This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json) Hash identifier: W7DjFtzb4Zanz8mrXfx778Ls223yeEHI+/I4z7cAdRA= Subject key identifier: 59:EC:1C:13:FF:E2:0C:15:F7:11:AA:62:1B:1F:5A:75:FB:DC:DE:2C Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9 Certificate serial: 019B439297B002F4F3B35D9A18A8C922D1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft Manifest number: 0E62 Signing time: Mon 22 Dec 2025 01:00:39 +0000 Manifest this update: Mon 22 Dec 2025 01:00:39 +0000 Manifest next update: Tue 23 Dec 2025 01:00:39 +0000 Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: xKxKMqn1bh0U1r918JrV55crtVOBadD5J5nx6B6NVuE=) 2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:97:b0:02:f4:f3:b3:5d:9a:18:a8:c9:22:d1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9 Validity Not Before: Dec 22 01:00:39 2025 GMT Not After : Dec 23 01:00:39 2025 GMT Subject: CN=59ec1c13ffe20c15f711aa621b1f5a75fbdcde2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:8d:80:83:37:f3:e3:cf:f7:dc:0a:1e:50: 14:9a:27:0f:36:9e:a8:4e:41:8b:e9:a6:8d:e0:b9: 88:5e:9f:45:32:90:1c:e7:f9:49:c3:e8:d2:c1:59: b9:0a:97:19:38:43:25:97:85:19:b6:bd:fb:d8:da: ef:13:fd:45:75:f3:22:82:89:be:1b:40:27:e5:2e: a2:0e:ac:ca:10:d3:c3:67:90:c8:9a:05:5b:9a:be: 87:ad:09:58:5c:ae:c1:02:ea:ed:98:62:e8:0d:40: b5:ca:01:1f:41:fc:3e:ae:32:dc:fd:d4:a9:00:9e: 12:d9:f5:78:8b:47:fc:df:b5:a8:fd:c0:09:ec:5e: 61:93:bf:38:9c:4f:99:dd:34:cd:46:7c:20:6b:24: e9:aa:10:b8:29:e7:bd:fc:ac:d8:15:73:a7:10:c6: 65:ff:10:e2:f2:65:62:54:10:b5:6f:14:34:b2:b8: b6:59:48:02:ec:3a:e2:93:6c:5f:96:69:b9:52:ae: 42:67:ff:b6:20:43:a4:5c:08:69:97:f5:c5:27:69: 16:ef:49:29:f9:66:c3:12:96:a0:70:75:fc:0e:80: d8:94:c6:b0:3f:91:07:8a:ee:ee:61:09:2b:de:cc: 8b:31:da:60:32:23:8c:01:a7:6e:86:49:54:d0:70: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:EC:1C:13:FF:E2:0C:15:F7:11:AA:62:1B:1F:5A:75:FB:DC:DE:2C X509v3 Authority Key Identifier: keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:3d:fc:1b:b9:a3:be:92:db:4f:52:10:38:80:a1:29:de: fa:1e:a7:04:83:59:f4:b7:41:53:41:e1:67:60:b9:e6:83:e8: eb:46:c4:26:3c:5b:d2:4e:83:ef:86:db:d4:e8:10:37:c3:d3: 3a:a5:9a:3b:3d:b6:ba:c5:f2:f0:1f:e5:88:ed:82:89:86:f6: cc:7b:7d:63:d8:60:82:5c:0a:9c:e9:46:3e:70:04:b3:15:cf: b0:7d:6d:3c:40:f3:79:23:26:63:de:2c:bf:aa:d1:10:02:96: f1:76:37:2f:3f:1b:7a:91:39:ae:60:0d:08:19:2a:de:e9:ec: b6:bb:eb:3f:3d:4a:e0:b7:da:12:da:56:ce:02:5d:02:33:0d: 1b:e1:d5:6b:be:5b:94:19:e7:b5:08:e4:b7:54:5c:f9:61:32: b8:6e:96:f5:74:02:d6:f9:8a:13:e1:e5:7c:9c:d5:ee:bd:d2: 9f:18:77:a0:29:97:0c:80:0a:fe:cf:2a:71:c2:71:09:bf:95: d2:6d:89:23:ae:56:8a:6d:c8:0d:4f:49:6d:3c:48:87:0a:a9: bc:33:c6:60:36:34:dd:a3:3e:e9:e6:eb:88:50:cd:c9:db:ea: f3:6e:fb:e2:2d:56:b7:3a:b2:ab:80:cd:66:fa:52:e9:e4:8d: 56:d0:4e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkpewAvTzs12aGKjJItHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTY2ZmEzN2M3NjRjZGM2MmEwMGJjYTJiMmIyYzg3OWZm Njk5ZDkwHhcNMjUxMjIyMDEwMDM5WhcNMjUxMjIzMDEwMDM5WjAzMTEwLwYDVQQD Eyg1OWVjMWMxM2ZmZTIwYzE1ZjcxMWFhNjIxYjFmNWE3NWZiZGNkZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfCNgIM38+PP99wKHlAUmicPNp6o TkGL6aaN4LmIXp9FMpAc5/lJw+jSwVm5CpcZOEMll4UZtr372NrvE/1FdfMigom+ G0An5S6iDqzKENPDZ5DImgVbmr6HrQlYXK7BAurtmGLoDUC1ygEfQfw+rjLc/dSp AJ4S2fV4i0f837Wo/cAJ7F5hk784nE+Z3TTNRnwgayTpqhC4Kee9/KzYFXOnEMZl /xDi8mViVBC1bxQ0sri2WUgC7Drik2xflmm5Uq5CZ/+2IEOkXAhpl/XFJ2kW70kp +WbDEpagcHX8DoDYlMawP5EHiu7uYQkr3syLMdpgMiOMAaduhklU0HAMNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnsHBP/4gwV9xGqYhsfWnX73N4sMB8GA1UdIwQY MBaAFEUWb6N8dkzcYqALyisrLIef9pnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYt ZTA2NjBkMDIzMTA0LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYtZTA2NjBkMDIzMTA0 LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYds9/Bu5 o76S209SEDiAoSne+h6nBINZ9LdBU0HhZ2C55oPo60bEJjxb0k6D74bb1OgQN8PT OqWaOz22usXy8B/liO2CiYb2zHt9Y9hgglwKnOlGPnAEsxXPsH1tPEDzeSMmY94s v6rREAKW8XY3Lz8bepE5rmANCBkq3unstrvrPz1K4LfaEtpWzgJdAjMNG+HVa75b lBnntQjkt1Rc+WEyuG6W9XQC1vmKE+HlfJzV7r3Snxh3oCmXDIAK/s8qccJxCb+V 0m2JI65Wim3IDU9JbTxIhwqpvDPGYDY03aM+6ebriFDNydvq82774i1Wtzqyq4DN ZvpS6eSNVtBOTA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:33:42 2025 by rpki-client