This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json) Hash identifier: BD/cYLwrkSplWHoPBB7YmT7KTh3YzrTi0NUJ/7DpJK8= Subject key identifier: B2:1F:38:04:F3:39:E8:44:96:A8:49:6D:9B:AB:5E:46:0A:09:C3:B4 Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7 Certificate serial: 019AF5AED9FA26EBA33E676332F13D7DDBC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft Manifest number: 0FE9 Signing time: Sat 06 Dec 2025 22:01:08 +0000 Manifest this update: Sat 06 Dec 2025 22:01:08 +0000 Manifest next update: Sun 07 Dec 2025 22:01:08 +0000 Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=) 2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: Ke5ovevnsFutMKezrJ5YS/Od0kJAq1VPvRa2CmHjsAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:d9:fa:26:eb:a3:3e:67:63:32:f1:3d:7d:db:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7 Validity Not Before: Dec 6 22:01:08 2025 GMT Not After : Dec 7 22:01:08 2025 GMT Subject: CN=b21f3804f339e84496a8496d9bab5e460a09c3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:6b:ea:2b:0d:58:ba:a4:d7:bf:1e:56:c6: 3b:d2:9b:4c:86:bd:07:33:1f:bc:b0:3e:5b:95:23: 31:cc:ab:e6:41:9a:15:b6:26:6c:24:bc:69:d6:27: 98:42:e3:65:de:f9:36:ad:f4:c6:50:e2:eb:4c:5e: b9:d6:70:25:ed:0d:1f:2f:6e:41:4c:f4:01:b4:3e: 61:99:0c:c3:fc:dd:c3:5f:96:ba:61:ec:f8:fe:6a: fc:73:47:32:a1:12:80:b8:69:66:1b:dd:ba:c2:70: 24:48:9f:a3:ea:d9:01:84:93:db:e3:7c:57:91:a1: 36:48:e9:7a:c5:cc:e9:b2:0a:29:36:bf:b0:a4:bf: 0b:61:06:e7:13:15:81:91:a4:71:67:0a:63:b7:4d: 41:c3:1c:c9:ee:0e:a7:ec:7f:35:97:97:63:ca:36: a2:60:d9:a2:c6:c7:96:da:3b:31:73:ad:69:2e:5d: 68:55:ad:0f:04:3a:cf:d5:b1:2f:d8:f6:36:9a:03: 4e:54:f1:db:6f:2a:73:8b:7d:b9:48:25:54:81:df: ff:41:d9:48:e1:76:9f:d6:e4:95:cb:ed:8a:ba:bc: 39:c5:c3:ba:d3:52:17:00:80:cd:de:04:4c:e5:54: 2e:49:26:50:a4:67:01:98:4f:ae:d2:81:2f:11:ca: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1F:38:04:F3:39:E8:44:96:A8:49:6D:9B:AB:5E:46:0A:09:C3:B4 X509v3 Authority Key Identifier: keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:10:20:fe:1a:e3:38:8a:3a:6d:d5:bc:56:a0:35:16:a6:b9: ad:23:f9:28:b7:07:ff:eb:4e:a5:72:6d:fc:57:58:d4:5f:03: af:d2:7a:27:24:6d:d5:54:4c:63:1c:6b:1b:d9:ca:4c:ba:44: 68:f5:45:51:9e:f4:fa:1c:a0:ce:69:63:90:1c:e0:a2:3e:7f: 79:f1:10:ab:02:6b:5d:ed:c0:8a:c3:c1:cd:80:6f:41:47:46: 18:81:23:7a:ac:92:10:e5:45:93:b7:93:6a:2d:e0:12:88:03: 5f:45:c0:59:0e:83:ee:79:73:6f:d7:3f:97:26:8e:b9:3b:5e: 27:7c:45:ea:0b:a7:c7:d1:7b:11:fb:2c:10:e2:ef:e5:a4:91: b0:2b:46:a1:03:ab:ec:35:dd:4a:4f:dc:52:9c:70:1e:46:5c: ce:bf:02:3b:0e:de:a6:46:a7:ab:4c:0e:53:16:dd:0f:76:43: 7b:fc:25:96:a7:ab:23:8f:ce:7e:9a:61:80:f1:d4:d3:ee:8b: 8d:e9:56:22:16:d1:c3:18:e8:f6:f0:c9:a7:f0:3a:3e:43:b1: e9:ed:9d:f9:11:46:7e:8b:75:d3:28:4a:5f:44:06:c7:19:e6: dc:b9:ba:cb:bd:49:cd:1b:d7:54:b6:2a:9a:88:81:0f:da:e0: 16:79:a9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtn6JuujPmdjMvE9fdvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli YzA1YTcwHhcNMjUxMjA2MjIwMTA4WhcNMjUxMjA3MjIwMTA4WjAzMTEwLwYDVQQD EyhiMjFmMzgwNGYzMzllODQ0OTZhODQ5NmQ5YmFiNWU0NjBhMDljM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm1r6isNWLqk178eVsY70ptMhr0H Mx+8sD5blSMxzKvmQZoVtiZsJLxp1ieYQuNl3vk2rfTGUOLrTF651nAl7Q0fL25B TPQBtD5hmQzD/N3DX5a6Yez4/mr8c0cyoRKAuGlmG926wnAkSJ+j6tkBhJPb43xX kaE2SOl6xczpsgopNr+wpL8LYQbnExWBkaRxZwpjt01BwxzJ7g6n7H81l5djyjai YNmixseW2jsxc61pLl1oVa0PBDrP1bEv2PY2mgNOVPHbbypzi325SCVUgd//QdlI 4Xaf1uSVy+2Kurw5xcO601IXAIDN3gRM5VQuSSZQpGcBmE+u0oEvEcqyewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIfOATzOehElqhJbZurXkYKCcO0MB8GA1UdIwQY MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2 LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRAg/hrj OIo6bdW8VqA1Fqa5rSP5KLcH/+tOpXJt/FdY1F8Dr9J6JyRt1VRMYxxrG9nKTLpE aPVFUZ70+hygzmljkBzgoj5/efEQqwJrXe3AisPBzYBvQUdGGIEjeqySEOVFk7eT ai3gEogDX0XAWQ6D7nlzb9c/lyaOuTteJ3xF6gunx9F7EfssEOLv5aSRsCtGoQOr 7DXdSk/cUpxwHkZczr8COw7epkanq0wOUxbdD3ZDe/wllqerI4/OfpphgPHU0+6L jelWIhbRwxjo9vDJp/A6PkOx6e2d+RFGfot10yhKX0QGxxnm3Lm6y71JzRvXVLYq moiBD9rgFnmpuA== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:49 2025 by rpki-client