This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json) Hash identifier: 6eNuAhG/0suGmnT84PsXozAZ41OTdIxS4rzdop/fUDk= Subject key identifier: F3:4B:28:6E:7D:B3:00:72:D5:10:EC:E6:A5:EA:FF:C4:0F:60:20:E4 Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Certificate serial: 019B3D232929D7455FC029534BEDE6FEE8B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft Manifest number: 0CFD Signing time: Sat 20 Dec 2025 19:01:12 +0000 Manifest this update: Sat 20 Dec 2025 19:01:12 +0000 Manifest next update: Sun 21 Dec 2025 19:01:12 +0000 Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: 61RONWHM751bQuy5WvE3oRTE51PAXv4n+XTVZpJDMuQ=) 2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:29:29:d7:45:5f:c0:29:53:4b:ed:e6:fe:e8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Validity Not Before: Dec 20 19:01:12 2025 GMT Not After : Dec 21 19:01:12 2025 GMT Subject: CN=f34b286e7db30072d510ece6a5eaffc40f6020e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3d:a1:b5:61:89:32:13:83:4b:78:a2:15:e2: 87:64:bc:0a:f7:d1:55:b2:47:c6:cc:0c:d6:3a:92: 37:29:f8:88:74:23:56:dc:ea:f0:40:ec:65:3e:e7: d3:40:35:e5:6c:3b:e2:57:c7:b0:2c:2e:72:5c:35: f6:04:db:f0:7b:1e:72:44:83:4c:b2:2e:bc:a9:86: 1a:dd:76:12:38:c2:24:d0:05:a9:2f:2c:1f:95:61: 18:66:02:68:51:b9:42:f2:aa:85:28:29:d6:54:25: 2f:61:1b:05:81:b3:8d:39:d6:57:b5:1a:4d:b8:01: 53:51:11:c0:e2:c2:ef:91:0a:17:43:89:29:e8:08: d5:5c:60:6b:db:cb:e3:26:81:57:0b:37:35:b3:5d: 98:c4:b6:89:59:be:54:20:dc:12:ea:a0:34:1b:f1: 41:29:08:63:d2:1d:74:23:c9:8b:43:6d:82:d9:a1: a5:d3:9d:38:04:43:65:b5:3e:16:db:e8:ea:68:2d: fc:9e:6a:59:83:4a:95:60:c3:bf:a9:cb:b7:21:e9: c2:e1:43:41:b3:7f:cf:68:8c:34:73:ef:df:fd:17: ff:61:9b:99:fc:18:51:c6:7a:ba:79:a4:39:c2:a9: 91:df:df:ed:04:15:c9:08:9b:a3:54:b3:9f:e6:47: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:28:6E:7D:B3:00:72:D5:10:EC:E6:A5:EA:FF:C4:0F:60:20:E4 X509v3 Authority Key Identifier: keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f3:fb:8e:1b:28:88:cf:0b:54:32:96:9e:ee:09:fd:76:55: 25:3f:62:fd:86:26:b7:46:d9:93:16:c2:77:3b:de:a6:a7:43: a8:ca:e9:e1:51:8c:4b:20:e1:5f:05:a3:af:f7:4d:78:a9:27: 49:fa:34:66:c3:9f:ed:dc:01:83:ee:64:c3:97:c8:57:ee:0c: 30:3e:4f:b0:0a:a7:22:39:4e:1f:68:74:d0:fb:47:68:8f:96: 2d:42:7f:87:41:e3:f4:a2:44:2b:63:3c:23:a0:a9:ea:66:73: 4d:c1:eb:9e:fb:76:8f:55:90:66:75:59:09:5b:a9:73:57:11: 6b:8f:cb:ae:1c:ac:07:d9:0d:14:e8:b3:99:43:30:16:89:67: 14:fb:5b:2a:6a:d5:34:45:e0:22:26:21:e0:ad:b2:42:04:ac: 10:a2:e0:72:e4:ef:2d:16:22:8b:3b:74:c4:0e:67:83:f6:c2: ba:18:fd:09:ec:90:4f:bb:32:ab:ce:b3:18:a9:68:2b:d6:15: 95:12:f3:6e:ab:bc:a8:12:b9:1b:8a:41:94:2a:db:ec:a0:0f: fb:9e:84:3f:65:92:42:6c:54:eb:b9:b3:8a:0b:3e:66:cc:40: 05:8c:6b:82:4f:5c:85:51:2e:bf:33:a8:a8:84:23:24:ca:e3: 82:0e:8e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iykp10VfwClTS+3m/uixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2 MDE3Y2UwHhcNMjUxMjIwMTkwMTEyWhcNMjUxMjIxMTkwMTEyWjAzMTEwLwYDVQQD EyhmMzRiMjg2ZTdkYjMwMDcyZDUxMGVjZTZhNWVhZmZjNDBmNjAyMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT2htWGJMhODS3iiFeKHZLwK99FV skfGzAzWOpI3KfiIdCNW3OrwQOxlPufTQDXlbDviV8ewLC5yXDX2BNvwex5yRINM si68qYYa3XYSOMIk0AWpLywflWEYZgJoUblC8qqFKCnWVCUvYRsFgbONOdZXtRpN uAFTURHA4sLvkQoXQ4kp6AjVXGBr28vjJoFXCzc1s12YxLaJWb5UINwS6qA0G/FB KQhj0h10I8mLQ22C2aGl0504BENltT4W2+jqaC38nmpZg0qVYMO/qcu3IenC4UNB s3/PaIw0c+/f/Rf/YZuZ/BhRxnq6eaQ5wqmR39/tBBXJCJujVLOf5kfsEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNLKG59swBy1RDs5qXq/8QPYCDkMB8GA1UdIwQY MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvP7jhso iM8LVDKWnu4J/XZVJT9i/YYmt0bZkxbCdzvepqdDqMrp4VGMSyDhXwWjr/dNeKkn Sfo0ZsOf7dwBg+5kw5fIV+4MMD5PsAqnIjlOH2h00PtHaI+WLUJ/h0Hj9KJEK2M8 I6Cp6mZzTcHrnvt2j1WQZnVZCVupc1cRa4/LrhysB9kNFOizmUMwFolnFPtbKmrV NEXgIiYh4K2yQgSsEKLgcuTvLRYiizt0xA5ng/bCuhj9CeyQT7syq86zGKloK9YV lRLzbqu8qBK5G4pBlCrb7KAP+56EP2WSQmxU67mzigs+ZsxABYxrgk9chVEuvzOo qIQjJMrjgg6Odw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:48:12 2025 by rpki-client