This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft File: 0tzocORzw1QnPonF5OLtPgwGk1Y.mft (raw, json) Hash identifier: mLoS0Bba0z/H7Xou4SfpsUk9IYPa6IlStBfGM8mp5dc= Subject key identifier: 8E:83:B7:D1:C7:D1:86:19:4B:07:ED:39:E5:9D:90:16:70:B9:EE:DB Authority key identifier: D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 Certificate issuer: /CN=d2dce870e473c354273e89c5e4e2ed3e0c069356 Certificate serial: 019AF19AED4EC7DE7524A3619DD508D0A570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft Manifest number: 0BB9 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 0tzocORzw1QnPonF5OLtPgwGk1Y.crl (hash: aggpDGsa+WGrZHzvEtoH3E8s46xzyX67YH2Kcg3cX8Y=) 2: tTZ8ChHVIsV9vssdJRRwpvt77Ic.roa (hash: vUfunefLZb2Jpmp53yxYY0pVxR49oq3Pwb2HHqDzrlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:4e:c7:de:75:24:a3:61:9d:d5:08:d0:a5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dce870e473c354273e89c5e4e2ed3e0c069356 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=8e83b7d1c7d186194b07ed39e59d901670b9eedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:8f:3f:9c:53:15:47:20:df:08:ac:2f:22: 80:74:b9:ce:ed:21:b2:1b:2f:07:c2:77:4f:e6:82: c0:5b:f9:61:a7:65:9a:0f:f4:0a:a0:62:5a:54:9a: 19:09:c0:38:4f:8a:e3:cb:d8:3e:77:75:87:04:93: f0:e3:75:e9:34:e2:b5:23:9a:c4:ed:e4:f4:18:f5: 60:2e:80:23:b0:a9:0e:ab:99:20:4c:c0:ee:de:ea: 80:ec:2a:9b:66:dc:2d:b0:2c:e4:09:3f:be:d6:40: f1:2f:23:10:a4:ea:0c:ab:27:33:0e:47:c3:0c:34: 33:d7:32:34:0a:69:d6:78:50:32:97:ad:40:ef:01: 85:7a:cc:74:33:87:9b:f7:cb:81:97:9f:38:ee:16: 4b:cb:54:a9:8a:d9:f7:49:48:cb:65:a3:6b:a9:20: e1:90:a4:87:61:d8:a2:bf:3d:be:c5:33:3d:14:49: 7d:db:f2:2b:4e:68:1d:19:48:9c:66:49:97:6b:dc: 76:9e:fa:99:99:c0:ac:d4:f6:69:c4:a1:22:26:65: fe:e1:cb:63:93:e0:41:b2:11:4e:ed:91:5f:52:27: 49:a8:2a:b0:f1:91:70:b1:7b:81:c7:42:db:eb:3c: 05:67:48:73:1f:eb:18:c0:68:c8:83:9a:0c:a9:db: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:83:B7:D1:C7:D1:86:19:4B:07:ED:39:E5:9D:90:16:70:B9:EE:DB X509v3 Authority Key Identifier: keyid:D2:DC:E8:70:E4:73:C3:54:27:3E:89:C5:E4:E2:ED:3E:0C:06:93:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0tzocORzw1QnPonF5OLtPgwGk1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/113f5f-be58-478c-9030-32d80d8d1615/1/0tzocORzw1QnPonF5OLtPgwGk1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:4f:69:1a:0f:9e:9a:9f:bc:3e:d3:c6:9a:f0:0b:cd:36:69: f1:e4:25:a1:95:41:c9:35:ca:cd:e0:f4:7c:d0:9e:d3:6f:76: 63:3b:70:f7:f5:80:a1:e1:7b:19:8e:6e:c5:a8:55:85:a7:82: 9a:6e:50:ef:f8:48:ba:1f:41:0e:f4:f9:10:63:31:b4:20:87: 46:b7:ce:b4:a2:6d:fa:58:68:d3:09:7f:c5:57:a7:3a:61:aa: 64:8e:9a:ad:74:5b:09:72:52:41:53:2e:05:10:e8:c2:8a:fc: d1:70:63:40:1d:08:39:fa:76:6b:1e:1f:09:80:db:45:ca:a3: 70:32:4c:dc:8d:af:51:7a:a3:45:0f:fd:5f:71:5b:59:51:11: 9a:21:de:c0:ae:17:f9:79:11:a6:4a:dd:c5:12:70:0b:5a:6c: 9f:ea:d4:15:bc:65:d5:a4:24:d9:79:21:aa:97:59:81:39:fa: 5a:53:05:21:84:a2:8a:4c:a4:2e:1f:d1:eb:85:85:f7:bf:b3: 11:79:b3:49:16:37:f0:37:11:e0:31:6e:f6:ca:4a:39:54:6a: 22:ba:f5:3f:00:69:25:6c:fa:77:e6:23:7c:5e:ce:a1:04:7b: 65:ef:a6:ab:78:98:cb:47:98:bc:e8:b1:12:15:ad:64:59:64: d0:4b:ce:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu1Ox951JKNhndUI0KVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZGNlODcwZTQ3M2MzNTQyNzNlODljNWU0ZTJlZDNlMGMw NjkzNTYwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD Eyg4ZTgzYjdkMWM3ZDE4NjE5NGIwN2VkMzllNTlkOTAxNjcwYjllZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NaPP5xTFUcg3wisLyKAdLnO7SGy Gy8HwndP5oLAW/lhp2WaD/QKoGJaVJoZCcA4T4rjy9g+d3WHBJPw43XpNOK1I5rE 7eT0GPVgLoAjsKkOq5kgTMDu3uqA7CqbZtwtsCzkCT++1kDxLyMQpOoMqyczDkfD DDQz1zI0CmnWeFAyl61A7wGFesx0M4eb98uBl5847hZLy1Spitn3SUjLZaNrqSDh kKSHYdiivz2+xTM9FEl92/IrTmgdGUicZkmXa9x2nvqZmcCs1PZpxKEiJmX+4ctj k+BBshFO7ZFfUidJqCqw8ZFwsXuBx0Lb6zwFZ0hzH+sYwGjIg5oMqduicQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6Dt9HH0YYZSwftOeWdkBZwue7bMB8GA1UdIwQY MBaAFNLc6HDkc8NUJz6JxeTi7T4MBpNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAt MzJkODBkOGQxNjE1LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xMTNmNWYtYmU1OC00NzhjLTkwMzAtMzJkODBkOGQxNjE1 LzEvMHR6b2NPUnp3MVFuUG9uRjVPTHRQZ3dHazFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAk9pGg+e mp+8PtPGmvALzTZp8eQloZVByTXKzeD0fNCe0292Yztw9/WAoeF7GY5uxahVhaeC mm5Q7/hIuh9BDvT5EGMxtCCHRrfOtKJt+lho0wl/xVenOmGqZI6arXRbCXJSQVMu BRDowor80XBjQB0IOfp2ax4fCYDbRcqjcDJM3I2vUXqjRQ/9X3FbWVERmiHewK4X +XkRpkrdxRJwC1psn+rUFbxl1aQk2XkhqpdZgTn6WlMFIYSiikykLh/R64WF97+z EXmzSRY38DcR4DFu9spKOVRqIrr1PwBpJWz6d+YjfF7OoQR7Ze+mq3iYy0eYvOix EhWtZFlk0EvOFA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:17 2025 by rpki-client