This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft File: 0zsy4F0KhdvURQ83pz5_ofYQCvw.mft (raw, json) Hash identifier: l2PcR5WermGR1GT51XYe/tAq8lvqgZQ4rYg1gVvJHNo= Subject key identifier: 6C:54:78:FA:D1:CA:31:93:1F:9E:57:E1:6D:92:87:9E:26:F1:7A:53 Authority key identifier: D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC Certificate issuer: /CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc Certificate serial: 019B40C88C56F0F18F6E57DA4F9DAFA22DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft Manifest number: 0AAC Signing time: Sun 21 Dec 2025 12:00:43 +0000 Manifest this update: Sun 21 Dec 2025 12:00:43 +0000 Manifest next update: Mon 22 Dec 2025 12:00:43 +0000 Files and hashes: 1: 0zsy4F0KhdvURQ83pz5_ofYQCvw.crl (hash: 6a/+nS6MgZvhgIWh6pf+VZSK5gZBZqIecThs4ww1RJY=) 2: PMHzHrS6vvRZOElfdDEFLn4owdU.roa (hash: UQqloSoHMyhRkRNOpx686QqPQutsxYq/mxr1bVAeLpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:8c:56:f0:f1:8f:6e:57:da:4f:9d:af:a2:2d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33b32e05d0a85dbd4450f37a73e7fa1f6100afc Validity Not Before: Dec 21 12:00:43 2025 GMT Not After : Dec 22 12:00:43 2025 GMT Subject: CN=6c5478fad1ca31931f9e57e16d92879e26f17a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:49:1e:72:fc:9b:15:00:21:7d:87:88:4d:f3: f9:a6:88:79:05:e9:2c:1f:f8:9a:8b:79:c7:da:9a: 8a:85:2d:68:ed:17:77:cd:a0:93:90:9c:2e:70:e0: 95:1c:60:a4:b8:01:04:30:27:b7:46:03:23:8f:4d: 32:c5:e3:87:af:27:35:85:45:ef:98:2b:ef:93:5f: 56:4e:1e:84:8e:4e:a1:fc:09:ff:1e:36:3c:ac:8f: f5:30:0f:77:25:86:86:f4:43:e9:61:c1:8e:20:e8: 6c:6d:9c:d3:82:d5:09:52:46:2b:41:3c:20:a7:ef: c2:a1:73:52:3c:3e:98:40:02:44:ce:6d:a6:29:da: f9:d9:0c:8d:82:fa:47:f4:62:e7:80:3a:3b:d8:14: 68:84:92:d8:44:bd:93:42:b4:94:86:24:0b:24:f9: a5:ad:ee:51:44:2a:fb:55:93:13:a9:ea:8b:61:c2: 79:0b:52:61:9c:a2:5f:3a:83:1d:f8:8c:62:15:5a: c4:92:69:63:82:54:25:03:72:29:a1:69:46:4c:bf: 0e:f3:b8:c4:a9:80:c3:e4:19:45:47:b5:5f:34:48: a7:33:a0:0e:4d:d2:39:2b:f0:1f:bd:59:ee:6f:6f: 29:48:5d:53:1c:89:2b:0b:b6:79:f7:0d:c3:7f:11: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:78:FA:D1:CA:31:93:1F:9E:57:E1:6D:92:87:9E:26:F1:7A:53 X509v3 Authority Key Identifier: keyid:D3:3B:32:E0:5D:0A:85:DB:D4:45:0F:37:A7:3E:7F:A1:F6:10:0A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zsy4F0KhdvURQ83pz5_ofYQCvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cf8791-9980-4c79-9c28-0e16baef7113/1/0zsy4F0KhdvURQ83pz5_ofYQCvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:89:a0:65:4d:a2:84:ff:0b:a9:be:d8:e0:2a:34:54:19:79: 98:0b:7a:d2:6b:71:7e:85:ff:98:4f:8c:62:fc:dd:84:dd:65: 52:a4:91:60:c8:a9:cd:89:d7:6b:32:eb:dd:97:dd:bd:59:15: 1a:87:1a:33:34:4d:4f:6c:4a:9a:ac:2c:e5:23:e2:f0:32:d3: 9c:c6:ac:d8:82:d0:e0:ef:25:65:9e:23:37:36:d4:12:df:a8: c1:fe:99:a8:f9:d7:67:29:25:4b:a7:90:93:0b:fb:c6:35:48: bb:ae:29:58:20:26:40:73:4f:25:b8:8f:c7:72:20:71:f0:65: 07:7e:c9:24:b7:de:9b:56:d0:9e:b2:ce:91:8e:2e:cf:94:d6: e7:4f:9c:46:d0:35:be:68:13:b2:84:62:8f:4c:f8:73:e7:5b: da:29:9a:98:8b:8a:74:c6:93:52:ea:f6:b1:06:50:30:18:2b: 3a:ac:52:c8:1e:be:b3:9d:6b:28:0d:fe:29:ad:12:90:f7:c2: a5:78:0b:26:4a:b6:4a:d2:15:5d:96:81:5a:b5:7d:e5:79:ba: 27:36:04:81:69:98:d6:bf:af:b2:cd:95:64:9d:84:e9:35:43: b5:38:19:f3:da:83:69:88:b6:6b:d5:f8:d5:db:46:3e:4a:0f: 26:c4:3e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyIxW8PGPblfaT52voi37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2IzMmUwNWQwYTg1ZGJkNDQ1MGYzN2E3M2U3ZmExZjYx MDBhZmMwHhcNMjUxMjIxMTIwMDQzWhcNMjUxMjIyMTIwMDQzWjAzMTEwLwYDVQQD Eyg2YzU0NzhmYWQxY2EzMTkzMWY5ZTU3ZTE2ZDkyODc5ZTI2ZjE3YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40kecvybFQAhfYeITfP5poh5Beks H/iai3nH2pqKhS1o7Rd3zaCTkJwucOCVHGCkuAEEMCe3RgMjj00yxeOHryc1hUXv mCvvk19WTh6Ejk6h/An/HjY8rI/1MA93JYaG9EPpYcGOIOhsbZzTgtUJUkYrQTwg p+/CoXNSPD6YQAJEzm2mKdr52QyNgvpH9GLngDo72BRohJLYRL2TQrSUhiQLJPml re5RRCr7VZMTqeqLYcJ5C1JhnKJfOoMd+IxiFVrEkmljglQlA3IpoWlGTL8O87jE qYDD5BlFR7VfNEinM6AOTdI5K/AfvVnub28pSF1THIkrC7Z59w3DfxGdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxUePrRyjGTH55X4W2Sh54m8XpTMB8GA1UdIwQY MBaAFNM7MuBdCoXb1EUPN6c+f6H2EAr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jZjg3OTEtOTk4MC00Yzc5LTljMjgt MGUxNmJhZWY3MTEzLzEvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jZjg3OTEtOTk4MC00Yzc5LTljMjgtMGUxNmJhZWY3MTEz LzEvMHpzeTRGMEtoZHZVUlE4M3B6NV9vZllRQ3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATomgZU2i hP8Lqb7Y4Co0VBl5mAt60mtxfoX/mE+MYvzdhN1lUqSRYMipzYnXazLr3ZfdvVkV GocaMzRNT2xKmqws5SPi8DLTnMas2ILQ4O8lZZ4jNzbUEt+owf6ZqPnXZyklS6eQ kwv7xjVIu64pWCAmQHNPJbiPx3IgcfBlB37JJLfem1bQnrLOkY4uz5TW50+cRtA1 vmgTsoRij0z4c+db2imamIuKdMaTUur2sQZQMBgrOqxSyB6+s51rKA3+Ka0SkPfC pXgLJkq2StIVXZaBWrV95Xm6JzYEgWmY1r+vss2VZJ2E6TVDtTgZ89qDaYi2a9X4 1dtGPkoPJsQ+sA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:56:44 2025 by rpki-client