This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json) Hash identifier: MGy0Rr1CyX6o7oZfAQOWRfixl+TOYpgXKd/H1FJnenM= Subject key identifier: 74:91:E2:54:1C:7D:9F:65:16:61:C0:C5:AF:D2:9E:28:11:97:FE:95 Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2 Certificate serial: 019B47026154A074F30BC42516A065504006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 17:01:36 +0000 Manifest this update: Mon 22 Dec 2025 17:01:36 +0000 Manifest next update: Tue 23 Dec 2025 17:01:36 +0000 Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=) 2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: ImSIia3xIf1tC/LhlNWtyMp3cJfHyY745ERBxdmkwhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:61:54:a0:74:f3:0b:c4:25:16:a0:65:50:40:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2 Validity Not Before: Dec 22 17:01:36 2025 GMT Not After : Dec 23 17:01:36 2025 GMT Subject: CN=7491e2541c7d9f651661c0c5afd29e281197fe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:31:b7:c6:ec:4e:7c:88:5e:9d:bf:2d:52: 59:59:7f:14:05:70:33:e6:d0:34:6b:09:1c:04:b4: f7:41:f7:92:e2:7c:b6:b3:3d:65:f7:3e:12:e5:f0: 17:75:74:0c:eb:46:fc:f3:5b:9e:be:c0:2f:52:97: 00:8a:3c:34:a9:b1:b0:ac:9c:29:1e:a5:47:c5:6f: 3e:7e:05:40:26:3b:86:89:06:5d:31:12:0d:ee:3b: 4b:d4:7d:3a:10:b1:c1:91:b6:2a:f1:6e:78:ab:92: 27:7b:4e:35:65:7d:5f:44:f8:2a:d6:23:28:4a:b6: 60:18:5b:f9:3e:52:55:34:c6:d5:7f:58:b2:9d:86: f1:fd:69:da:81:1e:36:bc:9b:76:58:40:76:08:fa: 1e:e6:ac:23:b7:6a:5e:18:ae:2f:fe:d9:fb:30:f0: c3:2f:5c:d9:e1:e0:16:d8:c3:f1:f1:43:ae:24:ea: 4a:07:4f:ba:44:de:3d:3f:be:5e:7b:68:d9:1e:27: c3:96:48:24:e2:83:d6:af:55:24:8b:9a:86:c8:3d: c6:ac:ca:e7:da:bb:75:95:44:6a:30:5a:c6:da:97: 4b:84:88:5f:a7:65:59:e9:ae:3b:79:23:71:51:88: be:e7:39:47:df:5e:84:fa:7d:9e:cc:dd:4e:68:63: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:E2:54:1C:7D:9F:65:16:61:C0:C5:AF:D2:9E:28:11:97:FE:95 X509v3 Authority Key Identifier: keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:a5:58:da:02:28:b5:d6:3d:a8:25:e4:88:11:c6:54:6b: f2:b0:6f:83:84:4e:db:28:27:fb:2d:72:df:17:5a:9e:1e:d0: 5a:c5:df:35:f7:5f:22:d1:c8:5c:78:f1:51:be:7a:91:05:a9: 86:c3:4f:f6:4b:2a:75:cd:18:c1:82:41:7e:a7:91:d2:0b:5c: e3:7d:46:72:57:2a:24:75:65:bc:5c:74:8d:5b:63:b0:44:1f: 04:3e:90:42:43:d5:10:45:54:5e:09:ea:3d:f5:6e:2f:b3:c3: 0f:5c:32:26:1c:32:76:0c:83:4d:8d:0b:46:5d:85:e0:45:92: 8f:c8:69:ea:55:0b:ba:b9:48:1f:04:7c:b4:4b:33:a2:16:a9: 54:06:95:9a:cb:fd:c1:bd:79:31:9f:07:99:22:d9:4f:10:c3: 4d:bb:27:65:4b:3c:e9:84:bc:e9:9d:d9:95:66:d5:d9:f9:e9: e4:e6:0d:ae:10:8c:37:02:5d:83:06:6f:fb:41:92:58:9d:3c: 4e:a4:93:e4:35:25:89:64:93:e6:ba:7a:01:c3:69:62:78:91: 21:3f:96:bc:4e:70:29:9b:ab:36:39:99:10:1f:41:c9:96:b0: e1:f3:45:61:9c:53:d5:b5:3b:52:d2:72:fa:2a:3d:1f:04:1c: 0f:46:87:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAmFUoHTzC8QlFqBlUEAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz Y2U2ZjIwHhcNMjUxMjIyMTcwMTM2WhcNMjUxMjIzMTcwMTM2WjAzMTEwLwYDVQQD Eyg3NDkxZTI1NDFjN2Q5ZjY1MTY2MWMwYzVhZmQyOWUyODExOTdmZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvusxt8bsTnyIXp2/LVJZWX8UBXAz 5tA0awkcBLT3QfeS4ny2sz1l9z4S5fAXdXQM60b881uevsAvUpcAijw0qbGwrJwp HqVHxW8+fgVAJjuGiQZdMRIN7jtL1H06ELHBkbYq8W54q5Ine041ZX1fRPgq1iMo SrZgGFv5PlJVNMbVf1iynYbx/WnagR42vJt2WEB2CPoe5qwjt2peGK4v/tn7MPDD L1zZ4eAW2MPx8UOuJOpKB0+6RN49P75ee2jZHifDlkgk4oPWr1Uki5qGyD3GrMrn 2rt1lURqMFrG2pdLhIhfp2VZ6a47eSNxUYi+5zlH316E+n2ezN1OaGNfjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSR4lQcfZ9lFmHAxa/SnigRl/6VMB8GA1UdIwQY MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLClWNoC KLXWPagl5IgRxlRr8rBvg4RO2ygn+y1y3xdanh7QWsXfNfdfItHIXHjxUb56kQWp hsNP9ksqdc0YwYJBfqeR0gtc431GclcqJHVlvFx0jVtjsEQfBD6QQkPVEEVUXgnq PfVuL7PDD1wyJhwydgyDTY0LRl2F4EWSj8hp6lULurlIHwR8tEszohapVAaVmsv9 wb15MZ8HmSLZTxDDTbsnZUs86YS86Z3ZlWbV2fnp5OYNrhCMNwJdgwZv+0GSWJ08 TqST5DUliWST5rp6AcNpYniRIT+WvE5wKZurNjmZEB9ByZaw4fNFYZxT1bU7UtJy +io9HwQcD0aHog== -----END CERTIFICATE-----Generated at Mon Dec 22 20:46:32 2025 by rpki-client