This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json) Hash identifier: Qqf1JoB0giEejwUoqbOgi0YnU1h4+mF639/pTQvz7uI= Subject key identifier: 2A:2F:D5:0A:31:49:AE:67:F7:0C:E1:1E:B2:0A:03:E4:E9:84:00:43 Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9 Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9 Certificate serial: 019B3946BA068F192860FDFE2857B88E9E7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft Manifest number: 0E4C Signing time: Sat 20 Dec 2025 01:01:34 +0000 Manifest this update: Sat 20 Dec 2025 01:01:34 +0000 Manifest next update: Sun 21 Dec 2025 01:01:34 +0000 Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: UT6n/qqIBemVmIP4smSB+HHhMwIRusDJGtyAB5dtGqI=) 2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:ba:06:8f:19:28:60:fd:fe:28:57:b8:8e:9e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9 Validity Not Before: Dec 20 01:01:34 2025 GMT Not After : Dec 21 01:01:34 2025 GMT Subject: CN=2a2fd50a3149ae67f70ce11eb20a03e4e9840043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:f7:76:50:73:2c:1d:f7:a2:06:9c:96:6c: d8:0a:fb:55:98:4b:b0:2b:b2:13:2a:0f:cf:bb:e4: 4e:86:b2:bd:36:ac:c2:0c:1b:ab:48:2f:8c:90:76: c1:50:1e:27:d0:99:43:40:57:3e:5a:5a:a5:cd:4b: dc:0a:3b:14:6f:34:26:0a:02:6e:91:dc:40:6c:55: 7e:92:8d:b7:64:7b:bc:77:3a:40:08:23:ad:32:50: db:8d:2c:b1:bd:6b:cc:72:05:0c:7e:68:46:5b:a3: 83:ca:c4:3a:e6:77:50:86:b7:7a:a5:c4:de:f4:de: 35:7d:11:d4:ae:38:ee:08:a3:83:01:1b:1c:48:63: 09:be:46:6f:9f:0f:91:8f:23:0d:15:f8:ab:66:90: 56:f4:e4:dc:31:03:d2:c2:47:4c:e6:62:74:d3:ba: a3:b1:f8:b4:87:68:3b:c9:f5:70:41:17:39:4e:90: 5e:1e:9f:0f:08:14:b8:62:f3:e3:e7:fe:a2:87:58: 34:60:7c:cb:c2:33:fd:a8:ca:9f:bc:15:81:1b:2d: 79:8d:5a:c1:48:fa:7f:21:2a:78:81:ac:1b:bd:4c: 3b:ce:55:d7:a6:ea:7b:d8:12:55:4d:08:36:02:df: 9e:2e:19:0c:c4:20:f7:33:bd:d8:81:a2:ae:9a:9c: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2F:D5:0A:31:49:AE:67:F7:0C:E1:1E:B2:0A:03:E4:E9:84:00:43 X509v3 Authority Key Identifier: keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6c:58:1b:0b:6b:db:27:b3:7a:00:31:b3:3e:c1:0b:89:b1: 08:9e:62:59:7d:76:c7:76:cb:7e:7c:14:c6:7b:f8:8d:f3:e3: 13:d9:05:ec:ac:5e:59:7e:9e:76:0e:d5:34:b5:68:f4:32:87: e1:ae:e6:05:e0:27:c5:40:0a:60:30:54:6a:44:df:43:06:4f: d8:ae:74:d1:89:9c:c3:ba:2b:c7:3a:34:d6:84:f7:c2:32:fc: 4b:dd:72:b2:81:ec:37:ea:a4:6e:26:e4:02:3e:f8:a4:b4:a4: 04:f8:bb:bf:e6:08:a7:a2:6c:7b:75:04:05:dc:ac:c1:66:f7: 55:d3:56:01:ef:0e:86:6d:7d:b2:46:e5:85:b2:cb:4c:ce:3b: e9:3d:ce:69:bd:99:e7:cb:50:0e:ac:8d:b0:ed:ab:6f:dc:10: fa:9a:9c:7e:9a:ad:49:6b:23:1d:06:9e:4e:30:90:e7:66:57: ac:fb:cc:54:0d:1c:da:78:bc:0d:21:ce:34:a6:0c:14:d0:88: a7:fc:86:0f:48:55:56:c2:18:19:c8:f2:53:66:47:e8:a8:22: 40:fa:a6:e2:4e:a2:75:d3:29:2b:c7:aa:9c:50:31:15:93:d8: df:df:3f:6f:a6:59:9e:c5:a3:29:26:31:37:bf:39:ac:90:45: bd:7b:11:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RroGjxkoYP3+KFe4jp57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2Y3MDA1MDNmNDA3MjBhODJmNzZlZjE1Y2RhNjIwMjJm MWY5YTkwHhcNMjUxMjIwMDEwMTM0WhcNMjUxMjIxMDEwMTM0WjAzMTEwLwYDVQQD EygyYTJmZDUwYTMxNDlhZTY3ZjcwY2UxMWViMjBhMDNlNGU5ODQwMDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscD3dlBzLB33ogaclmzYCvtVmEuw K7ITKg/Pu+ROhrK9NqzCDBurSC+MkHbBUB4n0JlDQFc+WlqlzUvcCjsUbzQmCgJu kdxAbFV+ko23ZHu8dzpACCOtMlDbjSyxvWvMcgUMfmhGW6ODysQ65ndQhrd6pcTe 9N41fRHUrjjuCKODARscSGMJvkZvnw+RjyMNFfirZpBW9OTcMQPSwkdM5mJ007qj sfi0h2g7yfVwQRc5TpBeHp8PCBS4YvPj5/6ih1g0YHzLwjP9qMqfvBWBGy15jVrB SPp/ISp4gawbvUw7zlXXpup72BJVTQg2At+eLhkMxCD3M73YgaKumpy7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCov1QoxSa5n9wzhHrIKA+TphABDMB8GA1UdIwQY MBaAFK8/cAUD9AcgqC927xXNpiAi8fmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83YjdmMjYtZjg0MS00NzAwLWFhZmIt ZWFkMDYzNDE5MmNkLzEvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC83YjdmMjYtZjg0MS00NzAwLWFhZmItZWFkMDYzNDE5MmNk LzEvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2xYGwtr 2yezegAxsz7BC4mxCJ5iWX12x3bLfnwUxnv4jfPjE9kF7KxeWX6edg7VNLVo9DKH 4a7mBeAnxUAKYDBUakTfQwZP2K500Ymcw7orxzo01oT3wjL8S91ysoHsN+qkbibk Aj74pLSkBPi7v+YIp6Jse3UEBdyswWb3VdNWAe8Ohm19skblhbLLTM476T3Oab2Z 58tQDqyNsO2rb9wQ+pqcfpqtSWsjHQaeTjCQ52ZXrPvMVA0c2ni8DSHONKYMFNCI p/yGD0hVVsIYGcjyU2ZH6KgiQPqm4k6iddMpK8eqnFAxFZPY398/b6ZZnsWjKSYx N785rJBFvXsREQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:32:57 2025 by rpki-client