This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json) Hash identifier: ecZZ/AQvTB1oylQDU/HTwyYdHP9HHbsCuPfbv+a2jk8= Subject key identifier: 58:15:30:6C:B8:4E:A1:BD:BC:3B:1E:F8:FD:0C:7F:3E:9E:CA:7B:65 Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019B42B7458B40E77640C43551958BBF88EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft Manifest number: 0A93 Signing time: Sun 21 Dec 2025 21:01:05 +0000 Manifest this update: Sun 21 Dec 2025 21:01:05 +0000 Manifest next update: Mon 22 Dec 2025 21:01:05 +0000 Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: Wa/45HO+rCKlibvC0yuGHQg58tQBSSQt2ZtUcpMpv9E=) 2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:45:8b:40:e7:76:40:c4:35:51:95:8b:bf:88:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Dec 21 21:01:05 2025 GMT Not After : Dec 22 21:01:05 2025 GMT Subject: CN=5815306cb84ea1bdbc3b1ef8fd0c7f3e9eca7b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:f7:c2:c3:70:0f:87:d1:f9:1d:18:94:3a: 92:68:b4:d3:a0:c4:72:fe:b8:c5:c5:6e:b2:cc:f7: 1e:62:7d:51:64:1e:0b:08:f3:df:f1:0a:52:c4:ef: 36:69:0c:7b:38:40:53:a8:79:42:59:77:75:b0:19: 9a:60:ca:fb:a8:a9:96:3c:b4:5e:bb:58:b9:63:b1: 26:b1:ca:df:6f:b2:71:4e:e8:0e:68:d5:77:48:70: 7b:0d:7e:68:89:4c:58:c3:40:d5:d2:87:7b:48:61: 7b:7f:48:13:07:d0:00:c0:33:3c:8d:27:d4:fe:26: 2a:bb:c1:10:dc:bd:c7:56:b5:18:75:d9:0c:fa:1e: 9a:21:3b:22:ec:f8:13:f8:fa:67:ee:26:8c:9f:35: f6:18:36:3f:db:1b:67:5f:ae:36:cf:51:8d:59:e1: 1b:ba:c8:0f:dc:fb:1b:0e:2e:a8:40:a6:07:f3:b3: 47:2c:fa:8a:97:04:19:b7:2d:93:cb:0c:48:e2:24: 0b:fc:88:e4:00:37:4f:98:a2:74:e5:ad:7d:5b:36: c3:ff:43:ee:47:ed:b5:d5:38:de:a0:fb:29:06:5b: 2b:66:d2:17:92:b2:79:f0:a2:42:19:20:6a:65:89: 2f:87:e0:e3:6d:9b:6a:ee:6e:03:b8:ec:4e:6d:49: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:15:30:6C:B8:4E:A1:BD:BC:3B:1E:F8:FD:0C:7F:3E:9E:CA:7B:65 X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b0:3b:b9:81:ca:33:df:22:ad:b8:2c:79:3c:61:c4:d8:78: d4:8a:75:dc:b6:00:5e:bc:38:35:de:b3:47:0f:b2:29:de:11: a1:43:2a:f1:07:de:34:bf:f2:24:90:8a:ec:dc:fb:09:af:c1: b3:ea:e1:6b:14:7d:42:33:7e:a6:37:fa:89:ea:2b:cb:54:39: 28:73:6f:10:ce:27:4e:1a:db:d2:57:24:91:ef:2f:60:bc:87: 8b:b2:70:1e:51:b7:df:ef:37:31:45:68:f0:7f:41:ee:bb:1c: 3c:59:1d:ee:47:88:a4:a1:db:78:34:94:83:70:34:7b:91:c7: bd:9d:c4:f8:35:8f:83:41:60:94:a4:e7:76:f3:86:ec:ae:3f: 9b:3c:8e:65:0c:48:41:3e:d6:b8:76:ed:30:6e:14:92:d5:4c: 7c:68:66:1d:48:e6:e8:f8:85:f3:60:24:82:61:ff:46:0b:71: 7c:c0:b3:dc:0f:87:99:7a:89:93:dd:b7:24:15:a2:26:e1:c7: 82:13:22:b1:21:b5:1a:8f:71:de:ae:20:09:a5:50:2a:fc:60: 33:a0:4f:f5:ee:56:97:71:bc:06:43:0f:26:a8:d4:93:2b:65: de:2b:d0:0c:fb:b5:33:2e:b6:39:a5:e7:b6:5e:22:82:7c:87: f8:e8:8c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0WLQOd2QMQ1UZWLv4juMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjUxMjIxMjEwMTA1WhcNMjUxMjIyMjEwMTA1WjAzMTEwLwYDVQQD Eyg1ODE1MzA2Y2I4NGVhMWJkYmMzYjFlZjhmZDBjN2YzZTllY2E3YjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIv3wsNwD4fR+R0YlDqSaLTToMRy /rjFxW6yzPceYn1RZB4LCPPf8QpSxO82aQx7OEBTqHlCWXd1sBmaYMr7qKmWPLRe u1i5Y7Emscrfb7JxTugOaNV3SHB7DX5oiUxYw0DV0od7SGF7f0gTB9AAwDM8jSfU /iYqu8EQ3L3HVrUYddkM+h6aITsi7PgT+Ppn7iaMnzX2GDY/2xtnX642z1GNWeEb usgP3PsbDi6oQKYH87NHLPqKlwQZty2TywxI4iQL/IjkADdPmKJ05a19WzbD/0Pu R+211TjeoPspBlsrZtIXkrJ58KJCGSBqZYkvh+DjbZtq7m4DuOxObUk0fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgVMGy4TqG9vDse+P0Mfz6eyntlMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbA7uYHK M98irbgseTxhxNh41Ip13LYAXrw4Nd6zRw+yKd4RoUMq8QfeNL/yJJCK7Nz7Ca/B s+rhaxR9QjN+pjf6ieory1Q5KHNvEM4nThrb0lckke8vYLyHi7JwHlG33+83MUVo 8H9B7rscPFkd7keIpKHbeDSUg3A0e5HHvZ3E+DWPg0FglKTndvOG7K4/mzyOZQxI QT7WuHbtMG4UktVMfGhmHUjm6PiF82AkgmH/RgtxfMCz3A+HmXqJk923JBWiJuHH ghMisSG1Go9x3q4gCaVQKvxgM6BP9e5Wl3G8BkMPJqjUkytl3ivQDPu1My62OaXn tl4ignyH+OiM9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 06:28:07 2025 by rpki-client