This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json) Hash identifier: a2ZMAGwqFDezKPk3cmGmm4cbziJyL7einv5LZ+Q3+90= Subject key identifier: C8:7D:9C:CD:89:15:44:87:6D:61:99:8D:C1:D1:1B:82:B5:92:80:3C Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1 Certificate serial: 019B4994B2B11C2EB6FA1CF743167C5D6EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 05:00:40 +0000 Manifest this update: Tue 23 Dec 2025 05:00:40 +0000 Manifest next update: Wed 24 Dec 2025 05:00:40 +0000 Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 2Fsxlzy95Sd5lHNB13xWYIi4quXmlhWSENX03Z8eXTM=) 2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=) 3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:b2:b1:1c:2e:b6:fa:1c:f7:43:16:7c:5d:6e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1 Validity Not Before: Dec 23 05:00:40 2025 GMT Not After : Dec 24 05:00:40 2025 GMT Subject: CN=c87d9ccd891544876d61998dc1d11b82b592803c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:4a:b8:43:2c:a4:7f:35:46:25:cc:10:6a: 52:cc:cf:5c:c4:96:34:9f:89:af:d2:c1:f0:70:90: 7e:c9:1a:1a:af:81:0c:56:a7:8c:a7:66:e1:76:64: c0:dc:b1:6c:a7:40:44:16:f8:55:dd:7b:dc:fd:19: 98:23:39:1c:ce:44:dd:3d:9a:31:b4:92:e6:46:ed: 37:25:1e:3d:e7:ee:dd:4e:38:d5:1c:0b:cb:7e:6f: a9:13:69:01:4e:14:0a:3f:73:2b:56:2e:62:07:4f: 1c:69:fa:2c:ba:4d:94:0e:3f:16:be:74:a1:74:59: 1e:3b:f0:68:17:a7:96:fb:93:dc:b8:56:e5:95:cb: 02:59:dd:eb:a2:e1:41:66:1c:7c:5d:bd:33:d0:d5: 9f:fe:21:45:30:31:9b:3d:44:d0:7a:ea:53:60:66: 37:c8:10:97:b4:52:eb:51:17:96:e3:c9:54:90:d7: 14:bc:ca:7c:12:ff:f4:7f:1f:cf:19:c7:5f:66:18: 14:4c:64:fa:a7:e5:45:27:d1:cd:ba:75:58:73:e2: 97:85:12:0e:ee:e9:42:f9:92:37:27:3b:b7:17:14: 58:4e:e4:b5:83:30:0e:7d:7e:96:3d:1a:47:63:52: 3c:59:36:ce:7e:77:7d:9a:4e:0f:7d:b3:d9:93:8d: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7D:9C:CD:89:15:44:87:6D:61:99:8D:C1:D1:1B:82:B5:92:80:3C X509v3 Authority Key Identifier: keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:27:8c:88:fe:1b:8b:08:96:3a:3c:3a:0a:9e:92:18:0a:2f: fc:92:f3:d9:b0:13:ba:f3:40:2a:f7:1c:47:30:5c:c3:8b:d3: 8e:1d:06:db:8b:13:1a:5e:7f:af:89:1d:b9:1a:e9:bb:f9:e0: 23:ef:ce:f3:dc:2d:78:50:8b:1a:36:f8:26:4b:7a:af:f4:f5: cd:4c:24:14:05:0a:89:cf:14:71:6e:9c:db:b5:86:76:c8:4e: bc:fd:fe:ff:65:52:bb:8c:50:66:07:09:5a:34:73:86:c6:f1: 96:eb:c3:2d:f9:a8:ab:16:1b:ed:ed:ea:07:16:1d:8f:a7:27: 22:4e:6a:06:42:fd:b7:7a:72:bd:56:91:16:e2:14:26:2f:e5: ee:97:f2:77:a4:46:68:36:38:db:dc:83:ea:4f:b5:95:a1:29: 8c:55:f7:09:4e:ff:98:01:f0:67:95:2d:b5:a4:a7:2d:f6:f2: b3:63:88:8c:95:91:f7:71:63:39:ab:78:fc:1d:21:17:6a:f9: 2e:29:7b:5f:6f:51:76:37:c7:31:0e:5a:10:a4:f8:f4:5d:60: 01:cb:41:69:2f:dc:33:75:02:aa:35:18:a7:a1:b4:5b:0b:b6: ec:4c:19:fa:c9:00:7f:7e:e0:d9:a5:ef:1a:fd:32:6f:06:98: 7f:2d:db:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlLKxHC62+hz3QxZ8XW62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3 N2JiYzEwHhcNMjUxMjIzMDUwMDQwWhcNMjUxMjI0MDUwMDQwWjAzMTEwLwYDVQQD EyhjODdkOWNjZDg5MTU0NDg3NmQ2MTk5OGRjMWQxMWI4MmI1OTI4MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7BKuEMspH81RiXMEGpSzM9cxJY0 n4mv0sHwcJB+yRoar4EMVqeMp2bhdmTA3LFsp0BEFvhV3Xvc/RmYIzkczkTdPZox tJLmRu03JR495+7dTjjVHAvLfm+pE2kBThQKP3MrVi5iB08cafosuk2UDj8WvnSh dFkeO/BoF6eW+5PcuFbllcsCWd3rouFBZhx8Xb0z0NWf/iFFMDGbPUTQeupTYGY3 yBCXtFLrUReW48lUkNcUvMp8Ev/0fx/PGcdfZhgUTGT6p+VFJ9HNunVYc+KXhRIO 7ulC+ZI3Jzu3FxRYTuS1gzAOfX6WPRpHY1I8WTbOfnd9mk4PfbPZk43A7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh9nM2JFUSHbWGZjcHRG4K1koA8MB8GA1UdIwQY MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCeMiP4b iwiWOjw6Cp6SGAov/JLz2bATuvNAKvccRzBcw4vTjh0G24sTGl5/r4kduRrpu/ng I+/O89wteFCLGjb4Jkt6r/T1zUwkFAUKic8UcW6c27WGdshOvP3+/2VSu4xQZgcJ WjRzhsbxluvDLfmoqxYb7e3qBxYdj6cnIk5qBkL9t3pyvVaRFuIUJi/l7pfyd6RG aDY429yD6k+1laEpjFX3CU7/mAHwZ5UttaSnLfbys2OIjJWR93FjOat4/B0hF2r5 Lil7X29RdjfHMQ5aEKT49F1gActBaS/cM3UCqjUYp6G0Wwu27EwZ+skAf37g2aXv Gv0ybwaYfy3bqA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:50:49 2025 by rpki-client