This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json) Hash identifier: xCxsrIGtaC6gMz2tAoT/L+EDcD8kLrYUpPgHhawh5Og= Subject key identifier: 5D:81:9E:E8:6E:2E:2A:5D:12:C3:C0:00:1C:91:59:FD:87:75:40:65 Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Certificate serial: 019B563DCDC86CEDC67E94C9BDA8DAD07B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft Manifest number: 0834 Signing time: Thu 25 Dec 2025 16:00:49 +0000 Manifest this update: Thu 25 Dec 2025 16:00:49 +0000 Manifest next update: Fri 26 Dec 2025 16:00:49 +0000 Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=) 2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: WhajS4x8pXhQXoEYl7BuR+qHToz942QuTJ6YkmSbcmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:cd:c8:6c:ed:c6:7e:94:c9:bd:a8:da:d0:7b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf Validity Not Before: Dec 25 16:00:49 2025 GMT Not After : Dec 26 16:00:49 2025 GMT Subject: CN=5d819ee86e2e2a5d12c3c0001c9159fd87754065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:1c:d7:1f:3d:f7:46:63:70:49:ff:b7:8b: e0:78:ec:e7:1f:dc:b6:81:91:8a:89:c7:14:a1:6b: 08:2d:d2:71:72:9f:bc:8e:8b:99:e9:40:b3:07:45: ae:17:f3:c8:f2:63:c1:42:b2:37:e0:64:a6:fc:82: 2c:6e:12:68:75:e9:73:f3:52:74:f7:3a:d1:5a:ad: 23:81:57:1d:de:3d:5e:02:24:19:b3:6b:64:ff:df: 1b:6f:06:2c:34:f9:83:70:1b:6b:91:37:0f:a3:73: 17:45:05:57:c9:df:fc:fa:95:3a:9c:7c:30:bf:31: 54:f0:95:df:35:f5:7b:ca:29:32:41:a7:e1:fe:e2: 73:85:a8:e0:d2:6c:bd:d3:19:cb:90:47:bf:20:93: 1d:2c:07:cf:11:a8:40:29:6d:db:3b:24:37:0c:d3: 22:09:ab:ff:99:3c:34:6d:03:91:bd:cb:c7:e4:fd: 39:41:4a:0c:20:1d:d1:45:0b:6d:3c:21:56:d5:8f: 7d:08:7e:59:72:6a:2d:a9:66:00:39:6e:33:11:59: a1:aa:72:23:77:29:52:27:38:4e:fc:c0:ea:67:d0: f4:89:87:9f:49:65:66:8d:7e:72:55:45:ee:84:d5: 41:6f:7f:d4:c7:5d:8e:b9:d6:0f:7a:c9:54:a7:61: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:81:9E:E8:6E:2E:2A:5D:12:C3:C0:00:1C:91:59:FD:87:75:40:65 X509v3 Authority Key Identifier: keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8c:22:d3:8a:2d:28:a7:e6:a1:34:af:03:59:a5:23:20:5d: e6:39:d5:46:ac:21:2d:b0:d7:9f:d6:1d:af:4e:c7:41:40:ad: 22:64:a8:7c:c3:7a:00:1d:0b:93:95:f2:58:ce:59:93:e7:6b: be:66:a5:ab:71:74:67:05:da:45:e2:cb:57:db:4a:17:7b:6d: 7b:ec:49:fa:d1:f3:cc:cb:39:04:6a:61:2f:4d:28:ac:92:18: 18:f9:e7:cf:95:17:c8:fb:88:10:9f:f8:83:46:90:2c:ac:25: 4a:cf:bb:a5:b0:4b:31:70:5f:d1:b5:51:05:ec:39:09:b6:36: 4a:8a:b8:85:27:51:7a:fb:e3:19:1f:a0:16:f2:89:cc:ef:80: d8:5c:29:d5:0a:f1:d8:b9:c7:95:6b:70:86:b5:75:05:64:99: a6:a6:73:93:c9:f1:26:f7:7a:c9:21:e6:07:fa:ab:51:8f:16: 4e:26:ff:9f:c5:cd:c2:c3:2b:d0:57:14:1c:36:aa:47:bf:a2: 5b:0b:18:11:ce:4c:3e:a1:4d:85:15:f4:ee:74:df:c7:58:2e: 5d:a0:ac:7f:1d:ea:08:d5:39:c4:61:11:3f:c2:33:09:c4:65: 0f:36:91:82:c7:45:fa:65:11:82:c3:7e:cd:48:5c:3d:39:4d: c1:19:94:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPc3IbO3GfpTJvaja0HtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl NGRmYWYwHhcNMjUxMjI1MTYwMDQ5WhcNMjUxMjI2MTYwMDQ5WjAzMTEwLwYDVQQD Eyg1ZDgxOWVlODZlMmUyYTVkMTJjM2MwMDAxYzkxNTlmZDg3NzU0MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDwc1x8990ZjcEn/t4vgeOznH9y2 gZGKiccUoWsILdJxcp+8jouZ6UCzB0WuF/PI8mPBQrI34GSm/IIsbhJodelz81J0 9zrRWq0jgVcd3j1eAiQZs2tk/98bbwYsNPmDcBtrkTcPo3MXRQVXyd/8+pU6nHww vzFU8JXfNfV7yikyQafh/uJzhajg0my90xnLkEe/IJMdLAfPEahAKW3bOyQ3DNMi Cav/mTw0bQORvcvH5P05QUoMIB3RRQttPCFW1Y99CH5ZcmotqWYAOW4zEVmhqnIj dylSJzhO/MDqZ9D0iYefSWVmjX5yVUXuhNVBb3/Ux12OudYPeslUp2EC1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2BnuhuLipdEsPAAByRWf2HdUBlMB8GA1UdIwQY MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1 LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYwi04ot KKfmoTSvA1mlIyBd5jnVRqwhLbDXn9Ydr07HQUCtImSofMN6AB0Lk5XyWM5Zk+dr vmalq3F0ZwXaReLLV9tKF3tte+xJ+tHzzMs5BGphL00orJIYGPnnz5UXyPuIEJ/4 g0aQLKwlSs+7pbBLMXBf0bVRBew5CbY2Soq4hSdRevvjGR+gFvKJzO+A2Fwp1Qrx 2LnHlWtwhrV1BWSZpqZzk8nxJvd6ySHmB/qrUY8WTib/n8XNwsMr0FcUHDaqR7+i WwsYEc5MPqFNhRX07nTfx1guXaCsfx3qCNU5xGERP8IzCcRlDzaRgsdF+mURgsN+ zUhcPTlNwRmUYg== -----END CERTIFICATE-----Generated at Fri Dec 26 01:35:43 2025 by rpki-client