This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json) Hash identifier: qMI3j2Xh4Kh5s09MMWCtpN6FkrtHdRhMgjuL9grgTLg= Subject key identifier: 39:57:00:73:37:D4:33:BC:B1:00:22:64:C3:A5:8B:C7:1A:49:17:F1 Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019B34C4EF9C35A5A8B5188572B2D3903D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft Manifest number: F0 Signing time: Fri 19 Dec 2025 04:01:20 +0000 Manifest this update: Fri 19 Dec 2025 04:01:20 +0000 Manifest next update: Sat 20 Dec 2025 04:01:20 +0000 Files and hashes: 1: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (hash: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=) 2: bDeWAt5toPFFtLcQo4OIdz5578k.roa (hash: Zpc2oZsR+YkTAX5bL+rqulsdcmLQvzDSUvV8Q9C4Jg8=) 3: mzUvfgVLoqjl_Pu4e_7hdH0g4tQ.roa (hash: nM7KewQVEjtLO/Upjj+aZLO5RewYm9AF+8kFiREJ2Jc=) 4: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: ogDHpJZJCG5YZkJQruDllQxBoSCv4zhKXB+V+oP1+VQ=) 5: uAH4xPc9AhtK2Uy6SZDxCuii3xg.roa (hash: 7Lk71krqRJUVDRdcZl5XdOrWogQR7yqjHZ+KkfQmj9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:ef:9c:35:a5:a8:b5:18:85:72:b2:d3:90:3d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Dec 19 04:01:20 2025 GMT Not After : Dec 20 04:01:20 2025 GMT Subject: CN=3957007337d433bcb1002264c3a58bc71a4917f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:19:f1:d0:f0:3f:2a:8e:d4:56:80:7e:1e: dd:22:1e:64:bc:9c:42:32:c7:6b:07:f2:8e:a8:40: 85:34:32:03:fc:b0:1f:ed:64:85:71:1d:cf:81:e1: f3:5e:9e:1a:c1:dc:9b:43:a5:42:05:5b:dc:24:df: e1:91:97:7b:0f:e9:84:41:dc:22:39:84:e3:6f:8c: 07:aa:78:ac:fc:1a:51:e5:48:a6:95:b9:50:bc:e0: dd:1d:47:3d:92:c5:0d:4e:60:7a:a3:f8:06:4d:78: fb:e0:73:5f:1c:96:59:ee:3f:23:ed:de:d7:ed:0a: 03:52:54:b2:36:4b:19:4f:d2:f7:36:54:c4:93:06: 07:b6:c6:4e:16:e8:db:7d:08:0c:63:58:0c:4c:33: e2:61:cd:12:f7:06:60:b6:a4:61:06:67:45:33:63: 8f:97:f2:82:61:33:2e:42:03:b3:29:ed:20:63:e3: 14:0a:d3:7b:17:cc:15:13:0d:5b:01:e5:5b:55:94: 3f:95:96:1e:d2:16:94:63:dd:5f:a1:b7:d5:af:69: f6:c2:b8:0b:50:85:00:37:f6:e9:34:5c:84:5b:af: 13:fa:90:5a:7c:ec:8e:75:69:e5:22:94:20:62:9a: 43:01:b3:39:ed:e1:56:cb:8d:16:cd:73:82:e0:36: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:57:00:73:37:D4:33:BC:B1:00:22:64:C3:A5:8B:C7:1A:49:17:F1 X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2b:db:9b:70:28:50:0d:8c:6b:de:93:77:33:b9:99:ce:9b: 43:ce:5e:7b:07:e5:f6:0c:23:96:79:e3:ec:f0:44:fa:e4:13: 38:97:8e:e3:e4:d5:27:a1:be:2d:e4:71:d8:e2:77:af:2e:fa: 4f:4b:0d:bc:0e:f6:1f:81:19:1a:72:09:f0:75:3c:a7:45:7d: 07:4a:91:33:2d:c7:92:77:af:26:eb:8e:ff:23:93:cf:05:8e: 74:ad:40:66:f2:81:c5:e4:d7:f4:52:db:7d:d8:c6:5b:5a:c3: ae:d1:92:ff:a3:e9:c0:9c:59:0e:b5:53:d1:f2:52:55:3e:60: 84:8f:de:19:19:dd:4f:69:bb:a5:69:3a:9a:7a:63:05:af:17: c7:a6:4d:d3:11:19:fb:f3:df:9a:9c:58:54:5e:3d:60:51:83: 1f:de:73:af:a9:e3:eb:31:ef:5f:5a:4e:87:b6:ad:42:6c:30: d2:82:0f:e0:f2:42:7e:2a:f0:60:9f:50:12:36:01:77:8e:95: 26:e4:de:77:51:c4:b7:2a:da:11:3e:66:c6:45:ca:00:ec:95: 33:1f:7f:40:0b:e7:13:91:2c:66:68:bd:ff:2b:20:2a:82:2a: 84:76:b7:04:07:dc:e6:5a:16:b9:e7:e2:ff:67:81:35:c2:9c: 24:43:e5:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xO+cNaWotRiFcrLTkD08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjUxMjE5MDQwMTIwWhcNMjUxMjIwMDQwMTIwWjAzMTEwLwYDVQQD EygzOTU3MDA3MzM3ZDQzM2JjYjEwMDIyNjRjM2E1OGJjNzFhNDkxN2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85AZ8dDwPyqO1FaAfh7dIh5kvJxC MsdrB/KOqECFNDID/LAf7WSFcR3PgeHzXp4awdybQ6VCBVvcJN/hkZd7D+mEQdwi OYTjb4wHqnis/BpR5UimlblQvODdHUc9ksUNTmB6o/gGTXj74HNfHJZZ7j8j7d7X 7QoDUlSyNksZT9L3NlTEkwYHtsZOFujbfQgMY1gMTDPiYc0S9wZgtqRhBmdFM2OP l/KCYTMuQgOzKe0gY+MUCtN7F8wVEw1bAeVbVZQ/lZYe0haUY91fobfVr2n2wrgL UIUAN/bpNFyEW68T+pBafOyOdWnlIpQgYppDAbM57eFWy40WzXOC4DY82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlXAHM31DO8sQAiZMOli8caSRfxMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWivbm3Ao UA2Ma96TdzO5mc6bQ85eewfl9gwjlnnj7PBE+uQTOJeO4+TVJ6G+LeRx2OJ3ry76 T0sNvA72H4EZGnIJ8HU8p0V9B0qRMy3HknevJuuO/yOTzwWOdK1AZvKBxeTX9FLb fdjGW1rDrtGS/6PpwJxZDrVT0fJSVT5ghI/eGRndT2m7pWk6mnpjBa8Xx6ZN0xEZ +/PfmpxYVF49YFGDH95zr6nj6zHvX1pOh7atQmww0oIP4PJCfirwYJ9QEjYBd46V JuTed1HEtyraET5mxkXKAOyVMx9/QAvnE5EsZmi9/ysgKoIqhHa3BAfc5loWuefi /2eBNcKcJEPlew== -----END CERTIFICATE-----Generated at Fri Dec 19 14:36:16 2025 by rpki-client