This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json) Hash identifier: lzVb7ymgT+mB1Fe7fp2+GTsxR8913H6hijyaDQt7WSo= Subject key identifier: 83:34:89:AE:D0:FC:78:C9:59:13:C8:03:D8:A6:F3:7F:92:9E:4C:8F Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Certificate serial: 019B405B7F0209D50073C33A974E924E43E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:36 +0000 Manifest this update: Sun 21 Dec 2025 10:01:36 +0000 Manifest next update: Mon 22 Dec 2025 10:01:36 +0000 Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: jQqy+si00XF1oEbDEaeJ/UTNmjRHeUG9L3G2J62gdnY=) 2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:7f:02:09:d5:00:73:c3:3a:97:4e:92:4e:43:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Validity Not Before: Dec 21 10:01:36 2025 GMT Not After : Dec 22 10:01:36 2025 GMT Subject: CN=833489aed0fc78c95913c803d8a6f37f929e4c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:9f:36:2d:f1:6a:a4:90:81:53:96:ba:7e: 34:a6:c7:eb:7a:dc:32:2d:ee:6f:fe:b8:a8:5d:a0: ba:a2:fb:cf:7a:4c:58:99:8b:c9:c9:a1:ee:66:f4: 8c:dd:43:35:50:6f:df:cb:bf:ab:4a:a0:4c:fc:b9: 01:23:aa:ff:7b:aa:9d:52:aa:3f:85:00:9b:68:25: 52:1e:5a:a4:e4:27:d0:a0:5e:dc:66:9e:7f:24:87: d4:e2:62:06:98:5f:28:49:68:96:72:27:f2:24:de: 6d:ee:0b:f6:3e:a2:6e:fb:2f:33:4d:13:63:c4:d7: 4b:86:dd:e4:03:0c:ce:50:8e:8d:e3:26:5a:e8:f6: 0c:0b:c0:56:83:da:31:e6:67:d1:f8:fa:c1:fd:c0: 47:b1:1f:ed:83:7b:df:1f:ef:8d:5d:d8:ec:2e:2f: ef:e7:d1:2f:04:d1:5a:bb:d9:42:69:07:f2:75:70: bb:42:bd:36:bf:fd:51:c5:85:dd:ea:6f:f4:06:12: cf:ee:d5:8f:d5:de:8a:61:7b:37:ac:72:a4:97:a7: 02:2c:54:25:e7:3d:87:aa:d0:79:a6:85:98:ac:23: 3b:0c:cd:6c:47:5b:55:2a:9c:3e:dc:4d:11:2c:9c: 5e:bc:78:e9:7a:d8:d7:a2:4b:61:69:26:80:03:86: ad:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:34:89:AE:D0:FC:78:C9:59:13:C8:03:D8:A6:F3:7F:92:9E:4C:8F X509v3 Authority Key Identifier: keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2b:a0:b3:8d:74:88:98:bb:28:83:6d:27:68:b3:be:ac:a1: 78:24:77:08:ed:b1:4f:45:a3:8e:4b:ac:ac:24:cb:54:94:a2: cd:ec:37:d8:03:96:df:01:81:b4:19:44:30:d1:fe:69:06:a4: f4:3f:dd:9f:cb:28:5e:2d:89:17:20:95:1c:3e:fc:2c:91:4c: 1b:f7:14:36:1c:0f:1a:65:9b:be:1d:9b:e9:e6:18:8f:53:35: ba:0f:14:fb:c5:0b:06:22:8b:f6:55:22:98:19:48:52:41:72: 35:87:0a:c8:14:43:70:a2:68:64:43:76:15:2d:28:a1:48:a6: c6:1d:b6:8d:bc:c2:1c:0c:42:9a:fa:24:11:39:8f:ef:0b:28: 53:75:2f:cf:c6:e3:cb:9b:ff:36:50:84:35:7d:f9:55:db:e5: 84:c0:41:cb:c1:f6:41:00:6d:6c:69:36:c0:90:84:f9:85:af: 53:24:09:d2:5c:59:2c:0f:53:8f:7d:23:2d:1d:d8:69:b0:df: 89:1b:7b:97:b8:b1:d7:1e:72:2e:b1:cc:88:0b:34:48:5c:73: 2e:8d:e0:c1:4f:2b:a1:18:85:f0:f5:99:ac:7e:be:c1:f7:a6: 06:ea:76:96:7f:e5:72:51:25:fa:d0:5e:4d:a4:5e:c1:67:77: 4e:3d:cb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW38CCdUAc8M6l06STkPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy ZTQ4OTYwHhcNMjUxMjIxMTAwMTM2WhcNMjUxMjIyMTAwMTM2WjAzMTEwLwYDVQQD Eyg4MzM0ODlhZWQwZmM3OGM5NTkxM2M4MDNkOGE2ZjM3ZjkyOWU0YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W6fNi3xaqSQgVOWun40psfretwy Le5v/rioXaC6ovvPekxYmYvJyaHuZvSM3UM1UG/fy7+rSqBM/LkBI6r/e6qdUqo/ hQCbaCVSHlqk5CfQoF7cZp5/JIfU4mIGmF8oSWiWcifyJN5t7gv2PqJu+y8zTRNj xNdLht3kAwzOUI6N4yZa6PYMC8BWg9ox5mfR+PrB/cBHsR/tg3vfH++NXdjsLi/v 59EvBNFau9lCaQfydXC7Qr02v/1RxYXd6m/0BhLP7tWP1d6KYXs3rHKkl6cCLFQl 5z2HqtB5poWYrCM7DM1sR1tVKpw+3E0RLJxevHjpetjXokthaSaAA4atBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM0ia7Q/HjJWRPIA9im83+SnkyPMB8GA1UdIwQY MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4 LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyugs410 iJi7KINtJ2izvqyheCR3CO2xT0WjjkusrCTLVJSizew32AOW3wGBtBlEMNH+aQak 9D/dn8soXi2JFyCVHD78LJFMG/cUNhwPGmWbvh2b6eYYj1M1ug8U+8ULBiKL9lUi mBlIUkFyNYcKyBRDcKJoZEN2FS0ooUimxh22jbzCHAxCmvokETmP7wsoU3Uvz8bj y5v/NlCENX35VdvlhMBBy8H2QQBtbGk2wJCE+YWvUyQJ0lxZLA9Tj30jLR3YabDf iRt7l7ix1x5yLrHMiAs0SFxzLo3gwU8roRiF8PWZrH6+wfemBup2ln/lclEl+tBe TaRewWd3Tj3LVQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:08:25 2025 by rpki-client