This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json) Hash identifier: YjMvAwkYrqoC+shlKHp0Lk7PdGgHwWyzSOoT5/SLYOk= Subject key identifier: AE:FB:4F:13:E4:4B:5C:78:B8:C9:6F:22:2F:8C:F8:F4:9A:16:B1:A0 Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Certificate serial: 019B187184815B533D2BCADCFF778BCB0D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft Manifest number: 0814 Signing time: Sat 13 Dec 2025 16:00:51 +0000 Manifest this update: Sat 13 Dec 2025 16:00:51 +0000 Manifest next update: Sun 14 Dec 2025 16:00:51 +0000 Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=) 2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: ZlIbELZzNTI3mw9A8MQ3MWHramldzZbQ5LD12fbYrg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:84:81:5b:53:3d:2b:ca:dc:ff:77:8b:cb:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Validity Not Before: Dec 13 16:00:51 2025 GMT Not After : Dec 14 16:00:51 2025 GMT Subject: CN=aefb4f13e44b5c78b8c96f222f8cf8f49a16b1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:39:0b:ed:28:dc:db:92:22:61:b4:e7:58: 4b:2e:30:63:9a:1c:bc:ac:46:c8:9d:5b:8c:f2:93: 00:7e:de:ea:7c:cc:f3:fd:98:8e:26:70:81:c4:71: ae:68:17:d2:28:35:c5:de:25:85:04:d6:67:b8:f4: 8e:8d:e3:87:81:3b:21:26:91:3c:e4:4d:ee:96:3f: 28:25:cb:52:38:18:f5:5f:08:1f:bf:ac:59:f1:e8: 95:ec:a7:63:5b:9b:11:d3:c6:9d:5f:0f:16:83:d0: 1a:11:3c:7d:97:9f:3b:5f:94:40:10:c8:50:38:6b: ea:be:47:d4:65:e9:56:12:f1:2a:58:e4:5c:9c:8b: 27:63:2b:f0:26:00:27:e2:3d:7a:7f:5f:f7:ef:4b: 5b:cf:6b:92:c4:51:22:22:5d:9f:27:dc:56:99:f8: 6b:b1:ba:32:31:1a:3b:71:9d:fd:44:f9:9b:ff:7a: 42:f5:94:ff:0e:58:80:08:be:1e:0b:52:5b:cc:2d: 23:2b:2f:6d:aa:ad:66:e7:0a:b2:ee:12:c1:8f:1b: 32:67:eb:ba:08:64:f2:c0:eb:16:5c:8e:d8:a9:e9: f7:e9:ea:01:1b:09:ab:4f:30:b6:41:cd:a4:35:7d: fc:45:07:bb:b8:e0:fc:2f:b8:a6:0a:2a:43:0b:7e: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:4F:13:E4:4B:5C:78:B8:C9:6F:22:2F:8C:F8:F4:9A:16:B1:A0 X509v3 Authority Key Identifier: keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:76:60:15:4b:02:1a:9b:13:9b:d3:40:da:6b:5e:64:f8:ca: bc:c9:49:63:8e:1e:07:5e:f0:c6:34:6e:4a:a5:fe:b1:c8:ff: 2f:26:59:48:20:77:68:8b:7e:18:0b:ba:c2:96:17:67:76:26: d3:21:7c:c5:07:cc:b5:b1:d9:d6:b9:8f:9e:81:c2:fd:94:8f: fd:70:7f:31:38:20:b7:5f:09:15:ca:b4:74:63:27:8c:df:a2: fd:76:01:fc:6d:7c:52:05:dc:27:1a:15:ef:7f:33:98:e0:7f: e3:0a:e0:04:6e:53:e9:ed:34:b8:86:df:d5:42:4e:5c:8a:02: 35:19:62:fb:5a:d0:5e:24:ab:ca:da:90:3c:be:17:de:bc:3e: 7b:0b:eb:44:ef:78:d7:0a:dd:24:c7:19:c9:fc:5e:96:a9:b9: ae:c0:d2:91:af:05:e5:45:57:85:45:a5:db:5c:ae:83:9c:f0: d6:4c:9f:2e:73:21:a1:c1:8d:2c:4b:0f:f1:0e:be:59:77:d6: ec:a7:34:38:5e:46:b4:99:55:65:64:83:c8:72:bc:94:54:39: 96:df:31:21:a5:d3:40:b8:16:07:85:fe:ec:29:a7:37:36:a6: 62:07:f8:3f:66:14:93:57:30:1d:3f:6f:98:18:de:af:e5:ff: fe:1e:66:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcYSBW1M9K8rc/3eLyw05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl NGRmYWYwHhcNMjUxMjEzMTYwMDUxWhcNMjUxMjE0MTYwMDUxWjAzMTEwLwYDVQQD EyhhZWZiNGYxM2U0NGI1Yzc4YjhjOTZmMjIyZjhjZjhmNDlhMTZiMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKM5C+0o3NuSImG051hLLjBjmhy8 rEbInVuM8pMAft7qfMzz/ZiOJnCBxHGuaBfSKDXF3iWFBNZnuPSOjeOHgTshJpE8 5E3ulj8oJctSOBj1Xwgfv6xZ8eiV7KdjW5sR08adXw8Wg9AaETx9l587X5RAEMhQ OGvqvkfUZelWEvEqWORcnIsnYyvwJgAn4j16f1/370tbz2uSxFEiIl2fJ9xWmfhr sboyMRo7cZ39RPmb/3pC9ZT/DliACL4eC1JbzC0jKy9tqq1m5wqy7hLBjxsyZ+u6 CGTywOsWXI7Yqen36eoBGwmrTzC2Qc2kNX38RQe7uOD8L7imCipDC35aeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK77TxPkS1x4uMlvIi+M+PSaFrGgMB8GA1UdIwQY MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1 LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnZgFUsC GpsTm9NA2mteZPjKvMlJY44eB17wxjRuSqX+scj/LyZZSCB3aIt+GAu6wpYXZ3Ym 0yF8xQfMtbHZ1rmPnoHC/ZSP/XB/MTggt18JFcq0dGMnjN+i/XYB/G18UgXcJxoV 738zmOB/4wrgBG5T6e00uIbf1UJOXIoCNRli+1rQXiSrytqQPL4X3rw+ewvrRO94 1wrdJMcZyfxelqm5rsDSka8F5UVXhUWl21yug5zw1kyfLnMhocGNLEsP8Q6+WXfW 7Kc0OF5GtJlVZWSDyHK8lFQ5lt8xIaXTQLgWB4X+7CmnNzamYgf4P2YUk1cwHT9v mBjer+X//h5myQ== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:59 2025 by rpki-client