This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json) Hash identifier: rbz1Bktf85gdlVczvOzMP72RkqQdB7e6pTQkEwJjFy0= Subject key identifier: E0:E9:1B:CA:34:44:6E:3F:D3:CA:30:E9:D5:D6:5C:BB:A2:65:29:9D Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019AF1642F3B31ED9B5B418CE8123273BF0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft Manifest number: CD Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (hash: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=) 2: mzUvfgVLoqjl_Pu4e_7hdH0g4tQ.roa (hash: nM7KewQVEjtLO/Upjj+aZLO5RewYm9AF+8kFiREJ2Jc=) 3: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: mF522cnllu0+zHFTC/znkfYBjyscBAxj7TxAuc6fPMg=) 4: uAH4xPc9AhtK2Uy6SZDxCuii3xg.roa (hash: 7Lk71krqRJUVDRdcZl5XdOrWogQR7yqjHZ+KkfQmj9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2f:3b:31:ed:9b:5b:41:8c:e8:12:32:73:bf:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=e0e91bca34446e3fd3ca30e9d5d65cbba265299d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:65:23:e0:93:70:2e:f8:ea:da:f5:aa:a3: 96:29:8e:8b:64:40:e4:73:db:8f:19:7b:f6:99:c9: 5c:95:84:e5:c7:4e:4c:be:ce:dc:2b:70:2a:53:2f: 6a:59:96:a1:3b:9a:e9:03:20:d9:2c:54:24:86:e8: e9:24:fc:9e:4e:43:e9:3a:79:ba:d6:20:7f:a6:5f: 72:4e:30:87:d1:06:c3:91:5d:05:74:89:d7:c3:9b: 25:7f:d9:d2:c7:ed:9d:9d:15:23:3f:8b:b5:92:9a: d3:1a:c3:aa:68:09:68:8b:b7:91:52:18:ed:b1:84: aa:8f:c1:76:0d:2d:b2:0f:a2:0d:db:34:de:f9:20: 3a:04:c3:ee:fa:e4:22:b0:e5:7b:b7:43:bc:e3:dd: d4:90:47:71:90:df:97:f6:11:ed:11:5b:4e:d5:ce: 9b:52:fc:a5:bc:b4:fd:c6:b8:ae:62:39:2c:ad:16: 11:05:42:bf:5a:79:a1:6f:bc:34:e3:13:b6:5f:c3: 25:1d:43:f2:f9:5e:91:fc:5d:d4:36:77:e4:98:f2: 72:e8:ac:f0:23:3c:74:ed:a0:4d:32:17:c3:7f:62: 13:ea:43:dd:62:54:68:7f:46:25:a9:b6:82:11:e3: 58:55:cd:f5:e6:2f:ab:b6:96:8d:1d:ab:f6:1a:01: d8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:1B:CA:34:44:6E:3F:D3:CA:30:E9:D5:D6:5C:BB:A2:65:29:9D X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:75:5b:8d:0b:98:c5:e1:4c:c0:bc:84:64:76:46:23:61:8b: 80:12:19:5e:d3:e1:f6:b7:2f:02:eb:8d:11:df:ee:0f:1d:41: bc:ba:c0:d5:b0:e8:c2:c1:c2:bf:65:c1:04:0f:91:2e:9e:70: f9:13:a0:ff:9b:a0:95:65:a7:37:84:07:fc:73:0d:0e:c3:8d: 47:ed:7f:ea:5d:79:02:3c:30:ba:b2:49:64:44:51:ec:e6:d5: fa:04:7c:cd:27:d5:cb:e4:95:cc:c4:f0:5d:b5:74:69:21:b0: 78:c9:1a:ba:53:36:2e:10:d0:d7:b5:58:7d:c7:94:ff:c9:a1: ce:df:24:0d:bb:a0:c6:0d:45:bb:bc:6f:2f:51:78:9d:66:89: e6:9c:33:07:f9:cf:7f:fb:26:43:7f:2b:47:e0:d8:d6:86:86: ec:06:57:bb:f9:b2:c7:b9:20:eb:93:38:e2:2e:9a:c0:c9:41: 81:92:10:5f:bf:0d:40:96:39:90:f0:7a:d0:9e:1a:7a:cc:35: 55:46:12:c1:e6:bf:44:a2:d7:2f:38:48:a4:27:41:f4:ca:ff: fd:b8:51:5a:b5:76:00:91:77:74:42:bc:a2:5e:b7:89:81:54: ce:9d:c9:2a:0d:3a:12:02:a4:80:ca:76:68:f7:a8:66:48:a2: ea:3e:88:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC87Me2bW0GM6BIyc78NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhlMGU5MWJjYTM0NDQ2ZTNmZDNjYTMwZTlkNWQ2NWNiYmEyNjUyOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5llI+CTcC746tr1qqOWKY6LZEDk c9uPGXv2mclclYTlx05Mvs7cK3AqUy9qWZahO5rpAyDZLFQkhujpJPyeTkPpOnm6 1iB/pl9yTjCH0QbDkV0FdInXw5slf9nSx+2dnRUjP4u1kprTGsOqaAloi7eRUhjt sYSqj8F2DS2yD6IN2zTe+SA6BMPu+uQisOV7t0O8493UkEdxkN+X9hHtEVtO1c6b UvylvLT9xriuYjksrRYRBUK/Wnmhb7w04xO2X8MlHUPy+V6R/F3UNnfkmPJy6Kzw Izx07aBNMhfDf2IT6kPdYlRof0YlqbaCEeNYVc315i+rtpaNHav2GgHYUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODpG8o0RG4/08ow6dXWXLuiZSmdMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXVbjQuY xeFMwLyEZHZGI2GLgBIZXtPh9rcvAuuNEd/uDx1BvLrA1bDowsHCv2XBBA+RLp5w +ROg/5uglWWnN4QH/HMNDsONR+1/6l15AjwwurJJZERR7ObV+gR8zSfVy+SVzMTw XbV0aSGweMkaulM2LhDQ17VYfceU/8mhzt8kDbugxg1Fu7xvL1F4nWaJ5pwzB/nP f/smQ38rR+DY1oaG7AZXu/myx7kg65M44i6awMlBgZIQX78NQJY5kPB60J4aesw1 VUYSwea/RKLXLzhIpCdB9Mr//bhRWrV2AJF3dEK8ol63iYFUzp3JKg06EgKkgMp2 aPeoZkii6j6I2w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:55 2025 by rpki-client