This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: IHHLbxDD4BGfkqkSChopx34gjpBizcbCOSxqAnADZvs= Subject key identifier: 47:2E:D7:95:F5:C1:0D:18:4E:CF:9E:A7:D1:56:C2:75:26:A1:CC:D3 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B4437A9660236BC438C45A642E4836A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 079F Signing time: Mon 22 Dec 2025 04:00:56 +0000 Manifest this update: Mon 22 Dec 2025 04:00:56 +0000 Manifest next update: Tue 23 Dec 2025 04:00:56 +0000 Files and hashes: 1: 3h99B3B928ItdGjcKoHk10e2CY4.roa (hash: QICYNqcrZ0Xnzlwywop1Rva0m6JoHs3pi7Cn/R4enXk=) 2: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 3: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 4: MSnKv-V5f4ZhMSBkUowC4eAKwnc.roa (hash: GNpg734fprSqUaaC2JbrcVA6y9oknxkgNnhf9ZX5sJE=) 5: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=) 6: NxDioS42mqzdQfLMxyB7X-GlaRk.roa (hash: C3TTQFAalnMmHYCoE9DHkCJCL/yOjyVdjjZKsCzOrhY=) 7: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: 5Zng++V/Mzf4FKEBgdLzje1V9pwNY/x4xxU2j0ISuwE=) 8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (hash: UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=) 11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) 12: wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa (hash: NkI4eJ+m8t9g8zspdgWjN+brolZtyYl6e2q5ivq3HCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:a9:66:02:36:bc:43:8c:45:a6:42:e4:83:6a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Dec 22 04:00:56 2025 GMT Not After : Dec 23 04:00:56 2025 GMT Subject: CN=472ed795f5c10d184ecf9ea7d156c27526a1ccd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:97:8b:01:a3:ca:75:25:f9:d4:34:36:7f:d8: 4a:75:d4:d9:e0:8f:ed:93:f5:cd:34:d2:3d:e2:d0: 4e:0e:e6:b4:59:92:9d:82:6d:cc:af:09:cd:cf:80: 03:77:14:fd:8c:11:ca:6a:98:8a:b8:bc:d7:ce:57: 15:0d:01:0c:9d:44:5c:83:54:3d:d0:1e:8a:84:b7: d2:9e:40:a6:07:d2:d6:60:63:de:aa:8d:6e:b6:51: b4:1b:57:cf:61:3a:0a:42:f1:cf:88:e6:a7:b2:f2: 9b:76:a1:ed:41:87:72:17:c5:5c:5f:fe:6c:f7:d9: ce:40:81:55:e3:1a:78:2e:0a:13:71:cd:b7:43:2c: 9d:ed:28:1e:57:60:38:1a:db:d7:24:c2:31:c0:b8: 02:83:bf:d1:2a:bd:da:49:01:a0:0c:b3:85:b8:47: 7e:e3:65:42:66:d0:2a:f7:4d:0f:86:aa:d8:7f:89: 36:1f:0c:a4:00:18:0e:d6:d1:89:e9:94:5c:b9:e5: d4:73:99:6c:e1:82:1d:ff:b6:1b:17:35:b2:ce:ae: 3f:b0:8d:81:bc:17:7c:58:ac:f0:dc:5c:3a:ec:c7: 7e:a1:97:55:7c:e6:ec:80:ad:79:05:3e:8d:97:0f: a9:d3:8f:a1:75:7f:84:5b:53:c9:f6:96:12:20:47: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2E:D7:95:F5:C1:0D:18:4E:CF:9E:A7:D1:56:C2:75:26:A1:CC:D3 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:24:cd:60:14:59:79:d7:48:2a:48:7f:2b:09:5c:1e:88: 7d:a3:e4:f6:8e:ce:44:64:36:b9:97:ca:f5:5c:cc:9b:3f:2f: c3:0d:6e:96:f8:28:d5:0a:6c:28:c1:51:04:05:10:5d:b0:a1: e5:4e:e7:60:e8:77:13:e9:4d:11:00:ff:41:eb:6f:56:ac:c4: 57:68:99:cf:25:16:36:78:02:ad:c9:2a:20:25:59:fb:e0:d2: 2e:d7:50:0d:4b:b0:30:3c:88:ab:45:f9:02:3b:00:eb:94:27: d4:82:c0:84:bf:22:1d:be:00:78:bc:15:f2:e0:80:db:2b:be: 02:4c:8f:02:9a:96:06:ae:93:ce:0b:15:d5:7b:6c:0a:57:8f: 1e:4a:6c:ad:ed:43:87:76:9a:b5:ef:0e:7c:3f:6d:0f:c4:23: e7:3a:6a:c6:2f:03:c2:cd:71:19:42:65:94:96:65:5c:6c:95: c5:e0:70:62:26:55:e1:b3:71:7b:21:d0:35:47:cf:e9:c1:f1: d1:05:ac:84:40:ec:d3:dc:7e:24:74:0a:d5:bf:33:65:d9:8a: 88:96:fd:70:58:be:fe:e2:75:d1:6b:d3:dd:a8:c1:69:2c:79: 44:f4:3c:bd:e9:04:8f:3d:4e:7d:7e:6e:ac:8e:c6:4d:74:12: a3:02:49:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN6lmAja8Q4xFpkLkg2o5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMjIyMDQwMDU2WhcNMjUxMjIzMDQwMDU2WjAzMTEwLwYDVQQD Eyg0NzJlZDc5NWY1YzEwZDE4NGVjZjllYTdkMTU2YzI3NTI2YTFjY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5peLAaPKdSX51DQ2f9hKddTZ4I/t k/XNNNI94tBODua0WZKdgm3MrwnNz4ADdxT9jBHKapiKuLzXzlcVDQEMnURcg1Q9 0B6KhLfSnkCmB9LWYGPeqo1utlG0G1fPYToKQvHPiOansvKbdqHtQYdyF8VcX/5s 99nOQIFV4xp4LgoTcc23Qyyd7SgeV2A4GtvXJMIxwLgCg7/RKr3aSQGgDLOFuEd+ 42VCZtAq900PhqrYf4k2HwykABgO1tGJ6ZRcueXUc5ls4YId/7YbFzWyzq4/sI2B vBd8WKzw3Fw67Md+oZdVfObsgK15BT6Nlw+p04+hdX+EW1PJ9pYSIEdpTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcu15X1wQ0YTs+ep9FWwnUmoczTMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFUkzWAU WXnXSCpIfysJXB6IfaPk9o7ORGQ2uZfK9VzMmz8vww1ulvgo1QpsKMFRBAUQXbCh 5U7nYOh3E+lNEQD/QetvVqzEV2iZzyUWNngCrckqICVZ++DSLtdQDUuwMDyIq0X5 AjsA65Qn1ILAhL8iHb4AeLwV8uCA2yu+AkyPApqWBq6TzgsV1XtsClePHkpsre1D h3aate8OfD9tD8Qj5zpqxi8Dws1xGUJllJZlXGyVxeBwYiZV4bNxeyHQNUfP6cHx 0QWshEDs09x+JHQK1b8zZdmKiJb9cFi+/uJ10WvT3ajBaSx5RPQ8vekEjz1OfX5u rI7GTXQSowJJpw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:30:14 2025 by rpki-client