This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json) Hash identifier: de/f6oN9LyyiSZI7AfVidcrhXh14tLQpcs/9/48IlAE= Subject key identifier: 17:91:0B:82:E5:1B:D8:DE:09:EB:07:DE:09:E8:06:34:85:5B:3F:28 Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Certificate serial: 019B51BDFF6E2C1D05BBF77DEBAE9292BA1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft Manifest number: 0AB8 Signing time: Wed 24 Dec 2025 19:02:44 +0000 Manifest this update: Wed 24 Dec 2025 19:02:44 +0000 Manifest next update: Thu 25 Dec 2025 19:02:44 +0000 Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 5E7u/tTY21fEbWKI7SoHDRe2ih37IE5S7CnwZK5myJo=) 2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:ff:6e:2c:1d:05:bb:f7:7d:eb:ae:92:92:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Validity Not Before: Dec 24 19:02:44 2025 GMT Not After : Dec 25 19:02:44 2025 GMT Subject: CN=17910b82e51bd8de09eb07de09e80634855b3f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:fd:68:f7:20:46:26:55:67:4e:e9:13:6e: 4a:05:62:49:9a:0b:48:84:db:84:53:fc:7d:29:68: 1e:7f:ac:c2:74:cc:8b:82:96:33:c5:23:0c:11:90: f8:3a:9f:15:72:fd:e9:d3:c2:ef:92:36:97:53:36: 24:ac:c3:57:51:0b:dd:3f:a0:0d:36:b8:12:14:20: cb:d6:b2:5a:b4:82:a4:be:82:a6:aa:14:a8:00:10: a9:05:81:3d:1d:e2:5c:bf:61:74:34:10:1a:11:92: 92:25:09:6e:1a:04:dd:74:fa:9b:85:7e:fc:81:d9: e6:60:d0:da:c1:ae:20:90:e1:50:7e:57:c0:3f:4f: 76:6f:ab:a1:40:80:ef:a7:b4:aa:06:7a:d2:bd:e2: 6b:dc:76:2c:d4:5f:6e:7f:6b:5a:94:f5:86:10:59: 88:9c:ef:29:18:41:ed:c4:d3:f5:7c:58:a0:eb:fd: a0:84:a4:ec:2a:f6:8c:ab:8b:02:0c:cd:24:6d:18: 37:df:dc:5c:a9:2a:11:20:71:42:e2:f7:37:34:d8: b6:4f:dc:77:ef:1c:ac:11:c8:09:c9:36:cf:ee:ff: 3b:ed:68:8a:a4:95:4a:ec:1b:e0:d0:42:9c:de:80: fc:6b:b2:34:01:06:9e:7f:32:9c:4d:65:9e:e4:97: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:91:0B:82:E5:1B:D8:DE:09:EB:07:DE:09:E8:06:34:85:5B:3F:28 X509v3 Authority Key Identifier: keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:72:80:e7:1c:d7:7e:a0:22:67:25:82:a4:32:93:95:43:c3: 30:2f:af:0d:e1:fa:81:ca:b1:5d:28:1d:82:a6:a6:d9:e8:b6: 8c:0f:0b:5c:14:1e:53:24:64:fb:9e:3c:b0:db:60:a0:c3:d4: ed:41:64:c2:5b:8f:cd:e2:3a:87:82:3f:e1:1e:53:61:cb:c1: 6d:64:4a:aa:20:33:b1:f6:c9:ef:00:cd:d6:eb:ca:6d:18:d0: a5:64:13:7d:92:db:c5:c7:6e:39:e2:40:42:d1:f1:0c:c9:b6: 0c:0f:01:21:d4:59:9c:b2:bf:c9:1f:57:af:2f:2e:8f:a1:d5: 32:ca:5d:dd:e0:32:17:a7:58:de:1a:76:25:7f:d8:b3:88:f2: dc:4d:ac:9e:7a:57:59:9e:21:ca:ca:10:da:31:a4:82:d6:47: 1c:74:31:5f:3b:3b:75:4b:00:fc:aa:e9:62:86:fd:1d:5d:43: 3b:44:d6:00:75:0a:e2:c4:12:74:c4:f2:31:a2:40:13:47:14: 37:fa:b7:f0:e3:2f:ba:5c:56:29:11:ad:73:46:ee:54:f3:b3: d1:52:61:a9:d7:47:ed:dd:e5:bb:13:6e:e4:a9:e6:a7:de:ca: d4:31:63:24:8c:f0:2c:52:e2:b0:69:33:dd:be:69:08:b1:ad: b3:a7:b5:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvf9uLB0Fu/d9666SkrocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz YzZmZDkwHhcNMjUxMjI0MTkwMjQ0WhcNMjUxMjI1MTkwMjQ0WjAzMTEwLwYDVQQD EygxNzkxMGI4MmU1MWJkOGRlMDllYjA3ZGUwOWU4MDYzNDg1NWIzZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjer9aPcgRiZVZ07pE25KBWJJmgtI hNuEU/x9KWgef6zCdMyLgpYzxSMMEZD4Op8Vcv3p08LvkjaXUzYkrMNXUQvdP6AN NrgSFCDL1rJatIKkvoKmqhSoABCpBYE9HeJcv2F0NBAaEZKSJQluGgTddPqbhX78 gdnmYNDawa4gkOFQflfAP092b6uhQIDvp7SqBnrSveJr3HYs1F9uf2talPWGEFmI nO8pGEHtxNP1fFig6/2ghKTsKvaMq4sCDM0kbRg339xcqSoRIHFC4vc3NNi2T9x3 7xysEcgJyTbP7v877WiKpJVK7Bvg0EKc3oD8a7I0AQaefzKcTWWe5Jd3kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeRC4LlG9jeCesH3gnoBjSFWz8oMB8GA1UdIwQY MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3KA5xzX fqAiZyWCpDKTlUPDMC+vDeH6gcqxXSgdgqam2ei2jA8LXBQeUyRk+548sNtgoMPU 7UFkwluPzeI6h4I/4R5TYcvBbWRKqiAzsfbJ7wDN1uvKbRjQpWQTfZLbxcduOeJA QtHxDMm2DA8BIdRZnLK/yR9Xry8uj6HVMspd3eAyF6dY3hp2JX/Ys4jy3E2snnpX WZ4hysoQ2jGkgtZHHHQxXzs7dUsA/KrpYob9HV1DO0TWAHUK4sQSdMTyMaJAE0cU N/q38OMvulxWKRGtc0buVPOz0VJhqddH7d3luxNu5Knmp97K1DFjJIzwLFLisGkz 3b5pCLGts6e1aw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:23:09 2025 by rpki-client