This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json) Hash identifier: e8M0j4WOtwMZIMRgq63A7JGjN2O/GztG2yvOvXpoL4M= Subject key identifier: F6:04:4A:15:7A:2D:B1:00:3D:F0:3A:F3:06:0F:5F:C4:51:79:2E:D8 Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75 Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075 Certificate serial: 019B495DFB269F4BCD0B0ABF8797168E46D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft Manifest number: 06AB Signing time: Tue 23 Dec 2025 04:00:54 +0000 Manifest this update: Tue 23 Dec 2025 04:00:54 +0000 Manifest next update: Wed 24 Dec 2025 04:00:54 +0000 Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: U2Uuq9318n4/fLaijNDb9WPtZY8pWBC74AlGMwGRdvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:fb:26:9f:4b:cd:0b:0a:bf:87:97:16:8e:46:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075 Validity Not Before: Dec 23 04:00:54 2025 GMT Not After : Dec 24 04:00:54 2025 GMT Subject: CN=f6044a157a2db1003df03af3060f5fc451792ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1b:78:81:50:93:70:d3:9e:aa:8b:1c:03:20: ba:c7:c4:32:10:0f:80:b5:8e:7f:ab:41:6e:20:37: 2b:ba:00:9e:5a:f1:89:87:86:94:a4:98:f0:99:ec: d0:04:aa:65:9b:2c:3b:2b:7e:4e:d0:fb:6e:f4:9f: ce:cb:49:7d:80:87:88:23:e3:f5:de:30:2f:60:8d: 17:c1:f4:b0:19:aa:00:99:36:d9:83:2a:ed:4a:4d: f2:01:eb:2f:e0:34:03:9f:e5:05:6b:0a:f8:8b:3b: 10:e4:90:e3:04:98:41:7b:3f:3a:b4:13:bd:b6:61: fc:55:52:8b:51:19:9f:67:e7:63:81:45:b1:57:e6: 0b:ee:1a:d7:f2:db:fd:fa:41:eb:9a:49:8c:33:6c: 59:85:c8:0e:d3:06:23:b8:60:23:7d:79:d3:6a:51: e4:dd:22:4c:a5:b4:f0:52:38:72:b8:7a:12:4f:4a: 87:1b:68:ac:6f:75:b9:54:19:d5:d4:fc:d3:46:1b: 70:bc:c6:83:44:0d:d9:2a:4f:0a:c4:2e:e1:ff:2f: 86:9e:92:1a:2c:94:f6:fd:31:3f:69:9a:ba:d4:f0: 5d:5c:9c:ba:dc:f9:a5:1c:0b:10:0f:91:d1:94:91: fb:29:ad:c8:19:65:fe:98:5b:70:a6:93:2c:f7:60: e5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:04:4A:15:7A:2D:B1:00:3D:F0:3A:F3:06:0F:5F:C4:51:79:2E:D8 X509v3 Authority Key Identifier: keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:ad:25:b4:d3:2b:f8:73:3f:17:5e:d5:c8:c8:f8:a7:8c: e8:62:72:30:ec:1b:d4:42:1c:4e:1c:a0:8b:bb:d3:2f:88:83: eb:78:87:d4:3d:6e:fb:67:b1:6c:1c:41:6a:d3:7b:4b:c1:20: 8c:c3:e5:ac:33:ee:8f:6b:13:e3:ff:f2:5d:de:dd:fe:7d:23: 59:81:b8:15:05:a4:e1:01:77:06:c5:dc:43:e6:c1:63:97:86: 4b:e7:9b:ad:34:bc:f6:3e:64:5e:47:e1:ef:24:15:06:3a:c3: db:08:7a:79:9e:24:b9:64:66:e1:95:43:dc:83:20:b9:0a:84: 7d:47:c1:9e:b3:3c:b9:67:84:90:81:2d:f3:99:1a:fc:b6:80: a7:a5:5f:17:77:e4:68:46:e1:8f:d2:c5:68:bd:5b:49:7f:3f: bc:33:a6:d7:5d:f7:0b:a7:2f:ab:ab:74:32:b4:d2:19:6c:84: 3a:a0:5f:13:d3:21:6d:ce:dd:e1:88:5a:ba:56:16:6c:fa:ae: 3a:4b:71:ce:fe:b4:f5:04:7a:3e:5f:ba:8a:f3:df:b5:96:9d: 35:cf:22:14:21:5a:34:9a:c6:d3:bd:3e:5f:07:03:d6:70:e2: 4f:3b:81:2f:b9:e9:e7:4a:63:7b:01:6a:61:ec:d8:a0:08:14: 81:13:6c:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXfsmn0vNCwq/h5cWjkbVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmNkOTQ1NWUxZTU1YTVlMWQ2MDFiZDRhODU3NGI1YWZk NTQwNzUwHhcNMjUxMjIzMDQwMDU0WhcNMjUxMjI0MDQwMDU0WjAzMTEwLwYDVQQD EyhmNjA0NGExNTdhMmRiMTAwM2RmMDNhZjMwNjBmNWZjNDUxNzkyZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ht4gVCTcNOeqoscAyC6x8QyEA+A tY5/q0FuIDcrugCeWvGJh4aUpJjwmezQBKplmyw7K35O0Ptu9J/Oy0l9gIeII+P1 3jAvYI0XwfSwGaoAmTbZgyrtSk3yAesv4DQDn+UFawr4izsQ5JDjBJhBez86tBO9 tmH8VVKLURmfZ+djgUWxV+YL7hrX8tv9+kHrmkmMM2xZhcgO0wYjuGAjfXnTalHk 3SJMpbTwUjhyuHoST0qHG2isb3W5VBnV1PzTRhtwvMaDRA3ZKk8KxC7h/y+GnpIa LJT2/TE/aZq61PBdXJy63PmlHAsQD5HRlJH7Ka3IGWX+mFtwppMs92DliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYEShV6LbEAPfA68wYPX8RReS7YMB8GA1UdIwQY MBaAFP682UVeHlWl4dYBvUqFdLWv1UB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQt MTYxMjdjOGE3ZWFjLzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQtMTYxMjdjOGE3ZWFj LzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi+tJbTT K/hzPxde1cjI+KeM6GJyMOwb1EIcThygi7vTL4iD63iH1D1u+2exbBxBatN7S8Eg jMPlrDPuj2sT4//yXd7d/n0jWYG4FQWk4QF3BsXcQ+bBY5eGS+ebrTS89j5kXkfh 7yQVBjrD2wh6eZ4kuWRm4ZVD3IMguQqEfUfBnrM8uWeEkIEt85ka/LaAp6VfF3fk aEbhj9LFaL1bSX8/vDOm1133C6cvq6t0MrTSGWyEOqBfE9Mhbc7d4YhaulYWbPqu Oktxzv609QR6Pl+6ivPftZadNc8iFCFaNJrG070+XwcD1nDiTzuBL7np50pjewFq YezYoAgUgRNszw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:54:42 2025 by rpki-client