This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json) Hash identifier: fTCWMpaeBcpEE+bt3O0y/MzNfKKlRAatboAbshbr1AE= Subject key identifier: AD:61:8A:DD:DF:BC:BE:BA:3A:2E:2F:66:26:A5:A4:75:A3:55:B5:09 Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Certificate serial: 019B443798582AC79A9E363804C4C9C66E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft Manifest number: 054A Signing time: Mon 22 Dec 2025 04:00:52 +0000 Manifest this update: Mon 22 Dec 2025 04:00:52 +0000 Manifest next update: Tue 23 Dec 2025 04:00:52 +0000 Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: R+sCUGS235VLMelNzNC97K9I2dE3A70zvoYHlmZCQ+4=) 2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:98:58:2a:c7:9a:9e:36:38:04:c4:c9:c6:6e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Validity Not Before: Dec 22 04:00:52 2025 GMT Not After : Dec 23 04:00:52 2025 GMT Subject: CN=ad618adddfbcbeba3a2e2f6626a5a475a355b509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:67:21:b8:1c:8e:e4:3c:77:a1:76:18:0e:46: a7:d1:75:85:9a:02:07:ed:7d:f5:5d:a2:2a:55:40: 32:b4:a7:96:b5:86:be:04:5f:19:7d:20:4b:72:bb: 65:01:b4:a1:fa:b4:92:14:da:78:e1:d2:e5:39:12: fc:20:a8:1c:67:e9:b3:77:46:b2:66:1c:af:51:81: ad:30:36:5d:39:23:f2:26:3f:2d:52:3c:50:5b:e0: 04:f1:24:67:65:3e:bf:c5:4f:50:74:bc:3f:7b:2a: 4f:e9:a5:0a:82:f6:31:dc:d7:de:bd:cc:94:07:63: 2d:4c:8b:d2:b5:2e:e0:4b:1b:95:c9:a5:fd:80:f8: 31:ec:aa:50:1b:3f:e1:17:ca:d3:9b:06:d5:2d:99: 07:d8:75:f9:7c:9e:cc:09:1e:c5:bb:1c:94:58:3c: de:be:7c:8c:a7:65:42:93:6f:12:62:21:d5:84:0f: 41:23:cb:c1:15:5f:68:bf:40:65:a9:5c:51:e5:13: c8:29:47:11:95:cc:84:b3:bd:39:2c:ed:c8:d3:8b: 3c:bc:0c:c8:da:d7:b0:5f:a0:fe:3e:de:65:71:7b: cb:82:71:76:83:cf:66:f9:02:7b:d7:f1:20:e8:21: b8:32:f5:3e:aa:67:c6:59:f9:05:41:cb:0b:5a:09: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:61:8A:DD:DF:BC:BE:BA:3A:2E:2F:66:26:A5:A4:75:A3:55:B5:09 X509v3 Authority Key Identifier: keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:68:ea:c8:05:d4:b3:22:fc:ee:57:20:7d:05:ca:2a:12:a8: 53:06:46:8b:2d:3c:53:96:4b:fb:00:e7:74:68:69:ba:d4:0c: b6:96:2d:c0:65:3b:39:7e:e1:bc:b4:86:66:ec:24:06:b5:e7: 7d:c7:75:87:68:1d:8f:31:83:ad:dd:67:49:5c:e0:2f:84:83: f1:5a:14:91:a3:fc:75:9c:87:8b:07:a3:4b:82:eb:83:5c:81: 55:9f:26:cb:c6:8e:00:b2:25:7b:d1:7d:eb:40:ec:c8:50:1a: 95:1d:ce:93:10:ba:b7:ba:58:2f:d7:0e:0f:17:22:0d:0a:01: f1:89:2e:f8:1d:2c:fd:22:5a:1d:8e:a9:67:a1:76:a7:c8:8e: 22:07:f4:a4:71:c1:5e:51:24:1a:01:f7:27:58:e7:ea:06:bb: 44:4b:04:13:d1:a3:4d:69:3c:c0:10:dd:7f:d7:b3:1f:6f:4a: 29:4e:93:c4:a1:17:02:7f:b2:bf:97:d9:a7:2e:4e:b3:ed:ad: fc:da:1b:37:77:dd:77:94:ea:61:60:fd:32:7c:53:6e:5d:70: 35:c5:bc:f8:26:ee:a5:bd:b3:78:52:2e:64:1a:fd:ea:30:97: f4:4b:aa:d1:ce:56:da:8f:14:3e:72:45:d7:31:ac:5e:a2:3f: 68:18:e6:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN5hYKseanjY4BMTJxm5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1 MmE3YWUwHhcNMjUxMjIyMDQwMDUyWhcNMjUxMjIzMDQwMDUyWjAzMTEwLwYDVQQD EyhhZDYxOGFkZGRmYmNiZWJhM2EyZTJmNjYyNmE1YTQ3NWEzNTViNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymchuByO5Dx3oXYYDkan0XWFmgIH 7X31XaIqVUAytKeWtYa+BF8ZfSBLcrtlAbSh+rSSFNp44dLlORL8IKgcZ+mzd0ay ZhyvUYGtMDZdOSPyJj8tUjxQW+AE8SRnZT6/xU9QdLw/eypP6aUKgvYx3NfevcyU B2MtTIvStS7gSxuVyaX9gPgx7KpQGz/hF8rTmwbVLZkH2HX5fJ7MCR7FuxyUWDze vnyMp2VCk28SYiHVhA9BI8vBFV9ov0BlqVxR5RPIKUcRlcyEs705LO3I04s8vAzI 2tewX6D+Pt5lcXvLgnF2g89m+QJ71/Eg6CG4MvU+qmfGWfkFQcsLWgnLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1hit3fvL66Oi4vZialpHWjVbUJMB8GA1UdIwQY MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWjqyAXU syL87lcgfQXKKhKoUwZGiy08U5ZL+wDndGhputQMtpYtwGU7OX7hvLSGZuwkBrXn fcd1h2gdjzGDrd1nSVzgL4SD8VoUkaP8dZyHiwejS4Lrg1yBVZ8my8aOALIle9F9 60DsyFAalR3OkxC6t7pYL9cODxciDQoB8Yku+B0s/SJaHY6pZ6F2p8iOIgf0pHHB XlEkGgH3J1jn6ga7REsEE9GjTWk8wBDdf9ezH29KKU6TxKEXAn+yv5fZpy5Os+2t /NobN3fdd5TqYWD9MnxTbl1wNcW8+Cbupb2zeFIuZBr96jCX9Euq0c5W2o8UPnJF 1zGsXqI/aBjmLQ== -----END CERTIFICATE-----Generated at Mon Dec 22 13:17:31 2025 by rpki-client