This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json) Hash identifier: f+sfMnmgzvWRkq5Uv/bjZ4pS5bYnbow/KhrPQ4+VVoY= Subject key identifier: 47:38:C3:86:49:BE:AE:DF:A1:0E:E3:6C:11:24:82:C5:E8:1D:7C:35 Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Certificate serial: 019B36B312FDF73A874F7F5CC54026C1586E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft Manifest number: 091A Signing time: Fri 19 Dec 2025 13:01:04 +0000 Manifest this update: Fri 19 Dec 2025 13:01:04 +0000 Manifest next update: Sat 20 Dec 2025 13:01:04 +0000 Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: os9/8I4DB+gqIH7ipCwrCjLgDPzmgYaOTLBVOGSPvlc=) 2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:12:fd:f7:3a:87:4f:7f:5c:c5:40:26:c1:58:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Validity Not Before: Dec 19 13:01:04 2025 GMT Not After : Dec 20 13:01:04 2025 GMT Subject: CN=4738c38649beaedfa10ee36c112482c5e81d7c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:c9:b0:26:4b:70:c7:c0:bb:1f:18:d0:44: b0:0a:bc:b5:e2:4d:9d:17:3a:76:7a:d6:2c:39:81: bb:f3:7d:79:d9:15:8c:0d:9d:58:6e:21:a8:e0:2d: 9d:2b:53:a7:d1:b4:fd:33:8d:4c:b6:79:5a:b1:2f: b5:fe:6a:3e:5e:cb:24:a4:ec:47:ff:a8:09:34:73: 2f:81:14:9a:c7:e8:8a:5c:ba:b6:b4:54:51:0e:15: 4d:82:89:6e:cf:ae:04:15:5b:b8:2e:ed:14:6e:8f: fd:99:52:ea:68:c4:87:68:58:55:5c:09:98:68:30: 13:13:66:14:9e:46:dd:ca:f2:cb:47:bd:03:1c:e7: c4:e1:a8:69:57:0e:6b:1b:90:1c:eb:8e:8e:c5:12: 7d:5d:ae:e7:cc:cf:5f:3b:c7:61:ab:d4:ed:fc:8f: 40:40:a4:26:1c:d3:e9:21:54:20:ba:15:df:a0:83: 93:ca:47:b7:35:34:76:87:e9:d6:61:37:29:f2:2c: 70:6b:f8:6b:7b:84:0d:b7:f0:b1:c6:bb:85:5f:d8: 7c:df:e2:bd:23:76:28:46:e3:d6:79:f6:3c:ea:a5: ab:47:6f:72:e5:81:ea:dd:62:5e:42:95:4f:4d:e5: 5d:5c:4c:c6:8d:54:f9:d6:1d:98:fe:09:92:71:4d: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:38:C3:86:49:BE:AE:DF:A1:0E:E3:6C:11:24:82:C5:E8:1D:7C:35 X509v3 Authority Key Identifier: keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d7:ce:1b:4b:ee:7a:a0:64:93:6e:81:4f:12:d6:3e:c7:52: fe:46:2b:7e:10:60:b2:02:c9:ea:05:5a:eb:14:1d:6c:c4:73: ae:46:bd:cd:33:c3:cf:e3:46:e9:47:1c:87:6d:42:7e:d9:77: d5:6c:91:26:ca:33:36:8b:ec:20:1d:23:36:f1:5c:2d:3f:b6: 53:07:e9:ea:87:62:b5:21:81:b7:80:9c:ac:bb:ff:55:5c:12: 24:e6:11:64:00:69:56:87:6a:f7:15:6e:c9:fb:0d:20:9b:0d: ff:71:c8:11:94:ad:b1:2f:86:bb:9f:a4:07:f8:aa:2c:a6:2c: 00:17:82:af:55:07:a7:15:b5:e8:86:0c:b0:d7:7a:9f:a4:e6: 96:6f:6d:2f:1f:8c:ee:e7:f0:5a:0c:3e:e0:9a:80:92:0b:de: ae:87:70:da:72:20:f8:cf:5e:08:1d:02:d0:47:9f:95:01:c3: 1d:95:bc:ff:13:20:39:d0:46:56:4b:ff:67:94:4a:1a:99:b8: 62:c1:29:9b:3c:e3:f5:34:89:7a:dc:5d:3e:e0:c2:f8:db:ac: b3:3f:92:da:32:6c:7f:60:f1:2c:5e:6f:e0:56:71:48:bf:38: 83:4b:17:bb:66:9e:81:9e:5c:b0:e6:0b:81:fa:c7:9b:75:16: 99:0f:26:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sxL99zqHT39cxUAmwVhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTY0NmEzYzlhY2I2YTRiMjAxYmI2MzI2YTlmMDA3NDIy NGYzODcwHhcNMjUxMjE5MTMwMTA0WhcNMjUxMjIwMTMwMTA0WjAzMTEwLwYDVQQD Eyg0NzM4YzM4NjQ5YmVhZWRmYTEwZWUzNmMxMTI0ODJjNWU4MWQ3YzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3zJsCZLcMfAux8Y0ESwCry14k2d Fzp2etYsOYG783152RWMDZ1YbiGo4C2dK1On0bT9M41MtnlasS+1/mo+XsskpOxH /6gJNHMvgRSax+iKXLq2tFRRDhVNgoluz64EFVu4Lu0Ubo/9mVLqaMSHaFhVXAmY aDATE2YUnkbdyvLLR70DHOfE4ahpVw5rG5Ac646OxRJ9Xa7nzM9fO8dhq9Tt/I9A QKQmHNPpIVQguhXfoIOTyke3NTR2h+nWYTcp8ixwa/hre4QNt/CxxruFX9h83+K9 I3YoRuPWefY86qWrR29y5YHq3WJeQpVPTeVdXEzGjVT51h2Y/gmScU142wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc4w4ZJvq7foQ7jbBEkgsXoHXw1MB8GA1UdIwQY MBaAFNFWRqPJrLaksgG7Yyap8AdCJPOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2Ut OTBkZGU4NWQ4ZmE3LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2UtOTBkZGU4NWQ4ZmE3 LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNfOG0vu eqBkk26BTxLWPsdS/kYrfhBgsgLJ6gVa6xQdbMRzrka9zTPDz+NG6Ucch21Cftl3 1WyRJsozNovsIB0jNvFcLT+2Uwfp6oditSGBt4CcrLv/VVwSJOYRZABpVodq9xVu yfsNIJsN/3HIEZStsS+Gu5+kB/iqLKYsABeCr1UHpxW16IYMsNd6n6Tmlm9tLx+M 7ufwWgw+4JqAkgverodw2nIg+M9eCB0C0EeflQHDHZW8/xMgOdBGVkv/Z5RKGpm4 YsEpmzzj9TSJetxdPuDC+Nussz+S2jJsf2DxLF5v4FZxSL84g0sXu2aegZ5csOYL gfrHm3UWmQ8mlg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:45:58 2025 by rpki-client