This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json) Hash identifier: RbsvT6tMFS9gk2qgIZyHpmi3QGaQRR2djTIqZsayNiY= Subject key identifier: D9:34:E0:68:7C:E8:2E:70:70:7A:3A:C2:9F:AF:A3:C8:1C:E3:B3:9B Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315 Certificate serial: 019AF31B233F8CEF0BE8502409653435E8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft Manifest number: 0769 Signing time: Sat 06 Dec 2025 10:00:33 +0000 Manifest this update: Sat 06 Dec 2025 10:00:33 +0000 Manifest next update: Sun 07 Dec 2025 10:00:33 +0000 Files and hashes: 1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: LVx9ja3uAMBs+FCsAEf8ruy/Axdanr64El/QyHK2hQI=) 2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:23:3f:8c:ef:0b:e8:50:24:09:65:34:35:e8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315 Validity Not Before: Dec 6 10:00:33 2025 GMT Not After : Dec 7 10:00:33 2025 GMT Subject: CN=d934e0687ce82e70707a3ac29fafa3c81ce3b39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:86:56:ca:98:f6:08:18:05:27:27:87:56: 09:58:02:44:27:d8:f6:ec:2d:cc:64:63:15:43:c2: 08:90:9b:e0:93:c0:cd:3f:95:f8:68:f6:2f:25:16: a3:31:0f:a9:93:bd:bd:0f:17:22:6a:f0:1a:fe:1d: d6:16:64:43:9e:fc:95:27:1f:53:2b:4d:6e:2d:1f: 5d:49:20:73:db:cc:c5:fb:31:3f:ae:64:f7:15:21: c0:b4:8d:87:0b:4f:dc:e5:4a:eb:8e:4c:84:cb:1f: f9:98:16:67:9a:cb:2c:ce:48:0f:11:0d:a9:fa:2d: db:af:1d:fa:2f:7a:cf:d1:a0:b7:d8:d0:c6:a8:a9: ab:6a:f9:ab:6e:5b:20:f2:04:ce:89:ad:63:c2:17: 9b:fe:5e:92:1d:81:4b:b3:48:2e:52:79:0d:3e:52: d7:98:63:ca:12:58:86:86:d6:00:d7:46:ca:2c:30: 5a:e0:b4:c3:b8:10:91:04:4a:19:2f:86:df:96:30: 00:c0:81:de:43:9b:e8:c1:8a:8a:0d:26:c2:11:27: dd:3b:63:5f:5b:a6:61:7b:dd:7f:3f:f8:8b:1e:28: a7:20:dc:8b:df:65:49:ce:57:b0:b0:46:21:97:2a: ac:75:9c:f1:17:5e:26:8d:cc:9f:57:03:b0:3d:dc: 41:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:E0:68:7C:E8:2E:70:70:7A:3A:C2:9F:AF:A3:C8:1C:E3:B3:9B X509v3 Authority Key Identifier: keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:aa:a3:89:eb:73:79:ec:d2:32:44:b0:b3:2f:b5:70:8a:f9: c6:45:88:1d:40:ac:e9:de:fe:f8:69:b6:e2:b5:d0:ab:73:d0: 54:d1:f1:68:43:d8:a9:5f:0b:16:d5:a8:dd:64:5b:79:d5:ac: 85:d6:5f:92:62:1d:cc:50:11:0d:22:a9:c9:71:6c:d4:11:05: e5:9e:9b:5a:24:25:c5:8d:90:a3:36:da:d0:8f:6d:f0:56:4b: ca:17:9a:22:30:64:ec:f3:90:0e:22:55:29:1a:d1:96:ac:89: c4:de:ee:3a:c2:5e:35:0e:b3:d5:3c:58:26:e6:83:39:7f:6d: 99:3c:3b:78:66:71:47:59:dc:14:58:73:b3:da:a5:4c:2f:d7: fe:37:d3:33:bb:4a:0c:cd:02:b5:1e:76:b6:23:e0:21:5b:a1: 06:ac:af:32:06:11:d6:26:94:d0:ac:5a:ce:11:0f:ab:bc:f5: ac:32:73:39:e4:f4:0b:89:81:3d:6d:82:02:e5:78:80:5b:e2: 6e:55:13:d3:25:e8:14:1f:99:7c:2c:92:7c:9b:7a:3e:7a:10: 02:70:d0:85:56:c0:24:92:34:97:32:b9:88:39:8d:fe:06:8d: 15:38:47:71:0e:96:ce:33:7c:a2:06:59:b9:b1:41:99:dc:1b: af:51:87:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGyM/jO8L6FAkCWU0NeisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODY0NGI5MmYzOTRjYWYzNjY3YmRiNmFmM2UzODY5OWM1 NGYzMTUwHhcNMjUxMjA2MTAwMDMzWhcNMjUxMjA3MTAwMDMzWjAzMTEwLwYDVQQD EyhkOTM0ZTA2ODdjZTgyZTcwNzA3YTNhYzI5ZmFmYTNjODFjZTNiMzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1eGVsqY9ggYBScnh1YJWAJEJ9j2 7C3MZGMVQ8IIkJvgk8DNP5X4aPYvJRajMQ+pk729DxciavAa/h3WFmRDnvyVJx9T K01uLR9dSSBz28zF+zE/rmT3FSHAtI2HC0/c5UrrjkyEyx/5mBZnmssszkgPEQ2p +i3brx36L3rP0aC32NDGqKmravmrblsg8gTOia1jwheb/l6SHYFLs0guUnkNPlLX mGPKEliGhtYA10bKLDBa4LTDuBCRBEoZL4bfljAAwIHeQ5vowYqKDSbCESfdO2Nf W6Zhe91/P/iLHiinINyL32VJzlewsEYhlyqsdZzxF14mjcyfVwOwPdxBewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk04Gh86C5wcHo6wp+vo8gc47ObMB8GA1UdIwQY MBaAFEaGRLkvOUyvNme9tq8+OGmcVPMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYt YTVlMTNiNGZiMTJiLzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYtYTVlMTNiNGZiMTJi LzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaqjietz eezSMkSwsy+1cIr5xkWIHUCs6d7++Gm24rXQq3PQVNHxaEPYqV8LFtWo3WRbedWs hdZfkmIdzFARDSKpyXFs1BEF5Z6bWiQlxY2Qozba0I9t8FZLyheaIjBk7POQDiJV KRrRlqyJxN7uOsJeNQ6z1TxYJuaDOX9tmTw7eGZxR1ncFFhzs9qlTC/X/jfTM7tK DM0CtR52tiPgIVuhBqyvMgYR1iaU0KxazhEPq7z1rDJzOeT0C4mBPW2CAuV4gFvi blUT0yXoFB+ZfCySfJt6PnoQAnDQhVbAJJI0lzK5iDmN/gaNFThHcQ6WzjN8ogZZ ubFBmdwbr1GHYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:36 2025 by rpki-client