This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json) Hash identifier: v2+/h5xwAdUlbgDKidMJxzHzFiCqW/fbGUmTGtWnrVU= Subject key identifier: 73:3B:5D:02:EE:AE:98:3A:EE:EB:48:B4:52:91:FC:78:E6:C3:C7:6F Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c Certificate serial: 019AAC14E98BB69528328BC334B423B4DA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft Manifest number: 1024 Signing time: Sat 22 Nov 2025 15:00:42 +0000 Manifest this update: Sat 22 Nov 2025 15:00:42 +0000 Manifest next update: Sun 23 Nov 2025 15:00:42 +0000 Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: juSc4Om/4Wwy8ljkhs0X2GkxvyhirRpIeUIvIIDfOIs=) 2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=) 3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:e9:8b:b6:95:28:32:8b:c3:34:b4:23:b4:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c Validity Not Before: Nov 22 15:00:42 2025 GMT Not After : Nov 23 15:00:42 2025 GMT Subject: CN=733b5d02eeae983aeeeb48b45291fc78e6c3c76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:15:6d:3e:3b:c4:a0:56:5f:3b:eb:4e:bd: 61:bf:de:2a:52:66:7a:b4:e5:36:1c:4b:2b:fd:fe: 08:35:93:73:a2:29:5c:d3:f0:9c:cb:85:c5:03:b2: 72:69:a8:19:28:f8:31:3a:65:74:0c:64:2c:9a:e9: d5:b5:c1:8e:3b:62:12:f9:e9:1a:5d:7c:2d:24:6c: 68:96:01:04:5c:7f:92:d2:1a:2e:66:27:14:22:98: 7d:4d:d4:08:13:cd:48:3a:40:5c:82:e8:40:a6:97: d2:6a:b5:48:b4:61:ce:77:5c:82:79:23:7c:1d:64: 83:0b:dc:c5:38:87:2a:7a:54:66:92:4f:3a:c2:76: 83:b0:ef:a5:80:82:71:ae:ea:d1:3f:76:0e:f3:27: f1:ac:65:37:a2:4d:c3:14:8f:c7:d9:c8:fd:d5:e5: 6c:47:2c:87:d3:ba:96:75:0d:e9:c6:aa:a0:44:c4: c4:95:3f:a3:61:9b:ec:07:ad:92:85:6c:25:3e:8e: 7a:b3:52:0e:35:da:6a:ac:0f:86:27:b7:5a:03:13: 2e:d7:2d:17:a6:47:a8:54:a1:4f:83:a9:06:e1:8e: a9:37:92:9b:4c:23:63:1a:8a:15:54:fc:32:59:2e: 1f:a6:58:3e:22:6a:b8:1a:9c:8e:af:b4:dc:f1:29: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:5D:02:EE:AE:98:3A:EE:EB:48:B4:52:91:FC:78:E6:C3:C7:6F X509v3 Authority Key Identifier: keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:22:24:f9:8a:0c:43:ca:37:d5:05:ef:1c:a1:c9:53:75:f9: 5f:33:f4:24:91:5d:8d:33:4c:33:d8:d7:2b:ed:f4:c9:f9:2e: 3d:9e:04:47:db:c8:60:3c:c4:2f:14:3f:48:4a:18:bf:13:cb: 45:80:e0:dd:aa:8e:76:9e:9c:ec:19:ac:27:20:5c:ca:e4:60: 65:28:ce:89:b8:2a:c3:09:a4:d3:7d:be:46:03:6c:79:06:be: cc:eb:e8:88:10:8c:3b:9c:00:7e:7d:67:2a:e2:a9:8e:58:8f: a1:e6:4e:2e:bb:02:cb:a3:f0:6f:a7:56:76:b4:d9:05:f5:8e: 01:a1:88:d8:fd:48:20:d2:27:ca:f0:98:f2:c7:c6:4a:34:d8: 37:ee:f4:7d:d9:d5:f0:78:b8:d2:49:0d:9d:aa:8d:6c:48:03: a5:73:61:03:1a:77:1d:61:cc:28:b3:b6:07:f9:e2:bf:14:c3: 0c:ac:d1:00:3f:c1:35:17:e3:f6:87:a1:71:95:19:e0:fa:85: 9f:d9:7d:07:87:45:31:de:a7:a4:e9:50:83:73:59:0f:99:e2: 17:0e:d9:1d:ba:ee:cf:2b:d6:03:df:01:a4:fb:87:51:14:e5: 22:9f:91:9f:63:69:a5:df:01:2c:92:60:f3:fc:26:b8:70:24: eb:38:7e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFOmLtpUoMovDNLQjtNpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3 YTg3MmMwHhcNMjUxMTIyMTUwMDQyWhcNMjUxMTIzMTUwMDQyWjAzMTEwLwYDVQQD Eyg3MzNiNWQwMmVlYWU5ODNhZWVlYjQ4YjQ1MjkxZmM3OGU2YzNjNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdQVbT47xKBWXzvrTr1hv94qUmZ6 tOU2HEsr/f4INZNzoilc0/Ccy4XFA7JyaagZKPgxOmV0DGQsmunVtcGOO2IS+eka XXwtJGxolgEEXH+S0houZicUIph9TdQIE81IOkBcguhAppfSarVItGHOd1yCeSN8 HWSDC9zFOIcqelRmkk86wnaDsO+lgIJxrurRP3YO8yfxrGU3ok3DFI/H2cj91eVs RyyH07qWdQ3pxqqgRMTElT+jYZvsB62ShWwlPo56s1IONdpqrA+GJ7daAxMu1y0X pkeoVKFPg6kG4Y6pN5KbTCNjGooVVPwyWS4fplg+Imq4GpyOr7Tc8Sn8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM7XQLurpg67utItFKR/Hjmw8dvMB8GA1UdIwQY MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSIk+YoM Q8o31QXvHKHJU3X5XzP0JJFdjTNMM9jXK+30yfkuPZ4ER9vIYDzELxQ/SEoYvxPL RYDg3aqOdp6c7BmsJyBcyuRgZSjOibgqwwmk032+RgNseQa+zOvoiBCMO5wAfn1n KuKpjliPoeZOLrsCy6Pwb6dWdrTZBfWOAaGI2P1IINInyvCY8sfGSjTYN+70fdnV 8Hi40kkNnaqNbEgDpXNhAxp3HWHMKLO2B/nivxTDDKzRAD/BNRfj9oehcZUZ4PqF n9l9B4dFMd6npOlQg3NZD5niFw7ZHbruzyvWA98BpPuHURTlIp+Rn2Nppd8BLJJg 8/wmuHAk6zh+Hg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:31 2025 by rpki-client