This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json) Hash identifier: H4HOQNshp95g+wSw0XZAFeS0PbMrzNHXJB8pc46Us5Q= Subject key identifier: B9:08:0A:7D:F4:5E:68:E5:99:44:27:F6:3D:6F:97:AD:41:8B:3A:DB Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9 Certificate serial: 019B5E2E86DDA29034C27C97BEE30BDDFCA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft Manifest number: 06A1 Signing time: Sat 27 Dec 2025 05:01:06 +0000 Manifest this update: Sat 27 Dec 2025 05:01:06 +0000 Manifest next update: Sun 28 Dec 2025 05:01:06 +0000 Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: 4kPN9pWSM8Z1az29r1KOdiicVxT7pEiyTbkmdXn6UUc=) 2: YJV-_TIAYd0ZugaqrTxVpXEnAb8.roa (hash: Ks1+ulQdNCCzX5S/H1ruBgBYNEZ6/xlaYJ29EC/7ons=) 3: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:86:dd:a2:90:34:c2:7c:97:be:e3:0b:dd:fc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9 Validity Not Before: Dec 27 05:01:06 2025 GMT Not After : Dec 28 05:01:06 2025 GMT Subject: CN=b9080a7df45e68e5994427f63d6f97ad418b3adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:f9:fe:a6:41:73:c5:87:a7:d6:bc:6e:f3: ab:61:a0:3d:2c:c7:4e:cd:d4:f3:a8:13:0e:86:2a: dc:02:a9:31:cb:1c:87:f9:da:19:56:cf:7a:ac:85: dd:7e:a1:ca:09:5c:ef:18:c5:75:a5:c4:79:9c:61: e2:09:90:e5:44:d3:95:78:bd:a2:30:17:0c:85:2e: 6d:57:22:8e:46:2f:6a:21:23:21:67:e6:e5:e7:a9: e7:b0:49:a3:8d:96:de:5a:4c:aa:46:87:31:6d:ef: ac:52:a0:4d:a4:02:22:42:07:30:38:d6:06:eb:74: 4d:7c:b9:4b:ac:11:1c:c5:e7:13:a1:45:fc:96:b9: b3:be:da:e7:22:99:88:53:bb:77:a5:2a:eb:98:c1: a2:30:80:f4:91:39:02:94:c1:1b:22:9b:cd:3f:d3: e5:9e:33:e2:0b:48:d9:57:fd:e6:07:b5:dd:13:06: 44:c0:0b:7d:d2:b1:3e:ca:2a:6e:e4:22:39:08:90: ac:22:c4:62:05:7c:bd:5b:c1:78:29:29:96:67:2c: e6:28:e2:76:81:8c:61:a1:2c:28:90:45:61:46:8b: b2:21:c5:ac:a1:8f:b1:44:29:9f:29:79:27:29:18: e3:65:41:b5:ed:32:74:3a:79:57:b6:d5:d6:1b:ec: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:08:0A:7D:F4:5E:68:E5:99:44:27:F6:3D:6F:97:AD:41:8B:3A:DB X509v3 Authority Key Identifier: keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:16:2f:8b:28:fb:46:5a:a3:45:12:d7:0e:33:a5:d3:3a:52: 4f:cb:98:96:6a:dd:71:90:87:3f:98:33:c9:31:f4:af:07:ae: 7f:cb:8b:20:b1:95:6f:c7:97:21:11:49:c7:7a:fe:9c:9b:39: 25:22:3b:45:91:f0:b2:ac:1e:6e:47:62:54:98:cc:a3:9f:0b: e2:2a:0c:19:5b:47:f2:f7:eb:d6:9c:c6:9c:c5:7d:9b:93:43: 82:ce:9d:54:c4:70:a9:ce:dc:f2:fa:04:29:94:57:69:af:92: 66:a3:50:06:3b:02:34:d7:43:6f:84:4a:34:68:9e:ca:2a:03: 21:6b:7d:64:98:46:6b:eb:38:95:06:19:61:93:51:65:1d:87: f2:28:97:f0:1e:26:7b:87:c1:df:42:89:70:38:8f:6d:4c:d3: 64:a6:36:21:bf:19:c8:5e:c5:08:13:54:6e:60:c9:8f:08:92: 1d:fc:1a:85:c9:b0:eb:be:ec:41:61:0b:e8:8e:5f:47:20:3c: 8a:8f:d5:9d:74:06:4b:d4:ec:35:ec:d1:64:b0:26:12:1d:cb: 93:57:ad:37:ca:bf:27:fa:dd:f3:f2:90:cb:3c:c5:e9:8f:a8: 6a:c3:57:f5:09:dd:bd:51:20:51:68:de:75:ad:53:aa:99:2c: 5c:73:fe:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLobdopA0wnyXvuML3fylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz ZWFiYjkwHhcNMjUxMjI3MDUwMTA2WhcNMjUxMjI4MDUwMTA2WjAzMTEwLwYDVQQD EyhiOTA4MGE3ZGY0NWU2OGU1OTk0NDI3ZjYzZDZmOTdhZDQxOGIzYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+T5/qZBc8WHp9a8bvOrYaA9LMdO zdTzqBMOhircAqkxyxyH+doZVs96rIXdfqHKCVzvGMV1pcR5nGHiCZDlRNOVeL2i MBcMhS5tVyKORi9qISMhZ+bl56nnsEmjjZbeWkyqRocxbe+sUqBNpAIiQgcwONYG 63RNfLlLrBEcxecToUX8lrmzvtrnIpmIU7t3pSrrmMGiMID0kTkClMEbIpvNP9Pl njPiC0jZV/3mB7XdEwZEwAt90rE+yipu5CI5CJCsIsRiBXy9W8F4KSmWZyzmKOJ2 gYxhoSwokEVhRouyIcWsoY+xRCmfKXknKRjjZUG17TJ0OnlXttXWG+ymbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkICn30XmjlmUQn9j1vl61BizrbMB8GA1UdIwQY MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxYviyj7 RlqjRRLXDjOl0zpST8uYlmrdcZCHP5gzyTH0rweuf8uLILGVb8eXIRFJx3r+nJs5 JSI7RZHwsqwebkdiVJjMo58L4ioMGVtH8vfr1pzGnMV9m5NDgs6dVMRwqc7c8voE KZRXaa+SZqNQBjsCNNdDb4RKNGieyioDIWt9ZJhGa+s4lQYZYZNRZR2H8iiX8B4m e4fB30KJcDiPbUzTZKY2Ib8ZyF7FCBNUbmDJjwiSHfwahcmw677sQWEL6I5fRyA8 io/VnXQGS9TsNezRZLAmEh3Lk1etN8q/J/rd8/KQyzzF6Y+oasNX9QndvVEgUWje da1TqpksXHP+0Q== -----END CERTIFICATE-----Generated at Sat Dec 27 06:19:13 2025 by rpki-client