This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft File: rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json) Hash identifier: kJloTmE9+8ONJztpSiJaarJHAj5xQ0zi6TJObbzkWJo= Subject key identifier: 90:30:AE:7E:19:F0:60:83:33:0D:33:F0:04:D4:47:69:F6:3E:89:A3 Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF Certificate issuer: /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Certificate serial: 019B533CAD86D0DCE7D2BC0744EA6FBECCCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft Manifest number: 0249 Signing time: Thu 25 Dec 2025 02:00:43 +0000 Manifest this update: Thu 25 Dec 2025 02:00:43 +0000 Manifest next update: Fri 26 Dec 2025 02:00:43 +0000 Files and hashes: 1: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: gLxGHjWGeG2oBdEB+JeGtpko5Aarxp6XoIbkEUEpmkk=) 2: y_jzZWxrMh2AT3qjdH5sDFcbnso.roa (hash: UBOvdV+QBpMo/gPKyJWNtGffNnN28PAA/OvI521Vudc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ad:86:d0:dc:e7:d2:bc:07:44:ea:6f:be:cc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af Validity Not Before: Dec 25 02:00:43 2025 GMT Not After : Dec 26 02:00:43 2025 GMT Subject: CN=9030ae7e19f06083330d33f004d44769f63e89a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:bb:b8:c0:45:d4:5a:8b:dc:e5:a2:60:67: 07:b8:10:09:84:47:a2:05:cf:8f:aa:04:4e:98:96: e6:fa:5d:9c:a1:84:48:82:f4:d7:3e:a0:a9:62:02: 1c:5b:cc:3b:db:bd:96:65:61:5e:a5:b1:9f:94:c1: c2:ec:8b:ca:29:7f:de:7b:ef:fc:8d:11:65:a8:4f: e3:fa:d2:2a:55:4f:15:87:c7:81:d3:4d:a1:9c:16: 8b:f2:9d:38:22:43:89:62:b2:4b:8c:44:57:38:f5: a3:f2:4d:d6:b2:cd:6f:85:20:20:7b:ec:da:f0:9b: 7a:0c:e6:8b:d4:20:3e:20:8d:07:09:63:70:96:62: b2:06:9e:3a:3a:53:30:2f:68:9d:27:5c:47:33:d0: 5b:e6:b7:c6:01:8e:fa:9d:49:e0:3c:f5:a8:3b:46: 04:42:69:7f:0a:d6:de:77:14:2b:b5:d7:08:b4:18: e3:9e:bf:55:22:1a:88:21:79:2f:45:4a:5d:3f:87: 0d:fe:1b:26:46:a2:5e:7e:c1:47:1f:c5:15:75:c2: f8:53:bc:62:4f:38:87:07:d3:42:73:7b:d4:8a:f9: b8:07:f4:89:27:dd:ee:bf:2b:d8:b7:84:8a:cf:33: a6:83:f3:d6:79:79:91:d1:88:69:d1:70:0c:70:e3: fa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:AE:7E:19:F0:60:83:33:0D:33:F0:04:D4:47:69:F6:3E:89:A3 X509v3 Authority Key Identifier: keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:8f:26:ed:df:42:30:fd:d6:85:a8:ca:f9:dc:38:1d:34: d3:42:23:c9:d0:76:dd:97:07:9e:1a:51:fc:28:ce:b0:1b:f0: a7:9a:4d:b9:50:ec:dc:87:b0:d4:bb:00:87:4a:e0:27:d1:b2: ae:24:4b:8b:f1:7a:e7:61:7e:c9:51:f2:53:1b:9f:2d:09:f2: f3:d4:24:e5:52:0f:81:41:47:8b:94:64:92:64:f8:78:10:a0: 1b:76:f6:82:73:12:4b:e8:79:ad:db:a5:e3:16:e2:d5:df:14: 30:f3:b2:50:6b:8b:98:d3:3d:ed:cb:d9:10:49:44:96:65:9b: f1:76:15:b0:55:db:7d:dc:75:f5:a3:fb:d6:88:a3:1c:32:a5: 19:7d:0c:61:e3:41:a0:a9:1b:28:4d:58:8f:e8:48:18:7d:6c: 4f:25:80:7e:10:9f:58:ef:00:4d:25:e8:7f:46:65:7a:09:26: c3:32:18:26:f9:da:c6:b1:7b:9e:10:12:51:da:f1:70:7a:6e: b0:b9:9a:74:26:33:04:a0:ab:6a:f2:ea:c8:25:33:91:58:7f: 3e:c1:ab:b1:8e:35:94:a3:0e:73:88:ff:08:d1:79:4f:3a:00: 37:8c:f6:63:07:f7:38:38:ee:b5:5b:f1:65:18:68:e6:f6:64: cd:d3:7a:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPK2G0Nzn0rwHROpvvszOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOTQ3OWFmZTNhOWExOGUxYzM3NGZjYTAyMmQxZmYyYTI1 NWIxYWYwHhcNMjUxMjI1MDIwMDQzWhcNMjUxMjI2MDIwMDQzWjAzMTEwLwYDVQQD Eyg5MDMwYWU3ZTE5ZjA2MDgzMzMwZDMzZjAwNGQ0NDc2OWY2M2U4OWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJm7uMBF1FqL3OWiYGcHuBAJhEei Bc+PqgROmJbm+l2coYRIgvTXPqCpYgIcW8w7272WZWFepbGflMHC7IvKKX/ee+/8 jRFlqE/j+tIqVU8Vh8eB002hnBaL8p04IkOJYrJLjERXOPWj8k3Wss1vhSAge+za 8Jt6DOaL1CA+II0HCWNwlmKyBp46OlMwL2idJ1xHM9Bb5rfGAY76nUngPPWoO0YE Qml/CtbedxQrtdcItBjjnr9VIhqIIXkvRUpdP4cN/hsmRqJefsFHH8UVdcL4U7xi TziHB9NCc3vUivm4B/SJJ93uvyvYt4SKzzOmg/PWeXmR0Yhp0XAMcOP6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAwrn4Z8GCDMw0z8ATUR2n2PomjMB8GA1UdIwQY MBaAFK2Uea/jqaGOHDdPygItH/KiVbGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQt YjE2MjQyYjliZGU3LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9iMmY5NjMtMzkzOS00NGM1LTliOWQtYjE2MjQyYjliZGU3 LzEvclpSNXItT3BvWTRjTjBfS0FpMGY4cUpWc2E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATSPJu3f QjD91oWoyvncOB0000IjydB23ZcHnhpR/CjOsBvwp5pNuVDs3Iew1LsAh0rgJ9Gy riRLi/F652F+yVHyUxufLQny89Qk5VIPgUFHi5RkkmT4eBCgG3b2gnMSS+h5rdul 4xbi1d8UMPOyUGuLmNM97cvZEElElmWb8XYVsFXbfdx19aP71oijHDKlGX0MYeNB oKkbKE1Yj+hIGH1sTyWAfhCfWO8ATSXof0ZlegkmwzIYJvnaxrF7nhASUdrxcHpu sLmadCYzBKCravLqyCUzkVh/PsGrsY41lKMOc4j/CNF5TzoAN4z2Ywf3ODjutVvx ZRho5vZkzdN6Rg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:16:41 2025 by rpki-client