This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json) Hash identifier: L8b6H01ef4Yb26gwQM//H5U4wHTHfzP+g8NWiI3ubN4= Subject key identifier: ED:2D:EF:F3:DC:D9:49:93:FA:E4:1C:B7:56:59:A5:2B:ED:29:25:DF Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Certificate serial: 019B3AC6F8DC965AF045A96566E28B9BCD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft Manifest number: 080E Signing time: Sat 20 Dec 2025 08:01:16 +0000 Manifest this update: Sat 20 Dec 2025 08:01:16 +0000 Manifest next update: Sun 21 Dec 2025 08:01:16 +0000 Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=) 2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: L1LlU/1GVnzyABcGK9SJhqsJ818C94yJW5Gz3bBr0oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f8:dc:96:5a:f0:45:a9:65:66:e2:8b:9b:cd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0 Validity Not Before: Dec 20 08:01:16 2025 GMT Not After : Dec 21 08:01:16 2025 GMT Subject: CN=ed2deff3dcd94993fae41cb75659a52bed2925df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4f:7f:5b:26:17:1c:78:69:04:94:18:0a:1b: c5:18:99:52:c7:ae:b3:31:37:b0:d7:03:fc:8c:95: 1f:00:19:bf:71:a4:df:ce:d5:a4:f7:cb:07:c4:d1: e1:e7:30:a7:a1:41:69:db:44:3e:0c:f8:c8:72:4f: 8e:39:03:73:24:87:7a:1e:34:2a:d8:57:31:10:c3: 34:ad:8e:33:e9:b0:32:03:7e:7e:05:fe:d6:9c:be: 1d:6e:e3:97:0d:11:1e:65:be:9b:e1:93:24:4c:11: c2:d2:c6:28:7d:e7:2d:99:a9:69:a2:16:ce:bb:2c: 26:c2:30:b3:ff:c6:b5:c0:6d:32:20:a6:62:bd:ba: a5:23:b9:4e:96:93:76:35:60:2b:fa:84:2e:0e:3b: 01:f4:24:e5:9c:df:1a:a7:50:97:cf:e2:09:22:f9: 10:24:36:0b:3f:7e:14:2e:bc:ae:a2:fe:75:40:ed: 4f:13:b1:45:78:40:5a:38:cb:03:df:58:56:3b:6c: 3a:60:e7:a1:10:5f:1f:d9:bc:ad:04:13:50:09:dd: af:82:66:8d:72:ce:4e:d9:96:76:71:a2:14:91:3f: e5:f3:fc:6d:ba:79:9f:af:a9:05:3c:c8:58:17:a0: 50:dc:41:19:9f:00:07:e7:71:c3:01:b1:32:7b:96: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2D:EF:F3:DC:D9:49:93:FA:E4:1C:B7:56:59:A5:2B:ED:29:25:DF X509v3 Authority Key Identifier: keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:65:f3:eb:4c:8e:0a:2d:ce:56:a5:0c:7d:43:21:0e:de:11: 23:8e:2f:f5:b9:f9:aa:99:8f:6f:34:4a:a8:94:7b:a8:53:27: 02:f9:3a:25:ae:a2:b0:a0:40:72:15:b8:96:11:db:8c:90:8e: 16:1f:5e:f6:57:e4:67:08:80:58:0e:0d:f1:56:e7:41:8d:fc: 77:fd:01:7e:09:01:2f:06:f9:e7:2e:7a:da:f9:e9:94:b2:d4: d1:10:7b:ed:c2:5d:54:39:21:5e:a0:1e:b8:26:2c:5c:5b:c0: 75:7b:d1:f3:d8:49:f3:d5:11:e8:46:24:65:f4:e0:d6:a5:61: 81:50:9d:1c:60:ee:01:d4:e9:d6:f4:be:98:d3:0e:c1:88:21: 0c:b3:5b:a9:e9:f5:5c:df:73:b4:c0:23:74:ff:ad:96:e4:5d: 5d:4b:7d:0d:0c:6c:6b:4c:0d:22:ea:94:41:f6:ed:87:a2:c2: a9:78:62:8c:c5:c7:47:2e:9d:41:6f:2a:91:db:65:0b:a1:1e: 31:98:0f:5d:a3:25:11:07:2e:e8:b1:35:5a:df:61:66:0b:c8: 31:be:a8:bd:52:8c:fa:96:31:e2:3c:f9:2d:27:33:d8:76:c0: 08:a5:85:09:f2:3e:80:a8:8a:52:3f:d5:30:d1:a3:c8:98:33: 7c:5b:38:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvjcllrwRallZuKLm82eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw NTMyYjAwHhcNMjUxMjIwMDgwMTE2WhcNMjUxMjIxMDgwMTE2WjAzMTEwLwYDVQQD EyhlZDJkZWZmM2RjZDk0OTkzZmFlNDFjYjc1NjU5YTUyYmVkMjkyNWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE9/WyYXHHhpBJQYChvFGJlSx66z MTew1wP8jJUfABm/caTfztWk98sHxNHh5zCnoUFp20Q+DPjIck+OOQNzJId6HjQq 2FcxEMM0rY4z6bAyA35+Bf7WnL4dbuOXDREeZb6b4ZMkTBHC0sYofectmalpohbO uywmwjCz/8a1wG0yIKZivbqlI7lOlpN2NWAr+oQuDjsB9CTlnN8ap1CXz+IJIvkQ JDYLP34ULryuov51QO1PE7FFeEBaOMsD31hWO2w6YOehEF8f2bytBBNQCd2vgmaN cs5O2ZZ2caIUkT/l8/xtunmfr6kFPMhYF6BQ3EEZnwAH53HDAbEye5apAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0t7/Pc2UmT+uQct1ZZpSvtKSXfMB8GA1UdIwQY MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWXz60yO Ci3OVqUMfUMhDt4RI44v9bn5qpmPbzRKqJR7qFMnAvk6Ja6isKBAchW4lhHbjJCO Fh9e9lfkZwiAWA4N8VbnQY38d/0BfgkBLwb55y562vnplLLU0RB77cJdVDkhXqAe uCYsXFvAdXvR89hJ89UR6EYkZfTg1qVhgVCdHGDuAdTp1vS+mNMOwYghDLNbqen1 XN9ztMAjdP+tluRdXUt9DQxsa0wNIuqUQfbth6LCqXhijMXHRy6dQW8qkdtlC6Ee MZgPXaMlEQcu6LE1Wt9hZgvIMb6ovVKM+pYx4jz5LScz2HbACKWFCfI+gKiKUj/V MNGjyJgzfFs4TQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:48:51 2025 by rpki-client