This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json) Hash identifier: aPa937DK7v+hQubo34+ISs5k7y64Xe/8A6WJpBmVTXo= Subject key identifier: 77:DF:30:53:56:F9:2C:D4:BE:8E:BC:92:C6:8B:36:9D:D5:DB:0F:BF Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd Certificate serial: 019B273FC35084E1B2526C8FDD4840BDE79D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft Manifest number: 170D Signing time: Tue 16 Dec 2025 13:00:48 +0000 Manifest this update: Tue 16 Dec 2025 13:00:48 +0000 Manifest next update: Wed 17 Dec 2025 13:00:48 +0000 Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: xrpNTRu3Eco1zH7Mgtt8OixtsfHiioCTyG9qhrbf6Ro=) 2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=) 3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:c3:50:84:e1:b2:52:6c:8f:dd:48:40:bd:e7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd Validity Not Before: Dec 16 13:00:48 2025 GMT Not After : Dec 17 13:00:48 2025 GMT Subject: CN=77df305356f92cd4be8ebc92c68b369dd5db0fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:93:cb:59:c5:f9:40:37:e0:be:28:d4:7f:e0: 4c:20:fe:2c:dc:b0:eb:ad:bb:b5:b2:56:a9:c0:29: 8f:e2:b4:ba:a4:c0:f3:fd:0b:06:14:d9:0a:46:9f: f5:ea:8d:76:22:3e:d8:d4:a1:6b:09:01:0e:d3:21: d7:21:b7:29:1d:a8:a9:73:11:f1:76:75:34:be:66: 97:df:25:6e:f3:cc:92:5e:6f:19:bf:c1:19:c5:20: 73:0c:ad:0c:e6:50:b8:a0:4b:37:86:53:70:49:fd: b0:f0:fb:fb:72:45:c2:87:68:a1:aa:bf:29:9a:c7: bb:20:2a:98:21:27:44:be:4c:a5:3a:30:f3:2f:7c: 5d:8c:c1:ef:7f:ec:63:0c:e3:24:1b:4b:bd:56:83: aa:15:fc:63:83:9f:db:44:da:86:dd:e9:b9:48:b1: 00:c9:e7:42:38:ee:bc:69:31:8c:20:d3:22:4b:71: 2a:d5:0b:b8:eb:a4:20:7b:fd:24:b9:89:d7:20:43: 01:0b:65:ed:d4:98:b7:ad:31:a2:2b:e5:68:3f:2b: b4:5e:89:35:8a:7a:98:1f:e5:44:cf:60:e6:a9:8e: 65:09:83:a3:f6:7d:ca:e2:3a:75:15:c6:2f:87:1e: fd:e0:d5:c7:d0:db:dc:1c:3f:22:27:47:48:8a:17: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:DF:30:53:56:F9:2C:D4:BE:8E:BC:92:C6:8B:36:9D:D5:DB:0F:BF X509v3 Authority Key Identifier: keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:48:97:9d:bc:b4:0d:9b:27:d6:b3:8e:79:9b:81:ed:3c:d0: c1:d9:c7:4a:85:71:58:2a:e7:c0:b0:d8:32:9c:41:78:74:29: 38:0e:53:67:4c:18:ea:2b:db:6f:47:20:83:00:00:f3:74:93: d1:47:ff:d8:07:e3:d5:46:69:ed:c1:f4:1a:b1:ad:d4:e4:c0: 15:1b:b1:d9:02:d2:8c:15:37:0a:c1:29:42:cc:1a:48:9d:54: 18:e6:93:14:0b:47:69:c6:b9:d2:61:c1:ed:1f:e3:33:85:b4: 79:0c:2c:43:9f:6e:7b:39:d1:d3:7e:6c:da:e9:2b:1c:ef:a6: a0:ae:4f:ca:f1:59:48:0c:76:bb:a9:da:71:13:9d:58:57:55: 8d:3f:a3:d1:32:03:53:6b:4f:06:51:18:bb:97:ca:35:75:fc: d3:58:b1:5d:08:fc:b9:e5:20:64:48:0c:99:94:d6:5a:f8:c1: 68:05:26:a0:04:00:7b:ca:4a:00:ed:6c:2c:06:fd:58:23:f1: 2e:46:d1:13:07:d1:52:27:82:23:c2:64:2a:eb:97:79:21:45: fe:88:d2:49:2c:01:fa:ce:13:75:b9:fc:3a:64:77:9d:dd:da: da:a1:8f:1d:0c:42:3c:e5:84:f6:78:d5:d0:8c:fb:9b:ed:9a: e8:92:54:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP8NQhOGyUmyP3UhAveedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzRkYjVjNDFlNzExYjczZDhmMjlkYWMxMmU5YjgzNjRj ZDFmYmQwHhcNMjUxMjE2MTMwMDQ4WhcNMjUxMjE3MTMwMDQ4WjAzMTEwLwYDVQQD Eyg3N2RmMzA1MzU2ZjkyY2Q0YmU4ZWJjOTJjNjhiMzY5ZGQ1ZGIwZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpPLWcX5QDfgvijUf+BMIP4s3LDr rbu1slapwCmP4rS6pMDz/QsGFNkKRp/16o12Ij7Y1KFrCQEO0yHXIbcpHaipcxHx dnU0vmaX3yVu88ySXm8Zv8EZxSBzDK0M5lC4oEs3hlNwSf2w8Pv7ckXCh2ihqr8p mse7ICqYISdEvkylOjDzL3xdjMHvf+xjDOMkG0u9VoOqFfxjg5/bRNqG3em5SLEA yedCOO68aTGMINMiS3Eq1Qu466Qge/0kuYnXIEMBC2Xt1Ji3rTGiK+VoPyu0Xok1 inqYH+VEz2DmqY5lCYOj9n3K4jp1FcYvhx794NXH0NvcHD8iJ0dIihfgFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHffMFNW+SzUvo68ksaLNp3V2w+/MB8GA1UdIwQY MBaAFBc021xB5xG3PY8p2sEum4NkzR+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYt NWYyNjUwYzkwMTJkLzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYtNWYyNjUwYzkwMTJk LzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUiXnby0 DZsn1rOOeZuB7TzQwdnHSoVxWCrnwLDYMpxBeHQpOA5TZ0wY6ivbb0cggwAA83ST 0Uf/2Afj1UZp7cH0GrGt1OTAFRux2QLSjBU3CsEpQswaSJ1UGOaTFAtHaca50mHB 7R/jM4W0eQwsQ59ueznR035s2ukrHO+moK5PyvFZSAx2u6nacROdWFdVjT+j0TID U2tPBlEYu5fKNXX801ixXQj8ueUgZEgMmZTWWvjBaAUmoAQAe8pKAO1sLAb9WCPx LkbREwfRUieCI8JkKuuXeSFF/ojSSSwB+s4Tdbn8OmR3nd3a2qGPHQxCPOWE9njV 0Iz7m+2a6JJUXQ== -----END CERTIFICATE-----Generated at Tue Dec 16 15:34:12 2025 by rpki-client