This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: KheTHqkwOef77BCgCOoNsix4t77ASNGqm7MCAY5A6Ko= Subject key identifier: 21:F4:08:F9:73:1D:94:00:4C:C0:BB:64:23:2D:A2:1B:35:72:68:A3 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019AF12CB314EEE5660C3D84AD0E8D646B47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 0446 Signing time: Sat 06 Dec 2025 01:00:29 +0000 Manifest this update: Sat 06 Dec 2025 01:00:29 +0000 Manifest next update: Sun 07 Dec 2025 01:00:29 +0000 Files and hashes: 1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=) 2: 2b6Eq9cl8ekzMy1PxZJi91z-iqY.roa (hash: Xz6QbDMbodjD7oUbur2DkmlMy4mu0KFHGg13oNwyOk0=) 3: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 4: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=) 5: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (hash: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=) 6: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: 8UfGa1NBkSchv1BUFcPuekdDdWesTIHxGvaNB+rbqEU=) 7: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=) 8: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=) 9: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 10: L8Gc_X7bZAUGdUO0Sr8HyAWVb-g.roa (hash: 8rLSft2oN72eJM5VTpbF4YVueWAKxs3k3SS74tE7lKU=) 11: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=) 12: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=) 13: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (hash: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=) 14: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=) 15: _qGpnfoq0RIQZSg2OZDqTa0dLBk.roa (hash: ybY1jw9QuVARJXQAyD3Up3vr0hHVN1d8hKwrTNH/dDU=) 16: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 17: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 18: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=) 19: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=) 20: lO1MSRjPmSLDkgv8jGt5ktPBHoc.roa (hash: og5imLvn3cUBwDvPoHiD1z3A3c1NAGRPK9XyazGlNpE=) 21: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=) 22: mFwXB_3EhYgPmb02XlkNrRIYAks.roa (hash: +phEwBPGNbWcGWHb9f7x0gtZyCJo2VWruE9fcfo0yZQ=) 23: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=) 24: nzqMbVSBco83b7keIuvW9pYFNSQ.roa (hash: /iv3Al903G+RBBku1KufblAOU1jL3taljDs4rXeCbPE=) 25: pPTTLhksK7v4ipvrbQpEGSDbgjk.roa (hash: o2I/GTIezXoCE5dcTj8iZrNN0OoZ4v7wD/kJ0bQOHoc=) 26: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 27: tVTdYwnYYp3b_eUhbVSQRQeadEU.roa (hash: 4Nl3NSw+3Qg0hgNeV3S8TaiNWf3yjru7QAcwwQS9RII=) 28: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=) 29: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) 30: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (hash: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=) 31: xHqvlNpd7IJ2_bWmni8VAvmQhSo.roa (hash: RLG5JtYf55FcGjS6lNHNnXjb7AxYPOv8Xo1vraqegr8=) 32: xufYcSXKkHoVIuH3wXm2L2ThbKQ.roa (hash: 0VyAhXg6SJtDxoQNjVgedz+ggwVUOU4c0jA3RBXRQw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b3:14:ee:e5:66:0c:3d:84:ad:0e:8d:64:6b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Dec 6 01:00:29 2025 GMT Not After : Dec 7 01:00:29 2025 GMT Subject: CN=21f408f9731d94004cc0bb64232da21b357268a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:f8:71:ca:97:77:b3:2f:6d:c7:5f:0f:54: 28:31:7b:f9:12:1d:df:67:69:ad:d2:4a:a4:52:66: af:d7:46:3f:c9:b5:76:a9:fa:58:09:2e:67:cc:56: a7:ec:d6:e7:bd:17:26:b7:99:7a:93:2b:e8:bc:fb: d3:6f:c4:b4:f4:73:62:c8:61:69:6d:04:e1:77:61: b7:6a:a5:4d:2c:ea:0a:22:de:12:de:87:83:a8:cc: 9f:bc:2c:9b:81:0a:87:e1:22:8b:d6:57:a6:66:90: d8:08:e9:3b:e0:fb:a7:b7:52:16:2d:75:c8:a9:32: 64:5b:d1:73:9b:1c:db:1c:9e:eb:c9:79:06:27:df: e6:1e:82:96:02:9c:b3:8a:fd:e4:4e:f2:4f:f6:41: ae:b2:10:05:4b:6e:5c:7a:06:a8:38:47:a6:38:7a: a9:e0:89:b3:93:29:2e:35:09:eb:9c:64:15:08:5a: 42:33:63:91:fa:94:9c:53:63:1d:86:8e:00:e3:0a: 3f:66:2f:4f:1a:d6:8c:fb:a9:7e:3f:ee:ee:4e:34: f2:d5:25:86:2c:4d:4b:30:08:aa:c4:ba:84:30:14: 02:20:2c:20:0b:66:32:ad:2d:07:a4:97:4a:ab:46: ea:b8:b4:6f:eb:d4:34:7d:63:16:3f:1e:17:78:30: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F4:08:F9:73:1D:94:00:4C:C0:BB:64:23:2D:A2:1B:35:72:68:A3 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:35:37:e5:ee:df:82:d5:2f:03:10:42:80:a2:9d:9f:95: 36:dc:9c:f1:36:b5:1c:1b:43:70:9d:14:bd:34:70:d6:28:7d: b2:42:f4:80:bb:ba:e5:e2:60:fe:f5:f2:bc:5a:fe:74:8e:a4: e1:cc:df:b0:fe:fb:39:17:16:78:d0:3b:18:48:98:e1:95:24: 96:fe:e0:0c:84:da:80:41:02:34:91:08:9b:c3:57:78:1a:aa: 0b:7e:3a:af:64:b7:61:2c:60:b2:64:90:97:6d:17:37:bd:5a: 17:51:2e:75:dd:ca:b4:77:e8:cb:ea:48:8f:a0:8c:58:82:9b: 63:1f:89:af:d0:28:00:66:5e:da:dc:6c:3c:52:3c:c6:67:f0: 5a:2a:a7:78:a4:88:ee:5c:b3:eb:2c:4f:f6:2d:bd:cf:49:ab: 82:32:8c:f8:20:3e:cd:67:d9:78:93:f0:70:68:e7:bf:ac:4c: 5e:b8:02:81:ff:94:99:27:70:8c:4e:57:6e:03:d8:9f:f7:bf: a6:1d:4c:3b:9c:69:f2:f4:fc:1b:aa:17:15:6c:6f:ed:85:61: 25:8e:5a:9a:f6:dd:b1:3e:c2:27:37:eb:12:09:ab:b4:be:21: 73:8b:9a:da:31:06:30:62:fc:cb:3d:bd:cc:e6:2f:35:97:09: 15:cc:c2:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLMU7uVmDD2ErQ6NZGtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUxMjA2MDEwMDI5WhcNMjUxMjA3MDEwMDI5WjAzMTEwLwYDVQQD EygyMWY0MDhmOTczMWQ5NDAwNGNjMGJiNjQyMzJkYTIxYjM1NzI2OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyD4ccqXd7MvbcdfD1QoMXv5Eh3f Z2mt0kqkUmav10Y/ybV2qfpYCS5nzFan7NbnvRcmt5l6kyvovPvTb8S09HNiyGFp bQThd2G3aqVNLOoKIt4S3oeDqMyfvCybgQqH4SKL1lemZpDYCOk74Punt1IWLXXI qTJkW9FzmxzbHJ7ryXkGJ9/mHoKWApyziv3kTvJP9kGushAFS25cegaoOEemOHqp 4ImzkykuNQnrnGQVCFpCM2OR+pScU2Mdho4A4wo/Zi9PGtaM+6l+P+7uTjTy1SWG LE1LMAiqxLqEMBQCICwgC2YyrS0HpJdKq0bquLRv69Q0fWMWPx4XeDAcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH0CPlzHZQATMC7ZCMtohs1cmijMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlk1N+Xu 34LVLwMQQoCinZ+VNtyc8Ta1HBtDcJ0UvTRw1ih9skL0gLu65eJg/vXyvFr+dI6k 4czfsP77ORcWeNA7GEiY4ZUklv7gDITagEECNJEIm8NXeBqqC346r2S3YSxgsmSQ l20XN71aF1Eudd3KtHfoy+pIj6CMWIKbYx+Jr9AoAGZe2txsPFI8xmfwWiqneKSI 7lyz6yxP9i29z0mrgjKM+CA+zWfZeJPwcGjnv6xMXrgCgf+UmSdwjE5XbgPYn/e/ ph1MO5xp8vT8G6oXFWxv7YVhJY5amvbdsT7CJzfrEgmrtL4hc4ua2jEGMGL8yz29 zOYvNZcJFczCsw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:50:53 2025 by rpki-client