This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json) Hash identifier: SLxpu6y8Bz1PjTpR0ToaVmOVLaRQze/ZbUWF5K8CnA8= Subject key identifier: BB:00:1A:C3:3D:9D:27:18:04:EC:E1:64:29:03:E1:84:71:8A:0C:71 Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019B3CEB9B3FE87B9AE1B9DABBC439C602DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft Manifest number: 0A90 Signing time: Sat 20 Dec 2025 18:00:32 +0000 Manifest this update: Sat 20 Dec 2025 18:00:32 +0000 Manifest next update: Sun 21 Dec 2025 18:00:32 +0000 Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: +fueDWh0BcGB8qQd2VyIEpE2rM0N3a0h6QX1seVMEJM=) 2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:9b:3f:e8:7b:9a:e1:b9:da:bb:c4:39:c6:02:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Dec 20 18:00:32 2025 GMT Not After : Dec 21 18:00:32 2025 GMT Subject: CN=bb001ac33d9d271804ece1642903e184718a0c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:2b:16:b4:88:4b:fe:20:87:b7:7d:8c:c4: 46:96:04:92:1c:92:b8:98:81:1c:48:ee:91:03:b7: 7f:5d:85:af:b6:e5:c9:cd:64:2e:6d:19:4f:7e:73: f6:01:56:ab:13:7d:40:c0:6a:02:cc:4f:7b:1f:15: 9d:ff:e9:90:10:b1:8b:3d:4e:17:ff:08:e3:48:7c: e9:35:87:58:6d:23:cf:75:f1:5c:15:63:c8:52:73: fd:d3:fa:f1:2f:ab:b3:c0:be:32:e2:b6:d2:f3:85: 44:91:83:ae:9e:8e:d2:56:41:9e:df:7f:fb:fb:e6: b4:c0:4b:a5:8e:6a:c4:56:1c:dd:f0:6f:1a:c4:e5: 66:e8:80:73:97:67:4a:89:a7:52:95:67:34:be:b0: 3c:76:f4:25:20:09:88:66:c0:ed:06:58:ef:2a:82: 18:f4:fe:b0:71:54:bf:29:f6:66:ee:64:ba:d2:3c: d0:85:17:81:41:9d:35:df:14:de:f4:04:c4:ab:9f: 32:51:69:1f:e2:f9:1e:2c:25:52:34:cd:e2:66:0f: 9a:54:84:47:21:ff:85:b6:a1:03:b6:d8:74:ce:c9: 1a:9b:a9:af:90:fb:dc:4e:6e:cc:81:7f:76:5c:fa: 0a:73:61:11:52:c5:65:fd:4e:17:73:bd:15:67:c3: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:00:1A:C3:3D:9D:27:18:04:EC:E1:64:29:03:E1:84:71:8A:0C:71 X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ce:fa:a8:60:8a:f3:25:1a:79:6f:c5:fa:ae:57:d4:b3:f2: 15:dc:79:e3:b9:13:9c:a8:28:dc:92:89:62:61:4b:4a:4e:87: 32:18:26:17:f8:0c:2f:27:f9:22:be:30:a6:cd:d3:47:f0:6f: 13:2a:61:43:b7:de:e1:8e:e3:2c:1a:60:78:42:1c:35:21:45: 8c:a7:17:86:38:a8:96:1f:52:92:ed:21:9e:ee:4e:73:04:af: b5:57:56:e0:ee:c7:d6:dd:15:e1:f4:09:1a:cc:1a:4e:18:4c: 6e:a5:4c:a6:0c:14:26:ee:88:14:25:24:38:d9:45:c7:f6:63: b7:b4:67:4c:69:9b:a1:07:b1:f7:73:3f:8e:d7:f7:0c:ce:b2: fc:90:08:e6:dd:58:f0:8d:37:1b:34:45:fc:57:7b:fb:8a:d8: 09:fa:19:bc:35:1d:41:38:28:67:df:09:7c:8d:b7:16:35:a6: 7f:d7:df:84:9e:f6:e2:59:f3:27:2d:7c:27:83:f4:ec:af:3f: 69:bd:f4:29:19:f1:82:5c:7a:c3:a6:55:b3:33:88:59:e7:80: 7d:1b:20:f8:06:03:0b:7c:b1:18:b8:b8:38:73:63:9d:9f:94: 49:61:ed:27:6f:4e:f1:b7:ef:e2:4e:62:0d:e6:4c:ef:e2:ba: 6a:e7:54:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865s/6Hua4bnau8Q5xgLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjUxMjIwMTgwMDMyWhcNMjUxMjIxMTgwMDMyWjAzMTEwLwYDVQQD EyhiYjAwMWFjMzNkOWQyNzE4MDRlY2UxNjQyOTAzZTE4NDcxOGEwYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr90rFrSIS/4gh7d9jMRGlgSSHJK4 mIEcSO6RA7d/XYWvtuXJzWQubRlPfnP2AVarE31AwGoCzE97HxWd/+mQELGLPU4X /wjjSHzpNYdYbSPPdfFcFWPIUnP90/rxL6uzwL4y4rbS84VEkYOuno7SVkGe33/7 ++a0wEuljmrEVhzd8G8axOVm6IBzl2dKiadSlWc0vrA8dvQlIAmIZsDtBljvKoIY 9P6wcVS/KfZm7mS60jzQhReBQZ013xTe9ATEq58yUWkf4vkeLCVSNM3iZg+aVIRH If+FtqEDtth0zskam6mvkPvcTm7MgX92XPoKc2ERUsVl/U4Xc70VZ8NwywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsAGsM9nScYBOzhZCkD4YRxigxxMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtM76qGCK 8yUaeW/F+q5X1LPyFdx547kTnKgo3JKJYmFLSk6HMhgmF/gMLyf5Ir4wps3TR/Bv EyphQ7fe4Y7jLBpgeEIcNSFFjKcXhjiolh9Sku0hnu5OcwSvtVdW4O7H1t0V4fQJ GswaThhMbqVMpgwUJu6IFCUkONlFx/Zjt7RnTGmboQex93M/jtf3DM6y/JAI5t1Y 8I03GzRF/Fd7+4rYCfoZvDUdQTgoZ98JfI23FjWmf9ffhJ724lnzJy18J4P07K8/ ab30KRnxglx6w6ZVszOIWeeAfRsg+AYDC3yxGLi4OHNjnZ+USWHtJ29O8bfv4k5i DeZM7+K6audU5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:06 2025 by rpki-client