This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json) Hash identifier: XUk0zcgCtzUn0a6AODhcZwc9Zo3mnlzHloZXGtAdjuM= Subject key identifier: 42:4E:2D:6F:F5:FA:A0:10:6F:51:0B:AA:1A:C2:72:4E:44:68:08:7A Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Certificate serial: 019AF16475D283B2B53390927B1EB9B973E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft Manifest number: 07E8 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=) 2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: vqqCl66MPh/WDPeFkD0wmWT7ioZYinTXjzmip5Eyls8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:75:d2:83:b2:b5:33:90:92:7b:1e:b9:b9:73:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=424e2d6ff5faa0106f510baa1ac2724e4468087a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:5a:c6:33:3f:ba:aa:e0:b8:25:fa:e3:83: f7:fd:de:a6:48:a3:ea:d5:b8:fd:73:f1:e6:0b:69: 70:de:6b:fb:d7:0c:f2:66:84:88:84:d2:64:03:ed: 84:7d:bc:b3:5c:16:f4:de:53:73:b2:e1:73:4c:b1: 31:7d:c0:37:04:40:4e:f7:e0:42:bc:fe:86:51:10: c4:06:ea:52:00:90:cb:ae:45:0f:46:ce:f5:47:e5: 37:49:0d:c8:42:de:fe:2e:b4:24:f2:a9:79:06:c2: a5:0b:a6:c5:7c:aa:46:fd:f6:f5:e6:e1:8a:25:08: 00:b5:fe:dc:61:58:aa:db:20:4d:e7:a4:20:11:60: 92:df:33:41:58:16:ea:83:82:d4:e8:d5:f4:37:18: dd:f5:47:b7:cf:e0:b1:05:16:45:a4:8f:a4:96:b2: f0:0f:e3:cc:f5:e6:ae:09:14:99:e1:13:d1:ba:a9: 62:56:e2:3e:f2:a5:b4:d7:1d:0e:ac:c6:ac:b5:c0: de:a9:b5:cc:bb:5c:73:28:79:36:50:49:ad:93:53: 8f:67:6d:c7:03:cc:1f:32:58:e9:95:44:23:0a:2d: e4:a5:02:4f:6d:e0:e6:cd:24:68:44:57:66:a7:24: 32:47:06:de:c3:c0:e6:42:37:f8:1f:15:e8:b5:a9: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:2D:6F:F5:FA:A0:10:6F:51:0B:AA:1A:C2:72:4E:44:68:08:7A X509v3 Authority Key Identifier: keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ef:41:fc:43:7c:82:42:ba:34:13:4c:15:b0:d0:74:45:66: b8:e4:9f:dc:fb:08:3e:a6:97:9d:ff:f9:39:b3:86:35:23:d7: f0:81:1d:37:ac:6e:09:0b:b5:f9:2e:fa:d7:70:51:38:dd:9e: 4b:71:20:73:23:77:07:38:87:1c:ba:db:f2:94:ac:2e:40:4b: 98:c8:c5:8d:5e:6d:e3:62:d2:97:ac:d6:45:b1:9b:61:3d:93: 60:29:68:2c:38:19:ce:2d:72:92:48:c2:cc:2b:ac:95:e4:6c: d4:c3:ff:be:c1:4a:b4:54:d8:b8:9b:5f:eb:69:ba:96:0d:af: ac:d2:5b:91:9d:3c:a9:5d:d9:48:29:05:bd:f6:ad:64:bf:a1: b8:40:58:49:69:74:5c:8e:5a:88:37:22:d1:3c:51:27:78:d9: 9c:58:19:56:aa:7a:02:d1:17:f8:17:3e:1b:ee:cf:62:38:4e: 3d:b2:d7:0b:78:fe:32:50:c8:9b:68:a4:b5:4c:60:0c:b1:ae: e5:1f:2c:34:46:4b:c8:6b:5d:59:0e:46:8a:62:e2:35:46:94: 75:be:13:98:36:2f:5f:98:0d:a8:37:80:d9:42:a3:0a:46:46: 01:dd:72:ed:6b:1d:53:7e:42:55:a6:32:46:90:17:de:ea:c0: 30:81:a1:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHXSg7K1M5CSex65uXPhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw NTMyYjAwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD Eyg0MjRlMmQ2ZmY1ZmFhMDEwNmY1MTBiYWExYWMyNzI0ZTQ0NjgwODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEBaxjM/uqrguCX644P3/d6mSKPq 1bj9c/HmC2lw3mv71wzyZoSIhNJkA+2EfbyzXBb03lNzsuFzTLExfcA3BEBO9+BC vP6GURDEBupSAJDLrkUPRs71R+U3SQ3IQt7+LrQk8ql5BsKlC6bFfKpG/fb15uGK JQgAtf7cYViq2yBN56QgEWCS3zNBWBbqg4LU6NX0Nxjd9Ue3z+CxBRZFpI+klrLw D+PM9eauCRSZ4RPRuqliVuI+8qW01x0OrMastcDeqbXMu1xzKHk2UEmtk1OPZ23H A8wfMljplUQjCi3kpQJPbeDmzSRoRFdmpyQyRwbew8DmQjf4HxXotampIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJOLW/1+qAQb1ELqhrCck5EaAh6MB8GA1UdIwQY MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+9B/EN8 gkK6NBNMFbDQdEVmuOSf3PsIPqaXnf/5ObOGNSPX8IEdN6xuCQu1+S7613BRON2e S3EgcyN3BziHHLrb8pSsLkBLmMjFjV5t42LSl6zWRbGbYT2TYCloLDgZzi1ykkjC zCusleRs1MP/vsFKtFTYuJtf62m6lg2vrNJbkZ08qV3ZSCkFvfatZL+huEBYSWl0 XI5aiDci0TxRJ3jZnFgZVqp6AtEX+Bc+G+7PYjhOPbLXC3j+MlDIm2iktUxgDLGu 5R8sNEZLyGtdWQ5GimLiNUaUdb4TmDYvX5gNqDeA2UKjCkZGAd1y7WsdU35CVaYy RpAX3urAMIGh+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:15 2025 by rpki-client