This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json) Hash identifier: t4UZ1U7gNXGVlGrO3CMfQiQ8ws0GkT6rex7xR2qbX3E= Subject key identifier: B1:1B:D8:60:75:B4:9F:55:C8:64:0B:C4:12:C7:C0:9C:27:1B:89:C1 Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61 Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961 Certificate serial: 019AF38931A57168D26B2C80E04720B23035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 12:00:45 +0000 Manifest this update: Sat 06 Dec 2025 12:00:45 +0000 Manifest next update: Sun 07 Dec 2025 12:00:45 +0000 Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: TMHBW7XTZnNZt2L2+S7LsfYEn46hBiKpK06mAEojTS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:31:a5:71:68:d2:6b:2c:80:e0:47:20:b2:30:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961 Validity Not Before: Dec 6 12:00:45 2025 GMT Not After : Dec 7 12:00:45 2025 GMT Subject: CN=b11bd86075b49f55c8640bc412c7c09c271b89c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:0a:38:b1:4c:95:ce:3b:27:6e:a1:05:98: a6:aa:c8:99:3b:b9:16:fe:c1:37:e5:08:c6:a5:76: 30:10:fa:68:2a:86:6f:3d:9b:c3:2c:09:c2:9a:8d: 24:95:8f:ba:ea:e7:08:f0:e1:49:2a:d6:0d:33:9b: 2e:02:d9:a5:60:47:4d:0e:a9:75:df:49:a3:ee:05: 9c:dc:b6:2d:55:bd:bc:74:49:5d:12:46:1f:ff:ad: e2:f9:cb:e6:31:00:3a:ce:15:66:e3:81:04:da:0f: 86:b6:b5:6d:68:77:c0:c1:da:a9:ce:7c:f7:d9:ac: bd:1b:05:e8:48:ab:60:b7:05:bd:9f:d6:42:8a:49: 58:59:24:b3:a4:33:c4:55:52:eb:68:d6:12:11:80: 43:a6:b3:b7:77:c6:23:fd:9d:0b:e9:7f:d1:e1:d6: 8f:73:6c:dc:ad:9f:e0:46:95:90:d8:59:13:a2:c1: a4:03:f5:c2:a8:2d:1e:a7:97:53:c6:89:6c:5e:dd: 1c:ad:2d:e2:d2:e3:17:4f:8f:ec:f7:43:d0:5a:ac: ae:c2:ce:30:16:31:29:0d:51:76:e1:c0:ac:94:0c: 2d:44:34:d5:75:12:14:17:75:69:1a:67:54:c1:48: 9a:9b:09:31:b3:da:9e:84:53:c1:2f:7e:33:60:34: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1B:D8:60:75:B4:9F:55:C8:64:0B:C4:12:C7:C0:9C:27:1B:89:C1 X509v3 Authority Key Identifier: keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a0:51:ed:8b:c7:4f:f3:8a:de:e3:e9:62:90:8f:0d:a2:06: cc:83:7a:11:48:ff:f8:6c:cc:5e:31:b1:17:a4:a5:1b:4e:db: bf:a9:1d:27:0c:af:c9:13:b3:4a:f0:c0:9b:67:7f:54:95:ff: d1:34:01:81:4e:2e:a8:2a:0d:b7:ca:7e:19:5d:27:ca:e1:36: f6:5a:83:af:0a:92:f1:48:3c:18:a7:48:57:0d:5a:38:bb:82: 31:08:d8:23:ff:83:29:69:f2:2a:48:1d:c8:8d:c3:b8:47:f6: 05:4a:2f:45:57:0e:cb:ac:4c:2f:6c:b4:3d:05:35:4a:0f:0b: 36:7e:09:80:b4:fb:78:37:28:eb:e6:fa:6f:e7:8e:df:ed:7e: 9b:a8:1a:8a:d3:dd:68:10:4c:df:9e:e9:79:55:2d:5f:6f:5a: a9:3f:74:5c:03:03:2e:0a:e3:ad:5a:51:32:c3:fb:a4:af:7d: 67:71:14:6a:c1:d3:fe:f6:50:96:9e:8d:ba:9f:3a:ed:6f:49: 83:19:18:75:5b:f2:92:44:81:db:c2:a3:b2:93:26:b2:72:d8: c7:53:89:34:7a:1b:ed:62:ca:fe:e6:80:ee:a1:ab:8e:39:c5: df:ac:94:9b:2b:9f:d2:03:89:2f:c4:a3:d0:51:57:2e:42:7b: eb:8a:ee:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTGlcWjSayyA4EcgsjA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWNlZGU3ZTBmZmJkMzA4YWNiOTExMjEzNjhkZjhkNmNi MmU5NjEwHhcNMjUxMjA2MTIwMDQ1WhcNMjUxMjA3MTIwMDQ1WjAzMTEwLwYDVQQD EyhiMTFiZDg2MDc1YjQ5ZjU1Yzg2NDBiYzQxMmM3YzA5YzI3MWI4OWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQoKOLFMlc47J26hBZimqsiZO7kW /sE35QjGpXYwEPpoKoZvPZvDLAnCmo0klY+66ucI8OFJKtYNM5suAtmlYEdNDql1 30mj7gWc3LYtVb28dEldEkYf/63i+cvmMQA6zhVm44EE2g+GtrVtaHfAwdqpznz3 2ay9GwXoSKtgtwW9n9ZCiklYWSSzpDPEVVLraNYSEYBDprO3d8Yj/Z0L6X/R4daP c2zcrZ/gRpWQ2FkTosGkA/XCqC0ep5dTxolsXt0crS3i0uMXT4/s90PQWqyuws4w FjEpDVF24cCslAwtRDTVdRIUF3VpGmdUwUiamwkxs9qehFPBL34zYDR38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEb2GB1tJ9VyGQLxBLHwJwnG4nBMB8GA1UdIwQY MBaAFETs7efg/70wisuREhNo341ssulhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUt ODA5MzBiMjg0YTY5LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUtODA5MzBiMjg0YTY5 LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKBR7YvH T/OK3uPpYpCPDaIGzIN6EUj/+GzMXjGxF6SlG07bv6kdJwyvyROzSvDAm2d/VJX/ 0TQBgU4uqCoNt8p+GV0nyuE29lqDrwqS8Ug8GKdIVw1aOLuCMQjYI/+DKWnyKkgd yI3DuEf2BUovRVcOy6xML2y0PQU1Sg8LNn4JgLT7eDco6+b6b+eO3+1+m6gaitPd aBBM357peVUtX29aqT90XAMDLgrjrVpRMsP7pK99Z3EUasHT/vZQlp6Nup867W9J gxkYdVvykkSB28KjspMmsnLYx1OJNHob7WLK/uaA7qGrjjnF36yUmyuf0gOJL8Sj 0FFXLkJ764ruXw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:28 2025 by rpki-client