This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json) Hash identifier: DelkRgeFr8F4tLIAHq1eUL9SHhekqNxljpVrrCVmxQA= Subject key identifier: 99:6B:BB:28:A8:53:35:8B:75:66:7E:19:0F:5F:31:72:BC:6B:CE:9E Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc Certificate serial: 019B43928FF62C87D7DC28F69A92B7B7AB87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft Manifest number: 1501 Signing time: Mon 22 Dec 2025 01:00:37 +0000 Manifest this update: Mon 22 Dec 2025 01:00:37 +0000 Manifest next update: Tue 23 Dec 2025 01:00:37 +0000 Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: PwmXPywO8JAJNG0fgh2h9eEw/BVqLnUx/i5hdicRP0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:8f:f6:2c:87:d7:dc:28:f6:9a:92:b7:b7:ab:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc Validity Not Before: Dec 22 01:00:37 2025 GMT Not After : Dec 23 01:00:37 2025 GMT Subject: CN=996bbb28a853358b75667e190f5f3172bc6bce9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:7f:c1:d7:9c:65:4b:bd:b1:59:b9:14:5a: 4d:b4:12:36:76:39:37:6c:8f:83:ee:d0:18:6e:6c: c7:d8:08:f0:12:7f:32:a7:50:40:e5:e1:f8:01:6d: 32:e0:ef:94:ea:45:9a:e5:29:c5:5b:f6:77:94:b3: a8:17:04:f9:f1:0f:b0:23:ab:31:ca:56:b2:d8:c3: eb:5f:b4:8b:b6:1c:4d:78:96:56:92:0e:85:d9:57: 02:a7:13:9c:e2:7d:1b:cd:b0:8c:9e:83:70:5a:77: 0c:54:1b:33:56:70:dc:57:ea:55:c7:d9:cf:6c:64: 30:e7:56:c1:5e:f5:a1:49:c1:59:1e:e3:a4:7a:6b: 74:17:e6:36:df:58:95:48:fb:0c:eb:cf:7d:b6:f4: 88:f4:df:f5:8c:2d:c3:55:ce:af:59:ee:3b:c3:5f: d8:5a:5f:81:e3:24:ce:60:e3:b3:df:7b:df:00:26: 4d:a4:b1:2b:9c:ec:ba:d6:bf:e5:9f:a4:9c:b8:d7: 65:34:1f:10:32:9f:ae:33:30:bd:1a:cb:71:36:24: 17:43:8f:9b:80:00:db:44:39:ad:8c:54:72:ae:78: e4:e1:e8:68:b3:76:bf:6f:68:25:61:7e:34:86:bd: 3a:4f:af:31:2e:ac:3a:aa:20:64:3f:e2:49:df:35: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6B:BB:28:A8:53:35:8B:75:66:7E:19:0F:5F:31:72:BC:6B:CE:9E X509v3 Authority Key Identifier: keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:74:92:88:cd:dd:ae:80:ab:cc:3b:c2:a6:06:45:45:b4:74: 20:05:b5:b4:34:b0:86:e5:3a:7e:e9:74:e7:82:e4:51:6b:35: fe:98:5c:99:d2:e2:21:6f:33:d7:70:18:5f:1d:7e:27:57:4d: 4d:db:db:4f:e2:59:2a:50:54:a4:a3:a3:de:7c:e2:e6:e7:a2: 09:ba:b0:e2:fa:d3:7f:3a:da:c7:33:5c:04:45:eb:97:1d:0b: c9:40:ff:56:a4:e3:4b:0a:da:83:9f:77:0c:fa:10:d3:86:ca: 30:74:ff:72:96:78:05:40:c0:46:c9:18:b3:8b:13:37:9b:37: 09:16:e4:a4:c2:b6:71:bd:82:76:f7:9c:ee:43:ad:b6:6a:20: 10:bd:88:9c:bc:ba:55:46:d5:2f:78:ed:53:bf:51:64:58:57: 3d:b4:0b:55:08:3a:65:ee:20:34:38:b9:06:96:bc:20:0b:11: 63:84:69:a2:bb:61:73:9d:2e:5c:be:c7:d5:24:88:8b:b7:3b: e0:ca:b2:c8:d0:7b:7e:42:5d:4e:7c:08:90:b4:9c:82:f6:4c: 0b:f8:c7:ab:60:e6:54:8f:06:81:1b:68:b1:c3:90:d9:7e:77: ce:b6:70:7e:0e:e8:d2:d2:08:e8:2e:82:44:03:3f:be:59:b0: fc:17:75:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDko/2LIfX3Cj2mpK3t6uHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWNjYzFiYjAxMTYwNjg2ODA2ZGIzNWE5MzM1MWIyMWIz ZTYwZGMwHhcNMjUxMjIyMDEwMDM3WhcNMjUxMjIzMDEwMDM3WjAzMTEwLwYDVQQD Eyg5OTZiYmIyOGE4NTMzNThiNzU2NjdlMTkwZjVmMzE3MmJjNmJjZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwV/wdecZUu9sVm5FFpNtBI2djk3 bI+D7tAYbmzH2AjwEn8yp1BA5eH4AW0y4O+U6kWa5SnFW/Z3lLOoFwT58Q+wI6sx ylay2MPrX7SLthxNeJZWkg6F2VcCpxOc4n0bzbCMnoNwWncMVBszVnDcV+pVx9nP bGQw51bBXvWhScFZHuOkemt0F+Y231iVSPsM6899tvSI9N/1jC3DVc6vWe47w1/Y Wl+B4yTOYOOz33vfACZNpLErnOy61r/ln6ScuNdlNB8QMp+uMzC9GstxNiQXQ4+b gADbRDmtjFRyrnjk4ehos3a/b2glYX40hr06T68xLqw6qiBkP+JJ3zVbawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlruyioUzWLdWZ+GQ9fMXK8a86eMB8GA1UdIwQY MBaAFEWczBuwEWBoaAbbNakzUbIbPmDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMt NjQ3M2IwOTJhYWRkLzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMtNjQ3M2IwOTJhYWRk LzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnSSiM3d roCrzDvCpgZFRbR0IAW1tDSwhuU6ful054LkUWs1/phcmdLiIW8z13AYXx1+J1dN TdvbT+JZKlBUpKOj3nzi5ueiCbqw4vrTfzraxzNcBEXrlx0LyUD/VqTjSwrag593 DPoQ04bKMHT/cpZ4BUDARskYs4sTN5s3CRbkpMK2cb2Cdvec7kOttmogEL2InLy6 VUbVL3jtU79RZFhXPbQLVQg6Ze4gNDi5Bpa8IAsRY4Rporthc50uXL7H1SSIi7c7 4MqyyNB7fkJdTnwIkLScgvZMC/jHq2DmVI8GgRtoscOQ2X53zrZwfg7o0tII6C6C RAM/vlmw/Bd1kA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:54:53 2025 by rpki-client