This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft File: 1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json) Hash identifier: zekFxoJUKffQRjsdNUKbMhk1WL7I95wnq7edvH/gVGw= Subject key identifier: 33:9E:0C:B3:4D:F1:D4:5F:D2:FC:13:C6:B0:36:C1:48:E8:AE:13:9A Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Certificate serial: 019B3DFE59D6444444F8BC1EB28288F534B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft Manifest number: CE Signing time: Sat 20 Dec 2025 23:00:37 +0000 Manifest this update: Sat 20 Dec 2025 23:00:37 +0000 Manifest next update: Sun 21 Dec 2025 23:00:37 +0000 Files and hashes: 1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: AhHDYwBrE/LmNkFaJaGEL0DtPUY7JWCFeRPkzrE+w8M=) 2: 2WniE5dL7byWUDCeGxHoMJMqczE.roa (hash: IjkZ5kKZt7FJQZkAKdTzI1e8SsDRi0qw3ixu7BVqjpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:59:d6:44:44:44:f8:bc:1e:b2:82:88:f5:34:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05 Validity Not Before: Dec 20 23:00:37 2025 GMT Not After : Dec 21 23:00:37 2025 GMT Subject: CN=339e0cb34df1d45fd2fc13c6b036c148e8ae139a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:8f:b8:8e:4b:57:2c:01:2f:92:1c:4f:40: 15:3c:a6:9f:bd:75:03:8b:ef:2c:a1:d1:4e:c0:b5: 9b:0e:e7:3a:e3:f5:11:f4:ab:6c:6c:64:af:2f:5a: cb:a4:f2:65:55:13:98:65:b4:79:f5:61:f7:1d:2e: 3c:06:fc:b5:32:32:d8:ed:9a:8d:3f:a5:5b:8c:c0: 57:10:fe:15:04:62:a4:30:dc:f9:59:61:63:50:ed: 42:56:f6:20:80:a1:18:1f:07:95:5b:d1:08:bd:d5: ce:19:14:a1:5a:38:90:26:30:b7:9e:bf:5a:e2:0c: af:57:7e:76:76:24:1e:0c:46:2e:9d:ee:74:fb:bf: c1:b1:69:ee:62:c4:2e:ad:95:98:d8:3b:ec:df:d8: 02:9e:50:6b:58:df:6a:af:a3:87:70:ed:d2:55:c3: 3f:d5:74:6a:50:a7:d6:5b:a8:3e:d0:d2:e9:5f:66: df:0d:8e:32:84:de:ab:a2:35:18:c3:ba:b4:ec:3c: e4:6e:61:59:0a:7c:22:2a:8b:c4:e6:1b:fe:86:ba: b0:bc:67:67:99:49:91:9c:e4:aa:4b:85:ce:02:4d: 75:ef:43:1b:45:66:38:98:e8:d2:2c:9a:45:73:93: ca:41:41:c1:4e:0a:ca:26:bb:30:72:70:19:74:23: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:0C:B3:4D:F1:D4:5F:D2:FC:13:C6:B0:36:C1:48:E8:AE:13:9A X509v3 Authority Key Identifier: keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:54:e8:0b:42:3c:7a:35:54:07:8c:5e:c9:24:5d:53:df:8d: c0:a1:6e:76:ba:bf:83:57:55:21:8e:fe:9e:c4:ea:e4:61:3b: 4a:cf:ca:a5:0c:9e:b6:19:ab:d6:f9:c2:88:94:1d:ec:7c:90: 4d:f1:14:c6:7b:e3:72:2b:f9:80:63:f5:f7:1a:71:6c:14:8d: 05:ec:c5:a8:7a:1a:81:89:85:a5:8c:15:89:4a:60:35:06:9c: 3c:40:c3:a7:6b:c5:c4:d5:94:fd:e6:a0:83:aa:ad:29:61:f3: 98:31:e5:82:0f:e5:1a:b5:f7:cf:b3:87:13:77:73:da:83:26: 39:a2:67:5f:5b:cb:8a:21:84:4e:ad:01:f8:74:44:d0:5e:f2: 54:c4:44:9a:19:0c:45:28:8c:9b:93:6b:0e:a8:c3:a0:6f:97: f4:99:15:2f:b0:58:f6:e5:72:74:41:65:77:17:00:bc:43:e0: 05:50:67:15:52:97:56:5f:ee:e3:15:6c:d0:f5:ee:91:87:72: f5:1b:79:96:ef:5b:63:29:19:be:6b:65:61:7d:6c:11:84:a1: 36:77:8a:ff:73:ca:a3:00:58:0f:ee:2f:b7:18:4c:8a:e1:2d: 45:56:c9:78:32:64:80:12:71:03:8f:3b:7b:c9:64:31:d9:3d: 36:3f:fb:2f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs9/lnWRERE+LwesoKI9TSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5MTY0N2U1NDdjNGFmNGU1YmRjNjU5ZTRjMTRmOTFmZjlj ZThhMDUwHhcNMjUxMjIwMjMwMDM3WhcNMjUxMjIxMjMwMDM3WjAzMTEwLwYDVQQD EygzMzllMGNiMzRkZjFkNDVmZDJmYzEzYzZiMDM2YzE0OGU4YWUxMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaaPuI5LVywBL5IcT0AVPKafvXUD i+8sodFOwLWbDuc64/UR9KtsbGSvL1rLpPJlVROYZbR59WH3HS48Bvy1MjLY7ZqN P6VbjMBXEP4VBGKkMNz5WWFjUO1CVvYggKEYHweVW9EIvdXOGRShWjiQJjC3nr9a 4gyvV352diQeDEYune50+7/BsWnuYsQurZWY2Dvs39gCnlBrWN9qr6OHcO3SVcM/ 1XRqUKfWW6g+0NLpX2bfDY4yhN6rojUYw7q07DzkbmFZCnwiKovE5hv+hrqwvGdn mUmRnOSqS4XOAk1170MbRWY4mOjSLJpFc5PKQUHBTgrKJrswcnAZdCOaOQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDOeDLNN8dRf0vwTxrA2wUjorhOaMB8GA1UdIwQY MBaAFPkWR+VHxK9OW9xlnkwU+R/5zooFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1SWkg1VWZFcjA1YjNHV2VUQlQ1SF9uT2lnVS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvM2UyNjYzLTFmYjMtNDM2ZC1hZTc1 LTIxNGY4NzUzMGJhZi8xLzEtUlpINVVmRXIwNWIzR1dlVEJUNUhfbk9pZ1UubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY0LzNlMjY2My0xZmIzLTQzNmQtYWU3NS0yMTRmODc1MzBi YWYvMS8xLVJaSDVVZkVyMDViM0dXZVRCVDVIX25PaWdVLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFTo C0I8ejVUB4xeySRdU9+NwKFudrq/g1dVIY7+nsTq5GE7Ss/KpQyethmr1vnCiJQd 7HyQTfEUxnvjciv5gGP19xpxbBSNBezFqHoagYmFpYwViUpgNQacPEDDp2vFxNWU /eagg6qtKWHzmDHlgg/lGrX3z7OHE3dz2oMmOaJnX1vLiiGETq0B+HRE0F7yVMRE mhkMRSiMm5NrDqjDoG+X9JkVL7BY9uVydEFldxcAvEPgBVBnFVKXVl/u4xVs0PXu kYdy9Rt5lu9bYykZvmtlYX1sEYShNneK/3PKowBYD+4vtxhMiuEtRVbJeDJkgBJx A487e8lkMdk9Nj/7Lw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:32:34 2025 by rpki-client