This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json) Hash identifier: twRAVXdhZ+FivDxZYzgk9rKOoEhYhKT216EQOdxGrNI= Subject key identifier: E2:41:BE:EC:E0:6F:30:3D:56:62:65:75:15:95:D4:92:EA:B2:69:01 Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f Certificate serial: 019B3DC833958B2D5C21C88854283C11E35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 22:01:29 +0000 Manifest this update: Sat 20 Dec 2025 22:01:29 +0000 Manifest next update: Sun 21 Dec 2025 22:01:29 +0000 Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=) 2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: dcKGyeMrlLykfI0LNbqBXp4nXPcJh1dNJaZ1ovOeSGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:33:95:8b:2d:5c:21:c8:88:54:28:3c:11:e3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f Validity Not Before: Dec 20 22:01:29 2025 GMT Not After : Dec 21 22:01:29 2025 GMT Subject: CN=e241beece06f303d566265751595d492eab26901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:c7:af:9b:33:be:ce:d1:1b:07:ec:5b:c8: c7:25:e2:63:74:60:b4:85:69:a8:c3:ca:e2:05:fd: 5f:44:bf:75:17:f5:10:08:06:07:2e:8f:cf:c1:50: 32:54:0c:3d:22:35:68:5d:c7:19:41:af:ad:23:34: 3e:d0:fb:1c:18:c3:d6:4e:a8:a2:3b:cd:9e:c7:48: f5:bf:8c:26:35:32:5d:cf:cf:b4:7d:fc:6c:6e:53: d2:1a:32:4e:cd:f8:0e:3a:1c:7b:cf:cf:fb:96:0e: c8:3f:c5:47:09:b2:65:5f:14:c4:c2:e6:6a:c2:4f: c4:13:dd:0b:2e:d6:d3:8b:7d:a6:24:bb:e8:0c:dd: 2a:76:ed:33:ab:6c:b7:ce:f7:c4:fd:44:6c:27:a1: eb:16:1c:c7:dd:2d:84:20:a8:0a:b7:a3:b6:c6:db: bd:5e:de:a1:a5:9d:72:61:9e:2c:b5:8a:c3:98:52: 40:4b:80:ec:bd:fd:ed:52:88:2d:a3:fb:79:9b:56: f1:29:42:fa:26:39:98:f4:c7:20:2a:74:c8:93:56: 13:c4:e2:41:72:b9:e1:06:33:f1:5b:18:c4:ec:e6: 10:16:fe:83:59:ff:f8:78:61:ce:9c:ec:d7:8c:42: 21:95:42:ad:48:19:28:92:e0:f0:49:8c:40:38:15: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:41:BE:EC:E0:6F:30:3D:56:62:65:75:15:95:D4:92:EA:B2:69:01 X509v3 Authority Key Identifier: keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:78:f0:1a:fb:53:bb:73:fb:6a:f3:78:e4:27:5b:f0:37: db:38:cc:2e:d9:5e:64:b2:86:29:f9:f3:ef:90:4a:37:ee:e4: 3e:89:49:2c:0c:fd:2f:1b:45:20:6e:81:63:50:38:02:68:5f: 60:36:4d:5f:5b:c2:76:ee:53:ea:bb:38:dd:7a:95:5d:90:9b: d5:90:33:b2:57:ca:06:fc:4e:57:66:7c:af:1b:cb:f0:24:26: 0c:54:c9:a2:47:6c:01:e5:61:69:cb:53:18:c6:ba:9c:68:30: bf:09:d5:d3:83:61:6d:d0:f4:9f:38:15:ff:af:4e:3b:ae:8f: 5b:5c:2d:24:17:f3:49:26:09:4b:2d:d7:9c:21:df:2a:8a:42: 2b:76:0f:8a:ac:fd:5f:f7:76:19:3a:bb:98:b2:de:8b:0c:3b: 04:e6:1b:9d:7d:da:84:35:6b:91:67:42:b7:cb:fb:05:dc:ce: bc:c0:80:fd:76:bb:29:b1:8d:e8:af:38:53:1b:b9:87:f0:16: ae:ea:a3:4e:0c:6b:b4:78:d5:06:90:5b:3d:49:c1:c8:29:3e: 3c:5e:a9:89:02:88:de:59:ea:d0:88:02:23:bf:84:3e:3d:03: ab:0b:37:d4:b2:89:60:59:51:07:85:5e:12:52:72:eb:3e:75: 77:ed:f4:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yDOViy1cIciIVCg8EeNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3 YzM1NWYwHhcNMjUxMjIwMjIwMTI5WhcNMjUxMjIxMjIwMTI5WjAzMTEwLwYDVQQD EyhlMjQxYmVlY2UwNmYzMDNkNTY2MjY1NzUxNTk1ZDQ5MmVhYjI2OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBTHr5szvs7RGwfsW8jHJeJjdGC0 hWmow8riBf1fRL91F/UQCAYHLo/PwVAyVAw9IjVoXccZQa+tIzQ+0PscGMPWTqii O82ex0j1v4wmNTJdz8+0ffxsblPSGjJOzfgOOhx7z8/7lg7IP8VHCbJlXxTEwuZq wk/EE90LLtbTi32mJLvoDN0qdu0zq2y3zvfE/URsJ6HrFhzH3S2EIKgKt6O2xtu9 Xt6hpZ1yYZ4stYrDmFJAS4Dsvf3tUogto/t5m1bxKUL6JjmY9McgKnTIk1YTxOJB crnhBjPxWxjE7OYQFv6DWf/4eGHOnOzXjEIhlUKtSBkokuDwSYxAOBXMcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJBvuzgbzA9VmJldRWV1JLqsmkBMB8GA1UdIwQY MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYN48Br7 U7tz+2rzeOQnW/A32zjMLtleZLKGKfnz75BKN+7kPolJLAz9LxtFIG6BY1A4Amhf YDZNX1vCdu5T6rs43XqVXZCb1ZAzslfKBvxOV2Z8rxvL8CQmDFTJokdsAeVhactT GMa6nGgwvwnV04NhbdD0nzgV/69OO66PW1wtJBfzSSYJSy3XnCHfKopCK3YPiqz9 X/d2GTq7mLLeiww7BOYbnX3ahDVrkWdCt8v7BdzOvMCA/Xa7KbGN6K84Uxu5h/AW ruqjTgxrtHjVBpBbPUnByCk+PF6piQKI3lnq0IgCI7+EPj0Dqws31LKJYFlRB4Ve ElJy6z51d+30QQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:51:19 2025 by rpki-client