This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json) Hash identifier: 479/4saV8qKfA0cDO4aGEHXo1WyhgjBqvdO6Q2hzq/4= Subject key identifier: 4E:25:B8:47:9B:96:B5:80:5B:A2:73:0E:D7:7F:F0:EE:4A:AC:EF:AF Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39 Certificate serial: 019B560701161905AAE7725F047B2A50FFBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft Manifest number: 1190 Signing time: Thu 25 Dec 2025 15:00:58 +0000 Manifest this update: Thu 25 Dec 2025 15:00:58 +0000 Manifest next update: Fri 26 Dec 2025 15:00:58 +0000 Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: 5Tvn278LA3/+/Afl6Wrk21ZO0ewr2TK3w3nsR3OeODs=) 2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:01:16:19:05:aa:e7:72:5f:04:7b:2a:50:ff:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39 Validity Not Before: Dec 25 15:00:58 2025 GMT Not After : Dec 26 15:00:58 2025 GMT Subject: CN=4e25b8479b96b5805ba2730ed77ff0ee4aacefaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:08:7b:a9:0d:d4:06:a3:ca:a4:e9:d1:82: 56:06:d8:dd:6e:b8:5f:37:73:b4:0f:3d:ad:e2:ae: 34:8d:13:36:83:c8:96:e2:92:ef:91:81:cb:42:e1: 53:ea:28:72:6a:83:92:5f:52:e2:a7:2d:fa:50:d7: 7c:a7:bf:71:e7:41:d5:26:65:4f:56:d1:57:4b:65: 41:03:ed:03:e8:ca:02:22:e9:71:1b:44:b6:83:c1: 16:38:c9:ce:1c:be:ce:ed:14:0c:e1:21:f3:0e:5b: eb:bf:36:dd:f2:93:6e:37:a8:38:36:2c:ac:d3:04: ad:6f:d4:38:61:11:cd:ca:38:15:13:e7:ce:6a:28: d1:17:e8:aa:97:94:c8:e0:6b:5d:f6:bb:81:4f:c5: 29:9a:5f:b4:e3:99:23:8a:b6:24:19:5b:9d:6a:db: 8a:4c:93:b2:cc:69:27:c0:8a:36:e3:0b:a8:9c:c5: 47:e1:4e:61:33:d6:7e:47:16:d6:bc:55:eb:97:f9: b1:71:cd:d0:70:c5:a0:9b:17:ed:a0:5d:97:e1:cb: d4:83:49:df:42:b2:47:23:7d:0a:3f:1f:0e:72:ba: cb:ca:fa:37:f6:b6:a8:4e:3c:e9:c2:eb:9b:2e:fe: bf:dd:c8:a0:22:b6:fd:a9:5e:7b:3c:de:87:2a:7d: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:25:B8:47:9B:96:B5:80:5B:A2:73:0E:D7:7F:F0:EE:4A:AC:EF:AF X509v3 Authority Key Identifier: keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:11:ed:13:26:6e:32:e7:f7:4e:81:67:96:46:5c:98:6f:0b: ef:d0:ce:d1:13:c3:30:8e:2b:2b:fa:cb:da:b0:cc:d2:16:1c: 9c:c4:e1:21:8f:48:f8:c1:8c:54:3c:f8:1f:98:58:48:d2:4c: cf:5f:3a:20:f7:51:5c:66:89:3d:bc:3f:92:b5:1a:ad:de:9d: 05:57:47:73:6f:42:74:90:79:42:f7:05:8c:35:35:f2:a2:5a: af:71:d4:ff:54:bc:9b:c0:b5:6b:97:2f:67:fb:22:13:46:85: 91:92:b4:ff:09:59:be:15:31:95:dc:f6:c7:97:27:17:02:a7: 3b:dd:60:68:8c:18:06:d0:aa:b8:71:00:fa:29:94:75:04:d1: f6:25:f9:6c:18:21:f8:92:18:fb:71:72:fe:88:66:62:c4:b3: db:21:4e:9f:69:71:f5:c4:89:e2:ab:47:36:21:9b:2e:08:a3: 0c:50:47:85:69:c3:68:33:01:ec:eb:78:93:7a:ef:66:4b:79: be:21:95:a3:b9:70:bb:e3:c2:02:a9:61:68:3b:f9:76:cb:44: f5:89:7d:f5:d2:31:c9:72:b9:4f:bb:c9:ce:f6:4f:54:d1:80: c1:d2:6f:1e:53:c9:96:86:2b:a9:a5:61:72:8a:77:c2:9f:63: e4:ff:8f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBwEWGQWq53JfBHsqUP+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1 YTFhMzkwHhcNMjUxMjI1MTUwMDU4WhcNMjUxMjI2MTUwMDU4WjAzMTEwLwYDVQQD Eyg0ZTI1Yjg0NzliOTZiNTgwNWJhMjczMGVkNzdmZjBlZTRhYWNlZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0wIe6kN1AajyqTp0YJWBtjdbrhf N3O0Dz2t4q40jRM2g8iW4pLvkYHLQuFT6ihyaoOSX1Lipy36UNd8p79x50HVJmVP VtFXS2VBA+0D6MoCIulxG0S2g8EWOMnOHL7O7RQM4SHzDlvrvzbd8pNuN6g4Niys 0wStb9Q4YRHNyjgVE+fOaijRF+iql5TI4Gtd9ruBT8Upml+045kjirYkGVudatuK TJOyzGknwIo24wuonMVH4U5hM9Z+RxbWvFXrl/mxcc3QcMWgmxftoF2X4cvUg0nf QrJHI30KPx8OcrrLyvo39raoTjzpwuubLv6/3cigIrb9qV57PN6HKn24iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4luEeblrWAW6JzDtd/8O5KrO+vMB8GA1UdIwQY MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBHtEyZu Muf3ToFnlkZcmG8L79DO0RPDMI4rK/rL2rDM0hYcnMThIY9I+MGMVDz4H5hYSNJM z186IPdRXGaJPbw/krUard6dBVdHc29CdJB5QvcFjDU18qJar3HU/1S8m8C1a5cv Z/siE0aFkZK0/wlZvhUxldz2x5cnFwKnO91gaIwYBtCquHEA+imUdQTR9iX5bBgh +JIY+3Fy/ohmYsSz2yFOn2lx9cSJ4qtHNiGbLgijDFBHhWnDaDMB7Ot4k3rvZkt5 viGVo7lwu+PCAqlhaDv5dstE9Yl99dIxyXK5T7vJzvZPVNGAwdJvHlPJloYrqaVh cop3wp9j5P+P1A== -----END CERTIFICATE-----Generated at Thu Dec 25 19:41:03 2025 by rpki-client