This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json) Hash identifier: 9Un4pczGp1UdAAOjwTitiT45NoTPEKpx3piVIKM4Iu4= Subject key identifier: 30:8A:70:68:D5:0D:CA:F7:11:FE:66:89:2D:81:59:29:FE:D6:5B:32 Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f Certificate serial: 019B304359D335DBB8DEFBFDB3CC61FC94CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 07:01:18 +0000 Manifest this update: Thu 18 Dec 2025 07:01:18 +0000 Manifest next update: Fri 19 Dec 2025 07:01:18 +0000 Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=) 2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: 900x+7MRfEXv5/94AfynE1sCuKovxDN4kK4QJbJ/K3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:59:d3:35:db:b8:de:fb:fd:b3:cc:61:fc:94:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f Validity Not Before: Dec 18 07:01:18 2025 GMT Not After : Dec 19 07:01:18 2025 GMT Subject: CN=308a7068d50dcaf711fe66892d815929fed65b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:f6:42:64:75:96:01:32:01:d0:91:de:b1: 26:9e:f5:8a:60:ea:3a:0f:9a:6c:d5:74:df:95:0d: df:d9:4d:a7:b5:d1:55:29:5b:b1:42:fa:b9:a6:5e: db:8b:b1:29:01:65:9e:c6:a1:c4:40:59:ef:c7:ad: 36:0a:34:1f:9c:88:b1:2a:ea:39:e3:75:06:48:c3: 0b:ad:c0:44:cc:eb:67:04:1f:30:0d:c9:af:a0:1f: 53:ab:42:92:ff:f7:2e:24:51:4d:d8:a7:2e:3e:fc: c4:83:d6:c4:3c:50:c4:77:83:0f:90:63:d0:2a:62: 0c:a6:35:77:01:26:e5:ae:34:f1:f8:ff:5d:cd:a1: 48:37:10:63:40:b7:f9:c4:1c:c4:26:67:13:fe:93: 7a:8d:89:38:79:d2:5b:c0:af:a5:5e:72:85:2d:cb: 75:bf:45:ca:54:ec:90:72:71:35:7f:8e:53:56:85: 1d:a5:88:be:4a:80:b4:a1:ee:70:09:47:1e:cd:90: b1:0c:6a:0b:e1:e6:39:dc:81:44:2d:b3:55:35:2b: 1c:9e:71:72:ad:a8:af:a6:24:b4:c3:c0:a8:81:0f: 9d:dd:51:7c:0c:45:6e:09:1a:52:d5:b3:3e:1e:67: 86:2c:f5:cb:fe:bd:23:d5:c6:99:1f:73:9c:89:03: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:70:68:D5:0D:CA:F7:11:FE:66:89:2D:81:59:29:FE:D6:5B:32 X509v3 Authority Key Identifier: keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:43:3d:f5:cb:fb:ab:5e:b8:fa:30:89:3e:40:10:ba:0f: 6e:85:62:ca:44:6c:2d:8e:58:80:8a:07:81:31:0d:d3:f8:22: 9b:d8:0a:fc:bd:8d:0a:d4:34:29:55:3e:fc:f5:fd:3b:30:21: 32:fa:b6:a6:d7:62:b2:8b:8e:b1:18:6a:19:39:22:70:6b:df: 40:0e:9f:21:ab:77:dc:5b:34:c1:20:78:cf:49:a3:ec:90:6d: c3:cc:54:2e:a4:87:30:be:9d:b4:8e:53:c0:a4:c0:f2:ed:15: 1d:4e:df:81:49:35:b2:b5:db:9f:c6:c6:42:f6:dd:42:eb:00: a7:2a:be:75:67:d9:16:ca:c8:09:f1:db:59:1c:4e:2e:28:eb: 66:52:52:9e:eb:39:3d:62:d5:83:7b:f4:bc:05:ce:66:d9:62: ff:41:16:12:8f:60:a6:50:65:41:d2:8d:56:e5:ee:d3:ef:8c: b2:5b:f7:a9:34:5f:79:7a:e2:74:5e:60:e5:36:c2:5b:61:8c: dd:f9:66:ca:c0:96:2c:7a:17:a4:6b:4a:3f:e5:4b:f8:98:41: 8c:1c:d2:4f:ae:a0:24:48:72:2c:c5:75:80:06:a3:39:ea:67: e5:87:8e:8c:9a:4c:b0:14:51:c0:86:a7:ce:03:b2:af:7e:1e: da:db:45:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQ1nTNdu43vv9s8xh/JTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTY2YzFhMjgzZDU1M2VmM2Y2NTZmNTcyMjM5ODRkZGE3 YzM1NWYwHhcNMjUxMjE4MDcwMTE4WhcNMjUxMjE5MDcwMTE4WjAzMTEwLwYDVQQD EygzMDhhNzA2OGQ1MGRjYWY3MTFmZTY2ODkyZDgxNTkyOWZlZDY1YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/f2QmR1lgEyAdCR3rEmnvWKYOo6 D5ps1XTflQ3f2U2ntdFVKVuxQvq5pl7bi7EpAWWexqHEQFnvx602CjQfnIixKuo5 43UGSMMLrcBEzOtnBB8wDcmvoB9Tq0KS//cuJFFN2KcuPvzEg9bEPFDEd4MPkGPQ KmIMpjV3ASblrjTx+P9dzaFINxBjQLf5xBzEJmcT/pN6jYk4edJbwK+lXnKFLct1 v0XKVOyQcnE1f45TVoUdpYi+SoC0oe5wCUcezZCxDGoL4eY53IFELbNVNSscnnFy raivpiS0w8CogQ+d3VF8DEVuCRpS1bM+HmeGLPXL/r0j1caZH3OciQPAWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCKcGjVDcr3Ef5miS2BWSn+1lsyMB8GA1UdIwQY MBaAFERWbBooPVU+8/ZW9XIjmE3afDVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGIt OWQ1OGNlMjIxODQzLzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lZWI4MTMtZjI0Yy00MTc1LTgyOGItOWQ1OGNlMjIxODQz LzEvUkZac0dpZzlWVDd6OWxiMWNpT1lUZHA4TlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4ZDPfXL +6teuPowiT5AELoPboViykRsLY5YgIoHgTEN0/gim9gK/L2NCtQ0KVU+/PX9OzAh Mvq2ptdisouOsRhqGTkicGvfQA6fIat33Fs0wSB4z0mj7JBtw8xULqSHML6dtI5T wKTA8u0VHU7fgUk1srXbn8bGQvbdQusApyq+dWfZFsrICfHbWRxOLijrZlJSnus5 PWLVg3v0vAXOZtli/0EWEo9gplBlQdKNVuXu0++Mslv3qTRfeXridF5g5TbCW2GM 3flmysCWLHoXpGtKP+VL+JhBjBzST66gJEhyLMV1gAajOepn5YeOjJpMsBRRwIan zgOyr34e2ttFYw== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:30 2025 by rpki-client