This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json) Hash identifier: 7rNnztrYb9n6watItf5ITMbG65tqVZt0EE3+2yZzd4g= Subject key identifier: 71:CC:78:BF:C0:5B:C0:31:CD:6A:D4:DC:FE:E5:66:50:A0:F2:0B:14 Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9 Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9 Certificate serial: 019B3C7F4570A4637CCDEE40B70D6F8ECF6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:02:12 +0000 Manifest this update: Sat 20 Dec 2025 16:02:12 +0000 Manifest next update: Sun 21 Dec 2025 16:02:12 +0000 Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: PDxsjGGbJ8WVIYR7Ni5WBRjtHdGUt/kNJQXTZW2CLpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:45:70:a4:63:7c:cd:ee:40:b7:0d:6f:8e:cf:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9 Validity Not Before: Dec 20 16:02:12 2025 GMT Not After : Dec 21 16:02:12 2025 GMT Subject: CN=71cc78bfc05bc031cd6ad4dcfee56650a0f20b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:36:2a:fe:0f:ee:50:72:d8:4d:b1:68:dc: 98:81:c2:30:26:02:d7:9e:3c:c6:f0:d1:18:e5:49: 3d:0d:6b:33:85:3a:51:aa:29:e9:59:9b:86:92:2e: a4:fb:19:18:8d:41:35:1e:4f:13:b5:cb:11:01:72: 71:53:06:03:92:12:65:8c:68:75:81:4a:f0:fd:c1: 2a:fc:eb:61:e0:74:89:f0:5c:b7:36:1b:91:67:8a: 75:e2:cf:e2:87:0a:11:65:0e:9c:af:99:15:71:89: 17:aa:dc:bb:1a:4f:1d:c0:25:09:7b:ea:37:fb:30: 99:34:53:9b:d1:0f:3e:5d:3a:ac:07:44:0a:01:53: 08:55:bc:6c:0c:c0:6a:b0:3a:62:57:a6:49:ca:14: e0:00:5c:10:ab:92:de:11:b9:d3:ce:b7:76:9f:b0: 67:dd:6a:fe:7d:7d:38:36:93:ed:ae:c3:2b:92:fd: 10:43:2a:43:fb:e7:c9:c3:2f:c8:e8:b3:d8:be:79: 0d:72:48:53:b4:02:e9:40:6a:ad:0a:b7:0e:e9:f3: 4a:b4:47:1b:9b:db:6c:3b:7f:28:bf:49:7b:cf:bf: f0:3c:62:dd:16:f7:85:ef:22:0b:74:19:5a:57:d9: 37:d3:4c:54:7b:3a:08:91:cd:cd:b2:c0:e7:1d:b8: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:78:BF:C0:5B:C0:31:CD:6A:D4:DC:FE:E5:66:50:A0:F2:0B:14 X509v3 Authority Key Identifier: keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:81:74:31:de:b9:ea:da:af:f7:fb:5b:e2:ae:f1:5a:29: 81:13:ee:49:44:f1:5a:b3:67:ef:c0:09:c9:52:41:0b:8d:7f: 75:7d:3e:a3:1e:f6:ae:6a:7f:be:42:ad:d0:49:0f:ec:b4:9e: 62:47:ef:08:2b:71:f7:26:a6:bc:cd:6d:4e:87:ed:76:83:2c: 63:6d:1a:dc:15:5e:6a:62:1c:c0:4c:90:06:75:28:b0:23:57: 62:2e:c3:33:46:c5:80:33:98:f8:48:5f:44:c2:6c:0c:2c:05: b4:ce:42:21:9a:39:37:3a:ba:45:c0:12:06:b8:d2:5d:5a:0e: b7:4e:61:3a:86:db:a3:9d:70:db:d5:26:fa:a4:22:07:d9:21: ee:2a:81:e0:b0:6e:fb:63:aa:5d:c3:fc:8d:73:b6:9a:54:7a: 12:b1:e2:e0:44:f1:3a:29:87:a9:a3:75:79:31:08:dd:ec:26: 3c:22:43:16:46:05:50:ef:33:94:5f:cd:91:44:a1:99:01:a4: 67:f5:be:98:f4:e2:3f:65:8a:e7:a2:4a:87:df:d6:de:07:60: f5:63:90:16:99:dd:f1:fb:88:04:18:a5:2a:b3:f3:b6:58:9a: 52:e9:6a:e6:0d:27:28:c4:38:40:5d:79:41:fe:fd:ef:99:ca: 2c:d9:a9:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0VwpGN8ze5Atw1vjs9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjdmM2Y4MjVmOGU4YzI1NjVlYWVmYjY2ZTc3NDRjOTI5 NWRjYzkwHhcNMjUxMjIwMTYwMjEyWhcNMjUxMjIxMTYwMjEyWjAzMTEwLwYDVQQD Eyg3MWNjNzhiZmMwNWJjMDMxY2Q2YWQ0ZGNmZWU1NjY1MGEwZjIwYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmU2Kv4P7lBy2E2xaNyYgcIwJgLX njzG8NEY5Uk9DWszhTpRqinpWZuGki6k+xkYjUE1Hk8TtcsRAXJxUwYDkhJljGh1 gUrw/cEq/Oth4HSJ8Fy3NhuRZ4p14s/ihwoRZQ6cr5kVcYkXqty7Gk8dwCUJe+o3 +zCZNFOb0Q8+XTqsB0QKAVMIVbxsDMBqsDpiV6ZJyhTgAFwQq5LeEbnTzrd2n7Bn 3Wr+fX04NpPtrsMrkv0QQypD++fJwy/I6LPYvnkNckhTtALpQGqtCrcO6fNKtEcb m9tsO38ov0l7z7/wPGLdFveF7yILdBlaV9k300xUezoIkc3NssDnHbgItQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHMeL/AW8AxzWrU3P7lZlCg8gsUMB8GA1UdIwQY MBaAFKP38/gl+OjCVl6u+2bndEySldzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAt YjBhYTdmZDYyMTliLzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAtYjBhYTdmZDYyMTli LzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYaBdDHe uerar/f7W+Ku8VopgRPuSUTxWrNn78AJyVJBC41/dX0+ox72rmp/vkKt0EkP7LSe YkfvCCtx9yamvM1tToftdoMsY20a3BVeamIcwEyQBnUosCNXYi7DM0bFgDOY+Ehf RMJsDCwFtM5CIZo5Nzq6RcASBrjSXVoOt05hOobbo51w29Um+qQiB9kh7iqB4LBu +2OqXcP8jXO2mlR6ErHi4ETxOimHqaN1eTEI3ewmPCJDFkYFUO8zlF/NkUShmQGk Z/W+mPTiP2WK56JKh9/W3gdg9WOQFpnd8fuIBBilKrPztliaUulq5g0nKMQ4QF15 Qf7975nKLNmpYA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:13:23 2025 by rpki-client