This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json) Hash identifier: GZxHkaoMPHZOErswFUI3zCkajXi5FifbBdifTTWPJqg= Subject key identifier: 7F:15:4A:D5:1D:9C:C2:29:73:57:CA:35:4F:9B:26:9D:70:30:1B:45 Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c Certificate serial: 019AF19B33F36218BCD596F05E3840FF7BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft Manifest number: 1048 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: DonYtLsL8dS5De2GGSEAafxZPlD/CPawK5HPBGbHX10=) 2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=) 3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:33:f3:62:18:bc:d5:96:f0:5e:38:40:ff:7b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=7f154ad51d9cc2297357ca354f9b269d70301b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:6b:82:29:16:ba:06:49:a5:dc:40:2e:3b: b6:47:71:89:2f:03:2d:21:95:b8:58:35:34:14:67: aa:a0:01:a7:79:aa:d8:0e:4c:0b:00:5b:0d:5a:1a: d6:6b:83:08:c9:5b:33:43:e5:64:6f:cb:b6:9e:f7: fb:85:87:f5:64:a0:7f:5e:2b:4d:56:e5:90:3e:ad: 8d:9b:be:42:3a:79:cb:f7:8c:16:63:88:76:b9:79: bb:34:f4:27:ae:55:ec:d9:96:00:5e:93:8d:c4:0f: f5:3f:48:d1:8a:04:98:2b:ca:99:42:4f:61:de:ac: d6:ff:6a:a4:0f:06:94:69:0b:21:7d:1f:e4:1b:2b: 30:34:d5:ea:4f:a6:81:77:c2:8f:c6:f5:c9:3d:b5: 10:9f:4d:e5:f7:5a:98:11:cd:ed:81:46:d3:a9:07: a4:6b:90:30:da:d9:9c:8d:e1:33:b2:27:18:f4:70: 0c:0a:86:8c:2f:cd:31:fa:46:b1:10:48:04:45:c1: 7f:9a:6e:7b:91:cd:8d:78:94:89:a3:ca:28:b0:7e: 81:ae:72:db:d2:38:65:96:a4:9d:c9:91:5c:7c:c2: 75:ee:13:d4:0f:dd:7a:53:53:25:76:e6:4e:55:d9: cf:ec:4a:f2:47:14:99:60:3b:72:50:2e:40:d2:dd: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:15:4A:D5:1D:9C:C2:29:73:57:CA:35:4F:9B:26:9D:70:30:1B:45 X509v3 Authority Key Identifier: keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7f:34:77:5a:52:b3:55:2f:aa:da:f7:c0:40:c9:d9:d8:7b: ff:f4:d0:c3:4e:e4:9e:24:71:2d:99:eb:3c:69:b7:34:ac:05: c4:63:b2:b6:8a:90:bc:52:4c:4f:a5:4d:9f:5a:ea:f8:b9:98: bc:1d:de:f3:50:ac:32:e3:a1:a3:9b:a2:7a:9d:ef:c2:3c:4f: 37:7c:d3:d3:02:2e:11:d8:5e:52:e5:7c:c9:49:35:2c:57:a9: 31:8f:ec:6e:7a:48:28:77:43:64:f3:5d:a4:5e:28:df:a8:c2: 53:54:9f:9d:14:9e:c5:be:76:66:de:b8:df:e3:02:ca:9b:70: 5b:19:6b:b1:34:66:fb:2a:06:33:65:56:b0:5c:6e:21:5b:34: 8a:30:35:da:af:c9:f3:59:01:91:ee:62:34:6a:35:cb:14:6e: ec:8a:ba:64:22:21:be:5a:ed:0a:36:22:15:69:0e:95:38:85: f0:3d:d2:4c:03:51:67:77:a7:46:71:1b:62:f7:37:1c:a2:82: c0:50:b5:26:69:8d:87:e3:08:b1:40:b0:81:04:72:91:14:32: 44:8f:84:8f:f0:c9:3c:6c:75:69:23:1a:86:b7:5c:30:7d:2c: 82:58:81:36:95:e2:26:ac:f8:90:20:f6:bb:2e:8a:2f:56:30: e6:0e:5c:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzPzYhi81ZbwXjhA/3vCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3 YTg3MmMwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD Eyg3ZjE1NGFkNTFkOWNjMjI5NzM1N2NhMzU0ZjliMjY5ZDcwMzAxYjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWprgikWugZJpdxALju2R3GJLwMt IZW4WDU0FGeqoAGnearYDkwLAFsNWhrWa4MIyVszQ+Vkb8u2nvf7hYf1ZKB/XitN VuWQPq2Nm75COnnL94wWY4h2uXm7NPQnrlXs2ZYAXpONxA/1P0jRigSYK8qZQk9h 3qzW/2qkDwaUaQshfR/kGyswNNXqT6aBd8KPxvXJPbUQn03l91qYEc3tgUbTqQek a5Aw2tmcjeEzsicY9HAMCoaML80x+kaxEEgERcF/mm57kc2NeJSJo8oosH6BrnLb 0jhllqSdyZFcfMJ17hPUD916U1MlduZOVdnP7EryRxSZYDtyUC5A0t07QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8VStUdnMIpc1fKNU+bJp1wMBtFMB8GA1UdIwQY MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUn80d1pS s1Uvqtr3wEDJ2dh7//TQw07kniRxLZnrPGm3NKwFxGOytoqQvFJMT6VNn1rq+LmY vB3e81CsMuOho5uiep3vwjxPN3zT0wIuEdheUuV8yUk1LFepMY/sbnpIKHdDZPNd pF4o36jCU1SfnRSexb52Zt643+MCyptwWxlrsTRm+yoGM2VWsFxuIVs0ijA12q/J 81kBke5iNGo1yxRu7Iq6ZCIhvlrtCjYiFWkOlTiF8D3STANRZ3enRnEbYvc3HKKC wFC1JmmNh+MIsUCwgQRykRQyRI+Ej/DJPGx1aSMahrdcMH0sgliBNpXiJqz4kCD2 uy6KL1Yw5g5csQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:12:10 2025 by rpki-client