This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json) Hash identifier: nBW7kV9PCBCHlyzQd02xLiGVb6ReFKjggM4j7GlYz6w= Subject key identifier: 08:5F:3E:70:54:FB:D7:4E:10:80:E5:32:A8:DA:F3:99:89:5F:02:F3 Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B3A8FBD3715DDB8F5823FF2B10BCB5BE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft Manifest number: 079A Signing time: Sat 20 Dec 2025 07:00:57 +0000 Manifest this update: Sat 20 Dec 2025 07:00:57 +0000 Manifest next update: Sun 21 Dec 2025 07:00:57 +0000 Files and hashes: 1: 3h99B3B928ItdGjcKoHk10e2CY4.roa (hash: QICYNqcrZ0Xnzlwywop1Rva0m6JoHs3pi7Cn/R4enXk=) 2: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=) 3: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=) 4: MSnKv-V5f4ZhMSBkUowC4eAKwnc.roa (hash: GNpg734fprSqUaaC2JbrcVA6y9oknxkgNnhf9ZX5sJE=) 5: MmkRluHTTNv9acWxYHJ3_GpMc5Q.roa (hash: V0Un6MJpun4HqmbH7gvdiyIo+DrhsdEBvML0fOcMAjk=) 6: NxDioS42mqzdQfLMxyB7X-GlaRk.roa (hash: C3TTQFAalnMmHYCoE9DHkCJCL/yOjyVdjjZKsCzOrhY=) 7: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: LoxzadoeQ0ECiJT+h2rAkYmVg3k3rLzr10vsg9OfBlI=) 8: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=) 9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=) 10: t7lRs-9GNEEUVyPdiDfj6SJj5Hk.roa (hash: UElx7JeEKjaWAbLSYGiotOqsYT+oYdMJgbKOha4XBtc=) 11: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=) 12: wtrSWFMmc-qHzEWvf9Cv1EUBcdg.roa (hash: NkI4eJ+m8t9g8zspdgWjN+brolZtyYl6e2q5ivq3HCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:bd:37:15:dd:b8:f5:82:3f:f2:b1:0b:cb:5b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Dec 20 07:00:57 2025 GMT Not After : Dec 21 07:00:57 2025 GMT Subject: CN=085f3e7054fbd74e1080e532a8daf399895f02f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:9a:9f:d0:d0:aa:8d:13:ad:0d:a2:10:ce: 76:6f:e1:1c:af:c7:8c:ca:ee:8e:19:88:bb:47:96: e4:ad:81:90:7c:17:94:81:c8:60:7f:ad:7c:07:36: 34:5f:92:55:cf:74:e7:da:9d:8f:f9:55:5d:7f:93: 3d:50:29:1e:2d:82:b9:1e:a1:df:d4:c8:00:15:a2: 48:24:27:26:6e:fc:8d:4c:77:57:17:a2:85:22:69: 96:e6:7f:de:05:be:af:44:e3:ea:74:53:77:1d:5e: c9:6f:b3:53:55:df:ef:bc:e9:1f:ac:d7:7a:e1:80: 99:f1:9b:2e:5b:bf:a7:0f:5c:e9:18:6f:9f:d0:dd: 9b:ec:2f:11:ab:e7:7f:ca:dc:d6:90:2c:20:a2:c9: 1d:df:3e:08:e7:f6:23:91:dd:82:ab:95:7c:ba:95: 7a:ba:23:2d:b4:b3:01:ee:50:3c:e2:6d:d0:35:a9: 69:46:25:be:16:55:0b:bd:2c:95:25:bf:06:91:e3: af:ee:8d:3c:34:c3:c3:44:0f:28:6b:08:96:bd:1f: fd:8a:b3:02:84:8d:f5:47:b0:fd:49:0e:61:04:5f: 91:13:2e:60:b9:8d:bf:60:e0:5f:fb:d7:5b:e7:cb: 04:71:28:6a:40:9e:c7:77:ee:8e:47:88:db:f0:04: 07:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5F:3E:70:54:FB:D7:4E:10:80:E5:32:A8:DA:F3:99:89:5F:02:F3 X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ea:56:be:5a:43:8c:11:db:f8:60:a1:6d:f4:87:95:4f:2a: 3d:f4:58:a3:b9:88:42:d3:37:0e:e8:41:a7:95:5d:60:07:86: 27:48:ae:dc:2b:9c:a3:50:cb:1b:27:cb:5b:13:67:05:b0:60: eb:b2:89:af:ed:e0:98:bb:28:a4:e8:18:24:82:ae:ee:ea:5b: ec:96:61:13:96:f4:f8:b2:ab:02:96:d2:b5:b3:2a:bf:3f:ea: 41:7f:8c:9d:0c:b4:a7:dc:da:7f:3c:7e:15:75:24:2a:f2:39: e8:c2:87:72:ae:20:63:bc:33:22:f6:24:ee:17:85:9e:47:32: b5:a7:a0:c1:25:cd:ba:4c:79:1d:d7:96:c8:5a:84:fb:e6:eb: 77:df:d7:60:38:f9:b3:4c:01:36:da:9e:0a:76:16:85:b6:89: bf:68:95:1d:a8:ed:91:7d:58:3c:83:ae:dd:d5:65:45:9f:08: 97:cb:d8:a6:de:2f:e2:4a:bc:20:ba:ad:50:5a:e3:4b:42:f8: 77:36:79:28:79:24:bd:8d:7a:41:c6:b1:e5:42:5a:5f:5a:31: a5:55:b9:09:f4:0b:07:4e:98:3b:6a:89:b7:94:dd:3b:60:9a: 7e:17:9e:c0:4a:c7:f5:e7:f9:02:fa:8e:b5:a1:6d:35:22:54: 9d:00:ea:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j703Fd249YI/8rELy1vnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjUxMjIwMDcwMDU3WhcNMjUxMjIxMDcwMDU3WjAzMTEwLwYDVQQD EygwODVmM2U3MDU0ZmJkNzRlMTA4MGU1MzJhOGRhZjM5OTg5NWYwMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BGan9DQqo0TrQ2iEM52b+Ecr8eM yu6OGYi7R5bkrYGQfBeUgchgf618BzY0X5JVz3Tn2p2P+VVdf5M9UCkeLYK5HqHf 1MgAFaJIJCcmbvyNTHdXF6KFImmW5n/eBb6vROPqdFN3HV7Jb7NTVd/vvOkfrNd6 4YCZ8ZsuW7+nD1zpGG+f0N2b7C8Rq+d/ytzWkCwgoskd3z4I5/Yjkd2Cq5V8upV6 uiMttLMB7lA84m3QNalpRiW+FlULvSyVJb8GkeOv7o08NMPDRA8oawiWvR/9irMC hI31R7D9SQ5hBF+REy5guY2/YOBf+9db58sEcShqQJ7Hd+6OR4jb8AQHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhfPnBU+9dOEIDlMqja85mJXwLzMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOpWvlpD jBHb+GChbfSHlU8qPfRYo7mIQtM3DuhBp5VdYAeGJ0iu3Cuco1DLGyfLWxNnBbBg 67KJr+3gmLsopOgYJIKu7upb7JZhE5b0+LKrApbStbMqvz/qQX+MnQy0p9zafzx+ FXUkKvI56MKHcq4gY7wzIvYk7heFnkcytaegwSXNukx5HdeWyFqE++brd9/XYDj5 s0wBNtqeCnYWhbaJv2iVHajtkX1YPIOu3dVlRZ8Il8vYpt4v4kq8ILqtUFrjS0L4 dzZ5KHkkvY16Qcax5UJaX1oxpVW5CfQLB06YO2qJt5TdO2CafheewErH9ef5AvqO taFtNSJUnQDqAg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:03:27 2025 by rpki-client