This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json) Hash identifier: NQ874zOlRxGo26DX730W5QQbq4hU1u0FtBRKDC0vAOs= Subject key identifier: E7:7F:FA:24:4B:00:15:F0:FA:7B:5C:80:D1:94:48:90:AA:B8:1A:0C Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39 Certificate serial: 019AF57874AA820A6DB1B38DBA7908C95056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft Manifest number: 115E Signing time: Sat 06 Dec 2025 21:01:43 +0000 Manifest this update: Sat 06 Dec 2025 21:01:43 +0000 Manifest next update: Sun 07 Dec 2025 21:01:43 +0000 Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: lUmVnsf/Az2hRGb8RVhjk9F3K7zD+S7iGMEcsWTLg60=) 2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:74:aa:82:0a:6d:b1:b3:8d:ba:79:08:c9:50:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39 Validity Not Before: Dec 6 21:01:43 2025 GMT Not After : Dec 7 21:01:43 2025 GMT Subject: CN=e77ffa244b0015f0fa7b5c80d1944890aab81a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d2:12:3d:09:2d:fd:97:98:c2:f1:c8:ad:53: 2e:49:74:cc:b9:c3:9f:64:31:32:4f:ba:56:b6:d5: 46:69:cb:d4:00:2e:97:8a:58:5a:23:77:6e:d1:9c: 4c:d7:f0:29:50:18:d1:0b:44:a3:c2:00:41:f4:f8: 6a:b5:fa:00:e1:86:5a:d0:6f:1f:78:29:bc:b4:19: ed:a1:6d:a7:94:51:fd:a5:51:48:4d:fa:f4:63:91: ad:ba:28:05:71:c9:c4:15:dc:91:eb:3b:79:7e:c0: f3:e8:6a:56:14:b5:1b:fb:32:f9:15:89:34:b4:3f: 37:f5:42:f6:ef:84:9e:f4:f0:d6:0c:50:85:c0:7a: f2:e8:8e:04:9f:12:3c:ce:2f:77:01:b9:f3:e2:91: 02:e9:31:42:fa:77:eb:45:12:ac:31:b9:10:77:a4: 7f:49:84:68:0e:41:f9:f4:d5:7f:07:50:b0:18:cb: 29:08:5d:fb:3c:4f:6d:0a:2e:66:3f:02:06:78:74: eb:8f:49:5d:e9:5c:4e:67:23:40:4f:b1:79:12:7e: 14:9b:c1:bf:1e:45:95:ac:ed:28:8c:fc:f7:23:4a: 79:38:07:56:ed:e2:49:48:c8:d0:d2:4e:0c:38:b6: bc:1a:10:97:dd:bb:a1:6d:e0:93:aa:03:e4:a5:2b: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7F:FA:24:4B:00:15:F0:FA:7B:5C:80:D1:94:48:90:AA:B8:1A:0C X509v3 Authority Key Identifier: keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:da:b4:a2:1f:da:8a:c6:7b:3e:57:81:78:6a:b6:c6:ab:c2: 8f:0d:19:bf:62:ef:f9:b4:22:eb:37:f9:bc:4f:8d:92:96:ed: fe:f9:10:df:bd:5b:a8:4c:0e:50:22:21:67:09:83:21:cc:44: a4:18:ba:2d:46:dd:9c:81:26:ee:e8:9a:68:f7:d3:c5:ce:c8: 75:c7:71:c3:d5:eb:e0:4a:96:3c:62:bd:d3:7d:e8:98:08:7e: 41:e9:54:13:a4:e8:d8:66:e3:87:78:fd:a8:e7:0a:2e:9d:54: 8b:02:84:dd:31:fd:b4:e8:71:6d:f6:3a:02:98:6d:dc:77:a9: 6c:6d:91:a7:bf:3b:bc:91:0c:b6:1c:3d:e8:a2:2f:4a:ce:25: 05:44:01:f1:82:6a:c0:51:d6:5f:88:d1:a6:96:69:95:36:ac: fd:ba:2a:78:ac:3a:ac:ec:5d:00:ef:bf:51:89:44:be:79:5b: 8b:e8:ab:da:cd:75:20:77:f0:bb:cf:5b:72:c5:0e:8a:6c:71: 93:44:5c:31:d1:30:d0:ef:fe:21:d0:9a:db:2e:56:4b:40:6b: c7:24:c9:a0:79:e3:45:9a:31:4f:db:27:55:76:73:3b:7d:d8: 04:3d:2f:6f:97:d3:c8:1c:83:09:e5:56:b7:fa:2c:74:53:61: 97:6c:dd:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eHSqggptsbONunkIyVBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1 YTFhMzkwHhcNMjUxMjA2MjEwMTQzWhcNMjUxMjA3MjEwMTQzWjAzMTEwLwYDVQQD EyhlNzdmZmEyNDRiMDAxNWYwZmE3YjVjODBkMTk0NDg5MGFhYjgxYTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9ISPQkt/ZeYwvHIrVMuSXTMucOf ZDEyT7pWttVGacvUAC6XilhaI3du0ZxM1/ApUBjRC0SjwgBB9PhqtfoA4YZa0G8f eCm8tBntoW2nlFH9pVFITfr0Y5GtuigFccnEFdyR6zt5fsDz6GpWFLUb+zL5FYk0 tD839UL274Se9PDWDFCFwHry6I4EnxI8zi93Abnz4pEC6TFC+nfrRRKsMbkQd6R/ SYRoDkH59NV/B1CwGMspCF37PE9tCi5mPwIGeHTrj0ld6VxOZyNAT7F5En4Um8G/ HkWVrO0ojPz3I0p5OAdW7eJJSMjQ0k4MOLa8GhCX3buhbeCTqgPkpSvD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd/+iRLABXw+ntcgNGUSJCquBoMMB8GA1UdIwQY MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidq0oh/a isZ7PleBeGq2xqvCjw0Zv2Lv+bQi6zf5vE+Nkpbt/vkQ371bqEwOUCIhZwmDIcxE pBi6LUbdnIEm7uiaaPfTxc7Idcdxw9Xr4EqWPGK9033omAh+QelUE6To2Gbjh3j9 qOcKLp1UiwKE3TH9tOhxbfY6Apht3HepbG2Rp787vJEMthw96KIvSs4lBUQB8YJq wFHWX4jRppZplTas/boqeKw6rOxdAO+/UYlEvnlbi+ir2s11IHfwu89bcsUOimxx k0RcMdEw0O/+IdCa2y5WS0BrxyTJoHnjRZoxT9snVXZzO33YBD0vb5fTyByDCeVW t/osdFNhl2zd/w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:16 2025 by rpki-client