This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json) Hash identifier: +pRV1J6ics4rwyzbOHqc1ilm7j0hKeCHhxF2XmcXeNE= Subject key identifier: 63:BD:1A:B5:FA:98:67:31:EB:1D:48:E6:28:88:16:02:40:F3:0C:2A Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Certificate serial: 019B4926DCCF8A4987D639F8BA4185285C61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft Manifest number: 14D1 Signing time: Tue 23 Dec 2025 03:00:42 +0000 Manifest this update: Tue 23 Dec 2025 03:00:42 +0000 Manifest next update: Wed 24 Dec 2025 03:00:42 +0000 Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=) 2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: rFuvyZ/UOJ8NRzyAOggsqTs04yKM+1/iFO5BDgMbgj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:dc:cf:8a:49:87:d6:39:f8:ba:41:85:28:5c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Validity Not Before: Dec 23 03:00:42 2025 GMT Not After : Dec 24 03:00:42 2025 GMT Subject: CN=63bd1ab5fa986731eb1d48e62888160240f30c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b0:91:08:b5:d0:41:a3:48:c0:4e:ea:6e:33: 42:d0:88:a7:98:9b:fc:56:bb:31:27:63:fd:be:1f: e2:e5:b2:ea:f6:d4:b7:73:18:85:6f:ad:12:df:7b: 5c:5d:97:d4:67:39:41:6c:1a:51:f4:15:ae:18:1c: d3:47:5b:a1:17:c6:44:11:f2:0e:47:be:0b:80:df: 83:06:8a:77:5d:47:2f:e5:8a:d4:75:b6:06:a3:7c: 67:f2:e5:e3:55:30:b8:9a:7c:5d:d4:2c:49:1c:60: 3a:83:eb:fc:08:4f:cb:96:14:44:72:1b:bc:f0:d3: f5:89:de:93:fa:2c:95:1b:c4:83:6c:35:a0:f1:cc: d7:2e:e9:f4:2e:2d:a7:2c:28:68:3d:2e:33:f6:81: 36:fb:b9:14:f7:15:e9:16:ea:a5:70:f5:b0:05:b1: c2:81:41:af:bb:b7:14:97:af:b9:7c:c6:a8:5a:00: 5f:50:56:cf:ad:0e:0d:b6:25:a2:92:14:59:4c:c6: 38:31:26:10:6b:f3:5f:81:72:b9:bb:51:d7:12:9f: b9:c4:99:ee:c6:e5:5c:d3:85:f5:a1:a0:12:d3:78: 08:0e:7e:50:f7:07:2f:4e:bd:c3:9d:b6:e2:43:7e: 12:5f:97:ca:ff:05:ab:53:21:63:ca:75:bd:a5:8d: 3c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:1A:B5:FA:98:67:31:EB:1D:48:E6:28:88:16:02:40:F3:0C:2A X509v3 Authority Key Identifier: keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:08:1b:b4:46:7f:02:c6:bc:74:c7:01:4b:79:32:3c:c0:42: 27:54:93:36:b7:56:de:6e:15:55:35:ee:59:2d:77:ac:27:eb: bb:19:f2:d4:fc:f6:88:93:2d:b7:74:bc:b0:37:db:a8:1c:9f: 48:c3:56:6f:43:7d:ba:6e:fb:31:3a:72:a7:34:c5:35:19:0a: 5d:72:39:71:39:04:90:04:ce:39:b6:52:c4:bc:04:4e:49:f0: e1:cb:5e:12:9a:77:02:f7:21:c2:12:77:a8:e4:1d:20:69:13: 14:80:5c:21:40:03:8a:52:0d:ff:9c:47:3c:d1:48:e4:89:50: 4f:90:3e:d3:0a:93:56:40:d8:16:8b:a7:a4:d7:77:d2:11:91: 13:8f:7e:cf:f7:37:5a:81:a9:1e:7b:86:84:0c:b1:dd:cf:16: f4:3e:cc:23:9b:19:3a:b8:fc:48:70:e1:8c:47:0b:fc:f2:48: be:18:7e:14:6f:53:be:f9:05:86:52:cc:5d:2c:a2:1e:96:46: aa:a7:84:21:a4:99:ed:a4:bf:e0:bc:94:72:4f:8a:a8:56:8c: 26:ec:42:0d:f0:c2:46:6f:19:62:65:f0:07:75:47:e5:50:f7: 26:00:fe:4a:1c:53:c4:a4:87:a0:21:e5:97:0a:fa:7e:d1:91: 6b:81:78:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJtzPikmH1jn4ukGFKFxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi YjhjMjUwHhcNMjUxMjIzMDMwMDQyWhcNMjUxMjI0MDMwMDQyWjAzMTEwLwYDVQQD Eyg2M2JkMWFiNWZhOTg2NzMxZWIxZDQ4ZTYyODg4MTYwMjQwZjMwYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7CRCLXQQaNIwE7qbjNC0IinmJv8 VrsxJ2P9vh/i5bLq9tS3cxiFb60S33tcXZfUZzlBbBpR9BWuGBzTR1uhF8ZEEfIO R74LgN+DBop3XUcv5YrUdbYGo3xn8uXjVTC4mnxd1CxJHGA6g+v8CE/LlhREchu8 8NP1id6T+iyVG8SDbDWg8czXLun0Li2nLChoPS4z9oE2+7kU9xXpFuqlcPWwBbHC gUGvu7cUl6+5fMaoWgBfUFbPrQ4NtiWikhRZTMY4MSYQa/NfgXK5u1HXEp+5xJnu xuVc04X1oaAS03gIDn5Q9wcvTr3DnbbiQ34SX5fK/wWrUyFjynW9pY08RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO9GrX6mGcx6x1I5iiIFgJA8wwqMB8GA1UdIwQY MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0 LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXggbtEZ/ Asa8dMcBS3kyPMBCJ1STNrdW3m4VVTXuWS13rCfruxny1Pz2iJMtt3S8sDfbqByf SMNWb0N9um77MTpypzTFNRkKXXI5cTkEkATOObZSxLwETknw4cteEpp3AvchwhJ3 qOQdIGkTFIBcIUADilIN/5xHPNFI5IlQT5A+0wqTVkDYFounpNd30hGRE49+z/c3 WoGpHnuGhAyx3c8W9D7MI5sZOrj8SHDhjEcL/PJIvhh+FG9TvvkFhlLMXSyiHpZG qqeEIaSZ7aS/4LyUck+KqFaMJuxCDfDCRm8ZYmXwB3VH5VD3JgD+ShxTxKSHoCHl lwr6ftGRa4F4hA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:53:15 2025 by rpki-client