This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft File: 0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json) Hash identifier: 3BUTyMj1+VXm9Y5Mre+b5a+MOtH1yDfEWHmEKBT58t0= Subject key identifier: 64:A4:E1:B2:23:54:C1:52:FD:15:F7:79:2D:2C:36:AC:2D:9E:9D:07 Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 Certificate issuer: /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Certificate serial: 019B2D0B236D8B00A7963ED15963235454AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft Manifest number: 0915 Signing time: Wed 17 Dec 2025 16:01:03 +0000 Manifest this update: Wed 17 Dec 2025 16:01:03 +0000 Manifest next update: Thu 18 Dec 2025 16:01:03 +0000 Files and hashes: 1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: nZOp+qzJCkYzd0dgCy8sEhfNlHTlddz7n4HIwAMHFvU=) 2: 5kBRIytnJyvZSwOvYDew9C5v8g8.roa (hash: vyD1EDIJkExeSnXzO8jxWYNY6MqP1zOjQuUSZZBKDjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:23:6d:8b:00:a7:96:3e:d1:59:63:23:54:54:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387 Validity Not Before: Dec 17 16:01:03 2025 GMT Not After : Dec 18 16:01:03 2025 GMT Subject: CN=64a4e1b22354c152fd15f7792d2c36ac2d9e9d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:c5:f6:16:3d:22:02:c4:15:e9:11:64:b2: 73:f7:37:ad:a5:7f:cd:60:3e:15:8f:96:98:aa:c8: c0:f0:db:b8:52:e7:9e:39:a3:85:9f:70:07:5c:0c: 14:92:d3:79:9c:77:d3:39:ca:18:27:fa:e8:85:91: 86:6d:e2:89:a8:4f:e9:bb:53:82:1f:11:e3:07:e6: ef:e3:60:82:17:38:bc:6a:c9:bb:44:04:01:61:20: 42:cb:9d:77:13:7c:1e:16:67:2c:01:bb:c2:9c:d9: 12:09:d5:82:65:c7:14:97:6d:18:4b:ea:ef:bd:2a: b3:ce:fc:f6:5e:e9:91:bf:05:9b:a4:b0:25:fe:fc: 47:9c:f2:3d:9e:7e:f7:a0:34:74:b5:33:c6:dd:89: 7c:ac:f0:df:13:ed:a1:92:ec:aa:ef:2f:97:41:b0: ef:71:74:f3:ce:f8:ba:1e:2c:e2:7c:f9:29:57:57: 01:2d:bc:0b:0b:03:71:fd:8b:38:af:59:87:9c:b0: 13:ad:b0:dc:36:0c:69:71:43:20:75:d7:6f:d3:ea: 81:cc:58:ac:c9:65:ee:aa:37:b3:11:50:a0:e7:b5: e1:6a:cf:ba:27:1c:01:a7:a5:88:00:0e:f2:27:c8: 58:42:67:ae:0a:63:1a:4e:25:cb:f7:25:77:c1:f0: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A4:E1:B2:23:54:C1:52:FD:15:F7:79:2D:2C:36:AC:2D:9E:9D:07 X509v3 Authority Key Identifier: keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:de:d9:22:de:06:f0:d0:4e:d4:07:67:46:db:73:da:b8:c6: 7a:82:80:a8:fe:33:47:a8:a7:06:d3:9e:54:0f:3a:53:c5:d6: ab:df:03:29:6d:9f:b9:58:92:6b:48:0d:55:d0:39:5d:72:bf: 0c:1f:5d:00:61:f4:af:8b:24:0a:8d:5e:b0:ef:25:e8:69:7c: d5:1d:ea:1d:e4:db:fd:f7:88:24:96:27:26:67:ea:7d:43:e3: cc:04:de:3d:8c:15:fe:f1:63:d2:68:f0:58:f0:76:b0:89:87: e1:ed:84:15:18:ef:08:91:54:ec:9a:f9:04:bc:c0:4e:65:ee: 32:25:98:b8:58:44:b1:5f:71:20:f5:88:b2:75:40:ca:a2:fc: 2c:05:db:d7:7d:71:09:a6:f8:cb:ca:ce:db:9b:78:e7:c8:5a: 76:02:1e:a6:6e:31:d0:3d:13:ca:63:37:1e:d9:ee:50:ed:23: 4c:84:23:50:63:96:a6:98:4e:0c:b0:d1:db:16:70:a1:50:ed: 61:15:8e:0e:35:7f:b3:5d:71:9d:e1:53:d2:6f:02:9d:7a:1d: 5a:88:f3:f3:93:8c:03:36:ca:73:2f:fb:9a:5c:13:b9:0a:32: 7d:fd:de:82:5e:a9:d7:ff:e7:ca:a7:47:08:74:b2:fa:6b:16: a5:39:f8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCyNtiwCnlj7RWWMjVFSvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNTY0NmEzYzlhY2I2YTRiMjAxYmI2MzI2YTlmMDA3NDIy NGYzODcwHhcNMjUxMjE3MTYwMTAzWhcNMjUxMjE4MTYwMTAzWjAzMTEwLwYDVQQD Eyg2NGE0ZTFiMjIzNTRjMTUyZmQxNWY3NzkyZDJjMzZhYzJkOWU5ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb7F9hY9IgLEFekRZLJz9zetpX/N YD4Vj5aYqsjA8Nu4UueeOaOFn3AHXAwUktN5nHfTOcoYJ/rohZGGbeKJqE/pu1OC HxHjB+bv42CCFzi8asm7RAQBYSBCy513E3weFmcsAbvCnNkSCdWCZccUl20YS+rv vSqzzvz2XumRvwWbpLAl/vxHnPI9nn73oDR0tTPG3Yl8rPDfE+2hkuyq7y+XQbDv cXTzzvi6HizifPkpV1cBLbwLCwNx/Ys4r1mHnLATrbDcNgxpcUMgdddv0+qBzFis yWXuqjezEVCg57Xhas+6JxwBp6WIAA7yJ8hYQmeuCmMaTiXL9yV3wfD5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSk4bIjVMFS/RX3eS0sNqwtnp0HMB8GA1UdIwQY MBaAFNFWRqPJrLaksgG7Yyap8AdCJPOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2Ut OTBkZGU4NWQ4ZmE3LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi81MGQ0ZDItY2I5NC00MGY1LTliY2UtOTBkZGU4NWQ4ZmE3 LzEvMFZaR284bXN0cVN5QWJ0akpxbndCMElrODRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd7ZIt4G 8NBO1AdnRttz2rjGeoKAqP4zR6inBtOeVA86U8XWq98DKW2fuViSa0gNVdA5XXK/ DB9dAGH0r4skCo1esO8l6Gl81R3qHeTb/feIJJYnJmfqfUPjzATePYwV/vFj0mjw WPB2sImH4e2EFRjvCJFU7Jr5BLzATmXuMiWYuFhEsV9xIPWIsnVAyqL8LAXb131x Cab4y8rO25t458hadgIepm4x0D0TymM3HtnuUO0jTIQjUGOWpphODLDR2xZwoVDt YRWODjV/s11xneFT0m8CnXodWojz85OMAzbKcy/7mlwTuQoyff3egl6p1//nyqdH CHSy+msWpTn4AQ== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:17 2025 by rpki-client