This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json) Hash identifier: RYers694ApNJNLXxmRQzoSAw1L14OYprQ1gJ63nXMaE= Subject key identifier: 24:4D:4E:5C:82:D8:CC:91:B8:43:BE:E5:6C:BA:7B:49:2B:D5:C6:95 Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6 Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6 Certificate serial: 019B4324BC2CF28F4F7BB405549C46316009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 23:00:39 +0000 Manifest this update: Sun 21 Dec 2025 23:00:39 +0000 Manifest next update: Mon 22 Dec 2025 23:00:39 +0000 Files and hashes: 1: oYkhZTLQrnvl-IttxzifaAlw7V0.roa (hash: QiFAHpz1St3NeW4jjfgoztvBboy2Q91P0n4+GCcROlY=) 2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: XjmuDxMv0neioioc2lCsGU5KRimHpCJ+gj/w6gMMOp4=) 3: voX6NtFAGSz-Ugo7TPI8c427IMk.roa (hash: +uCML9+GTTpkSUrmQ3BPnWbGJYNmNMhb4t9N4Bq8EyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:bc:2c:f2:8f:4f:7b:b4:05:54:9c:46:31:60:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6 Validity Not Before: Dec 21 23:00:39 2025 GMT Not After : Dec 22 23:00:39 2025 GMT Subject: CN=244d4e5c82d8cc91b843bee56cba7b492bd5c695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:f9:ff:7d:2b:9d:9e:b3:97:7f:b9:ca:7a: a9:58:d3:f5:14:f0:58:e6:71:fc:f3:0e:90:0c:81: d5:c9:76:ce:b3:56:cf:ef:97:c7:4f:26:92:a1:b7: b9:03:98:8c:74:98:b2:14:5b:78:d2:80:2c:9e:a6: 37:c1:5b:91:46:19:3a:c9:4f:d8:4b:8a:60:31:68: a5:18:cd:e9:16:04:0f:36:b3:5f:0c:48:ed:15:cd: 77:60:c2:b2:89:fe:7b:56:3d:eb:b8:b9:9d:31:ef: 80:2f:70:cb:f0:16:2a:c7:09:32:68:24:23:8e:42: a6:90:60:45:00:0a:1e:ed:8b:cd:6b:e0:a3:db:c1: 9f:90:9a:dc:1a:e9:d6:84:2b:0d:e6:28:32:8a:36: 80:fd:b4:a3:22:45:76:3e:0a:a6:11:ea:53:d3:dc: a2:48:f8:41:d2:47:35:66:ad:b7:b0:65:c1:b3:71: 23:c8:51:21:ea:5d:7b:ba:f7:7a:53:e1:20:6b:af: aa:e5:4e:fc:0a:38:0e:1c:a0:e7:7e:fb:e8:bd:b0: 25:49:d0:e0:7f:19:70:1d:ec:af:b2:59:71:d6:ee: 7c:b8:64:61:9b:e9:59:51:33:da:21:a9:64:4b:dd: c4:98:59:41:10:71:c5:97:b8:db:cb:ac:38:0b:ff: 24:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4D:4E:5C:82:D8:CC:91:B8:43:BE:E5:6C:BA:7B:49:2B:D5:C6:95 X509v3 Authority Key Identifier: keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:f0:b1:43:5a:a0:81:ee:a5:a7:6b:83:c1:98:86:d6:44: 7b:19:cd:4f:d2:4a:68:23:70:3c:ca:0e:12:ea:7a:c4:c3:c1: 01:ea:bf:cf:56:b4:f7:fe:d1:5e:21:79:5f:86:04:d3:0b:ad: 2b:ee:50:5e:41:81:93:89:1b:ea:a6:96:d9:8c:17:eb:f0:f1: 84:70:b9:ef:1c:6e:32:da:a3:c8:b2:dd:e4:69:05:6f:ee:39: 0e:60:86:8e:4a:e5:9f:e7:77:07:ad:e1:eb:bd:73:bb:aa:32: b5:d9:81:0d:13:12:65:2c:2a:54:7c:01:f3:8a:bd:b9:94:69: 55:a6:34:5a:85:6e:d1:29:e0:2e:5a:4a:06:9d:14:c1:03:6b: fa:dc:cb:7d:38:50:93:6d:1e:cc:84:9f:d6:58:7f:d5:1f:e8: 2d:61:40:f5:8f:03:58:a3:f9:63:10:fd:29:3a:7b:08:89:c4: 28:af:5c:c1:9d:96:f5:85:62:51:c8:d4:e1:44:d6:4f:50:6d: 18:69:41:a5:02:ba:7a:35:02:31:fd:ae:b3:31:87:46:7d:44: 16:f1:c5:2b:c8:d5:13:27:45:87:1d:4a:0b:ae:18:7c:0c:3e: 98:c2:86:c0:d4:7f:9d:db:6c:d0:5a:27:1b:2d:ee:df:d5:68: 72:a8:ed:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJLws8o9Pe7QFVJxGMWAJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMGNkMWEzMzhlYmY1Yzc5NTJlYjlhMWYwMDYwNTQ5Zjkz NDBhZDYwHhcNMjUxMjIxMjMwMDM5WhcNMjUxMjIyMjMwMDM5WjAzMTEwLwYDVQQD EygyNDRkNGU1YzgyZDhjYzkxYjg0M2JlZTU2Y2JhN2I0OTJiZDVjNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoH5/30rnZ6zl3+5ynqpWNP1FPBY 5nH88w6QDIHVyXbOs1bP75fHTyaSobe5A5iMdJiyFFt40oAsnqY3wVuRRhk6yU/Y S4pgMWilGM3pFgQPNrNfDEjtFc13YMKyif57Vj3ruLmdMe+AL3DL8BYqxwkyaCQj jkKmkGBFAAoe7YvNa+Cj28GfkJrcGunWhCsN5igyijaA/bSjIkV2PgqmEepT09yi SPhB0kc1Zq23sGXBs3EjyFEh6l17uvd6U+Ega6+q5U78CjgOHKDnfvvovbAlSdDg fxlwHeyvsllx1u58uGRhm+lZUTPaIalkS93EmFlBEHHFl7jby6w4C/8kDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRNTlyC2MyRuEO+5Wy6e0kr1caVMB8GA1UdIwQY MBaAFKwM0aM46/XHlS65ofAGBUn5NArWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQt YTMzNTE4YmRkOGZlLzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wYzVlYzEtOWMzZC00MTYyLTk4MDQtYTMzNTE4YmRkOGZl LzEvckF6Um96anI5Y2VWTHJtaDhBWUZTZmswQ3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASO/wsUNa oIHupadrg8GYhtZEexnNT9JKaCNwPMoOEup6xMPBAeq/z1a09/7RXiF5X4YE0wut K+5QXkGBk4kb6qaW2YwX6/DxhHC57xxuMtqjyLLd5GkFb+45DmCGjkrln+d3B63h 671zu6oytdmBDRMSZSwqVHwB84q9uZRpVaY0WoVu0SngLlpKBp0UwQNr+tzLfThQ k20ezISf1lh/1R/oLWFA9Y8DWKP5YxD9KTp7CInEKK9cwZ2W9YViUcjU4UTWT1Bt GGlBpQK6ejUCMf2uszGHRn1EFvHFK8jVEydFhx1KC64YfAw+mMKGwNR/ndts0Fon Gy3u39VocqjtPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:00 2025 by rpki-client