This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json) Hash identifier: Wu14QouGr2owoI9YDoynHHP0m7yGmeCxCt1O0uKc+L4= Subject key identifier: 4F:0F:AA:43:47:E6:54:42:78:EA:A4:81:6E:AB:F4:A2:EE:FC:5C:6A Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a Certificate serial: 019B593EE3AB16F4AE218C32935F482DCDED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft Manifest number: 16E8 Signing time: Fri 26 Dec 2025 06:00:52 +0000 Manifest this update: Fri 26 Dec 2025 06:00:52 +0000 Manifest next update: Sat 27 Dec 2025 06:00:52 +0000 Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: Mt+EyJvPRt/j29aPHQmX4DHgoFmxYMrgPSyyEDdJIY0=) 2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e3:ab:16:f4:ae:21:8c:32:93:5f:48:2d:cd:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a Validity Not Before: Dec 26 06:00:52 2025 GMT Not After : Dec 27 06:00:52 2025 GMT Subject: CN=4f0faa4347e6544278eaa4816eabf4a2eefc5c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:a6:c5:c7:a5:8d:37:37:f7:55:85:e7:53: 36:13:42:36:7f:5e:a7:54:bb:2c:ca:f5:a2:fb:c9: 7a:4a:88:38:1b:1e:51:9b:bc:b2:9d:b4:9a:ea:d7: 02:5b:66:33:e6:18:fb:95:50:43:66:f0:24:7a:08: bc:5c:87:63:3e:78:3e:da:8f:dc:cb:27:15:df:11: e1:e2:8a:dc:19:f4:2a:9a:92:89:41:6f:cc:a3:2c: 9d:74:fa:2e:81:8a:59:9a:83:96:f1:f2:36:5f:76: c9:90:00:43:d9:a6:ee:bd:d0:15:19:88:d8:31:69: ec:d1:84:9c:ed:07:ac:49:b6:d7:5f:d7:c5:b9:a3: 81:50:8f:0f:ad:e3:d2:22:93:ee:09:31:2c:93:3d: 94:5e:43:65:13:96:de:76:c8:b0:d6:13:99:5d:1b: 6e:1b:71:24:57:63:74:55:ca:02:59:5b:b7:e3:32: 82:0e:2b:55:af:58:47:54:c2:21:08:c3:5e:58:a1: a2:c5:2b:56:a3:89:e3:26:3c:b6:3e:b0:c4:9a:d0: a8:1c:83:c6:74:bd:e7:cb:ee:04:ef:d8:49:57:ff: 13:c7:ce:66:74:ca:83:5c:26:76:09:10:0e:ca:7a: a8:4a:1e:87:2c:e7:db:56:ec:3c:78:79:52:72:34: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:AA:43:47:E6:54:42:78:EA:A4:81:6E:AB:F4:A2:EE:FC:5C:6A X509v3 Authority Key Identifier: keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e0:9f:2d:72:ec:1a:a7:60:00:b5:4b:18:d0:83:3c:1f:5d: a9:00:dc:86:6c:5c:ec:ac:13:6c:a2:c2:70:b7:64:ac:92:34: 7b:25:e5:0b:8c:7c:d9:c6:46:41:e9:10:d8:9b:f2:99:05:26: 9b:84:a8:34:23:41:d4:1e:ec:3d:41:15:0c:11:db:36:3d:7c: e7:b1:3e:af:6d:1d:41:43:78:c1:8d:77:2f:e0:90:0c:55:0f: 95:5a:5d:e2:8e:10:26:bc:4f:f6:a5:ef:11:6b:a2:69:b2:fe: 2a:ed:12:ec:80:71:1b:ca:6d:e4:ab:29:9d:de:e3:cb:f1:af: 13:19:68:1a:ae:32:39:27:e6:6d:5d:e2:36:90:bd:7b:a3:22: 2d:89:5f:20:51:8d:b4:23:ab:c3:0c:60:3c:62:69:2f:d7:14: 2b:b3:13:3f:87:be:83:0b:3d:77:36:70:12:6b:d2:ca:5f:1d: e1:06:08:0d:af:72:86:b4:e3:71:69:0b:9b:b1:2f:fa:62:15: 33:c5:dc:ea:1a:8a:5e:6e:5b:9e:56:14:da:01:fa:9f:8b:d8: 85:1d:ce:25:99:c6:bb:24:63:ac:6b:8d:b3:ab:5e:3d:df:9b: 14:80:e4:de:23:34:ed:e9:cc:7c:a3:ff:b5:89:8d:21:cf:d4: a9:01:9b:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPuOrFvSuIYwyk19ILc3tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh ZDIwMmEwHhcNMjUxMjI2MDYwMDUyWhcNMjUxMjI3MDYwMDUyWjAzMTEwLwYDVQQD Eyg0ZjBmYWE0MzQ3ZTY1NDQyNzhlYWE0ODE2ZWFiZjRhMmVlZmM1YzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSGmxceljTc391WF51M2E0I2f16n VLssyvWi+8l6Sog4Gx5Rm7yynbSa6tcCW2Yz5hj7lVBDZvAkegi8XIdjPng+2o/c yycV3xHh4orcGfQqmpKJQW/MoyyddPougYpZmoOW8fI2X3bJkABD2abuvdAVGYjY MWns0YSc7QesSbbXX9fFuaOBUI8PrePSIpPuCTEskz2UXkNlE5bedsiw1hOZXRtu G3EkV2N0VcoCWVu34zKCDitVr1hHVMIhCMNeWKGixStWo4njJjy2PrDEmtCoHIPG dL3ny+4E79hJV/8Tx85mdMqDXCZ2CRAOynqoSh6HLOfbVuw8eHlScjS93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8PqkNH5lRCeOqkgW6r9KLu/FxqMB8GA1UdIwQY MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt N2Y3YmFiODNiZGEwLzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOCfLXLs GqdgALVLGNCDPB9dqQDchmxc7KwTbKLCcLdkrJI0eyXlC4x82cZGQekQ2JvymQUm m4SoNCNB1B7sPUEVDBHbNj1857E+r20dQUN4wY13L+CQDFUPlVpd4o4QJrxP9qXv EWuiabL+Ku0S7IBxG8pt5Kspnd7jy/GvExloGq4yOSfmbV3iNpC9e6MiLYlfIFGN tCOrwwxgPGJpL9cUK7MTP4e+gws9dzZwEmvSyl8d4QYIDa9yhrTjcWkLm7Ev+mIV M8Xc6hqKXm5bnlYU2gH6n4vYhR3OJZnGuyRjrGuNs6tePd+bFIDk3iM07enMfKP/ tYmNIc/UqQGb/g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client