This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json) Hash identifier: dnKvzbp3wMZO8naC4yClvmrGVeKrqrA2ZwIqD6qdNrM= Subject key identifier: 05:D1:43:A3:86:E9:70:8D:AF:2B:0B:6B:33:0D:EA:1A:C5:36:AD:8A Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Certificate serial: 019B4E16C1ED4236207524CD7113E715FAD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft Manifest number: 0C0D Signing time: Wed 24 Dec 2025 02:01:12 +0000 Manifest this update: Wed 24 Dec 2025 02:01:12 +0000 Manifest next update: Thu 25 Dec 2025 02:01:12 +0000 Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=) 2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: UpM2nKYgOlN+KJNVKK3IfpWMS+htgOwWWwiaanpwz70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:c1:ed:42:36:20:75:24:cd:71:13:e7:15:fa:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Validity Not Before: Dec 24 02:01:12 2025 GMT Not After : Dec 25 02:01:12 2025 GMT Subject: CN=05d143a386e9708daf2b0b6b330dea1ac536ad8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:c3:d1:eb:dc:be:f1:d3:88:c8:82:3a:b8: fd:90:fd:8a:5d:29:cf:9c:32:0b:3e:6d:90:17:c1: 08:ce:3f:cf:ed:b1:3c:39:3f:a7:e9:2b:2c:fc:08: 01:9f:da:a3:7f:94:db:e9:1a:28:28:68:11:ac:b5: cb:69:c1:0f:f2:71:c7:6e:eb:fe:4a:32:80:55:20: a5:e7:b2:9c:7e:c4:18:c5:b4:0e:e2:f9:6b:dd:0a: 8e:05:b1:03:7e:fb:d0:81:da:bf:6c:55:71:ee:e2: 1a:f2:d2:3e:21:b5:89:60:71:82:fb:3f:e7:ad:9f: 28:28:a8:c9:e3:93:c4:5a:05:33:c7:e1:6a:91:6a: 2e:1a:85:ba:71:7e:7b:3f:ad:7c:c3:7b:7b:c7:38: 08:75:6e:51:a3:ac:f6:2e:69:2e:21:02:1f:95:05: d1:3d:68:fe:b4:4a:d9:76:0c:78:11:b8:1c:bb:a4: 5f:23:e2:20:8f:1a:c0:96:58:ec:39:fa:71:db:f5: 72:bf:45:32:68:15:fb:f0:e3:da:85:8f:1f:e7:84: 3b:47:51:00:39:bc:ed:6c:9e:cd:eb:e7:b7:97:d0: 24:c2:59:6f:84:9d:a2:f8:94:e5:ae:cd:01:88:9b: 89:93:97:93:b2:eb:0c:89:fa:18:24:73:cc:1b:48: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D1:43:A3:86:E9:70:8D:AF:2B:0B:6B:33:0D:EA:1A:C5:36:AD:8A X509v3 Authority Key Identifier: keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:91:87:7a:87:dc:58:11:af:2d:8e:38:24:51:69:5a:ba:6f: 19:51:42:b3:56:cc:20:7c:37:55:4f:f0:96:91:8f:a9:b0:f4: 43:52:36:9b:cb:42:7d:4c:c0:a2:7a:04:90:d1:4f:44:f3:9e: c0:fb:d1:35:25:3b:c2:9f:52:b3:e8:67:35:66:d9:da:59:7f: 5f:03:d5:16:5b:d2:b7:06:e7:a2:d4:62:6d:70:0a:8f:d0:58: 19:b4:27:f5:e8:c8:cc:1b:ff:c3:9f:4d:cc:1b:b6:38:d2:29: a4:64:cc:80:15:64:66:e2:d3:c4:65:c0:7d:4b:df:be:c1:31: 95:b8:2d:fe:23:0f:43:18:b0:a4:0d:4a:3c:81:59:e5:01:d0: 4d:62:0b:e0:bf:9a:03:3a:12:57:14:74:32:b2:8b:c9:9a:2b: bc:97:ee:03:a1:1a:4d:39:ad:17:80:bd:00:3d:04:34:d4:4c: 44:40:b3:09:a9:72:e3:c6:e0:03:74:45:e0:b4:9b:9a:3c:33: a6:3e:e8:a2:37:20:55:56:ab:9b:73:9a:a8:84:cc:3a:3b:bd: 5b:76:65:a2:e4:e9:45:7b:44:d8:9d:67:0e:e1:28:70:d6:7d: d7:d7:6d:05:77:dc:05:c3:7d:98:81:5e:6b:61:7c:96:db:9b: 32:e0:d5:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFsHtQjYgdSTNcRPnFfrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTU0OWQ2ODMwNWUyOWRmYjAwMDY5YTUyZDNkNGUxZjJj NTYwNGMwHhcNMjUxMjI0MDIwMTEyWhcNMjUxMjI1MDIwMTEyWjAzMTEwLwYDVQQD EygwNWQxNDNhMzg2ZTk3MDhkYWYyYjBiNmIzMzBkZWExYWM1MzZhZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWDD0evcvvHTiMiCOrj9kP2KXSnP nDILPm2QF8EIzj/P7bE8OT+n6Sss/AgBn9qjf5Tb6RooKGgRrLXLacEP8nHHbuv+ SjKAVSCl57KcfsQYxbQO4vlr3QqOBbEDfvvQgdq/bFVx7uIa8tI+IbWJYHGC+z/n rZ8oKKjJ45PEWgUzx+FqkWouGoW6cX57P618w3t7xzgIdW5Ro6z2LmkuIQIflQXR PWj+tErZdgx4Ebgcu6RfI+IgjxrAlljsOfpx2/Vyv0UyaBX78OPahY8f54Q7R1EA ObztbJ7N6+e3l9AkwllvhJ2i+JTlrs0BiJuJk5eTsusMifoYJHPMG0hsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXRQ6OG6XCNrysLazMN6hrFNq2KMB8GA1UdIwQY MBaAFLGVSdaDBeKd+wAGmlLT1OHyxWBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEt YTI4M2M5MDQ4ZjBmLzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEtYTI4M2M5MDQ4ZjBm LzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZGHeofc WBGvLY44JFFpWrpvGVFCs1bMIHw3VU/wlpGPqbD0Q1I2m8tCfUzAonoEkNFPRPOe wPvRNSU7wp9Ss+hnNWbZ2ll/XwPVFlvStwbnotRibXAKj9BYGbQn9ejIzBv/w59N zBu2ONIppGTMgBVkZuLTxGXAfUvfvsExlbgt/iMPQxiwpA1KPIFZ5QHQTWIL4L+a AzoSVxR0MrKLyZorvJfuA6EaTTmtF4C9AD0ENNRMRECzCaly48bgA3RF4LSbmjwz pj7oojcgVVarm3OaqITMOju9W3ZlouTpRXtE2J1nDuEocNZ919dtBXfcBcN9mIFe a2F8ltubMuDVVw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:32 2025 by rpki-client