This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json) Hash identifier: +uWva/NKfd0RDV+4SK7TrRtR6DaEq8Qdb/BZQDDInWo= Subject key identifier: CF:52:DB:23:BF:A1:6F:3A:AB:3F:45:A5:E8:89:0E:CA:E4:AA:C6:86 Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Certificate serial: 019B446ED3EA9075187E1FD398EE3057FD2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft Manifest number: 0C08 Signing time: Mon 22 Dec 2025 05:01:12 +0000 Manifest this update: Mon 22 Dec 2025 05:01:12 +0000 Manifest next update: Tue 23 Dec 2025 05:01:12 +0000 Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=) 2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: TzSr66NzP1cERg0COicw4D7Gg/UDdofHYtC6QeJy0sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:d3:ea:90:75:18:7e:1f:d3:98:ee:30:57:fd:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c Validity Not Before: Dec 22 05:01:12 2025 GMT Not After : Dec 23 05:01:12 2025 GMT Subject: CN=cf52db23bfa16f3aab3f45a5e8890ecae4aac686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:01:59:36:2c:d1:57:dd:7f:eb:ea:3d:1c: 8c:89:bf:81:94:bd:ac:e5:9a:6c:ea:eb:cd:0a:70: dd:34:1a:05:e0:89:c5:45:c4:99:ac:08:48:c2:22: 5f:56:51:a5:3b:ab:fd:d6:11:44:34:48:b4:a1:36: f8:25:fb:38:30:da:c0:30:cd:67:b8:44:db:05:a2: 70:9f:a9:eb:14:9f:4c:28:2b:72:35:32:0a:55:92: 5c:15:97:42:26:43:da:13:81:f9:a3:8a:cb:a5:53: 4a:48:2f:49:25:44:66:27:93:2c:43:45:b1:1b:29: 63:5a:e4:25:7a:e1:b0:d9:a2:07:b1:ee:36:a1:81: fb:b1:7c:0e:ac:65:0d:32:0b:5b:62:5b:e7:63:e3: f1:71:33:e0:9e:6e:a3:f3:00:6c:3c:b3:e0:99:39: 8b:c9:7e:15:8a:88:67:a5:16:97:f9:ad:b9:b3:01: b8:53:3d:13:6e:d5:6b:25:0f:a7:92:a8:76:fd:de: 49:16:37:99:21:cd:5d:01:87:3c:f3:40:16:71:d0: 15:06:55:bf:db:39:70:f1:9a:76:d8:18:b7:86:ff: e3:a2:78:5f:d4:55:8a:ee:64:da:c1:18:aa:4a:32: a9:81:fd:b2:25:a3:fd:39:51:0c:34:55:ac:69:7e: 30:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:52:DB:23:BF:A1:6F:3A:AB:3F:45:A5:E8:89:0E:CA:E4:AA:C6:86 X509v3 Authority Key Identifier: keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:de:3e:77:92:c9:89:98:8e:d2:c6:75:bf:c7:f1:bc:b6:15: 52:06:4a:55:53:3f:17:60:74:34:95:33:b3:64:de:01:2b:8d: cd:bc:0f:a6:ef:9a:93:85:ca:03:01:68:4a:56:b8:6c:17:c3: 70:2d:e0:13:2c:43:16:bc:f5:40:1a:41:ba:75:fd:ed:7f:e2: a1:e1:3e:1e:95:22:47:d0:0b:b4:9c:a7:5b:9e:51:90:14:74: 21:53:d2:a6:c8:40:dd:10:0f:d4:81:23:06:ff:9b:b5:77:ff: a2:8a:31:7b:56:e5:36:7e:d1:e6:ad:ca:5a:db:1b:7b:2c:18: 85:13:3b:0b:07:71:b7:a3:5f:d0:79:94:1c:29:f3:19:94:3d: c7:af:30:be:33:d5:27:1b:5c:7f:11:d0:05:5f:b2:4c:9b:be: 5c:78:5b:73:5f:73:5a:4b:48:25:69:87:53:cb:88:d9:d1:6b: 81:a9:10:9c:b6:dc:3c:37:ed:a2:f9:26:67:02:a7:95:f5:d3: 72:ea:1c:25:c6:d4:89:d0:5c:8b:cd:be:8d:9e:bb:2a:f4:4c: a4:41:d9:55:20:8f:44:23:7e:df:ca:08:f9:0d:20:de:73:b1: 0c:1b:10:b0:e1:4e:2d:62:f7:c2:37:9e:b5:71:74:fa:04:a3: 58:26:41:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbtPqkHUYfh/TmO4wV/0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOTU0OWQ2ODMwNWUyOWRmYjAwMDY5YTUyZDNkNGUxZjJj NTYwNGMwHhcNMjUxMjIyMDUwMTEyWhcNMjUxMjIzMDUwMTEyWjAzMTEwLwYDVQQD EyhjZjUyZGIyM2JmYTE2ZjNhYWIzZjQ1YTVlODg5MGVjYWU0YWFjNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpkBWTYs0Vfdf+vqPRyMib+BlL2s 5Zps6uvNCnDdNBoF4InFRcSZrAhIwiJfVlGlO6v91hFENEi0oTb4Jfs4MNrAMM1n uETbBaJwn6nrFJ9MKCtyNTIKVZJcFZdCJkPaE4H5o4rLpVNKSC9JJURmJ5MsQ0Wx GyljWuQleuGw2aIHse42oYH7sXwOrGUNMgtbYlvnY+PxcTPgnm6j8wBsPLPgmTmL yX4ViohnpRaX+a25swG4Uz0TbtVrJQ+nkqh2/d5JFjeZIc1dAYc880AWcdAVBlW/ 2zlw8Zp22Bi3hv/jonhf1FWK7mTawRiqSjKpgf2yJaP9OVEMNFWsaX4wZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9S2yO/oW86qz9FpeiJDsrkqsaGMB8GA1UdIwQY MBaAFLGVSdaDBeKd+wAGmlLT1OHyxWBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEt YTI4M2M5MDQ4ZjBmLzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hZjFmNzItY2U4ZS00MmIxLWJlNWEtYTI4M2M5MDQ4ZjBm LzEvc1pWSjFvTUY0cDM3QUFhYVV0UFU0ZkxGWUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY94+d5LJ iZiO0sZ1v8fxvLYVUgZKVVM/F2B0NJUzs2TeASuNzbwPpu+ak4XKAwFoSla4bBfD cC3gEyxDFrz1QBpBunX97X/ioeE+HpUiR9ALtJynW55RkBR0IVPSpshA3RAP1IEj Bv+btXf/oooxe1blNn7R5q3KWtsbeywYhRM7Cwdxt6Nf0HmUHCnzGZQ9x68wvjPV JxtcfxHQBV+yTJu+XHhbc19zWktIJWmHU8uI2dFrgakQnLbcPDftovkmZwKnlfXT cuocJcbUidBci82+jZ67KvRMpEHZVSCPRCN+38oI+Q0g3nOxDBsQsOFOLWL3wjee tXF0+gSjWCZBBA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:35 2025 by rpki-client