This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft File: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json) Hash identifier: dLxecnNrubjIj6SDatoatuxPVRTFn4XEEWZDlrfRkXg= Subject key identifier: 9B:85:36:76:73:F7:B0:B7:8A:A7:9D:EF:ED:D9:EA:60:C5:23:E1:6C Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Certificate serial: 019B4E84BD5CA7ACA82A4B44A794762AFF03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft Manifest number: 0D06 Signing time: Wed 24 Dec 2025 04:01:20 +0000 Manifest this update: Wed 24 Dec 2025 04:01:20 +0000 Manifest next update: Thu 25 Dec 2025 04:01:20 +0000 Files and hashes: 1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: Mkc21CImWKziFebXxiD8KMCZgDIRT9bHr8wZa/aB5xE=) 2: It_RR5RDy-OVRDGDczZ_wIsJmfg.roa (hash: Xudxun2iPicL1+7TPznqWQiuqD3U5fvxLgSLN+SZ2rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:bd:5c:a7:ac:a8:2a:4b:44:a7:94:76:2a:ff:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce Validity Not Before: Dec 24 04:01:20 2025 GMT Not After : Dec 25 04:01:20 2025 GMT Subject: CN=9b85367673f7b0b78aa79defedd9ea60c523e16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c7:01:c5:d2:03:4b:bf:7b:4b:08:76:83:f5: 10:a6:20:00:52:a7:ad:06:67:06:03:01:fb:de:a0: a8:d7:6a:94:50:90:92:c0:c0:97:a3:63:e1:94:14: 1b:a5:af:0b:c8:c6:1c:e0:21:07:8e:71:38:74:64: 00:7c:0a:32:5f:7e:29:8a:47:ba:de:69:c5:19:0d: 47:04:ba:b5:bc:79:3a:96:21:06:b6:c6:b7:55:98: 77:b5:a4:f9:de:e2:84:78:5b:99:04:b7:bc:e9:d1: 3a:69:fe:c9:6e:ee:ed:13:9a:74:73:da:00:80:f9: aa:fb:2c:90:55:93:91:dd:40:6b:b2:ab:be:f2:a3: c9:c9:73:f2:b3:01:54:67:d0:4a:d2:fe:20:25:e2: b5:e3:56:b8:b6:6d:76:34:5b:4f:42:e9:dc:7d:3a: 01:e7:ef:b3:6c:63:d7:a0:7d:25:32:4b:10:37:f4: 34:f3:be:b6:f3:db:04:e8:9f:ac:d5:5a:b1:4a:c9: 45:33:26:67:e9:bf:93:5d:0d:7f:89:af:9f:75:e3: c0:98:f5:1d:e6:ca:b3:d3:18:19:f8:2c:62:ac:10: a9:46:cb:c4:14:cc:77:8f:53:37:dc:d9:78:d8:1a: 55:ae:94:86:29:f6:e1:59:3c:a5:d3:ef:7f:0e:d9: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:36:76:73:F7:B0:B7:8A:A7:9D:EF:ED:D9:EA:60:C5:23:E1:6C X509v3 Authority Key Identifier: keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:39:d6:82:a8:e0:24:dc:31:de:72:5f:16:fc:7a:71:fb:7d: 7e:f5:d5:74:05:01:b9:41:0e:6d:5f:9f:c9:58:28:17:10:ea: c7:00:d5:eb:cd:38:59:51:2c:aa:ef:45:b4:6b:f3:01:98:62: ac:7c:8f:77:f7:fc:3c:96:b9:62:b2:d9:5d:ad:4f:8e:c1:17: b0:0a:05:4f:f4:fd:5b:c3:c2:31:22:4a:d7:0b:b9:d6:57:5a: 45:cd:4d:11:43:7e:7b:04:e1:2c:7a:4c:66:df:5a:e1:9b:c6: 35:4b:56:1c:e4:20:f1:3b:e7:47:79:21:73:01:c2:76:a3:c6: de:26:70:21:82:09:fe:6d:00:6e:38:c3:29:b4:ac:93:c2:74: a7:9b:3e:7a:83:41:18:03:11:ad:29:f3:0a:c7:c4:2b:ff:9d: 24:b0:5b:50:bc:db:73:e2:5e:8e:43:13:d6:75:9f:01:df:9b: a1:25:cf:fb:1b:2a:c2:e3:49:84:94:a9:89:3d:9d:cc:76:06: ee:00:0c:0b:33:e9:a3:4a:29:bd:c1:2a:6a:3a:1a:b0:0e:0d: ab:33:e1:1b:28:6c:a6:4e:4a:6c:ad:07:ac:0c:61:dc:5e:fe: cd:ef:45:0f:cf:92:04:1c:35:29:84:ee:55:83:58:84:71:63: 69:9d:44:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhL1cp6yoKktEp5R2Kv8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2Q2YjU1OWQzNmM0MTMwNzY5MmE3YjBmYjNlZjc3YWE2 MDE3Y2UwHhcNMjUxMjI0MDQwMTIwWhcNMjUxMjI1MDQwMTIwWjAzMTEwLwYDVQQD Eyg5Yjg1MzY3NjczZjdiMGI3OGFhNzlkZWZlZGQ5ZWE2MGM1MjNlMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMcBxdIDS797Swh2g/UQpiAAUqet BmcGAwH73qCo12qUUJCSwMCXo2PhlBQbpa8LyMYc4CEHjnE4dGQAfAoyX34pike6 3mnFGQ1HBLq1vHk6liEGtsa3VZh3taT53uKEeFuZBLe86dE6af7Jbu7tE5p0c9oA gPmq+yyQVZOR3UBrsqu+8qPJyXPyswFUZ9BK0v4gJeK141a4tm12NFtPQuncfToB 5++zbGPXoH0lMksQN/Q0876289sE6J+s1VqxSslFMyZn6b+TXQ1/ia+fdePAmPUd 5sqz0xgZ+CxirBCpRsvEFMx3j1M33Nl42BpVrpSGKfbhWTyl0+9/DtmrPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuFNnZz97C3iqed7+3Z6mDFI+FsMB8GA1UdIwQY MBaAFNM9a1WdNsQTB2kqew+z73eqYBfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYt NWUzYjZlYTVhN2VlLzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jNjFmYTItYmIzZS00OTU1LWFiNWYtNWUzYjZlYTVhN2Vl LzEvMHoxclZaMDJ4Qk1IYVNwN0Q3UHZkNnBnRjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTnWgqjg JNwx3nJfFvx6cft9fvXVdAUBuUEObV+fyVgoFxDqxwDV6804WVEsqu9FtGvzAZhi rHyPd/f8PJa5YrLZXa1PjsEXsAoFT/T9W8PCMSJK1wu51ldaRc1NEUN+ewThLHpM Zt9a4ZvGNUtWHOQg8TvnR3khcwHCdqPG3iZwIYIJ/m0AbjjDKbSsk8J0p5s+eoNB GAMRrSnzCsfEK/+dJLBbULzbc+JejkMT1nWfAd+boSXP+xsqwuNJhJSpiT2dzHYG 7gAMCzPpo0opvcEqajoasA4NqzPhGyhspk5KbK0HrAxh3F7+ze9FD8+SBBw1KYTu VYNYhHFjaZ1EmA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:36 2025 by rpki-client