This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft File: RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json) Hash identifier: sigyEkUDzQDF8FoNYR9URDfnjomybR343qmcPPYA8W4= Subject key identifier: 4A:B7:DF:C1:17:D8:84:1B:9A:50:FF:10:3B:25:1E:66:6C:E7:D2:DA Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 Certificate issuer: /CN=468644b92f394caf3667bdb6af3e38699c54f315 Certificate serial: 019B3C7F539D94F0328FC5F64958E1EF2B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft Manifest number: 078F Signing time: Sat 20 Dec 2025 16:02:15 +0000 Manifest this update: Sat 20 Dec 2025 16:02:15 +0000 Manifest next update: Sun 21 Dec 2025 16:02:15 +0000 Files and hashes: 1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: dCv9CT4+fbvZHaa4sfn+MTbOKHcO+0//KnAybhdGDXo=) 2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:53:9d:94:f0:32:8f:c5:f6:49:58:e1:ef:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315 Validity Not Before: Dec 20 16:02:15 2025 GMT Not After : Dec 21 16:02:15 2025 GMT Subject: CN=4ab7dfc117d8841b9a50ff103b251e666ce7d2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5e:00:48:b9:e3:15:31:1a:87:d8:9b:0e:3f: 12:fe:c3:b5:db:eb:ff:52:bc:67:19:54:d5:90:fc: ad:aa:4a:4f:41:22:d5:1e:48:9b:44:11:bc:73:b7: 50:d4:6a:84:91:fc:94:3c:61:1a:ba:cb:6e:80:ab: 29:a4:93:a5:74:83:d0:9d:6c:b7:3f:9e:cc:8f:cc: b5:d4:96:2b:4e:4e:00:d3:08:31:d0:25:be:28:88: d6:1b:70:49:26:ea:c4:a1:18:9a:81:c7:e9:98:4e: 96:38:c9:d9:78:00:ae:29:6c:7e:96:8e:94:1f:fd: dc:d5:41:45:d6:bb:d1:14:1f:33:e6:e6:5c:e3:b7: b8:44:31:59:18:d4:f2:4c:d9:15:28:9e:81:2d:44: ad:d2:c9:86:39:8a:77:fd:05:8c:fb:86:9f:28:03: 40:47:5c:c7:60:fe:f6:30:54:80:04:6e:c9:10:24: d2:0c:22:55:03:ef:7c:13:7a:e6:d5:78:26:62:4b: 7a:c4:67:00:c1:56:26:05:8a:4c:1d:ea:ee:fc:44: 07:33:85:90:ac:84:65:83:40:9f:f0:6b:cd:a0:81: 05:86:85:50:28:a6:10:a8:54:ca:55:2c:c5:dd:71: 9c:ec:c9:e9:b4:28:1a:fc:c7:02:77:da:17:da:f1: 85:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B7:DF:C1:17:D8:84:1B:9A:50:FF:10:3B:25:1E:66:6C:E7:D2:DA X509v3 Authority Key Identifier: keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:39:a2:63:92:43:7a:53:67:33:ae:1c:23:c6:e0:7f:6f:aa: 65:b0:c5:95:2e:d0:ee:4f:f8:89:66:a2:7c:93:29:8f:9e:05: 18:ef:f5:a0:16:a8:0c:ac:67:ac:7d:e6:10:96:c5:cb:df:23: 10:2c:1e:56:5f:7e:ed:24:3e:f4:64:1c:06:b9:67:4b:98:76: 73:ac:76:c5:fc:24:78:9a:57:76:aa:4d:f6:b2:72:97:18:08: e6:7f:86:4d:5e:45:bd:bc:77:ff:69:21:1b:b6:87:f2:73:b3: 9c:2e:97:1e:c1:a7:73:54:57:e8:2d:59:4d:75:a3:1b:da:01: be:95:12:80:e5:93:db:99:20:24:7e:09:63:ca:99:f6:75:a1: 81:da:95:a5:d7:24:16:b3:2d:8f:2b:6a:d1:0f:40:f9:89:b4: 18:83:8e:84:4e:b5:0a:fd:dd:71:0f:63:05:47:61:f3:b1:a7: 55:4b:d0:83:55:78:86:1f:53:77:25:94:b8:5c:5c:fe:fb:64: aa:ae:18:d6:5d:52:6c:47:91:cf:fd:03:5c:7e:0f:64:e7:67: 1f:5c:9e:59:1e:de:7a:97:76:15:7a:4b:a9:21:1e:8f:31:56: 4f:da:7c:53:ce:8d:f1:61:3a:07:b8:b0:34:b7:15:46:29:e1: 01:07:62:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1OdlPAyj8X2SVjh7ysEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODY0NGI5MmYzOTRjYWYzNjY3YmRiNmFmM2UzODY5OWM1 NGYzMTUwHhcNMjUxMjIwMTYwMjE1WhcNMjUxMjIxMTYwMjE1WjAzMTEwLwYDVQQD Eyg0YWI3ZGZjMTE3ZDg4NDFiOWE1MGZmMTAzYjI1MWU2NjZjZTdkMmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F4ASLnjFTEah9ibDj8S/sO12+v/ UrxnGVTVkPytqkpPQSLVHkibRBG8c7dQ1GqEkfyUPGEaustugKsppJOldIPQnWy3 P57Mj8y11JYrTk4A0wgx0CW+KIjWG3BJJurEoRiagcfpmE6WOMnZeACuKWx+lo6U H/3c1UFF1rvRFB8z5uZc47e4RDFZGNTyTNkVKJ6BLUSt0smGOYp3/QWM+4afKANA R1zHYP72MFSABG7JECTSDCJVA+98E3rm1XgmYkt6xGcAwVYmBYpMHeru/EQHM4WQ rIRlg0Cf8GvNoIEFhoVQKKYQqFTKVSzF3XGc7MnptCga/McCd9oX2vGFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEq338EX2IQbmlD/EDslHmZs59LaMB8GA1UdIwQY MBaAFEaGRLkvOUyvNme9tq8+OGmcVPMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYt YTVlMTNiNGZiMTJiLzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wOTE4NDEtMDJmZS00NGRiLWJhMTYtYTVlMTNiNGZiMTJi LzEvUm9aRXVTODVUSzgyWjcyMnJ6NDRhWnhVOHhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzmiY5JD elNnM64cI8bgf2+qZbDFlS7Q7k/4iWaifJMpj54FGO/1oBaoDKxnrH3mEJbFy98j ECweVl9+7SQ+9GQcBrlnS5h2c6x2xfwkeJpXdqpN9rJylxgI5n+GTV5Fvbx3/2kh G7aH8nOznC6XHsGnc1RX6C1ZTXWjG9oBvpUSgOWT25kgJH4JY8qZ9nWhgdqVpdck FrMtjytq0Q9A+Ym0GIOOhE61Cv3dcQ9jBUdh87GnVUvQg1V4hh9TdyWUuFxc/vtk qq4Y1l1SbEeRz/0DXH4PZOdnH1yeWR7eepd2FXpLqSEejzFWT9p8U86N8WE6B7iw NLcVRinhAQdiiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:24:49 2025 by rpki-client