This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json) Hash identifier: bAysVdHxK0fSBtdM91iUWyh2lDvmrLluHJrF1q49Je8= Subject key identifier: 2B:13:B4:2F:0C:3B:A0:A6:DB:31:2B:9E:A9:86:56:AC:55:76:14:FC Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a Certificate serial: 019B435BC8C1E0C4273EBDEC58917ED52B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft Manifest number: 0677 Signing time: Mon 22 Dec 2025 00:00:47 +0000 Manifest this update: Mon 22 Dec 2025 00:00:47 +0000 Manifest next update: Tue 23 Dec 2025 00:00:47 +0000 Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: jrc1irJjSuFWShN1lFYRaW81Y+ngh+VnsibYw58OoUs=) 2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=) 3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:c8:c1:e0:c4:27:3e:bd:ec:58:91:7e:d5:2b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a Validity Not Before: Dec 22 00:00:47 2025 GMT Not After : Dec 23 00:00:47 2025 GMT Subject: CN=2b13b42f0c3ba0a6db312b9ea98656ac557614fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:06:a6:56:97:f1:e7:fc:a7:e9:57:a6:8b: 59:33:d8:6b:6a:dc:35:d6:60:c7:d5:24:46:61:d6: 5e:02:a1:53:6f:75:38:68:10:da:7c:0f:95:87:be: 89:64:06:27:dd:8f:fc:87:0d:b5:78:df:63:82:04: cb:02:0b:0f:9f:d7:b5:14:72:41:87:75:b4:de:81: 69:d7:9f:33:5c:bd:02:3c:2d:91:42:a9:0d:b7:d2: ec:3b:81:98:8f:0f:ae:ae:6f:fd:ee:86:52:d6:46: ac:42:aa:89:eb:78:5a:33:22:3c:e4:ea:b9:25:d6: 4b:1a:de:da:f6:8d:96:55:bc:ac:8c:80:62:3b:0e: a2:ad:a3:8d:19:d1:17:69:9e:d5:e6:82:21:6b:ac: 96:2e:51:f4:ef:0c:e7:70:af:87:78:51:e9:5d:a1: 47:88:80:db:51:f8:7d:f7:94:54:78:c3:f8:ae:f6: f6:68:96:bd:ec:6b:33:ac:09:de:89:58:37:8d:5e: 4e:c7:f2:e3:4c:e9:d5:91:b7:f1:92:85:a4:78:08: ea:a6:8d:11:0c:5e:0f:9a:ac:94:0e:69:d6:fe:00: b6:a2:aa:db:91:1c:d2:04:3e:20:03:b3:90:78:b9: 60:e9:60:a1:f4:85:65:34:b8:73:3f:41:aa:d2:52: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:13:B4:2F:0C:3B:A0:A6:DB:31:2B:9E:A9:86:56:AC:55:76:14:FC X509v3 Authority Key Identifier: keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b6:91:f9:32:e0:2d:af:f5:a7:1e:72:af:ea:bc:63:62:19: b0:67:aa:26:8c:a9:aa:76:bd:62:6d:24:72:50:ad:4c:f0:ed: 3e:e6:ce:38:14:94:6e:85:70:77:41:e7:7c:06:0c:97:ba:a9: 1f:2c:86:47:0c:37:47:88:c4:f6:bf:83:73:d6:97:78:4d:97: 87:57:ba:5e:dd:8b:16:c5:c4:4c:cb:45:31:b8:bc:e1:d8:f4: ad:25:e7:05:9d:bc:42:1b:6d:13:82:2a:94:32:ac:f9:0a:20: 97:78:7d:ce:33:e6:37:ee:5a:37:4a:cc:d6:28:2d:56:a4:21: 73:13:80:db:ea:da:59:af:bc:d9:42:a5:55:3b:09:52:17:c5: 77:3d:9c:c0:39:ef:b2:c9:f6:1c:27:74:d6:19:26:8d:45:6d: 31:80:00:8a:38:3a:47:5a:d7:4d:58:ca:96:f3:00:23:81:48: 22:01:b2:52:2f:30:49:74:74:66:ef:9f:7e:df:14:3a:55:da: 46:a4:ab:cc:4f:f1:56:39:50:95:5e:1e:6f:ec:9c:2f:c3:7a: 85:b5:07:67:f5:59:98:62:e1:05:eb:70:b5:cd:18:b0:b3:4f: 83:f3:18:fd:5c:63:7e:94:4e:43:fb:04:66:5f:e9:0d:95:a4: 13:de:c9:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8jB4MQnPr3sWJF+1SsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx NWY0NWEwHhcNMjUxMjIyMDAwMDQ3WhcNMjUxMjIzMDAwMDQ3WjAzMTEwLwYDVQQD EygyYjEzYjQyZjBjM2JhMGE2ZGIzMTJiOWVhOTg2NTZhYzU1NzYxNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRcGplaX8ef8p+lXpotZM9hratw1 1mDH1SRGYdZeAqFTb3U4aBDafA+Vh76JZAYn3Y/8hw21eN9jggTLAgsPn9e1FHJB h3W03oFp158zXL0CPC2RQqkNt9LsO4GYjw+urm/97oZS1kasQqqJ63haMyI85Oq5 JdZLGt7a9o2WVbysjIBiOw6iraONGdEXaZ7V5oIha6yWLlH07wzncK+HeFHpXaFH iIDbUfh995RUeMP4rvb2aJa97GszrAneiVg3jV5Ox/LjTOnVkbfxkoWkeAjqpo0R DF4PmqyUDmnW/gC2oqrbkRzSBD4gA7OQeLlg6WCh9IVlNLhzP0Gq0lJGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsTtC8MO6Cm2zErnqmGVqxVdhT8MB8GA1UdIwQY MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7aR+TLg La/1px5yr+q8Y2IZsGeqJoypqna9Ym0kclCtTPDtPubOOBSUboVwd0HnfAYMl7qp HyyGRww3R4jE9r+Dc9aXeE2Xh1e6Xt2LFsXETMtFMbi84dj0rSXnBZ28QhttE4Iq lDKs+Qogl3h9zjPmN+5aN0rM1igtVqQhcxOA2+raWa+82UKlVTsJUhfFdz2cwDnv ssn2HCd01hkmjUVtMYAAijg6R1rXTVjKlvMAI4FIIgGyUi8wSXR0Zu+fft8UOlXa RqSrzE/xVjlQlV4eb+ycL8N6hbUHZ/VZmGLhBetwtc0YsLNPg/MY/VxjfpROQ/sE Zl/pDZWkE97Jsw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:02 2025 by rpki-client