This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json) Hash identifier: QEV+bLoJoJAh1rlFdpXkGWYAhDsW8r1KMe6AZij/ofI= Subject key identifier: 14:9A:BC:F9:13:BC:50:BA:02:E2:56:01:70:E8:B1:7E:86:4F:68:54 Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Certificate serial: 019AF79CBB6F420E44E35A3CB0E98BE3D9F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft Manifest number: 0387 Signing time: Sun 07 Dec 2025 07:00:35 +0000 Manifest this update: Sun 07 Dec 2025 07:00:35 +0000 Manifest next update: Mon 08 Dec 2025 07:00:35 +0000 Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=) 2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: OQyahtHwaYCiyZ4fXukgJMgsDsdq0rjhKSCycs/dUyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9c:bb:6f:42:0e:44:e3:5a:3c:b0:e9:8b:e3:d9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c Validity Not Before: Dec 7 07:00:35 2025 GMT Not After : Dec 8 07:00:35 2025 GMT Subject: CN=149abcf913bc50ba02e2560170e8b17e864f6854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:aa:b7:69:06:d4:34:66:45:11:e8:39:ea: 8e:6f:a0:c7:51:08:dc:58:55:bc:6d:c5:98:14:bb: 14:1b:eb:d5:d5:92:47:96:a9:27:ea:00:67:ce:3c: d5:a1:e1:2b:85:a5:28:f2:dc:be:96:00:9e:76:79: 4f:33:e1:43:88:a8:ef:b4:d3:57:36:03:58:f9:f1: bc:12:bb:92:70:39:db:ac:66:ea:56:11:9b:5c:23: 30:a8:92:52:a5:e2:29:79:76:b3:fa:03:ab:73:27: 78:d6:2b:91:c7:5a:02:34:38:cf:34:03:2a:21:e0: 03:3f:24:53:0e:a3:c7:22:4b:2e:e2:ed:cb:64:82: ed:fb:b3:5a:80:6c:c4:77:4f:b1:f4:4f:9f:8b:9a: 6d:4f:b1:8f:2f:8d:da:30:98:de:1f:d1:a4:02:4d: 14:7f:3d:af:6f:df:76:92:f6:16:dd:40:8b:6c:c6: 85:a8:29:c0:42:9e:cb:a2:aa:45:20:af:a8:04:a5: 8c:fc:6d:41:31:32:bb:21:ef:cc:53:91:cc:ce:92: 4e:73:a3:04:eb:77:4f:7d:ba:d6:68:29:2e:08:98: 7e:39:17:91:29:7d:0b:20:7c:96:18:7f:27:b4:20: 1d:68:1a:6b:dc:3e:0b:f0:ea:ef:68:f1:c2:0c:2d: 1f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:BC:F9:13:BC:50:BA:02:E2:56:01:70:E8:B1:7E:86:4F:68:54 X509v3 Authority Key Identifier: keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:eb:bd:76:c1:a6:3d:ae:1e:1c:6a:1d:4a:57:48:e3:1d:4e: 9c:b6:1d:d8:17:bf:09:16:99:0e:22:76:8c:22:b7:b0:eb:04: 5d:60:12:e5:58:8c:02:c8:0e:3c:f6:c0:ce:ae:b1:dc:ae:56: 8c:f8:80:a9:02:6f:54:e4:02:06:7f:67:4d:2b:7e:ba:a5:1e: d6:d6:75:45:42:b2:69:d9:eb:e9:66:d9:32:62:2f:ef:dd:5b: a7:1f:62:8e:9b:7c:d3:26:4f:ef:e0:15:e0:a9:5f:e7:c8:48: 7d:41:cc:da:75:89:23:0b:c8:8b:54:86:f1:ff:d1:b4:b2:dc: e2:b1:fd:b7:ef:06:1b:d8:d0:8a:e8:38:39:4a:b7:6a:5b:b4: f7:4d:41:1f:83:19:2e:a8:13:a7:aa:81:bb:9f:65:7d:71:2c: 6b:ac:a7:65:84:37:bd:20:e4:ec:97:2b:19:b2:83:8e:e0:03: 01:3d:f8:64:70:44:0c:62:6c:ac:07:53:bd:26:c3:36:c9:61: 03:cd:fd:aa:cd:f0:14:47:90:6c:d9:56:0d:79:4a:de:b3:97: ad:68:b5:cd:22:ef:16:6a:ca:b8:0d:b3:bf:93:40:73:67:e6: 59:d9:6a:0e:5c:9d:9e:b2:39:6f:c1:13:3d:cd:77:f8:1a:31: 9e:a9:6a:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nLtvQg5E41o8sOmL49nxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm YzU1MWMwHhcNMjUxMjA3MDcwMDM1WhcNMjUxMjA4MDcwMDM1WjAzMTEwLwYDVQQD EygxNDlhYmNmOTEzYmM1MGJhMDJlMjU2MDE3MGU4YjE3ZTg2NGY2ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWGqt2kG1DRmRRHoOeqOb6DHUQjc WFW8bcWYFLsUG+vV1ZJHlqkn6gBnzjzVoeErhaUo8ty+lgCednlPM+FDiKjvtNNX NgNY+fG8EruScDnbrGbqVhGbXCMwqJJSpeIpeXaz+gOrcyd41iuRx1oCNDjPNAMq IeADPyRTDqPHIksu4u3LZILt+7NagGzEd0+x9E+fi5ptT7GPL43aMJjeH9GkAk0U fz2vb992kvYW3UCLbMaFqCnAQp7LoqpFIK+oBKWM/G1BMTK7Ie/MU5HMzpJOc6ME 63dPfbrWaCkuCJh+OReRKX0LIHyWGH8ntCAdaBpr3D4L8OrvaPHCDC0f9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSavPkTvFC6AuJWAXDosX6GT2hUMB8GA1UdIwQY MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt ZjE4ZDc4MThmODRhLzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+u9dsGm Pa4eHGodSldI4x1OnLYd2Be/CRaZDiJ2jCK3sOsEXWAS5ViMAsgOPPbAzq6x3K5W jPiAqQJvVOQCBn9nTSt+uqUe1tZ1RUKyadnr6WbZMmIv791bpx9ijpt80yZP7+AV 4Klf58hIfUHM2nWJIwvIi1SG8f/RtLLc4rH9t+8GG9jQiug4OUq3alu0901BH4MZ LqgTp6qBu59lfXEsa6ynZYQ3vSDk7JcrGbKDjuADAT34ZHBEDGJsrAdTvSbDNslh A839qs3wFEeQbNlWDXlK3rOXrWi1zSLvFmrKuA2zv5NAc2fmWdlqDlydnrI5b8ET Pc13+Boxnqlq8g== -----END CERTIFICATE-----Generated at Sun Dec 7 16:35:05 2025 by rpki-client