This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft File: rOzREmnuoGcmJ3zjYatRzkIEnjY.mft (raw, json) Hash identifier: 9qt/RHWNC579TBl/4kAqMT+opmnPktu89CAHMoswhDI= Subject key identifier: 0E:11:90:98:5A:C2:62:24:2C:31:F6:31:2F:45:0B:8C:EA:86:08:0D Authority key identifier: AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 Certificate issuer: /CN=acecd11269eea06726277ce361ab51ce42049e36 Certificate serial: 019B3E6CDB8EEC662051A03680E8FB9EFAF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft Manifest number: F5 Signing time: Sun 21 Dec 2025 01:01:20 +0000 Manifest this update: Sun 21 Dec 2025 01:01:20 +0000 Manifest next update: Mon 22 Dec 2025 01:01:20 +0000 Files and hashes: 1: HS0o75LHBm7unTvkxSvYhKKCqOg.roa (hash: LFboYZcKhi2PcYZ1VtUF+QlXoMKEVErQ5pYjshCCFZM=) 2: bDeWAt5toPFFtLcQo4OIdz5578k.roa (hash: Zpc2oZsR+YkTAX5bL+rqulsdcmLQvzDSUvV8Q9C4Jg8=) 3: mzUvfgVLoqjl_Pu4e_7hdH0g4tQ.roa (hash: nM7KewQVEjtLO/Upjj+aZLO5RewYm9AF+8kFiREJ2Jc=) 4: rOzREmnuoGcmJ3zjYatRzkIEnjY.crl (hash: 6ogcY2/VoHk6m3jZgOJqT8VP7/U9MeQ8yzeZkVJBg+I=) 5: uAH4xPc9AhtK2Uy6SZDxCuii3xg.roa (hash: 7Lk71krqRJUVDRdcZl5XdOrWogQR7yqjHZ+KkfQmj9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:db:8e:ec:66:20:51:a0:36:80:e8:fb:9e:fa:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acecd11269eea06726277ce361ab51ce42049e36 Validity Not Before: Dec 21 01:01:20 2025 GMT Not After : Dec 22 01:01:20 2025 GMT Subject: CN=0e1190985ac262242c31f6312f450b8cea86080d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:a0:0e:fd:bd:a2:cc:a1:d9:dc:1b:2c:3b: 2e:d1:e1:b6:d5:4f:96:f2:56:9a:c0:1f:b0:8d:aa: 39:6f:53:cd:f5:a4:cf:d7:ce:0e:8d:d5:3c:d5:94: ba:7c:08:39:32:2a:22:4f:2a:27:ba:81:57:20:a5: d3:96:0f:8e:df:57:e7:90:1a:ab:4b:ef:c9:fe:95: dc:b4:66:93:1e:75:a5:dd:42:11:27:8d:1a:d1:92: 41:83:2e:e3:a7:20:80:42:8e:9b:84:9e:31:c8:c4: a1:4e:fc:18:94:9d:d8:a0:e2:37:39:26:32:1f:0e: af:c4:3f:39:ec:99:e4:a8:21:cb:4d:75:28:79:a6: b0:08:11:22:78:5f:9e:9c:26:c0:39:c4:a2:b8:37: d7:d0:67:1e:bb:36:74:87:b8:cf:2c:7f:1d:f4:0b: 2c:f8:61:47:42:1e:03:1b:64:4b:25:5d:ef:68:23: 1e:5a:af:23:61:d6:03:6a:57:d9:79:6c:14:90:73: 78:06:d9:a6:e5:8e:ed:a7:6c:ef:77:b8:7c:c9:7c: 2f:4b:4f:06:4a:7e:c9:31:5d:f3:f1:01:1b:4d:52: f8:c2:35:4d:7b:c4:05:5a:7c:de:9d:18:3a:6f:4d: 94:38:64:f3:27:cf:3c:88:e0:28:ec:38:6c:be:14: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:11:90:98:5A:C2:62:24:2C:31:F6:31:2F:45:0B:8C:EA:86:08:0D X509v3 Authority Key Identifier: keyid:AC:EC:D1:12:69:EE:A0:67:26:27:7C:E3:61:AB:51:CE:42:04:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzREmnuoGcmJ3zjYatRzkIEnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/86ee8f-0c7b-4921-bff5-4047e0fbe9cb/1/rOzREmnuoGcmJ3zjYatRzkIEnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4b:40:c7:66:90:8c:b0:12:bc:4f:64:b8:02:c7:c0:b4:ba: 91:41:47:86:af:0d:6f:16:b3:5b:5d:34:ab:69:b1:58:89:a2: aa:3d:a0:8a:0d:06:bc:15:25:20:bb:cd:fc:d1:fc:c9:00:2e: 1c:e7:8a:c2:1f:d2:1c:4d:7c:e8:7b:0e:49:15:b8:53:31:59: ff:65:bc:97:91:a5:42:fe:58:19:ee:43:6b:03:08:d5:bc:ca: 7e:71:ef:d6:3f:a9:3e:ba:38:68:62:a3:49:be:25:c1:14:18: 35:84:2b:4f:02:bd:af:43:31:35:f2:8c:d0:01:91:76:57:89: 3d:ea:0a:56:29:1f:0c:29:95:13:29:14:2f:50:56:b9:2a:80: 15:9f:cf:5d:57:34:37:9d:ab:9e:16:a7:f6:a9:55:bd:3d:7e: ba:60:c1:2b:56:d1:46:d8:95:91:6f:67:a0:5a:4e:be:f8:b7: 6e:86:65:43:ec:36:60:3b:5d:7e:b3:96:e8:70:11:82:3f:fb: e4:14:ee:3e:0a:ef:f1:cd:ed:52:34:ba:f0:ad:b2:3d:c8:eb: 83:32:72:0b:77:10:41:0c:67:72:45:27:cb:e9:63:25:46:fd: 87:1b:2b:4e:5d:80:d2:fc:5b:c9:2b:b8:78:b7:cc:04:d9:6e: 5a:17:32:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bNuO7GYgUaA2gOj7nvr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZWNkMTEyNjllZWEwNjcyNjI3N2NlMzYxYWI1MWNlNDIw NDllMzYwHhcNMjUxMjIxMDEwMTIwWhcNMjUxMjIyMDEwMTIwWjAzMTEwLwYDVQQD EygwZTExOTA5ODVhYzI2MjI0MmMzMWY2MzEyZjQ1MGI4Y2VhODYwODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbWgDv29osyh2dwbLDsu0eG21U+W 8laawB+wjao5b1PN9aTP184OjdU81ZS6fAg5MioiTyonuoFXIKXTlg+O31fnkBqr S+/J/pXctGaTHnWl3UIRJ40a0ZJBgy7jpyCAQo6bhJ4xyMShTvwYlJ3YoOI3OSYy Hw6vxD857JnkqCHLTXUoeaawCBEieF+enCbAOcSiuDfX0GceuzZ0h7jPLH8d9Ass +GFHQh4DG2RLJV3vaCMeWq8jYdYDalfZeWwUkHN4Btmm5Y7tp2zvd7h8yXwvS08G Sn7JMV3z8QEbTVL4wjVNe8QFWnzenRg6b02UOGTzJ888iOAo7DhsvhT9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4RkJhawmIkLDH2MS9FC4zqhggNMB8GA1UdIwQY MBaAFKzs0RJp7qBnJid842GrUc5CBJ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUt NDA0N2UwZmJlOWNiLzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NmVlOGYtMGM3Yi00OTIxLWJmZjUtNDA0N2UwZmJlOWNi LzEvck96UkVtbnVvR2NtSjN6allhdFJ6a0lFbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUtAx2aQ jLASvE9kuALHwLS6kUFHhq8NbxazW100q2mxWImiqj2gig0GvBUlILvN/NH8yQAu HOeKwh/SHE186HsOSRW4UzFZ/2W8l5GlQv5YGe5DawMI1bzKfnHv1j+pPro4aGKj Sb4lwRQYNYQrTwK9r0MxNfKM0AGRdleJPeoKVikfDCmVEykUL1BWuSqAFZ/PXVc0 N52rnhan9qlVvT1+umDBK1bRRtiVkW9noFpOvvi3boZlQ+w2YDtdfrOW6HARgj/7 5BTuPgrv8c3tUjS68K2yPcjrgzJyC3cQQQxnckUny+ljJUb9hxsrTl2A0vxbySu4 eLfMBNluWhcy/w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:32:26 2025 by rpki-client