This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json) Hash identifier: u7ku5o8hXrZu4AJsdkHoKugRvKxJBcGI6n9ptmAddBY= Subject key identifier: 9E:93:48:DC:61:70:F4:3C:1E:10:06:C1:45:C3:BA:DC:48:08:13:E6 Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f Certificate serial: 019B58D190A968B292680CCA27718807E217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 04:01:27 +0000 Manifest this update: Fri 26 Dec 2025 04:01:27 +0000 Manifest next update: Sat 27 Dec 2025 04:01:27 +0000 Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=) 2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: v8ANiUcPRh564zLp6/+x5eOsiM5Z1sbedH75psDS1C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:90:a9:68:b2:92:68:0c:ca:27:71:88:07:e2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f Validity Not Before: Dec 26 04:01:27 2025 GMT Not After : Dec 27 04:01:27 2025 GMT Subject: CN=9e9348dc6170f43c1e1006c145c3badc480813e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:91:af:8f:ee:01:b6:1d:68:ea:74:5b:a2: cf:f7:6a:da:af:6e:4e:8d:b8:26:1a:1b:91:ca:52: 02:0c:38:86:c1:76:a2:c9:99:ac:15:9f:7e:8e:94: f7:92:74:ab:7a:39:41:36:44:81:6d:66:22:aa:ac: a9:18:a9:76:dc:17:dd:13:9d:1b:df:29:cb:ae:cb: 7c:94:c0:24:dd:f7:f1:aa:53:8c:20:12:99:f1:8b: 20:7e:4e:d9:f0:3b:bd:0c:87:2d:15:9d:07:b7:d2: 5d:61:21:6c:d8:98:28:c3:04:74:d9:07:3a:5f:b2: 0f:2b:0c:33:8c:5b:27:99:25:eb:5e:97:53:ca:0b: 3c:d9:2d:d4:b5:17:ee:ce:b3:45:35:67:a3:09:13: ad:ca:5a:f1:d3:d2:7c:61:44:75:59:e7:76:c4:50: bd:6c:6f:79:d4:13:03:d2:f2:76:4b:45:dc:29:37: c3:1d:18:ee:fc:89:41:c7:80:e5:f8:cd:a3:d3:ef: c5:61:e7:e2:fe:60:71:c4:d7:ff:c5:35:f8:57:e6: 66:96:b2:91:d7:51:d9:2a:f1:a8:19:64:2c:a8:01: 45:7c:01:ae:51:66:0d:38:aa:89:70:b4:18:f6:c2: 2f:4e:1c:32:5e:18:d8:82:8e:fa:11:f5:33:50:d1: ad:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:48:DC:61:70:F4:3C:1E:10:06:C1:45:C3:BA:DC:48:08:13:E6 X509v3 Authority Key Identifier: keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a0:9b:f9:c2:48:22:fa:4c:d3:33:d4:13:02:0f:d3:a5:c1: a3:69:62:ab:18:0b:01:ce:ac:ca:61:5e:a9:c6:08:a0:b8:25: 4c:9e:c5:18:ee:b1:91:63:ff:f1:a5:9c:96:fc:ad:45:34:c4: 1c:05:b0:7c:27:aa:2d:f5:69:7e:bb:d0:9f:39:83:f4:00:61: ba:4b:31:d2:87:ad:4b:c5:89:1d:1d:44:3b:39:00:d2:19:8e: 5a:9f:6a:6a:dd:fd:ef:5e:c8:2f:ea:74:08:53:71:71:20:f6: 35:09:53:44:e7:54:c1:9b:4f:f2:59:81:8d:f0:ac:11:2e:2f: e7:9d:6f:e9:5d:cd:39:a0:4f:86:c9:6f:4f:a4:bf:5d:28:83: ee:ba:b3:5b:ce:52:53:69:db:fc:9f:84:28:5e:a7:00:69:3d: 12:15:66:a6:7a:f8:ff:ac:fe:35:8c:dc:4d:90:d0:37:b6:3a: 62:ad:59:99:46:e1:dc:63:71:f9:51:d6:96:d0:51:33:84:8d: 64:f7:c9:ce:7d:c2:71:5d:32:f0:18:2b:ab:65:52:f2:2e:da: c8:81:5b:90:c6:59:a4:cc:7b:96:f5:db:b1:bf:50:e9:88:10: 2b:20:3e:e6:b2:ca:e4:b7:c8:69:1a:23:45:bd:16:52:6f:99: c9:8b:40:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0ZCpaLKSaAzKJ3GIB+IXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3 YzM1NWYwHhcNMjUxMjI2MDQwMTI3WhcNMjUxMjI3MDQwMTI3WjAzMTEwLwYDVQQD Eyg5ZTkzNDhkYzYxNzBmNDNjMWUxMDA2YzE0NWMzYmFkYzQ4MDgxM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdSRr4/uAbYdaOp0W6LP92rar25O jbgmGhuRylICDDiGwXaiyZmsFZ9+jpT3knSrejlBNkSBbWYiqqypGKl23BfdE50b 3ynLrst8lMAk3ffxqlOMIBKZ8Ysgfk7Z8Du9DIctFZ0Ht9JdYSFs2JgowwR02Qc6 X7IPKwwzjFsnmSXrXpdTygs82S3UtRfuzrNFNWejCROtylrx09J8YUR1Wed2xFC9 bG951BMD0vJ2S0XcKTfDHRju/IlBx4Dl+M2j0+/FYefi/mBxxNf/xTX4V+ZmlrKR 11HZKvGoGWQsqAFFfAGuUWYNOKqJcLQY9sIvThwyXhjYgo76EfUzUNGtLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6TSNxhcPQ8HhAGwUXDutxICBPmMB8GA1UdIwQY MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6Cb+cJI IvpM0zPUEwIP06XBo2liqxgLAc6symFeqcYIoLglTJ7FGO6xkWP/8aWclvytRTTE HAWwfCeqLfVpfrvQnzmD9ABhuksx0oetS8WJHR1EOzkA0hmOWp9qat39717IL+p0 CFNxcSD2NQlTROdUwZtP8lmBjfCsES4v551v6V3NOaBPhslvT6S/XSiD7rqzW85S U2nb/J+EKF6nAGk9EhVmpnr4/6z+NYzcTZDQN7Y6Yq1ZmUbh3GNx+VHWltBRM4SN ZPfJzn3CcV0y8Bgrq2VS8i7ayIFbkMZZpMx7lvXbsb9Q6YgQKyA+5rLK5LfIaRoj Rb0WUm+ZyYtAfg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:17 2025 by rpki-client