This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json) Hash identifier: 4eVbjGxqJ6s4eK7qQIM8SNhtmUQEZlUC3bokrtMoq7w= Subject key identifier: FC:2D:2F:7F:94:09:25:48:C7:24:E4:C2:95:AA:3C:59:98:1F:5A:3D Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7 Certificate serial: 019B5C0998945F7AD941C4709DDE70EDD8C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft Manifest number: 101E Signing time: Fri 26 Dec 2025 19:01:31 +0000 Manifest this update: Fri 26 Dec 2025 19:01:31 +0000 Manifest next update: Sat 27 Dec 2025 19:01:31 +0000 Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=) 2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: 7udpS7ziEIqrdgszg+HAuwvVuR84AWfT/kn6oS3Av5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:98:94:5f:7a:d9:41:c4:70:9d:de:70:ed:d8:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7 Validity Not Before: Dec 26 19:01:31 2025 GMT Not After : Dec 27 19:01:31 2025 GMT Subject: CN=fc2d2f7f94092548c724e4c295aa3c59981f5a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e1:bb:c0:a4:38:cf:5c:08:fe:ba:48:39:d1: 91:9b:b0:7b:1e:9a:6f:64:8c:99:cc:b1:8a:7a:74: 30:8d:e0:51:44:d2:39:4c:d6:79:77:72:e8:5c:45: e6:2c:10:d1:c5:34:92:17:72:71:c7:ed:3b:00:b3: 1e:bd:ef:a2:d7:d8:75:d4:a0:54:5f:46:01:62:70: 01:44:7f:b7:77:cd:b7:5f:f1:c7:de:fc:ee:02:6c: 0e:71:1e:28:40:2f:a5:8d:71:f7:13:56:93:09:e1: 97:50:8c:31:3b:e9:6a:2a:d6:39:3c:2c:ab:49:d2: 29:36:cc:d3:51:a7:57:07:08:4a:cb:71:6f:80:39: 32:71:6f:41:55:56:ec:40:2b:72:2a:1f:c3:7e:4f: c0:19:45:7a:5f:ea:d9:c6:97:38:b7:1f:be:df:0a: 02:cd:e4:ab:51:b1:17:57:64:15:38:6e:4d:c2:36: 7b:23:88:09:3d:1a:01:1a:48:ab:50:59:8e:9b:20: da:ac:f6:85:80:b7:84:e2:3e:80:aa:c6:2a:69:04: 1a:c7:92:62:28:b0:cc:4a:a6:31:7a:6b:26:ba:d9: 0a:a2:b4:ae:f0:94:67:21:0b:f9:82:06:43:9f:08: 29:59:e3:f1:04:88:42:d5:c0:b4:c9:0c:9a:cc:ad: c0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:2F:7F:94:09:25:48:C7:24:E4:C2:95:AA:3C:59:98:1F:5A:3D X509v3 Authority Key Identifier: keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:71:7f:7c:85:0c:8e:05:c7:db:7c:dc:3d:5c:be:3d:40: f5:f6:f2:ee:b5:12:45:75:4e:f1:99:27:fd:39:69:01:9f:cc: f4:86:b9:bd:14:72:58:ab:09:98:18:5b:60:3a:8c:20:d4:c7: 1b:ea:aa:c6:a4:76:b8:72:35:90:72:6a:37:2b:3c:7b:73:a6: 9b:a6:aa:10:89:28:d3:b1:5e:3b:e2:26:46:76:63:bd:99:4d: 11:b8:1a:57:02:02:ac:43:5b:0b:7f:ae:99:ec:e5:8c:bf:e2: a3:78:05:06:39:af:52:d0:76:75:38:07:86:9a:d1:d7:87:08: 78:76:5f:0a:eb:d4:98:68:fd:ba:4e:6e:f3:12:50:b2:1a:2d: 03:b4:7a:20:60:37:f0:12:73:83:f8:4a:cd:42:44:b9:b9:07: 0f:02:72:e1:e7:dc:95:c0:38:a3:f6:df:62:8d:8b:ce:66:b2: 59:02:b5:68:4b:04:4e:04:db:f1:ae:0e:ab:67:0c:9d:28:ae: a9:57:22:4a:ce:00:ba:44:4b:10:6b:eb:b4:20:63:8e:65:15: 22:6a:e7:33:1f:77:42:3a:d4:45:f1:45:e5:6a:2d:b1:87:6e: a5:33:51:6b:c0:9a:94:70:7f:5e:39:ad:9e:ae:34:c7:6c:30: 9b:2c:f4:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCZiUX3rZQcRwnd5w7djFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli YzA1YTcwHhcNMjUxMjI2MTkwMTMxWhcNMjUxMjI3MTkwMTMxWjAzMTEwLwYDVQQD EyhmYzJkMmY3Zjk0MDkyNTQ4YzcyNGU0YzI5NWFhM2M1OTk4MWY1YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOG7wKQ4z1wI/rpIOdGRm7B7Hppv ZIyZzLGKenQwjeBRRNI5TNZ5d3LoXEXmLBDRxTSSF3Jxx+07ALMeve+i19h11KBU X0YBYnABRH+3d823X/HH3vzuAmwOcR4oQC+ljXH3E1aTCeGXUIwxO+lqKtY5PCyr SdIpNszTUadXBwhKy3FvgDkycW9BVVbsQCtyKh/Dfk/AGUV6X+rZxpc4tx++3woC zeSrUbEXV2QVOG5NwjZ7I4gJPRoBGkirUFmOmyDarPaFgLeE4j6AqsYqaQQax5Ji KLDMSqYxemsmutkKorSu8JRnIQv5ggZDnwgpWePxBIhC1cC0yQyazK3A8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwtL3+UCSVIxyTkwpWqPFmYH1o9MB8GA1UdIwQY MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2 LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz9xf3yF DI4Fx9t83D1cvj1A9fby7rUSRXVO8Zkn/TlpAZ/M9Ia5vRRyWKsJmBhbYDqMINTH G+qqxqR2uHI1kHJqNys8e3Omm6aqEIko07FeO+ImRnZjvZlNEbgaVwICrENbC3+u mezljL/io3gFBjmvUtB2dTgHhprR14cIeHZfCuvUmGj9uk5u8xJQshotA7R6IGA3 8BJzg/hKzUJEubkHDwJy4efclcA4o/bfYo2LzmayWQK1aEsETgTb8a4Oq2cMnSiu qVciSs4AukRLEGvrtCBjjmUVImrnMx93QjrURfFF5WotsYdupTNRa8CalHB/Xjmt nq40x2wwmyz0gQ== -----END CERTIFICATE-----Generated at Sat Dec 27 00:56:49 2025 by rpki-client