This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json) Hash identifier: kVA5VesCMz5Wd8OVMew3lrBWWZuCo+CjyFriPQcGUqU= Subject key identifier: 86:73:1B:0B:50:05:62:B6:57:7C:8A:FA:CD:94:BB:4F:E7:4E:97:52 Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540 Certificate serial: 019B3757EA4D039708EED5A1968C72007EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft Manifest number: 0E00 Signing time: Fri 19 Dec 2025 16:01:07 +0000 Manifest this update: Fri 19 Dec 2025 16:01:07 +0000 Manifest next update: Sat 20 Dec 2025 16:01:07 +0000 Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: o22+Vgmy9bmU7ElU/OiCkZHjr/YmxbsmzYhFrCdxVjw=) 2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:ea:4d:03:97:08:ee:d5:a1:96:8c:72:00:7e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540 Validity Not Before: Dec 19 16:01:07 2025 GMT Not After : Dec 20 16:01:07 2025 GMT Subject: CN=86731b0b500562b6577c8afacd94bb4fe74e9752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9c:4e:4b:1f:21:63:4a:c3:03:85:bd:9a:1c: 27:96:18:43:48:b8:93:96:09:2b:e6:00:c0:9f:4b: 7c:ea:28:32:f5:0b:50:c4:91:7e:ef:51:3a:f0:38: 12:e3:90:84:19:61:74:68:b4:4e:83:66:04:3f:a5: b9:89:90:58:f6:93:04:6a:e2:bf:08:f4:06:c3:6e: 7b:ef:82:9e:1a:db:b4:f2:8e:da:4b:78:a3:2f:8b: 28:f7:4e:df:a5:a5:c4:5f:30:66:20:47:d5:a0:b7: e1:0f:2d:81:b9:07:ce:6c:8e:73:61:7d:fe:2d:f7: 04:f5:2a:2b:e2:88:c6:06:36:3c:56:26:6e:e6:ef: d2:f1:d8:d0:4c:41:05:5a:ff:e2:dd:0e:6b:51:3b: d7:45:ff:ee:aa:a4:40:fa:cd:17:1a:0f:35:29:1e: 6a:53:c1:81:18:f0:41:c9:aa:1b:ee:1c:9a:02:18: 3f:2d:65:98:24:17:e0:2e:41:31:6b:ae:10:f3:35: 2f:88:d1:9b:61:83:e8:a2:64:a0:4d:6c:46:03:ab: 26:d9:a9:51:23:5b:a4:3d:c8:82:b4:f7:4c:63:e1: 20:8f:0d:02:b6:a9:f8:8c:d5:10:b2:cd:d1:d6:cf: 47:7f:b1:0a:c1:51:45:ad:a0:fa:ab:97:b7:7a:ff: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:73:1B:0B:50:05:62:B6:57:7C:8A:FA:CD:94:BB:4F:E7:4E:97:52 X509v3 Authority Key Identifier: keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:8f:9f:b1:13:8a:d7:ee:f6:b0:0e:b1:90:1c:ad:bb:89:21: a5:ef:c2:f1:f3:be:f9:33:f5:a2:02:44:80:9a:94:99:5f:d3: 4c:db:e5:38:ff:c7:4d:46:98:ca:b4:1c:78:ce:c0:91:f0:9b: fb:61:eb:47:2b:4c:bc:5a:7f:de:7a:10:66:3a:93:49:35:92: 50:8b:c0:13:4c:df:0e:ee:f0:6c:3f:69:eb:61:b2:da:89:77: 73:e0:99:f2:cb:82:4b:a5:40:f2:2b:9f:fb:6c:73:83:13:b1: 83:24:e2:50:35:13:ab:c9:cf:ea:89:1e:fc:c2:e0:0f:da:4b: d9:71:36:35:6e:d0:c5:9f:20:bd:8a:9a:5c:fe:6f:dd:4f:b9: 28:f8:a2:c0:23:21:ce:7d:2c:a9:3c:00:09:bc:fb:fe:41:f5: 8b:90:8a:20:eb:2d:4f:c3:83:84:00:33:3e:c2:c5:ca:2c:17: d9:11:0f:bb:dc:22:bd:08:7d:e3:f5:2b:37:95:3a:36:af:08: 52:ac:dc:7c:b6:03:32:87:43:c8:da:04:b7:72:8b:8a:23:c0: 3d:4a:05:a6:e7:cf:94:c7:ac:c6:7b:4b:02:3d:45:95:6a:45: 2f:d0:d2:79:f0:ec:61:6d:16:4f:d6:24:e0:93:76:10:31:8b: a0:ce:df:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V+pNA5cI7tWhloxyAH77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDY0ZGFjMDNmMWE1N2MxOTMxNjY3MTE4MDQ4ZDgyYzQz YzU1NDAwHhcNMjUxMjE5MTYwMTA3WhcNMjUxMjIwMTYwMTA3WjAzMTEwLwYDVQQD Eyg4NjczMWIwYjUwMDU2MmI2NTc3YzhhZmFjZDk0YmI0ZmU3NGU5NzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpxOSx8hY0rDA4W9mhwnlhhDSLiT lgkr5gDAn0t86igy9QtQxJF+71E68DgS45CEGWF0aLROg2YEP6W5iZBY9pMEauK/ CPQGw25774KeGtu08o7aS3ijL4so907fpaXEXzBmIEfVoLfhDy2BuQfObI5zYX3+ LfcE9Sor4ojGBjY8ViZu5u/S8djQTEEFWv/i3Q5rUTvXRf/uqqRA+s0XGg81KR5q U8GBGPBByaob7hyaAhg/LWWYJBfgLkExa64Q8zUviNGbYYPoomSgTWxGA6sm2alR I1ukPciCtPdMY+Egjw0Ctqn4jNUQss3R1s9Hf7EKwVFFraD6q5e3ev8DkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZzGwtQBWK2V3yK+s2Uu0/nTpdSMB8GA1UdIwQY MBaAFETWTawD8aV8GTFmcRgEjYLEPFVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUt ZTlkMmIzYTc4NzJjLzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUtZTlkMmIzYTc4NzJj LzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo+fsROK 1+72sA6xkBytu4khpe/C8fO++TP1ogJEgJqUmV/TTNvlOP/HTUaYyrQceM7AkfCb +2HrRytMvFp/3noQZjqTSTWSUIvAE0zfDu7wbD9p62Gy2ol3c+CZ8suCS6VA8iuf +2xzgxOxgyTiUDUTq8nP6oke/MLgD9pL2XE2NW7QxZ8gvYqaXP5v3U+5KPiiwCMh zn0sqTwACbz7/kH1i5CKIOstT8ODhAAzPsLFyiwX2REPu9wivQh94/UrN5U6Nq8I UqzcfLYDModDyNoEt3KLiiPAPUoFpufPlMesxntLAj1FlWpFL9DSefDsYW0WT9Yk 4JN2EDGLoM7fMw== -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:48 2025 by rpki-client