This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json) Hash identifier: KmOoyqDXGY1BvOh15HXfHkOteDYJLsQ6tjHCJ/WJ/GU= Subject key identifier: A9:B8:5B:E9:60:86:E7:DE:99:E0:CC:BA:11:55:23:C2:C7:39:4A:5F Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Certificate serial: 019AF540B6B54FB2D312FA0A54BAEA0D15AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft Manifest number: 0BDF Signing time: Sat 06 Dec 2025 20:00:49 +0000 Manifest this update: Sat 06 Dec 2025 20:00:49 +0000 Manifest next update: Sun 07 Dec 2025 20:00:49 +0000 Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=) 2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: OFdhHMUIO/OfFZu3TNdYPi17hUffgCetXWgsP5om7+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b6:b5:4f:b2:d3:12:fa:0a:54:ba:ea:0d:15:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Validity Not Before: Dec 6 20:00:49 2025 GMT Not After : Dec 7 20:00:49 2025 GMT Subject: CN=a9b85be96086e7de99e0ccba115523c2c7394a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:b9:7b:32:d2:db:19:cb:4c:fc:16:d9:7b: 5a:eb:e4:cb:ae:0e:06:14:d2:03:20:5d:e2:50:0a: 60:5e:9d:08:5d:09:c9:e1:e0:57:5b:46:9a:12:fe: 14:61:5a:71:e4:45:5b:88:4a:9c:7d:90:73:da:69: 0d:a2:42:76:d9:bb:0a:d3:fb:8d:05:66:16:90:ab: f1:42:3e:88:e7:6f:c4:76:24:ba:51:c0:fa:8e:02: 5b:b2:90:78:f3:b0:2b:7e:d2:11:b2:c8:27:c2:bb: dc:81:2a:70:ff:9c:39:6f:07:d2:d4:e4:c6:7e:fb: f7:09:d0:ed:72:d7:c6:53:df:3c:cf:c5:6f:41:8e: e8:98:f5:46:3b:1a:5e:cf:cb:c7:4d:09:94:7a:b8: 89:94:3f:d4:ef:9f:bd:75:f3:5a:d4:5a:33:b6:84: 40:70:60:70:e7:e2:c9:e5:76:75:a3:f5:51:90:78: 24:e2:fb:01:94:e6:70:60:a5:c2:9b:bb:7b:34:19: db:77:87:0f:6e:fc:14:d6:73:bf:52:91:27:a3:e1: 63:a8:ef:a3:e5:6a:85:74:be:eb:8e:68:47:0e:29: 5a:74:1e:c0:2a:cf:dc:ed:ac:ec:e6:65:c6:21:f1: 1f:03:36:9d:15:80:bf:6c:34:4e:2f:4a:8d:14:60: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B8:5B:E9:60:86:E7:DE:99:E0:CC:BA:11:55:23:C2:C7:39:4A:5F X509v3 Authority Key Identifier: keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fb:91:48:64:9f:68:9f:24:65:70:61:c0:77:43:f3:4e:84: a6:14:dd:51:f1:62:8d:90:1a:88:0e:3b:37:00:46:14:8e:4f: fa:b5:ad:3d:a8:93:db:2b:f9:f4:71:a3:4a:44:ac:20:f6:27: 6c:bf:18:42:1b:79:05:f1:ee:05:0d:b7:7c:69:47:ab:06:76: b3:c2:26:ff:1a:3b:bc:3c:25:39:66:f7:73:e1:7a:df:f2:dd: b3:74:0a:71:60:60:43:3d:66:56:29:e7:80:3c:b2:1f:df:4c: 28:32:ba:b6:44:2a:ba:59:0a:1e:56:53:b7:df:8d:10:d0:62: 52:00:99:3c:b0:1f:a2:bb:21:3e:45:70:aa:0e:1e:cc:6e:20: 4c:a7:12:58:3e:e3:6e:63:25:e7:9d:44:51:7d:05:64:c6:36: 6a:07:4b:57:b2:b1:88:b7:e7:3d:3f:12:da:77:29:00:3c:b0: 2d:7b:95:37:e2:12:cf:46:25:31:98:90:79:39:4e:a1:1a:8c: 35:b2:1b:6a:76:8c:ca:f8:44:a1:44:17:13:04:38:55:97:63: 8b:75:12:6b:f8:7a:6b:23:da:5a:fc:b5:20:4d:16:a8:db:ca: 68:5c:85:93:5a:1a:bd:5e:da:c4:76:36:f0:a9:2c:dd:0f:b5: 57:e8:1b:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLa1T7LTEvoKVLrqDRWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTU0OWQ2ODMwNWUyOWRmYjAwMDY5YTUyZDNkNGUxZjJj NTYwNGMwHhcNMjUxMjA2MjAwMDQ5WhcNMjUxMjA3MjAwMDQ5WjAzMTEwLwYDVQQD EyhhOWI4NWJlOTYwODZlN2RlOTllMGNjYmExMTU1MjNjMmM3Mzk0YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtye5ezLS2xnLTPwW2Xta6+TLrg4G FNIDIF3iUApgXp0IXQnJ4eBXW0aaEv4UYVpx5EVbiEqcfZBz2mkNokJ22bsK0/uN BWYWkKvxQj6I52/EdiS6UcD6jgJbspB487ArftIRssgnwrvcgSpw/5w5bwfS1OTG fvv3CdDtctfGU988z8VvQY7omPVGOxpez8vHTQmUeriJlD/U75+9dfNa1FoztoRA cGBw5+LJ5XZ1o/VRkHgk4vsBlOZwYKXCm7t7NBnbd4cPbvwU1nO/UpEno+FjqO+j 5WqFdL7rjmhHDiladB7AKs/c7azs5mXGIfEfAzadFYC/bDROL0qNFGBW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm4W+lghufemeDMuhFVI8LHOUpfMB8GA1UdIwQY MBaAFLGVSdaDBeKd+wAGmlLT1OHyxWBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEt YTI4M2M5MDQ4ZjBmLzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEtYTI4M2M5MDQ4ZjBm LzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfuRSGSf aJ8kZXBhwHdD806EphTdUfFijZAaiA47NwBGFI5P+rWtPaiT2yv59HGjSkSsIPYn bL8YQht5BfHuBQ23fGlHqwZ2s8Im/xo7vDwlOWb3c+F63/Lds3QKcWBgQz1mVinn gDyyH99MKDK6tkQqulkKHlZTt9+NENBiUgCZPLAforshPkVwqg4ezG4gTKcSWD7j bmMl551EUX0FZMY2agdLV7KxiLfnPT8S2ncpADywLXuVN+ISz0YlMZiQeTlOoRqM NbIbanaMyvhEoUQXEwQ4VZdji3USa/h6ayPaWvy1IE0WqNvKaFyFk1oavV7axHY2 8Kks3Q+1V+gbRA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:06 2025 by rpki-client