This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json) Hash identifier: Ejb46dTfbeHYyM+ETXd60r7w5/zSYbAB6Trzqmo+v4Q= Subject key identifier: 6E:22:D8:ED:D9:42:44:3C:EC:5C:9A:65:0E:5E:E3:5F:45:14:36:15 Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f Certificate serial: 019B41A4B50E3B00659C7E5EA233B6828101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 16:01:11 +0000 Manifest this update: Sun 21 Dec 2025 16:01:11 +0000 Manifest next update: Mon 22 Dec 2025 16:01:11 +0000 Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=) 2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: ngbxaVnHByBRkBgK6FV5qu55jyeOWAiw0qWFq+4DmEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:b5:0e:3b:00:65:9c:7e:5e:a2:33:b6:82:81:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f Validity Not Before: Dec 21 16:01:11 2025 GMT Not After : Dec 22 16:01:11 2025 GMT Subject: CN=6e22d8edd942443cec5c9a650e5ee35f45143615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:ea:ae:07:34:01:99:8c:b3:b6:3f:b1:88: 92:72:86:29:c2:cd:ed:ea:90:aa:0c:1a:69:e8:b1: 2a:94:73:37:e0:c4:dc:66:01:f1:66:5a:6e:e6:62: 3e:46:cc:b2:5e:6d:86:c7:73:91:69:76:dd:62:10: 01:4e:3f:7e:2c:fe:a8:63:d2:fa:53:e8:f0:15:58: a4:28:83:6f:49:09:ed:2d:e0:30:07:06:12:ad:6c: 33:fc:00:b0:90:9f:f8:07:91:e7:eb:2e:62:aa:d9: b1:3d:24:3d:c4:24:8e:05:3b:f6:2b:87:5b:a9:0d: fe:04:c7:4d:26:a9:e4:00:37:20:ee:14:9d:b6:9c: 67:ee:f5:7d:1c:04:cb:b4:0b:78:86:13:ba:1a:21: 7b:18:6e:ad:c7:eb:d7:b5:7b:e0:ef:fa:fb:e9:c3: 21:e9:a0:88:9d:b3:e8:f6:f6:b7:04:cd:7d:a2:44: af:ae:44:60:05:9d:b7:5d:9e:5f:03:ae:41:9c:d9: c8:d9:0e:ea:c4:ba:86:db:7e:2c:5f:34:55:4e:f8: 07:b1:8d:2c:e6:89:a6:c4:99:d5:80:28:78:88:74: f2:db:49:0e:e6:fc:bb:25:37:ee:00:5c:2c:fe:56: 16:4c:47:48:08:ad:35:5d:2a:3c:d5:52:af:5b:77: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:D8:ED:D9:42:44:3C:EC:5C:9A:65:0E:5E:E3:5F:45:14:36:15 X509v3 Authority Key Identifier: keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:2b:1d:ea:4c:44:af:e4:cf:e7:9d:de:15:d8:1f:37:0e: d7:44:e6:76:e3:4d:77:6d:34:71:de:0e:8c:6a:3c:15:18:6f: 5f:7c:95:cd:59:e2:07:70:18:c3:83:0e:1d:43:10:07:45:80: e3:72:ed:72:03:80:b9:9f:ee:86:aa:64:d7:c0:fd:47:45:c3: 14:6b:13:95:da:ed:0e:5f:09:b7:97:a4:3c:d5:35:2a:3f:6e: 91:68:fd:1c:80:14:5d:c4:1a:8e:9b:64:0e:68:a4:ce:5d:a3: 23:8c:6e:59:ea:73:50:02:b3:4f:f0:be:e9:ac:89:fb:26:cc: a4:7f:fd:a4:45:57:8f:5f:30:52:23:b6:1e:82:d1:5f:77:9e: 97:09:35:fc:d3:9d:81:24:4b:1a:27:fc:22:d1:20:50:53:7e: 2c:ad:fb:93:2a:f6:df:7e:78:f1:c5:0e:50:c9:ec:73:4c:e2: e7:a6:4c:1d:9a:ed:42:08:cc:a3:14:3f:97:d0:86:c6:6a:40: 8c:6b:33:13:d0:69:89:57:06:66:54:1a:ce:3b:42:85:e0:69: bb:5b:23:6c:96:df:16:c3:47:91:e9:b1:00:8e:3f:25:2f:bc: 3b:58:51:4b:64:2f:5e:9b:57:ae:93:d8:23:c7:ff:f3:f3:78: ca:be:8a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpLUOOwBlnH5eojO2goEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3 YzM1NWYwHhcNMjUxMjIxMTYwMTExWhcNMjUxMjIyMTYwMTExWjAzMTEwLwYDVQQD Eyg2ZTIyZDhlZGQ5NDI0NDNjZWM1YzlhNjUwZTVlZTM1ZjQ1MTQzNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgfqrgc0AZmMs7Y/sYiScoYpws3t 6pCqDBpp6LEqlHM34MTcZgHxZlpu5mI+RsyyXm2Gx3ORaXbdYhABTj9+LP6oY9L6 U+jwFVikKINvSQntLeAwBwYSrWwz/ACwkJ/4B5Hn6y5iqtmxPSQ9xCSOBTv2K4db qQ3+BMdNJqnkADcg7hSdtpxn7vV9HATLtAt4hhO6GiF7GG6tx+vXtXvg7/r76cMh 6aCInbPo9va3BM19okSvrkRgBZ23XZ5fA65BnNnI2Q7qxLqG234sXzRVTvgHsY0s 5ommxJnVgCh4iHTy20kO5vy7JTfuAFws/lYWTEdICK01XSo81VKvW3fk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4i2O3ZQkQ87FyaZQ5e419FFDYVMB8GA1UdIwQY MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0UrHepM RK/kz+ed3hXYHzcO10TmduNNd200cd4OjGo8FRhvX3yVzVniB3AYw4MOHUMQB0WA 43LtcgOAuZ/uhqpk18D9R0XDFGsTldrtDl8Jt5ekPNU1Kj9ukWj9HIAUXcQajptk Dmikzl2jI4xuWepzUAKzT/C+6ayJ+ybMpH/9pEVXj18wUiO2HoLRX3eelwk1/NOd gSRLGif8ItEgUFN+LK37kyr233548cUOUMnsc0zi56ZMHZrtQgjMoxQ/l9CGxmpA jGszE9BpiVcGZlQazjtCheBpu1sjbJbfFsNHkemxAI4/JS+8O1hRS2QvXptXrpPY I8f/8/N4yr6KoA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:58:02 2025 by rpki-client