This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft File: RZO5rApIawA3dl1gXIscgQQEbwo.mft (raw, json) Hash identifier: jlA5iCZ4n7OlSC5V8n2tsuWC1E7ekpX0MeQJG9PIH0s= Subject key identifier: 6F:0B:30:1A:EA:F7:30:89:FD:A7:53:9B:B1:C0:79:A0:66:E7:32:E0 Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019AF50A496C791BD49925FDA61ED80C18C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft Manifest number: 0144 Signing time: Sat 06 Dec 2025 19:01:23 +0000 Manifest this update: Sat 06 Dec 2025 19:01:23 +0000 Manifest next update: Sun 07 Dec 2025 19:01:23 +0000 Files and hashes: 1: PmIn_U--JR3Xnw9txK9fby2nHWY.roa (hash: SdqMhCiXZdZ/z+X9AdYU9yxlt0arQdXcxKPk86s3gIE=) 2: RZO5rApIawA3dl1gXIscgQQEbwo.crl (hash: RKbQZoUakOPC1pTnqAWpXq+mUewIESr7nhwVzbUQbNI=) 3: q4RgQKh4FjWPPdfMlG4zXkJsFEo.roa (hash: Vm7yPN+7IJFmydBdmDtFdAkyNaUk3WMpe/OgH6j9q6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:49:6c:79:1b:d4:99:25:fd:a6:1e:d8:0c:18:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Dec 6 19:01:23 2025 GMT Not After : Dec 7 19:01:23 2025 GMT Subject: CN=6f0b301aeaf73089fda7539bb1c079a066e732e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:d3:39:ce:b1:59:6d:f9:6d:17:3b:44:d4: 23:a4:ef:d5:81:88:07:7b:99:ed:ac:aa:90:41:74: 40:84:84:68:d4:da:df:a4:ee:d0:ef:f0:0e:cc:43: 1b:d4:ed:c6:91:d8:a2:ae:de:8f:cc:0a:17:35:46: 8c:16:97:3b:72:d9:8c:d1:1f:3f:0f:c9:d2:29:56: 08:d3:6e:41:3d:98:b1:db:aa:6f:91:90:34:bd:5f: ef:e8:3b:f2:09:22:fb:75:15:f5:45:28:86:42:4a: 04:e3:cc:a3:11:6a:3b:4a:f0:ee:b5:f4:d3:e9:c4: 29:44:c6:3d:9d:b2:17:de:0f:35:12:61:e8:5a:8c: 87:ac:05:22:37:b7:be:5d:0b:0c:f3:89:65:f4:35: d2:a1:fd:fd:e4:21:2c:a7:d7:98:f4:52:40:5a:eb: e4:f8:dc:30:8c:81:d5:7e:ae:20:93:07:0d:1b:54: e2:c8:19:bf:c1:7f:79:bf:a1:48:b5:93:3d:f7:0e: 5e:fa:98:e9:38:e6:17:83:f5:7d:3d:32:45:7e:ed: 83:f7:e6:6d:d1:2e:6c:07:c9:a4:13:f1:b4:14:a9: 13:24:ea:24:14:f6:f7:7d:ff:08:bc:62:23:2d:4d: 6b:c3:53:ac:3a:f9:c9:07:3d:54:a0:77:12:68:f0: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0B:30:1A:EA:F7:30:89:FD:A7:53:9B:B1:C0:79:A0:66:E7:32:E0 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:fb:37:a2:9d:81:4c:85:23:7c:ec:45:d0:8b:c5:f0:39: 41:9c:ee:33:12:4a:cf:91:41:1b:b4:db:35:a1:9d:45:14:c0: 4d:cc:d5:ef:56:af:59:f9:e6:c2:d1:be:8a:a5:06:23:45:3c: 1a:59:51:57:6c:9d:68:bc:6a:dc:8c:58:ab:8b:2e:14:bd:9c: 45:b3:21:83:8a:f5:29:40:7f:95:31:9e:1f:ce:32:de:37:85: 05:7c:ec:0a:db:66:1b:a7:54:8d:6f:21:11:b2:39:33:be:0a: 14:44:4d:46:b9:19:83:5e:dd:64:bb:b3:e9:e4:13:71:2e:09: 33:d0:fc:35:20:46:d6:e7:46:54:a5:ba:2d:17:d7:29:a0:9f: a1:20:6e:9a:07:2c:e8:f4:78:72:75:69:88:23:26:f1:03:2b: 5f:46:10:77:42:c0:8b:37:92:50:0d:e3:83:65:39:c1:fe:0e: 12:27:2b:8c:5c:7f:f0:4f:54:7f:75:f9:d1:e1:73:3e:17:dd: 9d:49:f7:d2:ff:5f:24:62:1e:bf:c5:96:70:52:66:33:43:5e: c1:4e:4c:1c:c4:47:b2:78:34:8f:7d:9c:6d:05:3f:9c:93:30: 64:8d:48:d3:15:4f:8d:36:51:3a:07:0c:1c:78:a9:6b:f1:06: 8f:3a:c9:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CklseRvUmSX9ph7YDBjHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjUxMjA2MTkwMTIzWhcNMjUxMjA3MTkwMTIzWjAzMTEwLwYDVQQD Eyg2ZjBiMzAxYWVhZjczMDg5ZmRhNzUzOWJiMWMwNzlhMDY2ZTczMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHTOc6xWW35bRc7RNQjpO/VgYgH e5ntrKqQQXRAhIRo1NrfpO7Q7/AOzEMb1O3Gkdiirt6PzAoXNUaMFpc7ctmM0R8/ D8nSKVYI025BPZix26pvkZA0vV/v6DvyCSL7dRX1RSiGQkoE48yjEWo7SvDutfTT 6cQpRMY9nbIX3g81EmHoWoyHrAUiN7e+XQsM84ll9DXSof395CEsp9eY9FJAWuvk +NwwjIHVfq4gkwcNG1TiyBm/wX95v6FItZM99w5e+pjpOOYXg/V9PTJFfu2D9+Zt 0S5sB8mkE/G0FKkTJOokFPb3ff8IvGIjLU1rw1OsOvnJBz1UoHcSaPBxwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8LMBrq9zCJ/adTm7HAeaBm5zLgMB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIz7N6Kd gUyFI3zsRdCLxfA5QZzuMxJKz5FBG7TbNaGdRRTATczV71avWfnmwtG+iqUGI0U8 GllRV2ydaLxq3IxYq4suFL2cRbMhg4r1KUB/lTGeH84y3jeFBXzsCttmG6dUjW8h EbI5M74KFERNRrkZg17dZLuz6eQTcS4JM9D8NSBG1udGVKW6LRfXKaCfoSBumgcs 6PR4cnVpiCMm8QMrX0YQd0LAizeSUA3jg2U5wf4OEicrjFx/8E9Uf3X50eFzPhfd nUn30v9fJGIev8WWcFJmM0NewU5MHMRHsng0j32cbQU/nJMwZI1I0xVPjTZROgcM HHipa/EGjzrJMw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:57 2025 by rpki-client