This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft File: 1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json) Hash identifier: MCJCOvnrHeiBdiJeA2pEwplTDJqnPQhlGJ8Cs2Sa7Z0= Subject key identifier: 33:46:91:99:31:82:0C:23:D5:2A:3E:30:BA:62:25:40:83:A5:CD:AF Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Certificate serial: 019B1B3B9EED2FBAF61CFD94345F531E13FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft Manifest number: BC Signing time: Sun 14 Dec 2025 05:00:50 +0000 Manifest this update: Sun 14 Dec 2025 05:00:50 +0000 Manifest next update: Mon 15 Dec 2025 05:00:50 +0000 Files and hashes: 1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: 9PnU8fLSyfvTnnZvi3Rt5aq8fgJTHG/ZWUkmikkcaLM=) 2: 2WniE5dL7byWUDCeGxHoMJMqczE.roa (hash: IjkZ5kKZt7FJQZkAKdTzI1e8SsDRi0qw3ixu7BVqjpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:9e:ed:2f:ba:f6:1c:fd:94:34:5f:53:1e:13:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Validity Not Before: Dec 14 05:00:50 2025 GMT Not After : Dec 15 05:00:50 2025 GMT Subject: CN=3346919931820c23d52a3e30ba62254083a5cdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:be:ac:fb:e7:a5:32:07:45:5e:73:a3:9f:d0: 99:ea:24:2c:90:63:f3:34:d4:d6:34:05:23:8b:24: f5:2a:a2:8b:44:2a:7e:81:3d:db:24:94:05:07:04: ba:1c:36:2a:bb:fd:26:43:95:a5:53:e1:9e:67:3f: ea:a5:5d:5c:e6:d7:83:21:d8:11:50:5e:96:9c:75: f4:fd:88:82:72:9a:bd:b8:ca:1e:44:f0:26:b0:3a: d7:c0:bb:91:ce:eb:9f:8f:79:81:79:05:84:3a:8b: 24:f4:b7:a4:45:6d:fa:94:71:de:1f:f5:eb:86:d3: 09:39:3e:40:5b:6a:65:54:d4:a8:95:6f:72:72:4c: cf:43:2b:6b:25:1c:10:75:4e:56:52:13:70:24:5d: f4:0b:3c:9e:e4:4b:cb:85:ca:a8:cb:a6:6a:97:bb: 82:fc:bb:9e:61:42:3d:24:c3:11:b8:f1:56:83:8a: f7:76:ab:17:37:f1:3e:a4:c2:2b:da:4c:7a:25:0c: 97:a9:d5:89:47:20:b9:a7:dd:8f:8e:6e:c2:63:4b: eb:9b:f2:7c:66:1b:31:54:4c:71:d7:fd:50:6f:db: f0:b1:64:d7:1c:45:86:32:25:32:ef:cc:6d:08:ea: e2:b5:4d:4d:0d:24:ba:7e:de:45:d9:27:e4:18:15: d8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:46:91:99:31:82:0C:23:D5:2A:3E:30:BA:62:25:40:83:A5:CD:AF X509v3 Authority Key Identifier: keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3b:8d:c8:bf:60:30:91:42:50:00:20:a4:37:7f:6c:14:6b: f2:3e:76:72:eb:50:97:bf:5b:4b:2e:00:c5:cf:8c:9d:72:1d: c0:a5:61:88:2b:d7:5a:67:0e:a6:68:5c:61:f6:2b:22:ae:3f: 71:31:32:7b:2d:4f:2d:67:17:0a:c8:58:c3:b7:91:04:91:8e: 88:91:26:8b:aa:10:b9:33:9e:89:54:bc:0a:8c:c4:b7:39:d7: 55:8a:da:e0:49:7a:bb:26:4a:c6:36:bd:17:5b:7f:7a:72:f8: 4e:10:da:fe:2d:db:bb:9c:d8:35:54:29:b0:9a:d6:48:98:b1: 2c:a1:e8:39:30:16:19:34:48:c0:0c:45:5b:35:d3:42:fb:98: 71:05:c6:43:0f:aa:61:cb:75:a0:90:3f:99:85:8a:22:31:6e: b9:8e:a8:e2:96:40:7e:67:56:f9:8b:55:2c:49:fc:b7:7c:51: b6:d4:1d:9e:39:a8:af:9d:f2:cb:ed:ed:0e:3b:37:4a:53:26: 30:5d:50:6e:ec:c0:f6:67:95:fe:6a:b2:fa:4a:cb:db:c2:92: b2:78:f4:80:ec:fd:5b:60:be:6f:aa:18:15:52:f5:35:76:57: 7d:d7:1b:c9:c1:dc:c9:31:c4:cb:cb:4f:a8:d8:9e:24:4d:8d: 4e:4a:ee:e8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsbO57tL7r2HP2UNF9THhP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTY0N2U1NDdjNGFmNGU1YmRjNjU5ZTRjMTRmOTFmZjlj ZThhMDUwHhcNMjUxMjE0MDUwMDUwWhcNMjUxMjE1MDUwMDUwWjAzMTEwLwYDVQQD EygzMzQ2OTE5OTMxODIwYzIzZDUyYTNlMzBiYTYyMjU0MDgzYTVjZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj76s++elMgdFXnOjn9CZ6iQskGPz NNTWNAUjiyT1KqKLRCp+gT3bJJQFBwS6HDYqu/0mQ5WlU+GeZz/qpV1c5teDIdgR UF6WnHX0/YiCcpq9uMoeRPAmsDrXwLuRzuufj3mBeQWEOosk9LekRW36lHHeH/Xr htMJOT5AW2plVNSolW9yckzPQytrJRwQdU5WUhNwJF30Czye5EvLhcqoy6Zql7uC /LueYUI9JMMRuPFWg4r3dqsXN/E+pMIr2kx6JQyXqdWJRyC5p92Pjm7CY0vrm/J8 ZhsxVExx1/1Qb9vwsWTXHEWGMiUy78xtCOritU1NDSS6ft5F2SfkGBXYpQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDNGkZkxggwj1So+MLpiJUCDpc2vMB8GA1UdIwQY MBaAFPkWR+VHxK9OW9xlnkwU+R/5zooFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SWkg1VWZFcjA1YjNHV2VUQlQ1SF9uT2lnVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvM2UyNjYzLTFmYjMtNDM2ZC1hZTc1 LTIxNGY4NzUzMGJhZi8xLzEtUlpINVVmRXIwNWIzR1dlVEJUNUhfbk9pZ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY0LzNlMjY2My0xZmIzLTQzNmQtYWU3NS0yMTRmODc1MzBi YWYvMS8xLVJaSDVVZkVyMDViM0dXZVRCVDVIX25PaWdVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjuN yL9gMJFCUAAgpDd/bBRr8j52cutQl79bSy4Axc+MnXIdwKVhiCvXWmcOpmhcYfYr Iq4/cTEyey1PLWcXCshYw7eRBJGOiJEmi6oQuTOeiVS8CozEtznXVYra4El6uyZK xja9F1t/enL4ThDa/i3bu5zYNVQpsJrWSJixLKHoOTAWGTRIwAxFWzXTQvuYcQXG Qw+qYct1oJA/mYWKIjFuuY6o4pZAfmdW+YtVLEn8t3xRttQdnjmor53yy+3tDjs3 SlMmMF1QbuzA9meV/mqy+krL28KSsnj0gOz9W2C+b6oYFVL1NXZXfdcbycHcyTHE y8tPqNieJE2NTkru6A== -----END CERTIFICATE-----Generated at Sun Dec 14 15:23:00 2025 by rpki-client