This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft File: 03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json) Hash identifier: Psg+LEoksGHBlLQ3RG1KRd7SBIBvA8mcTtZ2jXHHCBo= Subject key identifier: F9:1A:5D:E5:CA:C5:85:7E:E0:06:7F:2F:BE:5C:73:FA:24:C7:B2:B1 Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E Certificate issuer: /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Certificate serial: 019B180357FB3AF9E0FADE7A1D9E7695E290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft Manifest number: 05C0 Signing time: Sat 13 Dec 2025 14:00:30 +0000 Manifest this update: Sat 13 Dec 2025 14:00:30 +0000 Manifest next update: Sun 14 Dec 2025 14:00:30 +0000 Files and hashes: 1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: wPpio8p/W8CHvHoQw93cN+sIMfj4DT8Bb5Q/n1CjBZc=) 2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:57:fb:3a:f9:e0:fa:de:7a:1d:9e:76:95:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e Validity Not Before: Dec 13 14:00:30 2025 GMT Not After : Dec 14 14:00:30 2025 GMT Subject: CN=f91a5de5cac5857ee0067f2fbe5c73fa24c7b2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:83:2c:99:0d:07:43:b5:97:e0:27:69:e2: 71:60:db:90:17:07:02:59:4a:95:e4:69:c9:c6:e4: 91:a0:9e:63:ac:5f:76:11:45:a0:ab:74:5e:d0:49: 0b:e2:84:93:9a:75:56:c4:f5:d6:30:bf:52:a2:a3: a1:2f:d0:6e:3f:ab:a1:5f:38:55:e0:17:1f:8e:35: 42:7e:11:b8:75:8a:81:61:0c:0f:eb:d5:20:3b:5b: b4:b9:72:1f:7f:59:91:ac:e2:e0:c2:5b:a9:12:a6: 7e:f0:e1:9d:77:d5:77:a3:14:6a:82:b9:45:af:f0: 64:74:f1:d9:60:3e:4d:b3:48:95:4f:2c:d6:ac:e2: 4a:8e:7d:16:59:e4:60:3b:25:80:ef:a9:ed:33:27: d3:2a:29:7c:b4:d5:f7:9b:2d:36:ae:63:c1:69:b5: 6a:d5:ca:a1:31:62:d5:bf:24:72:05:ba:90:15:6c: 1a:8b:88:02:5d:fd:5d:d3:53:8b:51:e8:4c:99:32: 02:3a:62:36:01:80:06:32:98:56:52:79:1a:82:7d: 4d:45:65:b5:6b:32:06:ae:31:9a:96:c7:fc:58:bb: d6:cd:9d:37:ca:f2:3b:11:ba:76:d1:c5:a1:44:bd: d9:1d:d0:3a:20:7c:46:c9:3a:9b:ea:af:7d:d7:ea: 3c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1A:5D:E5:CA:C5:85:7E:E0:06:7F:2F:BE:5C:73:FA:24:C7:B2:B1 X509v3 Authority Key Identifier: keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:a7:49:2c:0c:47:74:67:5b:d9:58:45:74:41:ae:7a:18: 79:5c:dc:b8:3d:c0:da:4b:e2:15:11:b5:78:48:3e:b0:06:bf: 0a:9e:2e:3b:86:bd:e6:db:63:3b:1f:a5:ce:44:41:1d:3d:7a: 23:9d:e8:0b:ba:04:ec:f7:b2:fd:a2:db:c1:3c:f2:ac:55:72: b8:d4:73:92:8d:e4:89:bf:92:06:a5:1f:e0:6a:bd:7b:c7:79: a7:8a:a1:04:d7:57:b4:01:23:2d:b0:d1:69:bd:76:a2:be:f1: 53:47:8a:f5:14:97:76:bd:72:be:e3:04:7f:23:d9:53:29:de: 15:05:a3:3b:be:ae:39:d5:23:e7:9b:c5:f3:68:0f:f6:a6:42: 34:6d:f0:47:b9:51:9c:c7:41:13:9b:15:b9:f6:04:b4:25:15: 93:e2:33:8a:0e:18:72:73:4d:cd:f9:e7:89:1b:2f:17:ca:f5: 08:a8:1f:f4:28:12:be:41:c4:3f:0f:43:6c:be:df:fa:98:c8: 7f:14:74:a5:83:18:65:4e:1a:11:86:12:9c:74:30:5d:16:53: a0:31:e0:35:0a:e2:ec:6b:42:71:22:68:e5:02:f8:bc:f4:dd: 9c:68:3e:ee:86:d8:91:45:bb:5f:d7:aa:63:ea:5a:fa:07:36: b4:2c:29:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA1f7Ovng+t56HZ52leKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNzdkYzY2YTU2M2EzYWYyMWVlMDdhYjMzZThiZmZlN2Fm OTI4OGUwHhcNMjUxMjEzMTQwMDMwWhcNMjUxMjE0MTQwMDMwWjAzMTEwLwYDVQQD EyhmOTFhNWRlNWNhYzU4NTdlZTAwNjdmMmZiZTVjNzNmYTI0YzdiMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupuDLJkNB0O1l+AnaeJxYNuQFwcC WUqV5GnJxuSRoJ5jrF92EUWgq3Re0EkL4oSTmnVWxPXWML9SoqOhL9BuP6uhXzhV 4BcfjjVCfhG4dYqBYQwP69UgO1u0uXIff1mRrOLgwlupEqZ+8OGdd9V3oxRqgrlF r/BkdPHZYD5Ns0iVTyzWrOJKjn0WWeRgOyWA76ntMyfTKil8tNX3my02rmPBabVq 1cqhMWLVvyRyBbqQFWwai4gCXf1d01OLUehMmTICOmI2AYAGMphWUnkagn1NRWW1 azIGrjGalsf8WLvWzZ03yvI7Ebp20cWhRL3ZHdA6IHxGyTqb6q991+o8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkaXeXKxYV+4AZ/L75cc/okx7KxMB8GA1UdIwQY MBaAFNN33GalY6OvIe4HqzPov/56+SiOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTkt YWYyNDA0YzI1YWNmLzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xZDUwODEtZTRkMi00MGRiLWE1ZTktYWYyNDA0YzI1YWNm LzEvMDNmY1pxVmpvNjhoN2dlck0taV9fbnI1S0k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzqnSSwM R3RnW9lYRXRBrnoYeVzcuD3A2kviFRG1eEg+sAa/Cp4uO4a95ttjOx+lzkRBHT16 I53oC7oE7Pey/aLbwTzyrFVyuNRzko3kib+SBqUf4Gq9e8d5p4qhBNdXtAEjLbDR ab12or7xU0eK9RSXdr1yvuMEfyPZUyneFQWjO76uOdUj55vF82gP9qZCNG3wR7lR nMdBE5sVufYEtCUVk+Izig4YcnNNzfnniRsvF8r1CKgf9CgSvkHEPw9DbL7f+pjI fxR0pYMYZU4aEYYSnHQwXRZToDHgNQri7GtCcSJo5QL4vPTdnGg+7obYkUW7X9eq Y+pa+gc2tCwp8A== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:18 2025 by rpki-client