This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json) Hash identifier: uCNJbO9ZM8vOX7qJvt1ukroQ78+JeEO1bXA6Yem8840= Subject key identifier: E1:59:6A:BA:38:1D:52:D4:85:71:53:D0:F1:5B:9F:6F:34:E7:FD:A0 Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019B3CB4A86310A370FE85FED41EEA6E57D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 17:00:31 +0000 Manifest this update: Sat 20 Dec 2025 17:00:31 +0000 Manifest next update: Sun 21 Dec 2025 17:00:31 +0000 Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: mJ3o4iz9txZ1KKRNSFqxpZASAApPd1ew6fI6ZCplDDs=) 2: g2292tg5HkQKxN5v3A20HQE7HPE.roa (hash: 8kwF0PMfxaM4q7cGmN1tVvvHsfTo4uOxn6Qw92CswWg=) 3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:a8:63:10:a3:70:fe:85:fe:d4:1e:ea:6e:57:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Dec 20 17:00:31 2025 GMT Not After : Dec 21 17:00:31 2025 GMT Subject: CN=e1596aba381d52d4857153d0f15b9f6f34e7fda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:ee:d8:f6:e9:dc:08:55:44:d3:3e:6a:11: fb:a9:9c:b4:a6:9e:7d:9b:cf:13:d2:92:73:57:01: 7e:64:95:f9:b3:22:34:04:ff:e7:ac:63:28:68:43: b6:bc:a7:53:72:82:30:18:64:f4:67:44:c9:3a:c6: d0:35:64:5a:94:b4:eb:af:8a:fc:9f:fc:2b:e9:4c: 69:21:dc:fa:e3:04:14:9b:17:32:d6:48:1e:8a:1b: 17:54:63:ef:53:31:bc:ca:ed:48:43:40:68:79:8a: c7:df:03:7e:ec:ee:6a:42:62:27:31:30:cf:48:5f: 00:31:f8:8d:ed:c9:17:62:34:53:c0:45:10:df:f6: 5a:47:c0:2c:25:69:8e:46:e6:bc:9a:dc:3a:57:2b: a5:6d:aa:87:1c:8b:d9:74:ec:cc:23:e1:0b:3b:77: 20:91:df:97:03:1c:ba:ad:9a:b2:f2:95:5f:f6:63: f0:2f:80:70:88:db:2d:23:e6:fd:f3:ee:81:58:9f: b0:53:26:68:d3:0e:29:b3:63:75:e7:1c:1d:65:d9: c5:d5:c5:ed:69:62:4d:42:36:d2:c9:78:b6:54:c2: a8:0f:53:f9:ce:4f:f7:28:18:74:75:10:9f:89:69: 12:e7:d4:29:79:d0:0d:e0:5a:44:cb:f7:15:09:1d: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:59:6A:BA:38:1D:52:D4:85:71:53:D0:F1:5B:9F:6F:34:E7:FD:A0 X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:9c:46:2a:77:b6:6c:96:da:85:2b:51:98:2a:38:81:51:8f: 31:9e:4f:db:c3:02:5e:6b:87:62:03:a8:ad:a8:32:ad:bc:bb: 12:50:2e:77:4a:b7:87:e1:4b:eb:c8:4b:d7:07:e7:9d:59:e4: 1c:3c:91:a3:4c:60:d7:eb:66:25:14:34:c4:b5:a3:52:91:a8: a2:a6:4f:e4:7f:9d:5a:b6:b6:74:58:cb:35:f1:f3:99:3d:b6: b2:35:43:aa:b5:ad:4a:c5:aa:e9:df:79:5d:82:b3:88:12:94: 74:e1:04:65:e5:f6:90:23:30:60:d2:99:9a:78:03:4d:f1:d7: 36:4f:e9:09:a4:6e:53:47:a4:a0:35:09:8c:7c:fb:b3:76:f4: 49:88:1b:09:fb:2c:dc:29:7c:bc:c8:1a:81:70:4c:a1:77:22: 00:2a:ef:91:8c:ab:1c:3a:e7:4c:c2:45:ac:05:a0:ca:14:d2: b5:d5:d4:8c:82:85:58:8d:b1:50:2a:c6:1b:37:97:51:cd:ee: 28:f0:f8:31:e8:1a:ff:0f:02:89:2a:42:16:37:e6:e6:b5:12: 66:e9:c8:35:e6:17:b5:6e:64:e7:77:64:0c:bf:6f:42:fb:1f: eb:e2:a9:fc:9e:2d:95:eb:e3:2c:87:d9:cf:30:88:f5:3f:ee: 82:10:1d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tKhjEKNw/oX+1B7qblfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjUxMjIwMTcwMDMxWhcNMjUxMjIxMTcwMDMxWjAzMTEwLwYDVQQD EyhlMTU5NmFiYTM4MWQ1MmQ0ODU3MTUzZDBmMTViOWY2ZjM0ZTdmZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Du2Pbp3AhVRNM+ahH7qZy0pp59 m88T0pJzVwF+ZJX5syI0BP/nrGMoaEO2vKdTcoIwGGT0Z0TJOsbQNWRalLTrr4r8 n/wr6UxpIdz64wQUmxcy1kgeihsXVGPvUzG8yu1IQ0BoeYrH3wN+7O5qQmInMTDP SF8AMfiN7ckXYjRTwEUQ3/ZaR8AsJWmORua8mtw6VyulbaqHHIvZdOzMI+ELO3cg kd+XAxy6rZqy8pVf9mPwL4BwiNstI+b98+6BWJ+wUyZo0w4ps2N15xwdZdnF1cXt aWJNQjbSyXi2VMKoD1P5zk/3KBh0dRCfiWkS59QpedAN4FpEy/cVCR2AuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFZaro4HVLUhXFT0PFbn2805/2gMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJxGKne2 bJbahStRmCo4gVGPMZ5P28MCXmuHYgOoragyrby7ElAud0q3h+FL68hL1wfnnVnk HDyRo0xg1+tmJRQ0xLWjUpGooqZP5H+dWra2dFjLNfHzmT22sjVDqrWtSsWq6d95 XYKziBKUdOEEZeX2kCMwYNKZmngDTfHXNk/pCaRuU0ekoDUJjHz7s3b0SYgbCfss 3Cl8vMgagXBMoXciACrvkYyrHDrnTMJFrAWgyhTStdXUjIKFWI2xUCrGGzeXUc3u KPD4Mega/w8CiSpCFjfm5rUSZunINeYXtW5k53dkDL9vQvsf6+Kp/J4tlevjLIfZ zzCI9T/ughAdVA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:20 2025 by rpki-client