This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json) Hash identifier: SKLMHJ7PGHeajQNso+vIhRCoXw7C6WaZASxboTOmoHo= Subject key identifier: D0:85:01:B8:09:9F:F2:57:86:B6:50:AF:D9:96:7B:FA:E5:BE:12:1B Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce Certificate serial: 019B2D0BBE4E417778FEC4F23C902F1C3A4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft Manifest number: 1092 Signing time: Wed 17 Dec 2025 16:01:42 +0000 Manifest this update: Wed 17 Dec 2025 16:01:42 +0000 Manifest next update: Thu 18 Dec 2025 16:01:42 +0000 Files and hashes: 1: H0csw70tg1YLoA3vUUu_9FfpWeo.roa (hash: 96mhdkJC387WSq+UOyuqsQUoHOrBk60wXsPffHfNcYE=) 2: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: vPSzYVTL9LXqoXN4qmbhANhkIMP2Ydi5pexZVZacSf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:be:4e:41:77:78:fe:c4:f2:3c:90:2f:1c:3a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce Validity Not Before: Dec 17 16:01:42 2025 GMT Not After : Dec 18 16:01:42 2025 GMT Subject: CN=d08501b8099ff25786b650afd9967bfae5be121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8b:7c:48:f9:da:6f:9d:2e:71:2b:16:d8:d2: 29:c7:88:95:01:3b:7b:77:a4:d3:7b:36:e0:e0:31: 44:d6:04:2e:ed:03:d1:6f:49:dd:34:3e:c6:19:01: 69:d5:2a:92:3d:39:85:3c:2b:12:dc:10:6f:71:70: 0a:01:06:34:c7:f9:71:a8:48:68:e0:07:61:0c:8a: d5:10:0f:15:e8:64:40:46:69:2e:05:c8:d7:95:5c: 91:8e:ba:13:8b:8c:64:3d:5c:d0:16:86:1d:9b:b5: 79:a8:d7:b0:a6:d0:5b:16:86:0d:5a:2b:c0:d7:6f: a9:0d:a4:d4:e3:dd:17:61:74:3b:78:f6:68:59:6e: 30:74:7e:15:0d:4a:fd:54:47:a7:4e:c8:bc:6e:57: 7f:78:9a:09:2d:6d:4f:f0:4b:0f:29:0f:d0:54:23: 1a:94:e8:85:ad:60:98:db:d8:db:50:ce:71:df:ad: ae:03:9f:71:5d:41:d6:a4:97:43:8b:b6:d0:50:9a: 26:70:52:65:14:53:ba:02:76:27:9d:bb:77:54:53: 9a:a7:cd:8e:db:a3:1b:39:d2:64:b4:d5:60:03:7a: 53:e0:b1:b1:8d:c1:1f:cf:40:98:a9:e1:4f:7a:4a: 3a:f3:a8:c8:8d:26:dd:ac:17:56:af:8b:37:fa:5b: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:85:01:B8:09:9F:F2:57:86:B6:50:AF:D9:96:7B:FA:E5:BE:12:1B X509v3 Authority Key Identifier: keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:84:fe:f8:c7:74:6e:72:e0:7f:57:d6:8a:f7:34:be:01:74: e8:9e:6b:43:88:bc:ec:6c:c3:2b:4f:21:75:b5:a2:c8:04:12: d0:45:f5:c2:c7:3d:b5:4f:c9:e5:da:5f:4f:70:6e:33:d8:e2: bb:e1:ba:72:41:85:cc:ba:e1:ec:ea:be:30:2e:8d:64:85:2e: 67:1b:4c:24:a1:0e:b3:12:b8:03:0a:70:f7:5e:c1:e5:bb:fd: 64:08:bb:0e:99:ae:1e:d9:23:6d:5b:ea:9c:53:e3:15:72:e8: 58:f3:7d:9d:6c:b6:e9:36:6c:46:6e:ca:87:bc:b2:bf:bc:0c: 3b:b8:1f:f0:2f:62:96:f5:d1:fc:18:fb:2d:1a:88:9b:db:59: 11:e5:49:79:4f:ad:9c:bf:15:4e:56:09:ee:7b:4d:48:6b:72: 47:53:d7:c7:a3:fa:81:a7:3b:f0:a1:10:4a:c0:64:7f:ac:d3: 28:a2:5b:7b:a1:85:de:2d:5e:1c:af:a7:8c:b5:0b:25:9c:14: a6:01:ff:60:d7:ee:59:b8:85:f1:46:a8:28:1a:b8:75:e7:bc: d8:49:f2:7e:68:da:68:41:23:f8:a0:90:fd:1a:48:31:f7:9f: ac:80:a3:db:cd:62:dc:5f:be:b4:9d:9b:13:50:a1:e5:63:d4: b5:7b:5c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC75OQXd4/sTyPJAvHDpKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzVlODA3ZDM0OWQzMTU2NGY5ZmQ1NDYxMzhlMzU5OGUy MDA3Y2UwHhcNMjUxMjE3MTYwMTQyWhcNMjUxMjE4MTYwMTQyWjAzMTEwLwYDVQQD EyhkMDg1MDFiODA5OWZmMjU3ODZiNjUwYWZkOTk2N2JmYWU1YmUxMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYt8SPnab50ucSsW2NIpx4iVATt7 d6TTezbg4DFE1gQu7QPRb0ndND7GGQFp1SqSPTmFPCsS3BBvcXAKAQY0x/lxqEho 4AdhDIrVEA8V6GRARmkuBcjXlVyRjroTi4xkPVzQFoYdm7V5qNewptBbFoYNWivA 12+pDaTU490XYXQ7ePZoWW4wdH4VDUr9VEenTsi8bld/eJoJLW1P8EsPKQ/QVCMa lOiFrWCY29jbUM5x362uA59xXUHWpJdDi7bQUJomcFJlFFO6AnYnnbt3VFOap82O 26MbOdJktNVgA3pT4LGxjcEfz0CYqeFPeko686jIjSbdrBdWr4s3+luBqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCFAbgJn/JXhrZQr9mWe/rlvhIbMB8GA1UdIwQY MBaAFEc16AfTSdMVZPn9VGE441mOIAfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUt NWIxYjVkOTk0MGMxLzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUtNWIxYjVkOTk0MGMx LzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4T++Md0 bnLgf1fWivc0vgF06J5rQ4i87GzDK08hdbWiyAQS0EX1wsc9tU/J5dpfT3BuM9ji u+G6ckGFzLrh7Oq+MC6NZIUuZxtMJKEOsxK4Awpw917B5bv9ZAi7DpmuHtkjbVvq nFPjFXLoWPN9nWy26TZsRm7Kh7yyv7wMO7gf8C9ilvXR/Bj7LRqIm9tZEeVJeU+t nL8VTlYJ7ntNSGtyR1PXx6P6gac78KEQSsBkf6zTKKJbe6GF3i1eHK+njLULJZwU pgH/YNfuWbiF8UaoKBq4dee82EnyfmjaaEEj+KCQ/RpIMfefrICj281i3F++tJ2b E1Ch5WPUtXtcjA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:13:10 2025 by rpki-client