This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json) Hash identifier: g0tYYduyt7rlZyIzREzGVitYYaJEBL/qpqXNvQzltlI= Subject key identifier: FA:80:C7:EF:A6:8B:DB:DB:50:9F:28:F3:5B:55:E5:A7:B0:36:D1:6E Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Certificate serial: 019B108157F5F33D94E9EE703EB5D98DA728 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft Manifest number: 09B4 Signing time: Fri 12 Dec 2025 03:01:10 +0000 Manifest this update: Fri 12 Dec 2025 03:01:10 +0000 Manifest next update: Sat 13 Dec 2025 03:01:10 +0000 Files and hashes: 1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=) 2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: uVKArfX2jWuxbo5rv3fLkuMbfWdG08+sdFI8ozvZ1bM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:57:f5:f3:3d:94:e9:ee:70:3e:b5:d9:8d:a7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86 Validity Not Before: Dec 12 03:01:10 2025 GMT Not After : Dec 13 03:01:10 2025 GMT Subject: CN=fa80c7efa68bdbdb509f28f35b55e5a7b036d16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2a:ac:53:0c:df:5b:c4:54:91:bc:67:70:b7: 14:b8:45:97:f1:75:c2:b1:3e:a4:80:2b:69:53:3f: 2f:66:8f:76:93:1f:1e:52:d3:e8:a7:48:76:1e:90: 6b:de:30:12:79:63:8f:65:b8:2b:e9:59:26:0e:f8: 52:bb:9d:87:8c:2b:96:35:b5:01:0f:c3:9d:de:3a: f1:70:7d:ce:c3:51:0f:2a:ed:9b:f3:f6:e4:82:be: 7a:1e:d0:68:98:fc:2e:27:a6:9c:66:06:85:02:48: 76:df:29:af:78:c8:37:8d:8e:1c:4b:bd:f7:f8:20: 54:9e:c5:15:68:4b:6b:5c:6b:0e:87:85:91:21:a4: 43:1d:45:c9:0e:f0:53:70:34:34:71:40:3e:f2:fa: 0c:40:4a:c9:3c:00:23:64:80:1e:bf:98:86:2a:f7: d9:08:dc:0e:ce:8c:69:c5:8f:76:da:43:d2:66:ba: bb:2a:8e:a6:a8:f8:4c:8e:55:5a:0b:1b:d4:8e:7c: 1b:51:4b:28:74:49:f3:b0:8e:ec:cc:fb:2d:47:dd: 67:db:8a:b9:25:85:b8:d2:c2:20:95:db:c2:bb:b8: 4b:5b:ce:a3:63:4d:1a:49:e7:33:62:f6:2d:93:3f: 25:88:47:62:22:9d:6f:dc:b2:4a:78:78:57:65:44: b0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:80:C7:EF:A6:8B:DB:DB:50:9F:28:F3:5B:55:E5:A7:B0:36:D1:6E X509v3 Authority Key Identifier: keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2d:2a:e0:be:fd:08:eb:ac:ef:8a:9d:33:56:3b:6d:92:c8: 68:f9:6a:ed:90:9f:dc:07:bd:19:9d:6d:60:8e:91:fb:c3:c7: 10:f6:0c:18:a4:59:1e:5a:e5:37:8e:72:6b:32:45:f3:4a:5c: f4:49:ba:13:9c:af:18:84:d4:aa:40:88:81:8b:db:ae:94:8d: bd:2d:cb:5a:46:9a:ad:97:2a:bc:81:bf:ef:3b:ef:c2:d0:11: da:2b:0f:72:7e:d8:67:3f:1d:28:77:98:1a:92:24:0d:01:f7: a9:f0:94:c1:ba:16:db:91:f2:4c:ff:b4:17:fe:53:0d:f8:45: df:94:e3:f4:30:3b:df:b0:e9:6e:e2:d1:82:87:9b:8c:48:fb: 96:63:64:05:81:9c:4f:85:d8:62:1a:c3:10:18:13:e5:4a:cb: 04:28:d2:51:83:4b:83:43:e3:6d:4b:9a:bc:34:cb:76:e1:be: ba:69:54:f7:b9:14:74:94:8a:55:b8:69:b9:c8:1a:51:94:4d: 44:81:92:a8:b6:5e:04:8f:77:fc:51:98:e6:fe:33:fe:dd:87: 02:29:54:3e:79:0f:ce:9a:81:65:8a:72:5c:ab:06:99:2c:0b: 0f:7f:41:28:19:86:5e:e3:79:da:7a:34:b6:5a:e7:d6:0c:5e: f8:ba:cf:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgVf18z2U6e5wPrXZjacoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNDE1YTAzMDU5ZmIyOTVhNGI5NmM5Y2U1ZWFkYjU4ZmU5 OGZhODYwHhcNMjUxMjEyMDMwMTEwWhcNMjUxMjEzMDMwMTEwWjAzMTEwLwYDVQQD EyhmYTgwYzdlZmE2OGJkYmRiNTA5ZjI4ZjM1YjU1ZTVhN2IwMzZkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SqsUwzfW8RUkbxncLcUuEWX8XXC sT6kgCtpUz8vZo92kx8eUtPop0h2HpBr3jASeWOPZbgr6VkmDvhSu52HjCuWNbUB D8Od3jrxcH3Ow1EPKu2b8/bkgr56HtBomPwuJ6acZgaFAkh23ymveMg3jY4cS733 +CBUnsUVaEtrXGsOh4WRIaRDHUXJDvBTcDQ0cUA+8voMQErJPAAjZIAev5iGKvfZ CNwOzoxpxY922kPSZrq7Ko6mqPhMjlVaCxvUjnwbUUsodEnzsI7szPstR91n24q5 JYW40sIgldvCu7hLW86jY00aSeczYvYtkz8liEdiIp1v3LJKeHhXZUSwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqAx++mi9vbUJ8o81tV5aewNtFuMB8GA1UdIwQY MBaAFJtBWgMFn7KVpLlsnOXq21j+mPqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEt MTgwMWI1NDRiOWZlLzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy84NTYxMmEtZGUzMy00MzRiLTg0NzEtMTgwMWI1NDRiOWZl LzEvbTBGYUF3V2ZzcFdrdVd5YzVlcmJXUDZZLW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAly0q4L79 COus74qdM1Y7bZLIaPlq7ZCf3Ae9GZ1tYI6R+8PHEPYMGKRZHlrlN45yazJF80pc 9Em6E5yvGITUqkCIgYvbrpSNvS3LWkaarZcqvIG/7zvvwtAR2isPcn7YZz8dKHeY GpIkDQH3qfCUwboW25HyTP+0F/5TDfhF35Tj9DA737DpbuLRgoebjEj7lmNkBYGc T4XYYhrDEBgT5UrLBCjSUYNLg0PjbUuavDTLduG+umlU97kUdJSKVbhpucgaUZRN RIGSqLZeBI93/FGY5v4z/t2HAilUPnkPzpqBZYpyXKsGmSwLD39BKBmGXuN52no0 tlrn1gxe+LrPoQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:40:50 2025 by rpki-client