This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json) Hash identifier: SyMbcHkSfu8STL/auGHDBL/D1Fw8boPpDkyH2Uro45Y= Subject key identifier: 1B:BC:1C:EC:61:8F:64:DE:C4:F6:B1:41:B5:E8:C0:A2:26:48:31:88 Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f Certificate serial: 019AF276662038ED47727706331354FAC5BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 07:00:36 +0000 Manifest this update: Sat 06 Dec 2025 07:00:36 +0000 Manifest next update: Sun 07 Dec 2025 07:00:36 +0000 Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=) 2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: 9fP8xVbOwGSU6giH9+pfuftQ1WRV/GKmrWFgTCMONL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:66:20:38:ed:47:72:77:06:33:13:54:fa:c5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f Validity Not Before: Dec 6 07:00:36 2025 GMT Not After : Dec 7 07:00:36 2025 GMT Subject: CN=1bbc1cec618f64dec4f6b141b5e8c0a226483188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:66:24:0f:a7:41:67:f7:04:cb:e1:19:60: f8:93:c7:18:13:18:1b:de:2b:40:39:fa:98:e4:05: 65:9b:6e:7b:14:f8:d6:e9:8e:65:be:cd:19:59:34: f0:86:3d:66:2a:ea:02:db:dc:f4:c9:dc:15:57:4d: f1:1a:ab:77:ac:2d:6d:36:79:30:ce:bd:7e:3a:e9: 1d:63:0d:4b:ca:83:d0:eb:93:dd:dc:1f:96:b3:73: a6:87:48:5f:18:cb:26:be:86:f0:94:f0:2a:a7:f4: 70:38:68:39:90:a9:a6:fb:75:59:e5:7f:ac:cd:f3: b6:dd:91:cf:52:d9:00:e1:6f:da:1e:43:f2:44:7e: 6e:17:79:a3:5c:96:34:f0:2b:38:e7:b5:03:5a:d9: 03:02:06:f0:6a:34:91:39:d8:e9:d8:2d:02:30:1a: d2:d0:96:1c:0f:69:3d:de:ca:5e:73:c8:4d:7b:72: e1:a4:ed:fa:f7:2f:b3:31:ec:4f:ab:eb:1f:ce:49: 07:00:e6:a9:8e:2c:8d:51:59:a8:8e:e5:46:1f:3c: af:0b:eb:3b:37:05:e7:ef:d8:5f:07:70:13:88:df: 4d:13:b4:b2:a1:e2:96:4c:63:c2:0d:86:f8:0e:5f: cb:85:cb:1b:b5:a0:79:e1:a4:d8:5b:8c:24:65:25: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BC:1C:EC:61:8F:64:DE:C4:F6:B1:41:B5:E8:C0:A2:26:48:31:88 X509v3 Authority Key Identifier: keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:f2:2c:61:1a:7b:00:10:47:06:66:26:9e:8a:7d:97:58:fc: 95:2e:b2:1a:c5:d7:19:2f:74:d1:69:a6:75:49:a8:8e:3d:1f: 6f:e6:24:7b:9b:77:bf:e1:c8:00:23:72:4f:a1:d7:c2:da:95: 1d:f8:90:00:eb:25:75:1c:36:ac:bd:06:8b:c7:2c:66:cd:3d: 11:4c:5f:69:fc:1a:3a:b7:b1:8a:1d:8d:8b:7c:79:79:48:03: 69:b0:99:21:e4:93:32:df:93:70:60:43:66:64:7d:2a:11:c5: 2d:4f:3b:c3:4b:e7:fa:a7:97:1a:de:ae:c6:0a:a5:48:72:59: e8:fe:c5:13:fa:b8:74:ff:31:02:ac:a9:32:21:dd:a5:42:a9: 28:e7:21:44:41:4c:a0:77:f6:39:44:8d:ce:9b:6e:7e:12:53: 28:97:20:6d:18:27:f7:aa:a1:4a:bf:6e:a6:e8:99:54:c0:32: c5:bf:49:09:3c:2c:59:c2:57:81:5f:1f:fa:49:e4:21:29:22: 10:80:da:13:4a:cb:85:1b:2e:32:7e:3f:9c:a0:b8:f1:2d:00: e2:cb:00:a6:56:b2:47:07:1a:64:d6:2f:e7:a8:2b:55:41:8e: c3:37:96:d9:b4:48:35:f0:11:13:11:bb:b8:a1:b0:92:86:07: f9:23:6c:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmYgOO1HcncGMxNU+sW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3 YzM1NWYwHhcNMjUxMjA2MDcwMDM2WhcNMjUxMjA3MDcwMDM2WjAzMTEwLwYDVQQD EygxYmJjMWNlYzYxOGY2NGRlYzRmNmIxNDFiNWU4YzBhMjI2NDgzMTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxylmJA+nQWf3BMvhGWD4k8cYExgb 3itAOfqY5AVlm257FPjW6Y5lvs0ZWTTwhj1mKuoC29z0ydwVV03xGqt3rC1tNnkw zr1+OukdYw1LyoPQ65Pd3B+Ws3Omh0hfGMsmvobwlPAqp/RwOGg5kKmm+3VZ5X+s zfO23ZHPUtkA4W/aHkPyRH5uF3mjXJY08Cs457UDWtkDAgbwajSROdjp2C0CMBrS 0JYcD2k93spec8hNe3LhpO369y+zMexPq+sfzkkHAOapjiyNUVmojuVGHzyvC+s7 NwXn79hfB3ATiN9NE7SyoeKWTGPCDYb4Dl/LhcsbtaB54aTYW4wkZSUstwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu8HOxhj2TexPaxQbXowKImSDGIMB8GA1UdIwQY MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPIsYRp7 ABBHBmYmnop9l1j8lS6yGsXXGS900WmmdUmojj0fb+Yke5t3v+HIACNyT6HXwtqV HfiQAOsldRw2rL0Gi8csZs09EUxfafwaOrexih2Ni3x5eUgDabCZIeSTMt+TcGBD ZmR9KhHFLU87w0vn+qeXGt6uxgqlSHJZ6P7FE/q4dP8xAqypMiHdpUKpKOchREFM oHf2OUSNzptufhJTKJcgbRgn96qhSr9upuiZVMAyxb9JCTwsWcJXgV8f+knkISki EIDaE0rLhRsuMn4/nKC48S0A4ssAplayRwcaZNYv56grVUGOwzeW2bRINfARExG7 uKGwkoYH+SNsAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:43 2025 by rpki-client