This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json) Hash identifier: wj0Bm7JGU8I8bYv91ZV/a8+g1xpWMJt5zmohXazWO/E= Subject key identifier: 38:3F:B2:E6:99:09:CF:BE:EF:D6:10:97:97:AD:31:5B:E1:4E:4C:55 Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb Certificate serial: 019B2408540E3C6ACB52CF3E020790D060FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft Manifest number: 10B8 Signing time: Mon 15 Dec 2025 22:01:24 +0000 Manifest this update: Mon 15 Dec 2025 22:01:24 +0000 Manifest next update: Tue 16 Dec 2025 22:01:24 +0000 Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=) 2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: HnDi4/9GzcUk/LXd0RwxeE2IcIF1SIvC2gvFyuU0Yes=) 3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:54:0e:3c:6a:cb:52:cf:3e:02:07:90:d0:60:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb Validity Not Before: Dec 15 22:01:24 2025 GMT Not After : Dec 16 22:01:24 2025 GMT Subject: CN=383fb2e69909cfbeefd6109797ad315be14e4c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:5e:1c:39:a0:c2:a3:6a:cb:f3:f0:8a:7c: 93:4b:93:4c:d0:37:b3:2a:c9:10:f9:a8:6a:d1:2b: 45:11:f5:c5:30:f7:81:e2:b6:a4:ee:28:3c:09:29: 3b:72:72:b9:a3:65:99:ee:5e:b1:b3:c0:f9:6d:c4: 64:45:de:ff:33:4c:77:91:4b:17:f9:e8:17:a6:fb: 86:20:c5:d4:8b:c7:48:a9:da:57:00:89:31:67:f0: 31:81:83:b6:03:aa:06:a5:cd:f2:81:a2:c1:dc:33: 0e:52:23:2c:5e:07:c0:5b:bb:5e:6e:3d:f5:2f:40: 04:0a:92:55:46:14:68:a4:6e:8d:f0:39:a9:1a:c6: 84:16:a8:64:81:37:df:13:b6:0b:15:56:1e:ce:7a: cf:eb:e0:ba:32:9f:0c:fa:bf:76:ea:c4:f8:e5:9e: c8:00:0b:e5:6e:aa:d5:c2:e5:ae:ee:67:9d:7c:5f: bc:fe:55:28:ab:50:09:41:50:1a:db:de:2b:e2:63: 6e:98:81:78:4f:07:eb:f2:df:4d:1c:48:00:f0:d0: 19:3b:7b:82:f7:9c:00:74:cf:7d:6c:21:5b:ac:91: fc:c6:58:14:2f:12:2b:75:bf:4f:3d:93:a4:eb:83: 18:83:04:99:5e:eb:b5:b0:35:e9:9c:5e:fb:fb:15: 04:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3F:B2:E6:99:09:CF:BE:EF:D6:10:97:97:AD:31:5B:E1:4E:4C:55 X509v3 Authority Key Identifier: keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:59:b6:8a:78:9b:c3:0e:d7:81:0b:c6:99:c6:b8:d9:e4:96: 60:f1:9c:cd:46:78:d1:c9:40:24:ee:c1:ef:ec:05:10:ae:70: bd:26:e1:64:4e:aa:81:16:e6:6c:2c:f3:fe:86:3b:a2:0d:ac: 31:35:fb:eb:5b:00:ec:41:ee:0a:78:e1:27:67:1e:c6:95:7e: 5c:e2:77:0d:17:23:80:25:3e:c0:5d:4f:f5:ff:70:0d:73:eb: ae:30:a4:33:d9:78:74:d2:6d:7c:45:40:d6:7d:43:1f:2f:86: 4d:40:ef:aa:8c:fc:af:06:9c:c4:4c:15:b0:dc:95:ef:8f:ea: 6f:f4:34:e9:ac:99:8e:fa:9f:87:c5:cf:32:43:fd:37:ee:aa: a8:2d:81:7a:ba:10:c4:3d:35:77:b9:6d:4a:d3:c8:fa:1e:3a: 29:41:aa:e3:8e:1c:7d:db:a0:cf:27:8f:56:7c:e5:41:45:ae: f0:96:f9:e8:d5:60:d6:3b:18:74:e6:ef:f6:a4:af:12:1b:4a: a7:00:3e:e6:2a:84:f0:d2:a3:16:5f:22:c2:a9:f5:6f:cf:19: 6d:08:91:3b:2c:60:25:68:ee:66:4a:e9:3e:7d:9c:ed:04:14: ea:0c:e2:c7:1d:bf:9b:d3:9a:f9:95:e7:62:ee:00:14:72:85: 8b:15:f3:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCFQOPGrLUs8+AgeQ0GD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTYyZWE1NjYwNTQ2NTZlZjgyYWFjZTJkNzFjNzZkMWIw Yjg4YmIwHhcNMjUxMjE1MjIwMTI0WhcNMjUxMjE2MjIwMTI0WjAzMTEwLwYDVQQD EygzODNmYjJlNjk5MDljZmJlZWZkNjEwOTc5N2FkMzE1YmUxNGU0YzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJeHDmgwqNqy/PwinyTS5NM0Dez KskQ+ahq0StFEfXFMPeB4rak7ig8CSk7cnK5o2WZ7l6xs8D5bcRkRd7/M0x3kUsX +egXpvuGIMXUi8dIqdpXAIkxZ/AxgYO2A6oGpc3ygaLB3DMOUiMsXgfAW7tebj31 L0AECpJVRhRopG6N8DmpGsaEFqhkgTffE7YLFVYeznrP6+C6Mp8M+r926sT45Z7I AAvlbqrVwuWu7medfF+8/lUoq1AJQVAa294r4mNumIF4Twfr8t9NHEgA8NAZO3uC 95wAdM99bCFbrJH8xlgULxIrdb9PPZOk64MYgwSZXuu1sDXpnF77+xUELwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg/suaZCc++79YQl5etMVvhTkxVMB8GA1UdIwQY MBaAFEWWLqVmBUZW74Kqzi1xx20bC4i7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5Mjgt YzVjMDgyYTMxM2Y3LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5MjgtYzVjMDgyYTMxM2Y3 LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1m2inib ww7XgQvGmca42eSWYPGczUZ40clAJO7B7+wFEK5wvSbhZE6qgRbmbCzz/oY7og2s MTX761sA7EHuCnjhJ2cexpV+XOJ3DRcjgCU+wF1P9f9wDXPrrjCkM9l4dNJtfEVA 1n1DHy+GTUDvqoz8rwacxEwVsNyV74/qb/Q06ayZjvqfh8XPMkP9N+6qqC2BeroQ xD01d7ltStPI+h46KUGq444cfdugzyePVnzlQUWu8Jb56NVg1jsYdObv9qSvEhtK pwA+5iqE8NKjFl8iwqn1b88ZbQiROyxgJWjuZkrpPn2c7QQU6gzixx2/m9Oa+ZXn Yu4AFHKFixXzig== -----END CERTIFICATE-----Generated at Tue Dec 16 00:04:12 2025 by rpki-client