjOWEwY2NiYjAwNDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBjgAtAZmfDNWvqrEJ+q4HyV9BOs RQEmB8cSw/NxY9s10aOmAW2flVdZofQhh2X8vrS9YV2dzu5079KC4w7HXU1wPOTK eijDqDJbd0nQY+/BGiQTQWGX4TBQUYnPblfyQ+238lijGqTG75MabouVHuY3SkOY 1uekb8sknk3800t+EC8adRsTPyQIRlxkCwIVtHux2R9kn/sSaWHnzGNsInYE/SR+ EOH2vBqJdgcEP4ArO4Jo1ibCIiHNsJZDtFVKpjx4SoL13S/myKncMYCReHkPIVus IE6uJd+jkjtBc5SXU3bfGo61k5ja7IGSZuAONiYAUiIT9WwSBHZ3SACyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtB38hpruEyf+5WlE18mgzLsASIMB8GA1UdIwQY MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1 LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/4/iz/q 844uAdTJ7noCByWbUccDfBfiEhJtz2QW/a4keKSpJjlLM4CTO/FPpcujbL4IDNqZ PuAACx2B9bI1PHR/HGe0d4quzIQDZGTgQH3TmABoBuLGWQ08pfdhCC+pXEcmi+33 52+EOxWkZ7V1vi+wDeVEau1aIi/pTRCGzDx6EFVgvgNfMBkgir5ZGJbxDDPfuhT/ JqyKAiGbvHQRyBCYnWeM7n6zIlHN3Wh+P/hyTfrC+tFl1+sWtCfgpab3FnyWx02c siFBzAt3iWzc2cKrrEo6HdwonGSE1/8W3JaaSno19dz2oa2KUA+1e18FV3l/5K1O PD3HtETKMUOvMQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:27 2025 by rpki-client