This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json) Hash identifier: BDvCEFcAYlMRTOFSqsiMkxtKE0oSbADvEZvqDHUK1vY= Subject key identifier: A1:5A:01:77:5D:26:05:5B:12:82:30:51:63:35:A1:2C:1D:0B:CF:4A Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019B25BF908478F40C0F6E5CDC72D9E222C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft Manifest number: 0A84 Signing time: Tue 16 Dec 2025 06:01:09 +0000 Manifest this update: Tue 16 Dec 2025 06:01:09 +0000 Manifest next update: Wed 17 Dec 2025 06:01:09 +0000 Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: Uw1hnvTPOXiuBb1IPstesqMkK26BumdX3AYer4IXyEY=) 2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:90:84:78:f4:0c:0f:6e:5c:dc:72:d9:e2:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Dec 16 06:01:09 2025 GMT Not After : Dec 17 06:01:09 2025 GMT Subject: CN=a15a01775d26055b128230516335a12c1d0bcf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:8d:65:66:27:21:2b:c0:9f:66:09:08:06: 12:31:09:d2:42:fd:98:12:58:87:db:25:e7:f3:ff: 12:39:f6:e9:99:af:6b:65:f5:59:6e:66:1e:f9:de: d3:fc:71:05:30:4e:10:25:5e:92:0f:28:43:6e:28: ed:bd:65:c6:f2:98:36:c5:e3:b1:4d:35:1b:f3:29: 43:37:37:0a:23:83:b4:fe:cb:27:a6:f1:88:47:65: 1b:59:f4:c9:0e:29:3b:6c:28:14:ae:f4:fb:7d:a9: fa:02:34:18:34:81:dd:e5:e5:f9:15:49:f7:1b:46: ce:43:00:1f:a6:26:45:78:d1:23:33:39:96:b3:c6: a7:c7:f1:bc:e4:d1:91:eb:bc:72:0c:c2:af:fb:18: b4:36:ea:96:9e:33:2a:00:26:22:66:cb:db:6f:f4: 92:62:6d:dc:cb:53:27:45:b9:02:73:38:8a:e3:d9: 84:51:e5:9a:cc:02:02:03:ea:cf:ee:5c:9e:0b:a5: c3:df:7c:2b:eb:04:cf:67:90:3f:d3:3e:b9:eb:e2: 55:2b:ca:b2:02:93:53:84:16:76:b5:20:cc:a5:77: c2:bd:64:c6:e1:9c:be:38:3b:94:a1:3b:1f:89:dc: f6:a1:58:76:b1:0b:e9:2f:91:ab:59:a7:ae:26:d2: bc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5A:01:77:5D:26:05:5B:12:82:30:51:63:35:A1:2C:1D:0B:CF:4A X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:35:35:b5:33:79:1e:5b:9b:3c:0d:d8:67:9f:ec:6f:cb:49: c6:e6:b7:bb:e1:7d:f4:9c:9e:03:c8:a6:95:3d:3c:14:9e:4c: 5e:0a:87:5a:37:91:90:86:01:5c:b5:43:72:8b:a2:0f:1c:f8: 6e:08:02:27:d2:23:b9:1e:57:22:e6:81:57:36:96:b0:a7:a9: 32:10:9b:37:43:26:10:ef:9e:17:d5:11:73:5d:f6:84:92:56: a5:4b:d7:87:50:89:da:69:a9:9b:87:4f:25:f1:c3:a6:24:68: 32:af:4f:f3:13:2f:2c:bb:5f:4c:83:ee:c4:04:ca:fa:7f:76: 4d:52:fc:aa:4c:f2:77:3e:dd:ba:01:5e:c4:12:ea:8f:6d:e7: 91:79:95:2a:70:60:f4:0b:a8:ab:08:f3:9b:f1:ef:8d:69:0b: 56:bb:dc:51:a4:88:bb:4b:ed:d9:d0:50:8d:3f:c0:18:55:37: aa:6a:44:53:33:90:20:c9:6c:2d:5b:8a:89:45:2e:e8:27:d1: 80:b7:52:c1:1c:4a:f9:b5:cb:a8:9a:e7:6d:0f:9c:16:7e:58: 84:f9:ed:0e:bc:12:79:83:da:bd:52:50:8c:19:32:f0:4f:35: 63:5a:35:b7:17:40:7f:16:50:af:b2:a4:8b:57:fb:30:fe:bb: e0:18:49:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv5CEePQMD25c3HLZ4iLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjUxMjE2MDYwMTA5WhcNMjUxMjE3MDYwMTA5WjAzMTEwLwYDVQQD EyhhMTVhMDE3NzVkMjYwNTViMTI4MjMwNTE2MzM1YTEyYzFkMGJjZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RKNZWYnISvAn2YJCAYSMQnSQv2Y EliH2yXn8/8SOfbpma9rZfVZbmYe+d7T/HEFME4QJV6SDyhDbijtvWXG8pg2xeOx TTUb8ylDNzcKI4O0/ssnpvGIR2UbWfTJDik7bCgUrvT7fan6AjQYNIHd5eX5FUn3 G0bOQwAfpiZFeNEjMzmWs8anx/G85NGR67xyDMKv+xi0NuqWnjMqACYiZsvbb/SS Ym3cy1MnRbkCcziK49mEUeWazAICA+rP7lyeC6XD33wr6wTPZ5A/0z656+JVK8qy ApNThBZ2tSDMpXfCvWTG4Zy+ODuUoTsfidz2oVh2sQvpL5GrWaeuJtK8tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFaAXddJgVbEoIwUWM1oSwdC89KMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETU1tTN5 HlubPA3YZ5/sb8tJxua3u+F99JyeA8imlT08FJ5MXgqHWjeRkIYBXLVDcouiDxz4 bggCJ9IjuR5XIuaBVzaWsKepMhCbN0MmEO+eF9URc132hJJWpUvXh1CJ2mmpm4dP JfHDpiRoMq9P8xMvLLtfTIPuxATK+n92TVL8qkzydz7dugFexBLqj23nkXmVKnBg 9Auoqwjzm/HvjWkLVrvcUaSIu0vt2dBQjT/AGFU3qmpEUzOQIMlsLVuKiUUu6CfR gLdSwRxK+bXLqJrnbQ+cFn5YhPntDrwSeYPavVJQjBky8E81Y1o1txdAfxZQr7Kk i1f7MP674BhJhA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:27:30 2025 by rpki-client