This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft File: 0OZTSNwTyFSZx3dNFWYUwSARirU.mft (raw, json) Hash identifier: iJzi3ZtEWIl4pF+TePcAuaYQ8K/+TqEVpIojjqfZVXM= Subject key identifier: E7:A1:B4:96:8A:BB:8F:C0:04:21:8A:DF:91:7A:9E:93:AE:6A:A0:3A Authority key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 Certificate issuer: /CN=d0e65348dc13c85499c7774d156614c120118ab5 Certificate serial: 019B38A248CD40CED068CE5691B27D6DCCF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft Manifest number: 16DE Signing time: Fri 19 Dec 2025 22:01:58 +0000 Manifest this update: Fri 19 Dec 2025 22:01:58 +0000 Manifest next update: Sat 20 Dec 2025 22:01:58 +0000 Files and hashes: 1: 0OZTSNwTyFSZx3dNFWYUwSARirU.crl (hash: x+mII7EsvddYKVC8EAEsS36Lfackp6FsNF/ck0nNNMA=) 2: I8hH4YeV3HM0yWrc52lfIOhYTt8.roa (hash: colmP8j9TQydvYGFc1+glmJgVJjDM5AxsV+6TerMW6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:48:cd:40:ce:d0:68:ce:56:91:b2:7d:6d:cc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e65348dc13c85499c7774d156614c120118ab5 Validity Not Before: Dec 19 22:01:58 2025 GMT Not After : Dec 20 22:01:58 2025 GMT Subject: CN=e7a1b4968abb8fc004218adf917a9e93ae6aa03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:ed:f7:87:a8:ad:d6:30:76:9d:fb:a6:92: 9f:c4:27:1a:e0:5c:31:da:7c:c0:4a:14:dc:d3:1e: dc:4d:e7:b1:3e:a7:84:69:c0:49:bb:9f:cf:a2:98: 37:63:78:b2:a8:96:e0:34:56:8a:52:e4:30:d4:fc: fb:64:86:74:fb:c4:ab:3c:3a:1b:80:3a:ef:39:9f: 54:9d:75:aa:a6:62:c2:0a:c7:a3:67:ec:05:0f:c8: 71:fd:cd:ae:7c:1a:51:2c:60:92:ea:77:67:31:2e: fa:15:63:b7:cd:8b:45:9c:83:ac:ce:e1:dd:4a:6c: aa:7d:f6:7b:8f:46:4d:65:50:72:29:68:b7:81:4b: ef:5c:0e:73:cc:af:e8:01:7e:54:63:23:06:fe:d9: ea:b8:0e:81:d2:4c:c3:fa:34:09:2e:dd:8c:ca:00: aa:ab:af:de:48:21:35:54:29:a4:80:47:c5:46:e0: 97:c8:6e:7b:c2:9d:de:1e:76:d9:96:d0:15:ec:f1: 8d:d8:e9:4e:82:6e:29:0c:f7:6f:cb:66:f4:dd:d2: ca:28:55:ed:0a:22:c5:fa:61:61:f8:a6:c5:92:ed: cd:95:71:3e:ff:4b:69:84:d9:95:3b:87:9c:98:f8: ab:c9:d6:51:7e:33:82:21:84:f7:f7:ac:ba:3e:52: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:B4:96:8A:BB:8F:C0:04:21:8A:DF:91:7A:9E:93:AE:6A:A0:3A X509v3 Authority Key Identifier: keyid:D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fa:83:e6:17:74:84:9e:6f:92:86:1b:61:1a:57:11:b7:ba: 8e:42:f5:90:33:78:9e:35:a3:96:74:5b:0e:a2:2e:63:d0:71: c0:0c:07:b6:25:0b:e1:83:6d:a7:0a:51:07:cc:a0:71:47:fb: 0a:3a:67:8f:47:9a:d2:13:d4:4a:9f:fd:53:16:1f:5a:69:1f: 2f:8c:94:64:5b:8c:45:8a:da:d2:06:f3:31:66:62:88:17:34: 05:44:cd:59:d1:e2:33:e1:09:c8:2e:5b:47:ac:78:c4:ce:b9: 10:0a:37:d5:d6:a0:e7:39:4c:de:79:5b:56:40:e6:38:d4:46: 76:81:45:26:62:db:e1:07:b3:d6:53:11:36:c2:bc:3d:29:3e: cc:6b:2e:0e:cf:0e:b6:f7:93:10:d9:8e:7e:6b:d2:43:d5:12: 2a:8e:81:1a:d4:a6:e7:00:cd:f0:94:12:35:74:71:90:d2:a5: 8e:45:6b:45:38:6e:d1:7c:5d:c1:02:c2:d0:18:9b:6c:72:da: f1:bc:2b:69:c8:08:1b:4e:7c:0e:55:c9:8e:2c:b5:34:d5:c3: ed:56:64:3a:e9:d7:ee:52:29:7c:03:ff:4e:f2:ec:fc:d6:c9: 0d:21:f8:aa:8b:e9:ca:d5:68:0d:06:09:8a:24:07:e3:07:e7: be:f5:1b:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4okjNQM7QaM5WkbJ9bcz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZTY1MzQ4ZGMxM2M4NTQ5OWM3Nzc0ZDE1NjYxNGMxMjAx MThhYjUwHhcNMjUxMjE5MjIwMTU4WhcNMjUxMjIwMjIwMTU4WjAzMTEwLwYDVQQD EyhlN2ExYjQ5NjhhYmI4ZmMwMDQyMThhZGY5MTdhOWU5M2FlNmFhMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswLt94eordYwdp37ppKfxCca4Fwx 2nzAShTc0x7cTeexPqeEacBJu5/Popg3Y3iyqJbgNFaKUuQw1Pz7ZIZ0+8SrPDob gDrvOZ9UnXWqpmLCCsejZ+wFD8hx/c2ufBpRLGCS6ndnMS76FWO3zYtFnIOszuHd SmyqffZ7j0ZNZVByKWi3gUvvXA5zzK/oAX5UYyMG/tnquA6B0kzD+jQJLt2MygCq q6/eSCE1VCmkgEfFRuCXyG57wp3eHnbZltAV7PGN2OlOgm4pDPdvy2b03dLKKFXt CiLF+mFh+KbFku3NlXE+/0tphNmVO4ecmPirydZRfjOCIYT396y6PlLoZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOehtJaKu4/ABCGK35F6npOuaqA6MB8GA1UdIwQY MBaAFNDmU0jcE8hUmcd3TRVmFMEgEYq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYt MGRiMGVjMWU5NDVjLzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9kN2E0YTctMDdlMi00OGFkLWJhNTYtMGRiMGVjMWU5NDVj LzEvME9aVFNOd1R5RlNaeDNkTkZXWVV3U0FSaXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfqD5hd0 hJ5vkoYbYRpXEbe6jkL1kDN4njWjlnRbDqIuY9BxwAwHtiUL4YNtpwpRB8ygcUf7 Cjpnj0ea0hPUSp/9UxYfWmkfL4yUZFuMRYra0gbzMWZiiBc0BUTNWdHiM+EJyC5b R6x4xM65EAo31dag5zlM3nlbVkDmONRGdoFFJmLb4Qez1lMRNsK8PSk+zGsuDs8O tveTENmOfmvSQ9USKo6BGtSm5wDN8JQSNXRxkNKljkVrRThu0XxdwQLC0BibbHLa 8bwracgIG058DlXJjiy1NNXD7VZkOunX7lIpfAP/TvLs/NbJDSH4qovpytVoDQYJ iiQH4wfnvvUb8g== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:52 2025 by rpki-client