This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft File: rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft (raw, json) Hash identifier: dFgBj6Rr8NeoDr/7YGbVavLVrOW4bnJ25/bjuMkqyxY= Subject key identifier: 02:60:F5:57:7F:3E:28:2A:3D:66:63:07:9D:14:9C:07:9B:2F:C6:96 Authority key identifier: AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C Certificate issuer: /CN=acebf396c9adf94f84dc901656e255ce6d50660c Certificate serial: 019B2EC22AC5DF9C951FDBB4A7797B713ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft Manifest number: 03F7 Signing time: Thu 18 Dec 2025 00:00:35 +0000 Manifest this update: Thu 18 Dec 2025 00:00:35 +0000 Manifest next update: Fri 19 Dec 2025 00:00:35 +0000 Files and hashes: 1: C4fkDspID27_2W7uJ0bDWTiMbsI.roa (hash: IPmvbCiP1dYquC+xxAe/aHEwDNf0L9S57sM644oyMl8=) 2: rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl (hash: ASgeVf9C5qLfn7QaRA026/6gEEVgms0IL7xCmhb8sI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:2a:c5:df:9c:95:1f:db:b4:a7:79:7b:71:3a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acebf396c9adf94f84dc901656e255ce6d50660c Validity Not Before: Dec 18 00:00:35 2025 GMT Not After : Dec 19 00:00:35 2025 GMT Subject: CN=0260f5577f3e282a3d6663079d149c079b2fc696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:cb:b1:21:f3:34:fa:97:3a:a2:53:2a:c8: 65:ce:76:4d:6a:99:46:c2:e6:d7:8d:12:f5:5f:8f: 4b:51:0c:77:c0:e0:09:f3:c2:ef:4f:8b:69:12:27: 78:65:e3:e5:b9:fb:9e:4d:7a:bf:06:1f:a3:96:ed: 17:93:95:72:b5:d6:78:c6:58:28:1d:02:74:ea:35: 4a:72:e9:2d:8f:d3:75:4d:b6:ab:c3:dc:26:c3:12: 8c:85:1f:8d:2f:ee:48:d5:fc:87:d7:b6:be:ad:e7: 0c:10:a9:15:46:d1:ab:fb:6b:48:25:c2:11:13:6c: 1d:5d:d3:5d:6c:7d:6a:d7:bb:10:60:a2:a8:41:ed: 9c:07:d0:71:45:b6:30:72:95:39:ab:50:10:a4:fb: 56:fc:de:99:75:c0:8d:39:47:d8:1c:16:8c:96:96: ea:52:82:a3:47:e7:d0:9e:c7:8e:b8:6d:d4:c7:d7: 7e:6a:00:d2:3c:a0:fb:f2:ba:1b:d4:3a:0e:37:5d: 9a:4b:ac:10:84:53:80:9f:ee:f1:74:b9:13:8e:3b: 17:43:9d:07:13:31:7f:80:53:94:33:f5:0a:f0:80: f6:0d:24:e9:10:39:67:a1:3d:73:7d:38:37:1e:1c: 68:41:db:3b:0e:f9:f6:4b:97:30:d9:4b:34:cd:bd: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:F5:57:7F:3E:28:2A:3D:66:63:07:9D:14:9C:07:9B:2F:C6:96 X509v3 Authority Key Identifier: keyid:AC:EB:F3:96:C9:AD:F9:4F:84:DC:90:16:56:E2:55:CE:6D:50:66:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOvzlsmt-U-E3JAWVuJVzm1QZgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/971dc5-14f3-4d95-b0bd-4847d393ab55/1/rOvzlsmt-U-E3JAWVuJVzm1QZgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:e8:ce:4d:46:9a:4c:7f:e3:c2:75:12:05:f3:4e:a3:29: f4:9c:a2:71:59:b6:15:2b:c2:0f:5a:1c:01:ea:6d:54:56:f6: 25:2c:39:f4:e0:9e:cd:4b:51:a6:61:8c:fa:65:17:73:75:c1: ad:af:37:66:b7:46:6d:aa:b9:f4:f1:9f:cb:fd:26:dd:61:60: 85:31:6b:b4:ba:dc:4d:b4:0e:9b:ae:69:56:bb:c8:a7:86:34: a3:9a:eb:32:e6:41:af:3b:8a:ad:ba:21:e5:e1:b3:3d:a7:0f: 96:cb:e5:66:40:26:55:d3:5d:9c:93:32:e5:26:56:8b:53:36: f5:07:03:eb:cf:e1:82:16:6b:bd:7b:ca:f6:b8:4e:fb:4a:fd: f5:05:3a:50:83:eb:45:41:10:de:16:f8:46:f6:bb:45:70:a2: 3f:72:42:66:f1:f6:27:8d:69:2e:64:49:1c:09:2c:3b:20:4e: 62:de:c5:3c:e0:38:98:24:b0:8c:ea:61:cc:49:16:cc:4a:88: 32:89:64:19:db:63:db:32:08:dd:62:d0:e6:f8:8c:c6:a4:2b: c0:a2:d5:95:ab:ac:76:f0:5e:4f:d2:aa:64:04:af:53:f3:22: e5:98:86:d0:fe:02:ea:46:c6:30:4a:07:cc:eb:ea:eb:ec:84: 11:f7:a4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwirF35yVH9u0p3l7cTrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWJmMzk2YzlhZGY5NGY4NGRjOTAxNjU2ZTI1NWNlNmQ1 MDY2MGMwHhcNMjUxMjE4MDAwMDM1WhcNMjUxMjE5MDAwMDM1WjAzMTEwLwYDVQQD EygwMjYwZjU1NzdmM2UyODJhM2Q2NjYzMDc5ZDE0OWMwNzliMmZjNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymPLsSHzNPqXOqJTKshlznZNaplG wubXjRL1X49LUQx3wOAJ88LvT4tpEid4ZePlufueTXq/Bh+jlu0Xk5VytdZ4xlgo HQJ06jVKcuktj9N1Tbarw9wmwxKMhR+NL+5I1fyH17a+recMEKkVRtGr+2tIJcIR E2wdXdNdbH1q17sQYKKoQe2cB9BxRbYwcpU5q1AQpPtW/N6ZdcCNOUfYHBaMlpbq UoKjR+fQnseOuG3Ux9d+agDSPKD78rob1DoON12aS6wQhFOAn+7xdLkTjjsXQ50H EzF/gFOUM/UK8ID2DSTpEDlnoT1zfTg3HhxoQds7Dvn2S5cw2Us0zb2DFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJg9Vd/PigqPWZjB50UnAebL8aWMB8GA1UdIwQY MBaAFKzr85bJrflPhNyQFlbiVc5tUGYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzFkYzUtMTRmMy00ZDk1LWIwYmQt NDg0N2QzOTNhYjU1LzEvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzFkYzUtMTRmMy00ZDk1LWIwYmQtNDg0N2QzOTNhYjU1 LzEvck92emxzbXQtVS1FM0pBV1Z1SlZ6bTFRWmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC7ozk1G mkx/48J1EgXzTqMp9JyicVm2FSvCD1ocAeptVFb2JSw59OCezUtRpmGM+mUXc3XB ra83ZrdGbaq59PGfy/0m3WFghTFrtLrcTbQOm65pVrvIp4Y0o5rrMuZBrzuKrboh 5eGzPacPlsvlZkAmVdNdnJMy5SZWi1M29QcD68/hghZrvXvK9rhO+0r99QU6UIPr RUEQ3hb4Rva7RXCiP3JCZvH2J41pLmRJHAksOyBOYt7FPOA4mCSwjOphzEkWzEqI MolkGdtj2zII3WLQ5viMxqQrwKLVlausdvBeT9KqZASvU/Mi5ZiG0P4C6kbGMEoH zOvq6+yEEfek5w== -----END CERTIFICATE-----Generated at Thu Dec 18 09:40:17 2025 by rpki-client