This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json) Hash identifier: lCXyl/iXr+ELxa/55csCGTLCuk2IME0s5HgMS3ZvZo4= Subject key identifier: 2F:CD:E3:24:05:80:F3:CE:27:21:D0:A8:82:56:E9:82:B0:A9:41:92 Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756 Certificate serial: 019AF87914C6B225D19CBD747CC33121584B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft Manifest number: 019A Signing time: Sun 07 Dec 2025 11:01:16 +0000 Manifest this update: Sun 07 Dec 2025 11:01:16 +0000 Manifest next update: Mon 08 Dec 2025 11:01:16 +0000 Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=) 2: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=) 3: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: AXF6ZX3KscGqxLTQQUXcCYOLCfEavCewu+LhduwE0Bg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:79:14:c6:b2:25:d1:9c:bd:74:7c:c3:31:21:58:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756 Validity Not Before: Dec 7 11:01:16 2025 GMT Not After : Dec 8 11:01:16 2025 GMT Subject: CN=2fcde3240580f3ce2721d0a88256e982b0a94192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:c6:0e:db:f7:78:b8:13:e8:c8:92:9d:cd: 93:bd:84:96:0d:26:f2:c3:11:2d:88:dd:d6:56:9e: a7:21:29:c3:df:c1:e6:d7:f5:62:c1:0c:c3:77:fd: b5:37:6c:72:ca:ed:b2:77:67:5d:cc:e4:a0:23:93: 35:be:67:88:91:52:fb:75:11:ca:a8:ee:64:e0:b7: 33:ba:50:fd:9c:92:f3:16:20:b3:62:f4:5d:a1:d3: ca:c1:5c:ab:8a:7b:fd:4e:86:96:94:08:48:b1:ff: fb:66:fd:3b:4c:83:15:18:4f:cb:20:49:63:0c:de: af:1a:42:5f:a1:7a:51:44:78:13:ab:6b:f1:68:b4: a5:f1:44:c2:43:ba:76:59:9c:5f:32:94:04:79:0d: 92:a0:8b:2a:15:7f:b6:e7:b6:39:5d:46:a1:5d:4d: 2c:f7:06:00:d7:6a:03:51:30:d8:42:a1:67:79:18: 63:a6:dd:a7:1f:bf:b2:ba:b4:7c:e7:5d:b9:11:8b: 9d:ae:36:05:81:36:a8:ef:1e:c7:ff:f2:e3:03:d3: 11:ff:f9:67:c2:9f:e4:1e:3f:1f:b0:dc:46:a1:9e: c8:52:04:46:34:76:72:e6:f8:b0:10:e1:7a:f8:8d: 1e:0a:04:b2:dc:fa:8a:0f:ea:32:89:c0:aa:f7:c5: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CD:E3:24:05:80:F3:CE:27:21:D0:A8:82:56:E9:82:B0:A9:41:92 X509v3 Authority Key Identifier: keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:04:e4:ac:8f:f5:3d:7e:a2:79:0c:e2:81:47:83:4f:8a:86: e6:65:c5:38:8c:b1:e7:8b:9a:22:24:48:de:f0:c5:2f:e9:87: 83:55:1c:04:a6:8f:cb:38:a1:23:7c:94:8d:35:f4:8c:e5:a8: e1:c0:6f:7f:f7:ad:99:6e:1a:58:eb:f7:92:b9:96:7c:8d:f8: 20:cd:1c:eb:61:4c:fa:c9:57:6e:89:35:01:5d:4b:31:69:b3: 47:4a:25:f2:9d:ad:57:a3:4c:c4:0b:54:61:98:e1:7b:bc:96: 95:b0:53:17:6e:81:5f:dd:fa:c7:c7:63:2b:b1:cc:5a:ce:61: 7f:d8:b5:5b:8a:85:5f:e5:4d:bd:07:16:1c:bc:9a:bd:77:db: 30:3d:0e:ce:c5:3a:a0:40:d4:73:04:ed:a2:6c:f3:26:6d:a2: cd:f3:e9:ae:a3:2b:8f:d4:82:2f:d0:fa:8a:9d:42:12:ef:83: 15:8c:d1:54:60:a0:4e:97:47:6d:f6:8f:23:48:27:21:6a:ca: 67:72:6d:7e:66:25:f2:75:54:d9:fb:77:2b:a6:31:23:d1:95: 43:52:02:4d:2d:72:bd:f2:05:51:b8:89:35:d6:35:00:22:9d: d2:80:8e:50:d6:aa:e7:fd:19:ae:ae:a0:15:ae:7a:0b:ff:96: 7e:8f:0c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eRTGsiXRnL10fMMxIVhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk MTQ3NTYwHhcNMjUxMjA3MTEwMTE2WhcNMjUxMjA4MTEwMTE2WjAzMTEwLwYDVQQD EygyZmNkZTMyNDA1ODBmM2NlMjcyMWQwYTg4MjU2ZTk4MmIwYTk0MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCLGDtv3eLgT6MiSnc2TvYSWDSby wxEtiN3WVp6nISnD38Hm1/ViwQzDd/21N2xyyu2yd2ddzOSgI5M1vmeIkVL7dRHK qO5k4LczulD9nJLzFiCzYvRdodPKwVyrinv9ToaWlAhIsf/7Zv07TIMVGE/LIElj DN6vGkJfoXpRRHgTq2vxaLSl8UTCQ7p2WZxfMpQEeQ2SoIsqFX+257Y5XUahXU0s 9wYA12oDUTDYQqFneRhjpt2nH7+yurR85125EYudrjYFgTao7x7H//LjA9MR//ln wp/kHj8fsNxGoZ7IUgRGNHZy5viwEOF6+I0eCgSy3PqKD+oyicCq98VU9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/N4yQFgPPOJyHQqIJW6YKwqUGSMB8GA1UdIwQY MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1 LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwTkrI/1 PX6ieQzigUeDT4qG5mXFOIyx54uaIiRI3vDFL+mHg1UcBKaPyzihI3yUjTX0jOWo 4cBvf/etmW4aWOv3krmWfI34IM0c62FM+slXbok1AV1LMWmzR0ol8p2tV6NMxAtU YZjhe7yWlbBTF26BX936x8djK7HMWs5hf9i1W4qFX+VNvQcWHLyavXfbMD0OzsU6 oEDUcwTtomzzJm2izfPprqMrj9SCL9D6ip1CEu+DFYzRVGCgTpdHbfaPI0gnIWrK Z3JtfmYl8nVU2ft3K6YxI9GVQ1ICTS1yvfIFUbiJNdY1ACKd0oCOUNaq5/0Zrq6g Fa56C/+Wfo8MhQ== -----END CERTIFICATE-----Generated at Sun Dec 7 16:57:35 2025 by rpki-client