This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json) Hash identifier: zmOExVapFkh1Tf84qr5HkPFdf/2N2iQ9yz0XxJDxPKQ= Subject key identifier: EC:CD:5E:26:44:5C:1A:14:10:2E:0F:B3:D8:7D:3B:40:1E:A8:77:EB Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Certificate serial: 019B13F1D002C74558BAD7140653BF453553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft Manifest number: 0A98 Signing time: Fri 12 Dec 2025 19:02:53 +0000 Manifest this update: Fri 12 Dec 2025 19:02:53 +0000 Manifest next update: Sat 13 Dec 2025 19:02:53 +0000 Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: ALwOFTXNXsgfWw9yf54V88E/iM1YJFzBVvRkTT+MzJw=) 2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:f1:d0:02:c7:45:58:ba:d7:14:06:53:bf:45:35:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Validity Not Before: Dec 12 19:02:53 2025 GMT Not After : Dec 13 19:02:53 2025 GMT Subject: CN=eccd5e26445c1a14102e0fb3d87d3b401ea877eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:f8:72:b0:e1:77:d1:63:e8:2c:06:30:d7: 0e:f3:83:72:37:7c:26:e7:49:45:9c:18:91:9b:04: fe:4c:4f:34:03:c4:82:8d:69:bb:ec:0d:c5:94:a3: ee:66:83:26:40:24:9f:ab:31:78:2a:85:fe:77:b1: 96:f1:ee:4d:d4:ff:1b:0b:fc:ab:52:b7:a4:97:08: a6:05:91:30:d7:d4:02:72:f4:12:84:8d:ac:e8:28: ca:c7:b0:7e:0f:94:c9:12:31:bd:0f:45:0e:b5:02: c4:0f:01:c3:96:20:72:83:34:50:ec:26:3c:85:75: 26:0a:7f:31:63:51:47:ff:6f:4a:9e:30:10:b7:41: 54:30:16:90:0d:96:51:db:39:7c:d6:f8:f5:6b:c0: 81:f2:af:ec:23:32:f5:70:21:d2:55:f4:20:27:99: 11:83:57:62:6e:59:fa:d7:e3:c1:33:8d:4c:88:7b: 9c:3d:ef:03:45:7f:0c:e0:3a:9e:d7:e9:80:5e:b0: 4e:a5:3c:6c:d1:9e:4d:b0:f5:8d:90:c1:44:be:83: e2:84:60:9a:67:c9:12:aa:c2:7e:c2:8c:eb:05:59: a6:4e:24:6f:42:0a:15:07:ad:bf:c4:c0:96:45:ab: 1e:32:09:c3:c5:c6:50:42:43:ae:59:c6:d5:27:4c: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CD:5E:26:44:5C:1A:14:10:2E:0F:B3:D8:7D:3B:40:1E:A8:77:EB X509v3 Authority Key Identifier: keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2c:28:0d:7a:55:14:54:82:28:eb:ab:84:b1:d6:41:2b:fa: 82:6e:2e:bb:c7:d8:06:50:87:1e:00:96:72:f6:97:53:09:95: c4:b7:bc:c1:45:1b:86:a8:c4:3a:d5:21:2e:29:d6:7f:f0:bc: 34:a8:4d:3a:04:fb:96:d7:2c:88:97:00:84:fa:60:80:e9:90: b2:a2:be:02:68:9e:ba:87:f2:8a:25:16:4a:6d:b3:b1:cf:18: da:e9:19:76:3f:80:08:0b:16:12:bc:82:86:27:30:11:a0:75: 5f:0e:70:b0:7c:f7:76:a9:2a:b6:95:3a:e1:7b:ec:62:4f:e2: 44:7e:7a:7c:09:e8:58:9f:dd:18:46:5d:c0:ec:41:61:4a:ed: 09:82:27:5b:b4:7d:2f:d2:07:1e:3a:9b:99:37:3b:2a:ef:73: 56:ce:57:c0:3c:5a:53:50:8b:04:77:01:9c:66:53:1e:c2:3e: 7b:c3:1b:02:d4:31:b9:13:10:6d:bf:97:02:36:b7:bc:7f:fe: c2:b8:54:1f:68:79:de:e9:0c:13:e8:a4:bf:32:fc:1b:0b:bf: 97:b4:f6:a6:fe:1f:b6:44:d8:1f:69:12:03:20:2f:08:94:3a: 4a:b6:a0:75:cb:38:d9:ee:ba:48:c0:c0:1a:e6:9a:2e:b7:9b: 11:ac:07:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT8dACx0VYutcUBlO/RTVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz YzZmZDkwHhcNMjUxMjEyMTkwMjUzWhcNMjUxMjEzMTkwMjUzWjAzMTEwLwYDVQQD EyhlY2NkNWUyNjQ0NWMxYTE0MTAyZTBmYjNkODdkM2I0MDFlYTg3N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3D4crDhd9Fj6CwGMNcO84NyN3wm 50lFnBiRmwT+TE80A8SCjWm77A3FlKPuZoMmQCSfqzF4KoX+d7GW8e5N1P8bC/yr UreklwimBZEw19QCcvQShI2s6CjKx7B+D5TJEjG9D0UOtQLEDwHDliBygzRQ7CY8 hXUmCn8xY1FH/29KnjAQt0FUMBaQDZZR2zl81vj1a8CB8q/sIzL1cCHSVfQgJ5kR g1dibln61+PBM41MiHucPe8DRX8M4Dqe1+mAXrBOpTxs0Z5NsPWNkMFEvoPihGCa Z8kSqsJ+wozrBVmmTiRvQgoVB62/xMCWRaseMgnDxcZQQkOuWcbVJ0xFowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzNXiZEXBoUEC4Ps9h9O0AeqHfrMB8GA1UdIwQY MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCwoDXpV FFSCKOurhLHWQSv6gm4uu8fYBlCHHgCWcvaXUwmVxLe8wUUbhqjEOtUhLinWf/C8 NKhNOgT7ltcsiJcAhPpggOmQsqK+AmieuofyiiUWSm2zsc8Y2ukZdj+ACAsWEryC hicwEaB1Xw5wsHz3dqkqtpU64XvsYk/iRH56fAnoWJ/dGEZdwOxBYUrtCYInW7R9 L9IHHjqbmTc7Ku9zVs5XwDxaU1CLBHcBnGZTHsI+e8MbAtQxuRMQbb+XAja3vH/+ wrhUH2h53ukME+ikvzL8Gwu/l7T2pv4ftkTYH2kSAyAvCJQ6Sragdcs42e66SMDA GuaaLrebEawHog== -----END CERTIFICATE-----Generated at Fri Dec 12 21:00:24 2025 by rpki-client