This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json) Hash identifier: dC7x0X0S+PLY4mmOpdMuFEftlLdD3WTZi6Nhp91JAAY= Subject key identifier: 5A:0A:9F:AC:F2:CD:FA:73:BF:A3:3E:75:40:56:F8:26:2B:0E:F6:28 Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Certificate serial: 019B2588360E34B310F7038A866F1D791DB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft Manifest number: 0803 Signing time: Tue 16 Dec 2025 05:00:42 +0000 Manifest this update: Tue 16 Dec 2025 05:00:42 +0000 Manifest next update: Wed 17 Dec 2025 05:00:42 +0000 Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=) 2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: 3bGQK0N1Vk3E1y9XX5tIeKwxs2eMIDBrkIMYnUQ3jHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:36:0e:34:b3:10:f7:03:8a:86:6f:1d:79:1d:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Validity Not Before: Dec 16 05:00:42 2025 GMT Not After : Dec 17 05:00:42 2025 GMT Subject: CN=5a0a9facf2cdfa73bfa33e754056f8262b0ef628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:82:b7:cf:31:5b:45:72:cf:40:bf:27:60:86: 3a:ed:67:c6:bd:9f:f6:52:ef:75:95:cc:a4:ff:e3: ac:e9:54:e6:91:50:61:50:69:97:24:75:d7:f3:32: ea:ff:fa:e0:0a:f8:e4:fd:ad:2b:d8:43:ab:c2:9d: dc:61:1a:80:39:0b:67:12:0f:7d:81:4f:fb:29:d7: bb:73:1e:a0:0f:e5:bd:2e:75:ca:84:2d:09:06:3d: a0:c3:b9:53:b1:d6:f5:78:9c:f5:27:77:7c:f4:2d: b0:cc:ed:6c:a6:7d:f3:71:e1:a4:f3:a9:3a:f8:b4: c3:00:4c:4b:9c:34:6d:c0:6f:4b:97:9f:0c:3c:2a: 24:34:17:fc:2c:32:2e:70:6e:00:c7:6b:97:9e:b4: dd:c4:c4:fa:17:91:c1:e9:a4:0a:ed:81:eb:dd:ea: 98:fb:f2:72:4a:7f:52:36:9a:9e:d3:e2:53:35:9c: f5:25:cf:74:61:2a:18:90:9f:91:1f:ba:04:93:e2: a0:d5:1e:60:c9:81:b9:60:77:e1:93:9a:a8:c6:13: 68:f3:c1:c4:cf:6a:ae:4e:82:16:3b:22:07:be:18: 3b:81:1e:f4:2f:c4:76:0e:9c:0e:ee:27:d8:53:99: 96:41:2b:ff:ab:d3:1e:56:d8:da:38:46:e8:dd:00: 3e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:9F:AC:F2:CD:FA:73:BF:A3:3E:75:40:56:F8:26:2B:0E:F6:28 X509v3 Authority Key Identifier: keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:34:32:88:ee:67:75:1e:76:d5:d3:82:04:f9:38:6d:61:e8: c3:b7:d3:d1:db:f3:c0:ab:ed:fc:de:63:45:c2:f1:6e:67:3d: 08:d4:21:bc:b1:c1:a0:2e:9d:cb:70:ed:9a:d0:94:ce:8e:ed: 9a:c9:e3:33:3f:c4:35:96:4d:cc:3f:83:d3:29:44:37:7f:0e: e2:5c:12:8f:bd:30:52:bb:45:cb:85:52:fa:e2:ee:e7:66:2c: e1:43:8e:2c:b3:ee:8f:ff:00:16:19:14:e1:b6:dc:1e:67:5c: 24:87:aa:b4:7f:0d:6d:bd:37:8d:5b:8c:30:69:da:b0:c1:d3: 86:09:4c:5d:02:ed:18:c4:55:4b:22:48:11:07:40:1f:9b:11: 7d:ba:dd:5f:02:c8:e6:5d:c8:87:5f:24:a3:62:fc:62:25:3e: 66:35:5f:f0:3e:74:c9:bd:30:52:ce:5a:97:19:d8:d4:a9:2b: 96:97:d2:e5:7f:b6:ea:a8:58:dc:74:af:c4:3f:c5:12:1b:d2: b1:17:76:8a:e4:0f:ac:44:4e:e2:fa:88:c1:5c:66:b0:51:a8: 0a:c0:82:a4:5c:01:e6:91:db:52:ff:6e:f7:27:1b:2b:e6:18: 9f:2f:ee:51:e5:bb:d9:00:db:b4:03:30:60:27:41:4c:d8:f8: 2c:89:97:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDYONLMQ9wOKhm8deR2yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw NTMyYjAwHhcNMjUxMjE2MDUwMDQyWhcNMjUxMjE3MDUwMDQyWjAzMTEwLwYDVQQD Eyg1YTBhOWZhY2YyY2RmYTczYmZhMzNlNzU0MDU2ZjgyNjJiMGVmNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoK3zzFbRXLPQL8nYIY67WfGvZ/2 Uu91lcyk/+Os6VTmkVBhUGmXJHXX8zLq//rgCvjk/a0r2EOrwp3cYRqAOQtnEg99 gU/7Kde7cx6gD+W9LnXKhC0JBj2gw7lTsdb1eJz1J3d89C2wzO1spn3zceGk86k6 +LTDAExLnDRtwG9Ll58MPCokNBf8LDIucG4Ax2uXnrTdxMT6F5HB6aQK7YHr3eqY +/JySn9SNpqe0+JTNZz1Jc90YSoYkJ+RH7oEk+Kg1R5gyYG5YHfhk5qoxhNo88HE z2quToIWOyIHvhg7gR70L8R2DpwO7ifYU5mWQSv/q9MeVtjaOEbo3QA+ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoKn6zyzfpzv6M+dUBW+CYrDvYoMB8GA1UdIwQY MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzQyiO5n dR521dOCBPk4bWHow7fT0dvzwKvt/N5jRcLxbmc9CNQhvLHBoC6dy3DtmtCUzo7t msnjMz/ENZZNzD+D0ylEN38O4lwSj70wUrtFy4VS+uLu52Ys4UOOLLPuj/8AFhkU 4bbcHmdcJIeqtH8Nbb03jVuMMGnasMHThglMXQLtGMRVSyJIEQdAH5sRfbrdXwLI 5l3Ih18ko2L8YiU+ZjVf8D50yb0wUs5alxnY1KkrlpfS5X+26qhY3HSvxD/FEhvS sRd2iuQPrERO4vqIwVxmsFGoCsCCpFwB5pHbUv9u9ycbK+YYny/uUeW72QDbtAMw YCdBTNj4LImXJw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:43:57 2025 by rpki-client