This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json) Hash identifier: 4R96QLMepOjPuENnGt2gxaZ3TuOyC3goqusotEabd8g= Subject key identifier: 44:AC:61:53:44:2E:03:81:A7:7C:10:B8:89:70:11:3B:65:5B:8E:17 Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc Certificate serial: 019B476FB0442B34E0D2F94733C5D3F65E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft Manifest number: 1503 Signing time: Mon 22 Dec 2025 19:01:00 +0000 Manifest this update: Mon 22 Dec 2025 19:01:00 +0000 Manifest next update: Tue 23 Dec 2025 19:01:00 +0000 Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: GPTkjvHEf+7uNoe7KZaX+yHD0ICjNXJDU/qQ/to9Gs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:b0:44:2b:34:e0:d2:f9:47:33:c5:d3:f6:5e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc Validity Not Before: Dec 22 19:01:00 2025 GMT Not After : Dec 23 19:01:00 2025 GMT Subject: CN=44ac6153442e0381a77c10b88970113b655b8e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:c8:2e:6e:55:d5:64:a3:3f:6e:f5:8a:f9: 88:aa:2b:ee:21:2e:37:f4:a7:b2:f4:35:66:d6:93: ea:0d:95:4b:c8:96:18:c3:27:fc:26:ba:87:4f:81: 3a:bb:92:83:d1:77:2e:ff:a4:69:a2:c4:f0:e3:f5: e3:ea:59:dc:52:09:b8:15:16:3c:b9:00:08:a5:c3: 7c:cc:b8:7d:77:28:3d:83:6d:d3:85:64:f4:5a:01: 9f:74:f6:3d:b0:89:6a:4b:e5:87:3d:6c:1b:51:8c: 88:8d:01:ae:cb:54:8f:09:fc:9f:3c:9c:28:2e:9b: 25:e5:e5:55:1e:a8:44:cc:a9:78:aa:bc:9e:ec:88: da:09:18:2a:04:39:41:35:2c:d2:fe:7e:20:1a:fb: b7:af:a7:86:0b:f1:e9:89:69:55:2c:9f:38:aa:1e: 3d:8f:03:33:9f:ea:53:d1:bc:b7:81:1b:9d:47:8f: 67:ec:15:a7:51:cd:1e:b2:cd:7f:aa:d8:a5:e3:81: f8:4b:b1:28:75:d2:f5:ce:98:62:9d:25:f6:3a:fe: 35:64:0a:bd:04:0d:27:a0:7f:92:92:f8:97:65:66: 8b:ab:70:10:31:b3:e3:6a:e2:56:26:3a:e3:c4:d5: 74:ac:97:4a:6c:11:be:60:1d:41:31:18:0e:db:36: f1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:61:53:44:2E:03:81:A7:7C:10:B8:89:70:11:3B:65:5B:8E:17 X509v3 Authority Key Identifier: keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:a7:19:59:91:f7:53:f9:27:ca:de:db:59:81:52:66:49: b7:bd:4b:38:83:9d:6a:45:62:0a:08:81:ee:44:b7:bf:7d:83: 32:f0:81:58:9d:9c:36:dc:0d:55:b0:2f:7e:4f:43:c1:a4:b7: 9e:3b:f3:85:a1:7b:2d:f1:00:88:9f:a4:0e:e1:e8:bb:8e:a7: b4:b1:99:36:ed:6a:03:f4:04:f5:60:47:c5:fa:0b:70:47:aa: a9:b6:5e:96:1f:8a:21:29:0c:1b:bc:63:73:07:a0:fa:49:95: 8a:2c:d5:6e:16:7a:90:ec:c4:e2:2f:e5:63:44:5d:65:db:c2: 46:10:85:f3:42:22:4a:bd:fa:9f:eb:fe:39:d9:2d:09:15:0f: 5a:5f:66:f0:21:5a:83:43:df:ee:c4:2d:f1:62:3e:9a:24:fb: 64:ef:b0:97:ad:4a:8e:db:40:ed:5d:03:ba:e3:f0:c5:43:75: e8:6c:71:2b:f4:ae:a3:59:27:5c:e2:d2:1d:98:29:bd:8b:a8: 04:74:24:6f:f5:d1:ea:93:92:16:a7:d9:cb:c5:fc:14:0c:b0: 51:78:ab:42:dd:eb:9d:a1:68:7a:58:8a:34:26:67:88:f6:a8: 70:8e:51:99:52:a8:67:a1:e3:4b:d8:eb:a2:79:13:8d:c3:4d: 6b:89:35:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb7BEKzTg0vlHM8XT9l4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWNjYzFiYjAxMTYwNjg2ODA2ZGIzNWE5MzM1MWIyMWIz ZTYwZGMwHhcNMjUxMjIyMTkwMTAwWhcNMjUxMjIzMTkwMTAwWjAzMTEwLwYDVQQD Eyg0NGFjNjE1MzQ0MmUwMzgxYTc3YzEwYjg4OTcwMTEzYjY1NWI4ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxfILm5V1WSjP271ivmIqivuIS43 9Key9DVm1pPqDZVLyJYYwyf8JrqHT4E6u5KD0Xcu/6RposTw4/Xj6lncUgm4FRY8 uQAIpcN8zLh9dyg9g23ThWT0WgGfdPY9sIlqS+WHPWwbUYyIjQGuy1SPCfyfPJwo Lpsl5eVVHqhEzKl4qrye7IjaCRgqBDlBNSzS/n4gGvu3r6eGC/HpiWlVLJ84qh49 jwMzn+pT0by3gRudR49n7BWnUc0ess1/qtil44H4S7EoddL1zphinSX2Ov41ZAq9 BA0noH+SkviXZWaLq3AQMbPjauJWJjrjxNV0rJdKbBG+YB1BMRgO2zbxpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESsYVNELgOBp3wQuIlwETtlW44XMB8GA1UdIwQY MBaAFEWczBuwEWBoaAbbNakzUbIbPmDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMt NjQ3M2IwOTJhYWRkLzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMtNjQ3M2IwOTJhYWRk LzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJmnGVmR 91P5J8re21mBUmZJt71LOIOdakViCgiB7kS3v32DMvCBWJ2cNtwNVbAvfk9DwaS3 njvzhaF7LfEAiJ+kDuHou46ntLGZNu1qA/QE9WBHxfoLcEeqqbZelh+KISkMG7xj cweg+kmViizVbhZ6kOzE4i/lY0RdZdvCRhCF80IiSr36n+v+OdktCRUPWl9m8CFa g0Pf7sQt8WI+miT7ZO+wl61KjttA7V0DuuPwxUN16GxxK/Suo1knXOLSHZgpvYuo BHQkb/XR6pOSFqfZy8X8FAywUXirQt3rnaFoeliKNCZniPaocI5RmVKoZ6HjS9jr onkTjcNNa4k1/A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:20:28 2025 by rpki-client