This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json) Hash identifier: ql8uquZv6qf1K2f+hXnCmIg6VSYoS4VtAV+9wNPDR0g= Subject key identifier: 64:50:88:BE:35:E4:D1:BD:35:66:0C:B7:55:02:8B:3F:ED:38:BF:2E Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Certificate serial: 019B0DB6CA280A430949D8F0F04176E6E2B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft Manifest number: 0225 Signing time: Thu 11 Dec 2025 14:00:41 +0000 Manifest this update: Thu 11 Dec 2025 14:00:41 +0000 Manifest next update: Fri 12 Dec 2025 14:00:41 +0000 Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: XB4dRTYyUGyBGXnKYLzVP8vy40YBB2wriN/kcmrRz7M=) 2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ca:28:0a:43:09:49:d8:f0:f0:41:76:e6:e2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Validity Not Before: Dec 11 14:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=645088be35e4d1bd35660cb755028b3fed38bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:d2:ef:13:2e:36:4f:3b:e9:36:28:f0:ef: 24:e4:c4:2d:65:f2:e4:04:db:0f:7f:1a:1b:63:9f: 6e:a7:e8:06:3f:54:6c:2d:55:da:03:52:fb:94:f7: f5:50:b3:cf:0d:f9:34:db:85:01:7f:5b:5a:b2:65: 2a:34:6e:d0:42:18:68:e3:4a:59:9d:7a:10:87:de: 3a:40:65:96:6f:0f:f0:72:5d:ef:aa:8a:80:68:5e: f0:96:79:44:f3:7d:41:85:d5:2b:2b:09:e6:e4:5f: 25:62:7c:15:34:e9:87:6c:2e:3f:6f:fe:bd:98:1e: d2:d8:fd:4a:fd:e2:c6:c7:7b:5f:96:e5:47:33:a0: 2d:5a:e5:fc:7e:7e:a6:d1:1e:e5:4d:07:93:69:3e: 73:6d:c0:9e:4c:6a:5b:79:05:cb:8f:c1:5f:7c:30: 48:3d:e2:9a:d7:f6:86:4e:48:22:79:63:9c:9f:33: 06:5c:1a:60:fb:9d:42:be:9e:d2:8c:2a:0b:fd:a0: c4:42:cb:14:be:26:0a:0d:4d:32:1d:5f:dd:32:6b: 51:59:28:73:04:39:22:e3:ac:e2:8a:95:78:98:d2: 8f:29:36:25:ae:62:a9:49:64:44:26:4a:c3:7d:a0: c3:58:26:ab:77:89:18:f2:4a:32:ba:25:58:ff:b2: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:50:88:BE:35:E4:D1:BD:35:66:0C:B7:55:02:8B:3F:ED:38:BF:2E X509v3 Authority Key Identifier: keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:29:22:51:93:8e:f6:70:b8:b3:f0:00:2e:22:c6:0b:30:c8: 7d:d9:bd:bb:53:48:25:e1:23:5c:a2:51:61:bf:7d:3d:ad:6e: c0:07:c9:8b:7b:2a:b0:64:a9:73:b4:e8:ae:7b:b9:8b:79:1c: df:83:5b:02:a0:cf:c8:8f:cb:77:17:c0:c8:16:bd:a7:ff:c7: e8:8e:22:0e:b1:7d:6a:23:5f:51:2e:e9:1a:83:a5:af:33:c7: 09:7b:9b:37:d2:84:7c:a3:fe:67:06:ae:70:cd:66:e9:98:e9: d0:0d:ad:d3:4f:c2:fe:84:97:d6:11:b1:e6:50:71:61:ad:7d: b2:83:01:5d:e5:4d:02:ce:b4:b2:49:be:ef:36:52:b2:7f:ac: 7d:fe:5b:35:b0:21:1e:57:d9:64:99:84:06:fd:64:90:3d:a2: dd:cf:77:ce:fe:c4:34:60:45:32:00:17:c4:38:82:fc:1b:e5: 8e:df:dd:b8:3b:11:39:6f:80:33:3f:b5:d4:af:e1:e0:4f:bf: 7c:8c:86:7f:f4:90:4a:db:33:cf:53:f6:a2:7f:a5:0d:4d:1f: 45:ac:5c:4e:56:25:3c:77:26:1a:3f:1b:e2:66:1f:17:51:60: 6a:bb:67:76:52:ba:cb:7c:ad:88:f1:66:b1:de:04:24:e6:7e: 68:8a:b8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtsooCkMJSdjw8EF25uKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTQ3OWFmZTNhOWExOGUxYzM3NGZjYTAyMmQxZmYyYTI1 NWIxYWYwHhcNMjUxMjExMTQwMDQxWhcNMjUxMjEyMTQwMDQxWjAzMTEwLwYDVQQD Eyg2NDUwODhiZTM1ZTRkMWJkMzU2NjBjYjc1NTAyOGIzZmVkMzhiZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrDS7xMuNk876TYo8O8k5MQtZfLk BNsPfxobY59up+gGP1RsLVXaA1L7lPf1ULPPDfk024UBf1tasmUqNG7QQhho40pZ nXoQh946QGWWbw/wcl3vqoqAaF7wlnlE831BhdUrKwnm5F8lYnwVNOmHbC4/b/69 mB7S2P1K/eLGx3tfluVHM6AtWuX8fn6m0R7lTQeTaT5zbcCeTGpbeQXLj8FffDBI PeKa1/aGTkgieWOcnzMGXBpg+51Cvp7SjCoL/aDEQssUviYKDU0yHV/dMmtRWShz BDki46ziipV4mNKPKTYlrmKpSWREJkrDfaDDWCard4kY8koyuiVY/7Kx7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRQiL415NG9NWYMt1UCiz/tOL8uMB8GA1UdIwQY MBaAFK2Uea/jqaGOHDdPygItH/KiVbGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQt YjE2MjQyYjliZGU3LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQtYjE2MjQyYjliZGU3 LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCkiUZOO 9nC4s/AALiLGCzDIfdm9u1NIJeEjXKJRYb99Pa1uwAfJi3sqsGSpc7Tornu5i3kc 34NbAqDPyI/LdxfAyBa9p//H6I4iDrF9aiNfUS7pGoOlrzPHCXubN9KEfKP+Zwau cM1m6Zjp0A2t00/C/oSX1hGx5lBxYa19soMBXeVNAs60skm+7zZSsn+sff5bNbAh HlfZZJmEBv1kkD2i3c93zv7ENGBFMgAXxDiC/Bvljt/duDsROW+AMz+11K/h4E+/ fIyGf/SQStszz1P2on+lDU0fRaxcTlYlPHcmGj8b4mYfF1FgartndlK6y3ytiPFm sd4EJOZ+aIq45Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:23 2025 by rpki-client