This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft File: k0lZrev33pQ1VbyiUIgH65E85vI.mft (raw, json) Hash identifier: vJAlCXYjSDA9ciUvJysAfTUEiRUkix8b4a7mT2DOJvY= Subject key identifier: 09:33:B9:FB:38:F1:89:F9:DF:C1:BF:90:8F:CD:17:80:05:2F:51:32 Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 Certificate issuer: /CN=934959adebf7de943555bca2508807eb913ce6f2 Certificate serial: 019B5E2F15D484A4BEE4A2213A47958166E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 05:01:42 +0000 Manifest this update: Sat 27 Dec 2025 05:01:42 +0000 Manifest next update: Sun 28 Dec 2025 05:01:42 +0000 Files and hashes: 1: dfUbk-VdzFxHfQpYYrY4XW0hmF4.roa (hash: ey6XnfMKe2KD1ABTE4f8EryWVZihQYn0Zy+yAjoGoiI=) 2: k0lZrev33pQ1VbyiUIgH65E85vI.crl (hash: gTs1wejIfogtbpohezVk/+pq8d8dWG1sxEeDoT3woNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2f:15:d4:84:a4:be:e4:a2:21:3a:47:95:81:66:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2 Validity Not Before: Dec 27 05:01:42 2025 GMT Not After : Dec 28 05:01:42 2025 GMT Subject: CN=0933b9fb38f189f9dfc1bf908fcd1780052f5132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:43:e3:c7:00:89:83:0a:2e:8d:95:72:34:a3: b1:d9:48:76:3e:eb:24:fc:ef:af:58:b8:e3:40:fa: bb:d1:ff:33:36:15:57:87:21:36:d9:08:da:ff:ce: 12:14:96:5e:11:c0:4f:3a:a4:07:01:6a:25:a2:bf: d8:aa:72:03:30:0e:a1:5b:6a:ea:79:05:b0:17:40: 5b:7e:2f:23:f5:11:cd:c6:82:df:4f:e9:0b:75:f3: a2:b7:24:68:c9:90:5f:31:14:3e:ef:5f:90:ea:5d: 4a:01:fa:db:b7:95:0f:d4:d4:2c:da:02:58:e3:08: d4:c1:a8:ea:29:9d:16:52:ed:80:43:56:d8:d6:c2: 33:1b:df:d5:57:68:d9:33:c6:78:23:5f:68:71:dd: d8:ee:2f:ff:9e:2d:17:90:02:17:61:70:08:61:84: b0:49:be:8b:9e:54:f1:6c:cf:36:20:86:ba:04:86: 93:39:6c:ee:da:67:9b:3a:3e:bf:20:1c:5e:3e:21: ea:0d:78:cc:41:12:8d:2b:c4:e2:f2:b6:e7:fe:92: 6f:01:24:f0:2e:3b:3e:c9:23:ce:70:82:b2:bc:85: cc:74:61:e2:fb:22:99:0f:2b:f2:97:75:29:b3:2a: 61:42:8e:34:c2:bc:77:09:3f:c5:a9:f6:a6:9a:a7: 60:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:B9:FB:38:F1:89:F9:DF:C1:BF:90:8F:CD:17:80:05:2F:51:32 X509v3 Authority Key Identifier: keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:57:1a:0f:26:dc:a3:9f:47:8c:7a:f8:f7:55:7e:bf:7d:50: f8:54:17:5a:00:29:fb:73:ca:b5:2d:54:df:e7:f3:20:ae:47: 79:f8:51:1a:a5:50:bd:3d:ec:31:67:83:bc:3d:97:46:2d:f8: d2:85:50:a1:a9:c7:96:f6:38:a0:e7:ab:7b:11:f7:3e:18:9f: 55:fc:1e:3e:4f:8d:35:70:a7:6c:a5:da:2a:bb:99:0c:f5:80: e3:f7:fe:55:54:96:c6:04:70:61:09:7c:d8:f1:c4:7a:5f:fa: a0:32:79:8b:3c:08:1c:d2:0a:69:7c:fc:4e:c4:f7:e8:2d:ed: d8:64:a7:37:2c:ed:25:41:8d:6d:02:a9:bb:61:9f:8e:18:1f: d8:f5:1a:24:73:fb:07:31:35:c2:00:03:f3:a4:f7:de:c8:b4: dc:89:c7:29:ee:b2:f6:94:53:13:86:18:0b:0a:65:d4:d7:bb: a1:fc:3f:fb:f2:ed:39:b4:2b:9a:2b:41:e4:b1:3d:11:cd:bf: 68:77:9e:6d:04:81:98:2b:1f:18:20:3c:5d:df:15:41:9e:8f: 6b:7b:4e:97:9f:92:6e:1c:9b:9d:68:04:c3:19:79:6b:55:68: 3d:19:8a:81:8f:54:2b:9a:eb:48:42:4d:d5:9c:46:4c:48:56: e6:66:20:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLxXUhKS+5KIhOkeVgWboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNDk1OWFkZWJmN2RlOTQzNTU1YmNhMjUwODgwN2ViOTEz Y2U2ZjIwHhcNMjUxMjI3MDUwMTQyWhcNMjUxMjI4MDUwMTQyWjAzMTEwLwYDVQQD EygwOTMzYjlmYjM4ZjE4OWY5ZGZjMWJmOTA4ZmNkMTc4MDA1MmY1MTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEPjxwCJgwoujZVyNKOx2Uh2Pusk /O+vWLjjQPq70f8zNhVXhyE22Qja/84SFJZeEcBPOqQHAWolor/YqnIDMA6hW2rq eQWwF0Bbfi8j9RHNxoLfT+kLdfOityRoyZBfMRQ+71+Q6l1KAfrbt5UP1NQs2gJY 4wjUwajqKZ0WUu2AQ1bY1sIzG9/VV2jZM8Z4I19ocd3Y7i//ni0XkAIXYXAIYYSw Sb6LnlTxbM82IIa6BIaTOWzu2mebOj6/IBxePiHqDXjMQRKNK8Ti8rbn/pJvASTw Ljs+ySPOcIKyvIXMdGHi+yKZDyvyl3UpsyphQo40wrx3CT/FqfammqdgJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkzufs48Yn538G/kI/NF4AFL1EyMB8GA1UdIwQY MBaAFJNJWa3r996UNVW8olCIB+uRPObyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWIt ZmIwZWU1Zjk5N2RhLzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xNzU3NjItNjkyOS00ZTcwLWIzZWItZmIwZWU1Zjk5N2Rh LzEvazBsWnJldjMzcFExVmJ5aVVJZ0g2NUU4NXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFcaDybc o59HjHr491V+v31Q+FQXWgAp+3PKtS1U3+fzIK5HefhRGqVQvT3sMWeDvD2XRi34 0oVQoanHlvY4oOerexH3PhifVfwePk+NNXCnbKXaKruZDPWA4/f+VVSWxgRwYQl8 2PHEel/6oDJ5izwIHNIKaXz8TsT36C3t2GSnNyztJUGNbQKpu2Gfjhgf2PUaJHP7 BzE1wgAD86T33si03InHKe6y9pRTE4YYCwpl1Ne7ofw/+/LtObQrmitB5LE9Ec2/ aHeebQSBmCsfGCA8Xd8VQZ6Pa3tOl5+SbhybnWgEwxl5a1VoPRmKgY9UK5rrSEJN 1ZxGTEhW5mYgCw== -----END CERTIFICATE-----Generated at Sat Dec 27 06:15:38 2025 by rpki-client