This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json) Hash identifier: /za3yyhAs4z4ghYO3OY0YAgYpon2W1M/Jq4QlPNhB4A= Subject key identifier: 67:F5:F7:E2:FF:EC:4A:E5:6E:AC:A6:F6:95:41:C0:CF:4E:25:05:7C Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7 Certificate serial: 019B42EEA2DD990CD6D3E9309B13BCD8DB3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft Manifest number: 1011 Signing time: Sun 21 Dec 2025 22:01:34 +0000 Manifest this update: Sun 21 Dec 2025 22:01:34 +0000 Manifest next update: Mon 22 Dec 2025 22:01:34 +0000 Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=) 2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: OTxDDYl1ms/f69uuFEX4rhUxHL+jojmRQemDDDF88nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:a2:dd:99:0c:d6:d3:e9:30:9b:13:bc:d8:db:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7 Validity Not Before: Dec 21 22:01:34 2025 GMT Not After : Dec 22 22:01:34 2025 GMT Subject: CN=67f5f7e2ffec4ae56eaca6f69541c0cf4e25057c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:4a:1d:f5:7b:7f:7f:be:68:df:e3:05:7a: 65:3a:61:a4:5a:b7:a3:ba:15:62:5f:74:1f:75:ad: 02:f3:a6:84:8f:26:2f:60:e1:aa:1c:a6:ec:e9:17: fb:13:2a:58:7a:4a:b0:ba:06:98:2d:24:83:39:26: 13:cb:6b:b6:15:48:0a:92:42:8f:71:8c:10:3d:9a: 27:9b:0a:dc:dd:2e:de:f7:ec:c2:92:a0:38:89:a9: f0:3b:40:04:58:ee:c5:10:60:cb:5a:c7:5c:f5:b3: 7f:1a:11:da:9b:37:b8:7b:39:3e:92:69:25:c8:ac: 94:48:24:05:bd:9a:e6:93:71:b2:4a:22:38:7a:cb: dc:a0:fc:26:3c:89:61:2f:b3:c7:83:89:74:9a:b5: 4a:11:04:b4:a8:a4:8a:4a:ea:88:87:e1:9c:ae:62: a2:c5:7b:47:0a:d1:db:18:6d:6d:c1:fa:33:23:30: 68:0a:e1:c2:84:c2:cc:4c:44:bd:00:ab:1f:99:20: f0:70:91:86:f9:d5:79:7d:ca:53:1f:ca:fa:b5:e6: f4:da:ff:48:89:56:e7:5b:1f:de:32:67:1d:78:24: af:50:12:64:78:59:67:7b:6a:53:b2:73:ac:53:6e: 22:7f:c1:a9:26:a8:f7:55:86:ac:ee:cc:1e:ec:be: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:F7:E2:FF:EC:4A:E5:6E:AC:A6:F6:95:41:C0:CF:4E:25:05:7C X509v3 Authority Key Identifier: keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:22:7e:63:c2:84:37:01:48:3a:92:00:ee:c9:74:29:0e:62: 65:14:7f:84:79:51:67:c8:e3:f4:38:83:ce:96:20:09:43:9c: 78:d8:a4:8f:a0:e8:55:5c:c3:30:19:6d:dd:af:36:9e:72:e8: bb:fb:8d:c7:91:a3:9b:21:40:9c:21:b4:46:0e:69:ee:0a:13: d5:b9:18:d4:17:41:36:49:2f:41:d1:06:76:a1:9e:5c:48:00: 8f:99:84:84:a1:a8:3e:7f:ff:1d:7b:7d:ee:2f:c4:44:98:cb: bd:ab:1e:19:e2:09:cd:70:d7:c1:c3:fb:bf:14:e6:56:85:28: 9a:25:0f:91:17:1d:69:5a:a1:01:88:a3:ac:51:49:0d:cb:ba: 39:2d:36:c0:a0:7b:10:45:74:ef:e0:bb:e0:3e:2c:28:34:34: a6:e3:05:d2:46:11:1c:3a:7c:46:e9:de:56:98:be:d9:5c:39: 3b:fe:21:ef:c7:6c:bf:ed:c1:ad:d4:3d:61:56:33:fc:c2:69: 3d:6f:91:8a:0f:00:6f:c9:8e:30:0d:9b:d4:28:43:b6:b1:18: ef:ce:8a:f6:86:b0:28:09:28:d1:79:a8:e6:9f:e6:e5:97:3c: 7e:aa:4c:97:48:9f:04:76:a8:0e:55:6d:d9:18:b0:01:b5:4c: 46:55:1d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qLdmQzW0+kwmxO82Ns7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli YzA1YTcwHhcNMjUxMjIxMjIwMTM0WhcNMjUxMjIyMjIwMTM0WjAzMTEwLwYDVQQD Eyg2N2Y1ZjdlMmZmZWM0YWU1NmVhY2E2ZjY5NTQxYzBjZjRlMjUwNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/dKHfV7f3++aN/jBXplOmGkWrej uhViX3Qfda0C86aEjyYvYOGqHKbs6Rf7EypYekqwugaYLSSDOSYTy2u2FUgKkkKP cYwQPZonmwrc3S7e9+zCkqA4ianwO0AEWO7FEGDLWsdc9bN/GhHamze4ezk+kmkl yKyUSCQFvZrmk3GySiI4esvcoPwmPIlhL7PHg4l0mrVKEQS0qKSKSuqIh+GcrmKi xXtHCtHbGG1twfozIzBoCuHChMLMTES9AKsfmSDwcJGG+dV5fcpTH8r6teb02v9I iVbnWx/eMmcdeCSvUBJkeFlne2pTsnOsU24if8GpJqj3VYas7swe7L4fBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGf19+L/7Erlbqym9pVBwM9OJQV8MB8GA1UdIwQY MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2 LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyJ+Y8KE NwFIOpIA7sl0KQ5iZRR/hHlRZ8jj9DiDzpYgCUOceNikj6DoVVzDMBlt3a82nnLo u/uNx5GjmyFAnCG0Rg5p7goT1bkY1BdBNkkvQdEGdqGeXEgAj5mEhKGoPn//HXt9 7i/ERJjLvaseGeIJzXDXwcP7vxTmVoUomiUPkRcdaVqhAYijrFFJDcu6OS02wKB7 EEV07+C74D4sKDQ0puMF0kYRHDp8RuneVpi+2Vw5O/4h78dsv+3BrdQ9YVYz/MJp PW+Rig8Ab8mOMA2b1ChDtrEY786K9oawKAko0Xmo5p/m5Zc8fqpMl0ifBHaoDlVt 2RiwAbVMRlUdwA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:08 2025 by rpki-client