This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json) Hash identifier: h4hI78ORcECL5NGh/kZ90TW36s/lJlCpJly4+pP+DvQ= Subject key identifier: 07:B1:F8:68:B9:E2:72:00:BD:7A:85:41:34:0F:7B:BA:14:93:39:7B Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Certificate serial: 019B4249F52D3F276BC2D4ED02F293DF94D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 19:01:41 +0000 Manifest this update: Sun 21 Dec 2025 19:01:41 +0000 Manifest next update: Mon 22 Dec 2025 19:01:41 +0000 Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: h8Olp1GP9otnIlxz6wSwb+yM0GlO2lOJfn5Wq0qflzo=) 2: vPQVU__LjjI0KQlbryLD4Z9lbco.roa (hash: T5jCIurL/aGFPYJ7qI4EV92wzbQfymp5kGHdqCYG6bU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:f5:2d:3f:27:6b:c2:d4:ed:02:f2:93:df:94:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896 Validity Not Before: Dec 21 19:01:41 2025 GMT Not After : Dec 22 19:01:41 2025 GMT Subject: CN=07b1f868b9e27200bd7a8541340f7bba1493397b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:92:f7:17:02:ff:88:b1:44:5c:0b:ab:9b:37: e5:12:fe:cc:aa:cd:b2:0c:47:ed:52:27:f2:ab:8b: d3:19:b1:b6:f7:f0:1b:51:dc:0d:b4:0f:0e:70:f6: 6a:76:bc:2f:fc:93:a2:09:41:56:16:19:2f:05:ca: 01:88:a6:72:c9:42:67:31:13:0b:52:76:ce:34:cc: 68:9d:c0:27:2e:dc:17:15:56:ee:99:c6:96:82:31: 16:39:de:29:71:15:55:65:f1:2c:ac:ef:28:34:73: ce:d9:c4:44:eb:73:e8:f1:a1:86:f9:6d:97:8c:78: b8:bf:ba:40:37:35:6c:32:03:22:1f:dd:9b:23:3e: da:ca:10:2b:3e:c2:9a:8d:20:f3:c0:c9:aa:de:82: 81:53:f1:5b:99:70:ce:1e:15:16:d5:16:68:7d:7e: 08:f5:ba:9b:40:1d:cf:fd:45:53:c9:5e:77:30:31: 39:62:d2:aa:d5:90:10:df:18:b3:bf:4f:6d:2c:20: 6e:b9:ac:03:c7:fa:e9:e5:e6:60:6c:22:40:e9:bc: 20:d1:9d:5c:cb:00:97:d3:b4:db:96:08:16:c9:37: 27:34:21:e4:d4:35:ee:b2:1b:a3:c5:25:8e:de:16: b6:1f:7c:8d:6b:24:72:0a:a4:70:4f:a5:f5:74:9b: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:F8:68:B9:E2:72:00:BD:7A:85:41:34:0F:7B:BA:14:93:39:7B X509v3 Authority Key Identifier: keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9e:b8:80:17:3d:ae:5c:f9:73:06:a5:ed:e8:2f:b8:bc:04: 25:5e:2f:dd:74:c5:0f:2d:1a:84:d3:08:92:a1:77:57:f8:cf: 95:56:d0:07:e9:35:ef:f6:4c:8a:22:b3:df:78:32:76:b7:f6: 9d:67:54:7b:87:70:8f:cb:14:0e:96:47:7b:36:42:3b:7e:dc: 62:65:a1:4e:bb:d6:a3:f3:c9:0e:54:d3:3b:78:52:bc:d7:be: 9b:33:ef:f8:90:95:c6:46:f0:a1:be:73:59:20:45:0c:86:b0: 2b:a4:3f:bf:dc:15:cd:e2:78:33:97:5c:f4:85:52:23:9f:3a: 01:a7:c9:50:4a:aa:8a:ba:61:87:81:43:bb:80:29:4c:bf:2e: aa:6f:52:4e:ff:8d:ec:5d:58:1e:e6:0e:4b:2a:ab:f1:f9:70: 75:4a:c3:75:12:84:fb:12:b1:ec:95:0d:a5:85:f6:ba:c7:fb: 7a:88:49:ac:7e:4b:79:f3:a6:73:d9:e2:08:5b:92:24:24:c4: ef:c7:71:a6:ed:24:e7:85:d2:98:23:fd:9e:d1:19:b5:d4:71: d8:f3:af:3c:c7:98:33:01:b1:1a:23:4d:42:54:41:ea:3e:2d: c5:f5:60:1b:a4:b4:58:18:97:0a:23:66:9d:59:0d:42:d4:97: b5:59:a1:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSfUtPydrwtTtAvKT35TRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2IwOWI4ZmRlZGU2Y2FiNTI0ZmNhYTNiMzFlNjE2YmEy ZTQ4OTYwHhcNMjUxMjIxMTkwMTQxWhcNMjUxMjIyMTkwMTQxWjAzMTEwLwYDVQQD EygwN2IxZjg2OGI5ZTI3MjAwYmQ3YTg1NDEzNDBmN2JiYTE0OTMzOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJL3FwL/iLFEXAurmzflEv7Mqs2y DEftUifyq4vTGbG29/AbUdwNtA8OcPZqdrwv/JOiCUFWFhkvBcoBiKZyyUJnMRML UnbONMxoncAnLtwXFVbumcaWgjEWOd4pcRVVZfEsrO8oNHPO2cRE63Po8aGG+W2X jHi4v7pANzVsMgMiH92bIz7ayhArPsKajSDzwMmq3oKBU/FbmXDOHhUW1RZofX4I 9bqbQB3P/UVTyV53MDE5YtKq1ZAQ3xizv09tLCBuuawDx/rp5eZgbCJA6bwg0Z1c ywCX07TblggWyTcnNCHk1DXushujxSWO3ha2H3yNayRyCqRwT6X1dJvyVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAex+Gi54nIAvXqFQTQPe7oUkzl7MB8GA1UdIwQY MBaAFEc7Cbj97ebKtST8qjsx5ha6LkiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEt MjU4ODU0ZTUwY2Y4LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9jMDQ2NzQtZTlhYy00NTQ3LWJjZGEtMjU4ODU0ZTUwY2Y4 LzEvUnpzSnVQM3Q1c3ExSlB5cU96SG1Gcm91U0pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ64gBc9 rlz5cwal7egvuLwEJV4v3XTFDy0ahNMIkqF3V/jPlVbQB+k17/ZMiiKz33gydrf2 nWdUe4dwj8sUDpZHezZCO37cYmWhTrvWo/PJDlTTO3hSvNe+mzPv+JCVxkbwob5z WSBFDIawK6Q/v9wVzeJ4M5dc9IVSI586AafJUEqqirphh4FDu4ApTL8uqm9STv+N 7F1YHuYOSyqr8flwdUrDdRKE+xKx7JUNpYX2usf7eohJrH5LefOmc9niCFuSJCTE 78dxpu0k54XSmCP9ntEZtdRx2POvPMeYMwGxGiNNQlRB6j4txfVgG6S0WBiXCiNm nVkNQtSXtVmhnQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:15:25 2025 by rpki-client