This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json) Hash identifier: b3rVjM4mCWLfGCR/np9BC8G0KmWy1FZcZx46dGD3lT0= Subject key identifier: 83:E4:B2:4D:86:DE:60:19:E2:AE:94:22:87:67:74:41:B0:F9:27:7E Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39 Certificate serial: 019B3CEC084E33B7B3684D3D9EF9A946D5B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft Manifest number: 1183 Signing time: Sat 20 Dec 2025 18:01:00 +0000 Manifest this update: Sat 20 Dec 2025 18:01:00 +0000 Manifest next update: Sun 21 Dec 2025 18:01:00 +0000 Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: ppDM0ftT39QTZaN1ng2qOztmN50RU/O9sBdGLmjIa9Q=) 2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:08:4e:33:b7:b3:68:4d:3d:9e:f9:a9:46:d5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39 Validity Not Before: Dec 20 18:01:00 2025 GMT Not After : Dec 21 18:01:00 2025 GMT Subject: CN=83e4b24d86de6019e2ae942287677441b0f9277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:cb:88:f4:92:f6:cb:02:61:8d:8a:38:9b: 60:fd:d8:75:95:e0:f8:89:57:6c:61:36:50:c9:e3: 8e:19:a6:fd:4b:40:9d:8c:68:bd:1e:60:ea:25:e4: 79:41:69:98:1b:4d:d5:7b:af:75:4b:7a:9d:f7:83: 7d:5f:c9:56:73:a4:42:32:a3:6e:e1:7b:8a:67:f2: 94:32:c6:d6:fa:bc:c3:67:2b:d3:eb:3d:e6:27:66: 55:db:8a:73:91:25:76:e4:66:6f:eb:35:76:87:dc: b2:c4:17:46:02:b9:83:be:1a:54:43:aa:d1:93:b3: e7:d7:14:2e:94:3d:2a:f7:50:b2:1b:90:51:0c:82: e8:42:76:97:ce:69:83:f5:a6:6b:39:6e:87:a6:e4: 38:3b:66:26:dc:bc:b1:99:2b:3b:46:7c:30:39:fa: 38:2d:42:9a:38:04:4f:41:b6:6e:b5:33:81:dc:f5: c6:3f:b3:9a:39:56:15:4e:bb:24:f6:4c:1e:1b:dd: 0b:7b:d0:04:04:04:84:dd:d1:41:d8:d5:b3:6b:c9: c4:7d:49:20:e1:ce:db:23:6b:0a:2b:04:d9:6a:39: 90:e6:14:7a:ec:c1:ed:9c:26:2f:2b:4d:6d:a9:04: 2a:72:88:81:8a:9a:08:52:1c:39:69:66:38:09:be: 02:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:B2:4D:86:DE:60:19:E2:AE:94:22:87:67:74:41:B0:F9:27:7E X509v3 Authority Key Identifier: keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a2:95:56:d3:28:5d:36:02:26:04:0a:49:e0:1e:05:e4:a7: 12:74:c8:87:56:5e:18:95:8a:21:9f:61:78:70:eb:9f:41:08: c4:5c:ca:2f:99:2c:4a:2e:b7:da:bd:a3:4b:6f:8d:6c:1d:45: 1b:81:91:0d:b8:ca:5b:b8:fc:a3:01:c8:85:aa:77:93:9d:13: be:8f:d7:05:a3:f6:6e:ee:de:09:08:a0:6e:38:70:08:24:f1: 50:00:ea:b7:ce:de:4d:0f:d0:52:4f:df:27:bb:03:f9:60:98: 51:01:a3:ae:09:c7:6e:bc:58:1d:49:1c:3b:a0:5f:c9:6c:5f: b2:f5:4e:9f:68:3e:e7:5b:db:7a:d5:1a:41:ae:55:f6:e9:4f: 81:c9:14:1d:62:96:5d:27:cf:48:2e:87:87:07:65:42:b4:95: 1a:4d:10:85:7f:95:ba:63:a9:f2:75:a4:c2:59:eb:c5:a8:7a: c6:b1:3c:67:18:27:05:9f:29:b8:63:27:04:b9:1d:b8:1b:c2: b4:39:1e:35:23:7c:ab:45:3b:61:03:41:e9:5b:8e:78:c1:5c: cc:d7:e5:82:db:8e:c8:74:31:8e:ea:87:1a:8a:f3:50:16:ed: aa:e2:6e:85:71:a2:bf:06:52:d4:fb:56:e1:18:f5:a5:2e:3d: 42:0a:f8:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AhOM7ezaE09nvmpRtW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1 YTFhMzkwHhcNMjUxMjIwMTgwMTAwWhcNMjUxMjIxMTgwMTAwWjAzMTEwLwYDVQQD Eyg4M2U0YjI0ZDg2ZGU2MDE5ZTJhZTk0MjI4NzY3NzQ0MWIwZjkyNzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBDLiPSS9ssCYY2KOJtg/dh1leD4 iVdsYTZQyeOOGab9S0CdjGi9HmDqJeR5QWmYG03Ve691S3qd94N9X8lWc6RCMqNu 4XuKZ/KUMsbW+rzDZyvT6z3mJ2ZV24pzkSV25GZv6zV2h9yyxBdGArmDvhpUQ6rR k7Pn1xQulD0q91CyG5BRDILoQnaXzmmD9aZrOW6HpuQ4O2Ym3LyxmSs7RnwwOfo4 LUKaOARPQbZutTOB3PXGP7OaOVYVTrsk9kweG90Le9AEBASE3dFB2NWza8nEfUkg 4c7bI2sKKwTZajmQ5hR67MHtnCYvK01tqQQqcoiBipoIUhw5aWY4Cb4CmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPksk2G3mAZ4q6UIodndEGw+Sd+MB8GA1UdIwQY MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqKVVtMo XTYCJgQKSeAeBeSnEnTIh1ZeGJWKIZ9heHDrn0EIxFzKL5ksSi632r2jS2+NbB1F G4GRDbjKW7j8owHIhap3k50Tvo/XBaP2bu7eCQigbjhwCCTxUADqt87eTQ/QUk/f J7sD+WCYUQGjrgnHbrxYHUkcO6BfyWxfsvVOn2g+51vbetUaQa5V9ulPgckUHWKW XSfPSC6HhwdlQrSVGk0QhX+VumOp8nWkwlnrxah6xrE8ZxgnBZ8puGMnBLkduBvC tDkeNSN8q0U7YQNB6VuOeMFczNflgtuOyHQxjuqHGorzUBbtquJuhXGivwZS1PtW 4Rj1pS49Qgr4Ow== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:15 2025 by rpki-client