This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json) Hash identifier: PcZR3kTWsI7aWydfip3flfKx6b86+2QwGwtFkOyfXZM= Subject key identifier: E5:B2:E6:3D:80:4A:35:AB:1B:CB:EA:64:61:95:14:D7:6E:70:72:1E Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Certificate serial: 019AF5AED8D8C0DCB2732D2FE6C0A773086A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft Manifest number: 0CD8 Signing time: Sat 06 Dec 2025 22:01:07 +0000 Manifest this update: Sat 06 Dec 2025 22:01:07 +0000 Manifest next update: Sun 07 Dec 2025 22:01:07 +0000 Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: oWz6eQjgyFGb3NP85VsS773gVWDokt1YPM7ImbPjjiY=) 2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d8:d8:c0:dc:b2:73:2d:2f:e6:c0:a7:73:08:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Validity Not Before: Dec 6 22:01:07 2025 GMT Not After : Dec 7 22:01:07 2025 GMT Subject: CN=e5b2e63d804a35ab1bcbea64619514d76e70721e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:6e:8a:23:49:54:dc:0c:ee:e6:8a:94:f5: 98:6c:1d:00:ae:ef:50:5b:40:aa:da:78:77:80:2d: 7f:d4:87:ca:72:3f:1f:ac:73:3c:c1:40:87:bd:ba: 39:84:b1:00:e1:b3:21:4b:f4:5d:d9:21:4e:5a:e7: 88:4e:68:94:90:fc:c4:cd:72:c3:f7:79:3a:92:1e: ff:be:29:86:2c:32:7d:4b:ef:7e:4d:3c:48:12:de: 6b:8f:b4:05:20:9d:ad:51:fd:07:1b:e8:b1:82:91: f7:7d:99:fa:a8:53:f1:b2:39:a9:b6:4b:04:25:f2: 58:11:7c:b1:10:91:5c:5f:94:79:39:a6:f4:e7:2c: b0:e4:9c:48:f4:1d:bb:88:23:d3:f3:33:9a:92:35: 6a:68:d6:8b:ff:22:d8:b9:25:d8:bd:ff:bf:b5:ba: f9:b9:61:20:dc:c8:ff:1b:60:89:a3:3d:64:55:d3: 24:5b:72:ca:04:2c:a4:1a:6f:b2:42:31:1e:5f:76: 69:db:83:d0:05:f7:59:7a:a9:ea:4f:25:50:58:05: 05:bf:28:82:81:6b:8e:46:44:ee:9f:8b:b0:79:32: f0:07:90:85:a9:b7:7e:16:c0:14:4c:21:66:24:1b: 7a:61:08:01:0c:11:3b:69:0d:c5:ad:32:01:ea:d8: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B2:E6:3D:80:4A:35:AB:1B:CB:EA:64:61:95:14:D7:6E:70:72:1E X509v3 Authority Key Identifier: keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:06:64:25:59:a7:24:5c:e1:c1:9a:cb:c6:ad:e1:fa:b2:1b: 75:0d:90:15:64:39:7b:3b:76:54:bd:8d:6e:ca:f6:3b:86:06: c0:81:a8:37:9f:df:ff:33:8f:eb:a9:fa:e3:b4:07:46:7f:d6: 00:b1:b5:5d:d4:c8:d6:09:33:d4:76:3e:a8:10:b9:9a:0f:f8: 02:63:8a:7e:c1:c1:2f:d5:cd:27:f6:94:80:c6:10:ce:76:60: c0:e4:f7:5b:5a:25:18:eb:08:a3:d3:b4:34:d0:f8:11:5d:5c: ce:32:34:f1:bf:cc:5d:a8:c6:13:25:7c:b9:c5:e1:e1:76:8a: b8:5e:5b:70:22:aa:5a:23:bd:08:cf:0f:c5:59:71:64:91:64: 8f:f7:46:5c:49:e2:d4:c6:59:c7:08:68:f3:19:ca:13:fa:da: ab:d5:8d:ff:fd:8e:6c:14:43:b7:bf:fc:68:75:99:d6:7f:a6: 21:7e:0e:fa:d1:fc:cd:75:53:89:51:e9:07:d1:ea:19:5b:7b: 55:85:08:08:2d:60:e3:21:65:8b:90:23:ab:7d:f1:ea:cf:a4: 57:eb:a3:d7:df:bd:99:24:a7:30:93:f7:82:e6:99:2f:48:28: c4:39:66:3f:a9:3c:ed:0c:dd:77:87:f7:6a:6b:8a:e8:be:0b: 5a:77:a5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtjYwNyycy0v5sCncwhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2 MDE3Y2UwHhcNMjUxMjA2MjIwMTA3WhcNMjUxMjA3MjIwMTA3WjAzMTEwLwYDVQQD EyhlNWIyZTYzZDgwNGEzNWFiMWJjYmVhNjQ2MTk1MTRkNzZlNzA3MjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCxuiiNJVNwM7uaKlPWYbB0Aru9Q W0Cq2nh3gC1/1IfKcj8frHM8wUCHvbo5hLEA4bMhS/Rd2SFOWueITmiUkPzEzXLD 93k6kh7/vimGLDJ9S+9+TTxIEt5rj7QFIJ2tUf0HG+ixgpH3fZn6qFPxsjmptksE JfJYEXyxEJFcX5R5Oab05yyw5JxI9B27iCPT8zOakjVqaNaL/yLYuSXYvf+/tbr5 uWEg3Mj/G2CJoz1kVdMkW3LKBCykGm+yQjEeX3Zp24PQBfdZeqnqTyVQWAUFvyiC gWuORkTun4uweTLwB5CFqbd+FsAUTCFmJBt6YQgBDBE7aQ3FrTIB6tg93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWy5j2ASjWrG8vqZGGVFNducHIeMB8GA1UdIwQY MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAZkJVmn JFzhwZrLxq3h+rIbdQ2QFWQ5ezt2VL2Nbsr2O4YGwIGoN5/f/zOP66n647QHRn/W ALG1XdTI1gkz1HY+qBC5mg/4AmOKfsHBL9XNJ/aUgMYQznZgwOT3W1olGOsIo9O0 NND4EV1czjI08b/MXajGEyV8ucXh4XaKuF5bcCKqWiO9CM8PxVlxZJFkj/dGXEni 1MZZxwho8xnKE/raq9WN//2ObBRDt7/8aHWZ1n+mIX4O+tH8zXVTiVHpB9HqGVt7 VYUICC1g4yFli5Ajq33x6s+kV+uj19+9mSSnMJP3guaZL0goxDlmP6k87Qzdd4f3 amuK6L4LWneltw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:03 2025 by rpki-client