This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json) Hash identifier: 1IeNkwplXMKw8eAf9F+7I7cqfBH9radef7ZIV/WUBJc= Subject key identifier: 18:73:6D:54:7A:CC:D6:C3:A2:11:93:BA:AB:D3:E6:DC:B5:48:79:98 Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f Certificate serial: 019B48141E8D2E973B3B732268E30CE85FCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft Manifest number: 0A50 Signing time: Mon 22 Dec 2025 22:00:36 +0000 Manifest this update: Mon 22 Dec 2025 22:00:36 +0000 Manifest next update: Tue 23 Dec 2025 22:00:36 +0000 Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=) 2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: +QSpgiAm/6RAtjuSuE9+3uhmjiqo88n54Me3tqJR3UY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:1e:8d:2e:97:3b:3b:73:22:68:e3:0c:e8:5f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f Validity Not Before: Dec 22 22:00:36 2025 GMT Not After : Dec 23 22:00:36 2025 GMT Subject: CN=18736d547accd6c3a21193baabd3e6dcb5487998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:38:04:e9:7d:bd:ae:51:c5:60:56:b6:64: b0:b8:05:9d:a8:53:75:22:51:a6:2f:ae:76:1b:c1: c6:40:bd:6d:6a:bc:88:f2:ce:05:74:4f:9a:43:05: 32:a3:ba:f5:07:f2:60:7c:dd:46:9e:72:ff:62:33: ce:cc:ea:55:e5:f0:d8:20:cc:a1:5c:91:1d:8d:19: d1:e1:87:d7:df:a7:70:97:a3:26:22:77:4d:da:4d: 30:d6:6d:36:c1:bc:41:50:29:00:8e:68:4c:29:4f: c3:34:42:fd:06:4d:8a:c8:df:7f:4e:5b:3c:2a:fa: 25:8b:1b:8f:41:e3:af:cf:cc:3b:f4:1d:53:f2:0b: 0f:be:e4:cf:88:7f:0d:75:67:53:e5:83:7e:bc:f6: 33:44:0d:69:a7:c4:b3:10:ff:a7:32:f9:51:c2:cb: 49:6d:c3:e6:78:20:28:e7:1a:21:a8:d4:cc:da:b8: d1:19:ec:84:3e:9b:89:71:05:de:a8:7f:f7:3a:7b: ee:72:55:d1:2b:d9:81:fc:dc:97:f9:85:24:ff:02: a1:03:7d:27:27:24:4a:78:05:3d:94:e8:4f:9c:3b: 01:48:62:55:55:2e:b4:37:ab:d6:95:05:2d:30:a8: 6c:29:f0:f0:9d:21:f6:44:85:99:7d:6c:2f:0a:e9: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:73:6D:54:7A:CC:D6:C3:A2:11:93:BA:AB:D3:E6:DC:B5:48:79:98 X509v3 Authority Key Identifier: keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e9:13:93:08:c6:b0:22:ce:9a:2b:1e:07:c7:78:3d:c3:57: 90:cf:4d:04:2a:83:0f:b1:04:bd:ed:f8:fe:6d:58:6d:e1:14: 7c:24:bc:9d:e0:9b:23:2b:08:41:3d:cb:f8:97:fa:32:a5:a1: 84:be:4f:00:f3:f9:c2:6a:a3:90:81:68:39:c9:77:51:c5:8a: e2:8d:ab:b4:01:ab:c4:d2:8f:00:b4:a1:02:63:b3:53:2d:44: 38:7b:5c:a6:d0:6d:88:5b:bc:0c:c9:64:c1:f5:b5:47:11:fd: b3:8a:8e:bf:81:77:78:92:5a:20:81:2f:dd:58:d1:0a:1f:47: bd:b5:9a:b8:12:5e:a7:21:30:f4:cd:c6:d4:c3:d1:e1:ba:9e: dc:2b:ca:f9:b0:d8:6e:7b:c8:08:22:89:9e:d8:4e:7c:4e:f0: 3e:d3:15:fe:00:b2:ba:66:da:6e:a8:0a:39:81:50:32:19:10: 95:12:9f:ea:03:5e:47:e4:a7:92:86:c1:9a:e1:32:ba:2b:4d: 97:65:69:23:ee:88:23:15:3e:46:53:02:76:97:10:64:a9:e8: 88:81:f1:b9:1a:60:ea:e8:d3:2b:af:52:24:e5:18:aa:88:ab: a7:8e:61:9b:fa:13:22:fc:c8:c7:01:df:16:3d:9f:74:4c:60: 0f:e9:93:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFB6NLpc7O3MiaOMM6F/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1 MGVmMGYwHhcNMjUxMjIyMjIwMDM2WhcNMjUxMjIzMjIwMDM2WjAzMTEwLwYDVQQD EygxODczNmQ1NDdhY2NkNmMzYTIxMTkzYmFhYmQzZTZkY2I1NDg3OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXc4BOl9va5RxWBWtmSwuAWdqFN1 IlGmL652G8HGQL1taryI8s4FdE+aQwUyo7r1B/JgfN1GnnL/YjPOzOpV5fDYIMyh XJEdjRnR4YfX36dwl6MmIndN2k0w1m02wbxBUCkAjmhMKU/DNEL9Bk2KyN9/Tls8 KvolixuPQeOvz8w79B1T8gsPvuTPiH8NdWdT5YN+vPYzRA1pp8SzEP+nMvlRwstJ bcPmeCAo5xohqNTM2rjRGeyEPpuJcQXeqH/3OnvuclXRK9mB/NyX+YUk/wKhA30n JyRKeAU9lOhPnDsBSGJVVS60N6vWlQUtMKhsKfDwnSH2RIWZfWwvCukkEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhzbVR6zNbDohGTuqvT5ty1SHmYMB8GA1UdIwQY MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOkTkwjG sCLOmiseB8d4PcNXkM9NBCqDD7EEve34/m1YbeEUfCS8neCbIysIQT3L+Jf6MqWh hL5PAPP5wmqjkIFoOcl3UcWK4o2rtAGrxNKPALShAmOzUy1EOHtcptBtiFu8DMlk wfW1RxH9s4qOv4F3eJJaIIEv3VjRCh9HvbWauBJepyEw9M3G1MPR4bqe3CvK+bDY bnvICCKJnthOfE7wPtMV/gCyumbabqgKOYFQMhkQlRKf6gNeR+SnkobBmuEyuitN l2VpI+6IIxU+RlMCdpcQZKnoiIHxuRpg6ujTK69SJOUYqoirp45hm/oTIvzIxwHf Fj2fdExgD+mTHQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:15 2025 by rpki-client