This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json) Hash identifier: izFNWL1G+L9GKhi4D7uc/XAAwW9/prpsmjhfPRBElls= Subject key identifier: B5:04:94:2B:98:62:8E:C1:B0:8E:38:97:50:A2:0D:CE:5D:E5:04:B2 Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9 Certificate serial: 019B3D5A68F28CDFB608099B71932CB20144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft Manifest number: 0690 Signing time: Sat 20 Dec 2025 20:01:33 +0000 Manifest this update: Sat 20 Dec 2025 20:01:33 +0000 Manifest next update: Sun 21 Dec 2025 20:01:33 +0000 Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: y9bK8bg/8fK/KeQ1qWqivqerZ7YpX3Oadzk94VGcqgI=) 2: YJV-_TIAYd0ZugaqrTxVpXEnAb8.roa (hash: Ks1+ulQdNCCzX5S/H1ruBgBYNEZ6/xlaYJ29EC/7ons=) 3: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:68:f2:8c:df:b6:08:09:9b:71:93:2c:b2:01:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9 Validity Not Before: Dec 20 20:01:33 2025 GMT Not After : Dec 21 20:01:33 2025 GMT Subject: CN=b504942b98628ec1b08e389750a20dce5de504b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:c9:54:53:6c:44:c8:ab:be:72:53:98:51: d4:60:56:26:5e:d9:6b:84:c6:8d:8d:8f:90:d7:aa: 9c:61:3e:db:3c:d1:c1:99:44:c4:b5:46:22:52:3e: dd:04:30:5f:94:03:c8:8b:9a:6b:6f:53:c0:e0:09: 42:73:a0:0e:9b:4d:e5:6a:38:20:34:d6:15:af:b1: f0:f1:cd:f9:5b:b0:4e:7e:39:69:82:ae:48:32:f1: 1a:33:e8:fa:d5:76:c7:be:86:7d:c0:82:7f:9d:75: e2:7a:b6:55:ac:68:12:c8:6b:c3:86:d2:88:e3:ff: ca:66:a4:1e:14:85:64:5f:e8:bb:b9:61:dd:8a:0b: e4:a3:16:c3:d0:93:4d:e2:29:68:71:dd:aa:a7:28: b4:0a:e2:0f:93:9b:8c:0c:84:3b:97:59:50:92:8f: e1:0c:ed:2f:7b:ff:f4:2e:c7:c3:c9:2b:fc:b9:79: e8:fe:d9:77:cc:8a:56:fe:de:a6:f9:04:7c:79:0d: d9:6e:66:1f:55:77:c1:56:9a:e7:28:53:5b:67:d4: 09:6a:46:41:82:ea:73:7e:61:81:1f:2b:e2:d7:8f: d4:3f:07:49:b5:70:06:47:9e:2c:d1:7c:bb:71:f8: 78:79:89:50:70:41:c1:6f:4a:c9:21:1d:a3:44:7b: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:04:94:2B:98:62:8E:C1:B0:8E:38:97:50:A2:0D:CE:5D:E5:04:B2 X509v3 Authority Key Identifier: keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e8:88:d2:ab:01:aa:00:ae:24:2d:a6:04:b6:4c:f6:78:4f: 51:8f:47:39:0d:0b:35:cd:82:dc:34:b8:b5:8e:02:ea:70:7d: 13:ff:20:a7:df:af:cd:fb:35:3b:6e:b4:18:30:d0:02:e0:13: ad:fb:ba:b5:d7:61:8a:4d:bb:68:ee:24:30:79:d5:4e:b2:6c: 60:d7:06:95:91:76:f6:4f:65:bb:00:19:cd:ba:cb:32:6c:99: 28:33:80:45:b8:15:a8:9b:47:73:2e:bd:d5:3d:86:bd:1a:79: 6f:f5:15:34:ff:2d:8d:f9:ee:aa:0a:96:6e:61:6a:27:ae:51: f9:99:42:7d:13:66:26:dd:fe:25:ae:76:78:9a:c4:3b:48:97: 47:f4:74:a8:68:e9:56:a1:09:ba:d7:29:52:2c:2e:81:6c:7f: 7e:2a:cd:e1:c8:30:de:59:e2:88:6f:99:0e:f0:e1:62:25:13: 3b:0c:b8:bf:54:2a:e2:8d:91:5b:cc:7f:1c:21:66:ec:d8:90: 9b:c9:e1:26:2a:df:99:e9:f4:15:5b:e0:fc:9f:3d:76:1a:12: b3:b1:d8:c2:9e:32:18:b9:50:68:8b:79:fd:d2:60:35:33:23: 38:ff:eb:ec:18:0d:64:c3:10:58:eb:8f:84:5f:08:8c:d6:99: 65:36:41:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WmjyjN+2CAmbcZMssgFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz ZWFiYjkwHhcNMjUxMjIwMjAwMTMzWhcNMjUxMjIxMjAwMTMzWjAzMTEwLwYDVQQD EyhiNTA0OTQyYjk4NjI4ZWMxYjA4ZTM4OTc1MGEyMGRjZTVkZTUwNGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs47JVFNsRMirvnJTmFHUYFYmXtlr hMaNjY+Q16qcYT7bPNHBmUTEtUYiUj7dBDBflAPIi5prb1PA4AlCc6AOm03lajgg NNYVr7Hw8c35W7BOfjlpgq5IMvEaM+j61XbHvoZ9wIJ/nXXierZVrGgSyGvDhtKI 4//KZqQeFIVkX+i7uWHdigvkoxbD0JNN4ilocd2qpyi0CuIPk5uMDIQ7l1lQko/h DO0ve//0LsfDySv8uXno/tl3zIpW/t6m+QR8eQ3ZbmYfVXfBVprnKFNbZ9QJakZB gupzfmGBHyvi14/UPwdJtXAGR54s0Xy7cfh4eYlQcEHBb0rJIR2jRHuJ9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUElCuYYo7BsI44l1CiDc5d5QSyMB8GA1UdIwQY MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+iI0qsB qgCuJC2mBLZM9nhPUY9HOQ0LNc2C3DS4tY4C6nB9E/8gp9+vzfs1O260GDDQAuAT rfu6tddhik27aO4kMHnVTrJsYNcGlZF29k9luwAZzbrLMmyZKDOARbgVqJtHcy69 1T2GvRp5b/UVNP8tjfnuqgqWbmFqJ65R+ZlCfRNmJt3+Ja52eJrEO0iXR/R0qGjp VqEJutcpUiwugWx/firN4cgw3lniiG+ZDvDhYiUTOwy4v1Qq4o2RW8x/HCFm7NiQ m8nhJirfmen0FVvg/J89dhoSs7HYwp4yGLlQaIt5/dJgNTMjOP/r7BgNZMMQWOuP hF8IjNaZZTZB4g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:24 2025 by rpki-client