This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json) Hash identifier: KcRenzW7ShNZ0XidSxJzUBHP1rzYmIvYO5BYoThZtDo= Subject key identifier: C8:E3:E6:BF:41:AB:1A:1D:C4:C8:A1:BD:DE:E4:28:64:60:2D:8B:46 Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f Certificate serial: 019B34C4481CDB62C1E0E9D11179109ACBAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft Manifest number: 0A46 Signing time: Fri 19 Dec 2025 04:00:37 +0000 Manifest this update: Fri 19 Dec 2025 04:00:37 +0000 Manifest next update: Sat 20 Dec 2025 04:00:37 +0000 Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=) 2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: gvfPg+Jj1evZJGwR3zA/wjizEo2X1kZ5cLEft1QFHOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:48:1c:db:62:c1:e0:e9:d1:11:79:10:9a:cb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f Validity Not Before: Dec 19 04:00:37 2025 GMT Not After : Dec 20 04:00:37 2025 GMT Subject: CN=c8e3e6bf41ab1a1dc4c8a1bddee42864602d8b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:be:4a:64:28:32:98:8d:7f:fd:b1:95:d7: 22:55:f5:30:0c:bb:db:bb:22:4c:88:37:7a:fa:56: 4e:41:e8:54:b9:d5:11:d2:32:c0:7c:8d:ea:41:20: 11:bb:17:fc:4d:a3:25:b8:ec:91:ca:e2:41:76:fe: 4f:6e:d2:b0:42:b6:2a:26:37:e0:87:65:f9:f3:c5: e4:08:f1:db:33:8d:de:c3:33:1b:9e:69:b1:4b:4c: e2:26:c5:fc:db:b0:02:93:4a:93:22:04:e0:20:e1: db:35:d9:60:6a:c7:14:77:de:e4:54:92:1d:62:f8: 74:db:a9:dc:f6:9a:e5:80:00:39:dc:f1:b2:b0:3d: 9e:d3:83:72:df:5e:8c:b0:63:2b:6b:b7:80:25:88: f6:55:d8:f9:cc:71:79:0a:2e:f4:10:61:21:f4:e1: fa:18:f6:59:f5:23:f3:66:7a:91:c5:d2:1a:f1:e3: 44:77:e1:c9:f5:49:6a:ca:98:68:42:ef:50:72:f1: 0d:83:41:09:29:57:48:bb:4e:c1:17:c4:c7:92:b1: d6:e0:9c:32:6d:b5:19:0b:38:09:af:7a:1e:47:13: 38:02:ec:e0:f8:e7:c8:e4:aa:0f:a3:81:d8:c8:ec: 3f:73:17:49:7f:15:7c:67:3b:b3:18:5d:b5:ba:d3: 8e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E3:E6:BF:41:AB:1A:1D:C4:C8:A1:BD:DE:E4:28:64:60:2D:8B:46 X509v3 Authority Key Identifier: keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:22:8c:12:84:32:89:59:7a:01:63:62:43:c5:5b:35:95:d8: db:8a:4f:02:09:71:22:fc:c9:90:4b:cc:91:00:79:89:bf:c2: 35:ab:18:cb:ed:19:c6:4e:a9:26:42:a2:8f:56:aa:05:94:c4: 58:8f:fd:8a:42:f9:38:a7:cd:ab:ba:06:1b:64:1f:ec:13:d1: 3a:e6:c6:b5:1b:96:cb:2b:ea:7c:f3:5a:bf:58:4f:e1:cf:a9: 24:59:f0:f4:83:b3:0e:15:1b:00:44:91:03:90:c0:b0:8a:3a: 1e:6d:30:5c:ad:b1:29:ac:7a:91:5a:e0:8f:34:4e:1e:84:6c: d0:10:1b:69:a1:64:fa:65:7a:92:4b:a4:b2:40:61:d1:88:94: a3:2b:05:f1:7f:f1:bf:9a:0e:41:2c:a8:11:ec:fb:03:ed:b9: 9d:e5:86:65:31:23:0a:96:79:39:55:8a:88:84:88:f8:27:94: 1b:30:35:6e:46:1b:8e:73:b8:ea:1d:68:f6:74:60:75:cb:52: 41:c7:de:28:b9:3d:6a:7b:c5:43:bb:2d:89:77:39:e8:e7:e6: 59:7e:bf:ff:df:4a:cd:aa:55:cc:80:93:97:5e:24:86:9f:eb: d2:72:09:d9:3c:af:74:ac:a0:16:e2:22:2a:0c:db:94:2e:fd: d0:9a:46:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xEgc22LB4OnREXkQmsurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1 MGVmMGYwHhcNMjUxMjE5MDQwMDM3WhcNMjUxMjIwMDQwMDM3WjAzMTEwLwYDVQQD EyhjOGUzZTZiZjQxYWIxYTFkYzRjOGExYmRkZWU0Mjg2NDYwMmQ4YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreu+SmQoMpiNf/2xldciVfUwDLvb uyJMiDd6+lZOQehUudUR0jLAfI3qQSARuxf8TaMluOyRyuJBdv5PbtKwQrYqJjfg h2X588XkCPHbM43ewzMbnmmxS0ziJsX827ACk0qTIgTgIOHbNdlgascUd97kVJId Yvh026nc9prlgAA53PGysD2e04Ny316MsGMra7eAJYj2Vdj5zHF5Ci70EGEh9OH6 GPZZ9SPzZnqRxdIa8eNEd+HJ9UlqyphoQu9QcvENg0EJKVdIu07BF8THkrHW4Jwy bbUZCzgJr3oeRxM4Auzg+OfI5KoPo4HYyOw/cxdJfxV8ZzuzGF21utOO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjj5r9BqxodxMihvd7kKGRgLYtGMB8GA1UdIwQY MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCKMEoQy iVl6AWNiQ8VbNZXY24pPAglxIvzJkEvMkQB5ib/CNasYy+0Zxk6pJkKij1aqBZTE WI/9ikL5OKfNq7oGG2Qf7BPROubGtRuWyyvqfPNav1hP4c+pJFnw9IOzDhUbAESR A5DAsIo6Hm0wXK2xKax6kVrgjzROHoRs0BAbaaFk+mV6kkukskBh0YiUoysF8X/x v5oOQSyoEez7A+25neWGZTEjCpZ5OVWKiISI+CeUGzA1bkYbjnO46h1o9nRgdctS QcfeKLk9anvFQ7stiXc56OfmWX6//99KzapVzICTl14khp/r0nIJ2TyvdKygFuIi KgzblC790JpG8Q== -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:20 2025 by rpki-client