This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json) Hash identifier: jsQhMWyvB36EQHTMEdQta9f4JrmGBuSQH8x8TkujoYQ= Subject key identifier: DC:81:EA:FE:7C:44:C5:84:DE:F1:1B:5A:2D:E2:C1:D0:54:72:FA:D4 Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2 Certificate serial: 019AF209418F1BEA57BD110A2935EB23D934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=) 2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: UwMuMs3xRfab1i9v6+p0t0S4md1CelezEekZHik19uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:8f:1b:ea:57:bd:11:0a:29:35:eb:23:d9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2 Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=dc81eafe7c44c584def11b5a2de2c1d05472fad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:0a:48:70:7c:34:82:2c:44:c3:23:e8:9e: 80:62:da:cf:8a:2f:70:55:18:74:c3:86:03:43:e7: ae:c1:d8:4d:38:d0:a2:b3:ae:ea:2b:5d:1e:24:d7: 59:9f:83:ab:ea:b6:c2:dd:98:5a:36:db:6d:74:2a: 67:ad:9c:91:4f:62:1d:dc:98:39:51:af:63:cf:e7: 9e:f7:fe:5e:f5:7f:e2:49:46:92:50:b1:ce:6f:1f: 33:d9:48:07:d5:1c:a8:bd:64:a2:f2:0f:ad:09:75: 56:c7:ed:75:51:2c:29:4d:13:84:34:c4:61:82:f7: 24:eb:f1:c1:20:91:76:16:1e:60:93:83:41:0c:ed: 1a:03:c9:bb:32:b5:31:14:04:e5:e5:e8:3c:b3:49: c9:e8:71:c2:7d:48:1d:dd:e7:31:e9:89:f2:4d:92: 33:43:48:12:dc:b1:9a:c6:8d:21:60:b6:2c:a7:8a: 04:34:c2:5e:6f:ee:bd:d0:2f:8e:92:3a:3a:0a:7c: 5e:39:2f:25:23:41:31:d3:ed:25:31:42:0e:4f:59: ab:95:54:6d:ed:e7:b4:41:ab:5e:2a:17:2f:78:70: 0b:55:63:a4:7e:f3:1a:60:2c:fb:13:85:27:e1:95: 63:58:da:57:cb:db:c1:47:8e:54:79:1f:91:11:2b: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:81:EA:FE:7C:44:C5:84:DE:F1:1B:5A:2D:E2:C1:D0:54:72:FA:D4 X509v3 Authority Key Identifier: keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:8f:07:47:2d:d1:28:0a:06:ab:93:d5:64:68:b3:a7:27: 97:df:ce:78:bb:b3:10:03:5f:a1:98:31:bd:9e:0f:ad:4a:ad: 79:d8:4a:47:77:be:6c:82:a9:f3:e4:56:c6:fc:07:5c:60:c1: a7:71:29:9f:84:d7:ca:6d:ea:69:a4:06:c7:69:be:26:a7:ee: 22:92:81:65:b7:94:dc:1a:5a:33:58:a7:08:73:04:42:2b:75: ed:17:d1:a2:87:e5:d8:10:ec:a8:d5:a6:c8:28:e6:33:32:59: 39:cf:7e:28:7b:79:bd:0e:a7:6e:3c:81:17:8e:6a:c9:12:c0: 5e:d6:6e:74:c9:a9:ba:f0:ba:c9:d0:49:c3:80:ba:e3:66:18: 6d:a5:79:b4:61:db:df:b7:b6:a5:d3:cb:3e:cf:36:4e:e3:01: 1f:d3:35:1d:d4:96:2f:89:23:74:39:b2:6e:c3:cf:19:c4:b8: b5:14:ae:c2:f0:89:eb:26:c7:b5:b1:ab:a2:73:4a:00:bf:50: cc:de:ea:5b:da:60:98:1f:42:ef:6c:ed:18:7f:68:f8:ca:6e: ec:28:33:fd:1c:a8:b4:2f:cb:11:62:f0:2f:85:08:c1:69:56: b9:9e:5e:2f:22:eb:f4:40:5d:3f:db:8a:d9:b6:67:3a:65:50: 47:49:31:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUGPG+pXvREKKTXrI9k0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz Y2U2ZjIwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhkYzgxZWFmZTdjNDRjNTg0ZGVmMTFiNWEyZGUyYzFkMDU0NzJmYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEKSHB8NIIsRMMj6J6AYtrPii9w VRh0w4YDQ+euwdhNONCis67qK10eJNdZn4Or6rbC3ZhaNtttdCpnrZyRT2Id3Jg5 Ua9jz+ee9/5e9X/iSUaSULHObx8z2UgH1RyovWSi8g+tCXVWx+11USwpTROENMRh gvck6/HBIJF2Fh5gk4NBDO0aA8m7MrUxFATl5eg8s0nJ6HHCfUgd3ecx6YnyTZIz Q0gS3LGaxo0hYLYsp4oENMJeb+690C+Okjo6CnxeOS8lI0Ex0+0lMUIOT1mrlVRt 7ee0QateKhcveHALVWOkfvMaYCz7E4Un4ZVjWNpXy9vBR45UeR+RESsovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyB6v58RMWE3vEbWi3iwdBUcvrUMB8GA1UdIwQY MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK6PB0ct 0SgKBquT1WRos6cnl9/OeLuzEANfoZgxvZ4PrUqtedhKR3e+bIKp8+RWxvwHXGDB p3Epn4TXym3qaaQGx2m+JqfuIpKBZbeU3BpaM1inCHMEQit17RfRoofl2BDsqNWm yCjmMzJZOc9+KHt5vQ6nbjyBF45qyRLAXtZudMmpuvC6ydBJw4C642YYbaV5tGHb 37e2pdPLPs82TuMBH9M1HdSWL4kjdDmybsPPGcS4tRSuwvCJ6ybHtbGronNKAL9Q zN7qW9pgmB9C72ztGH9o+Mpu7Cgz/RyotC/LEWLwL4UIwWlWuZ5eLyLr9EBdP9uK 2bZnOmVQR0kxGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:30 2025 by rpki-client