This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json) Hash identifier: SmUCLHCpEdiJFmFwjYwLfHb1z9GdiArh6R0Vdy6G/vY= Subject key identifier: F4:7B:3A:23:48:42:C5:69:00:76:31:93:A3:9C:27:0E:70:B9:8C:1E Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4 Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4 Certificate serial: 019AF3F7D620ECDE8252319E495A2E47AC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft Manifest number: 08A9 Signing time: Sat 06 Dec 2025 14:01:36 +0000 Manifest this update: Sat 06 Dec 2025 14:01:36 +0000 Manifest next update: Sun 07 Dec 2025 14:01:36 +0000 Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: 2ORt43hTl6pqHCQ7at6QLhxGb9l/MBfvaKunQVXhKn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:d6:20:ec:de:82:52:31:9e:49:5a:2e:47:ac:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4 Validity Not Before: Dec 6 14:01:36 2025 GMT Not After : Dec 7 14:01:36 2025 GMT Subject: CN=f47b3a234842c56900763193a39c270e70b98c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fe:0a:5e:74:18:b8:d5:b9:c7:67:92:d7:b8: ea:39:8f:d6:d1:b8:8a:13:fb:fd:b3:d7:44:2c:2e: 09:13:26:cd:a3:4b:35:03:a2:e8:9e:2e:ee:5e:09: 62:9c:50:1d:93:06:83:20:e5:b6:80:50:a2:f0:0e: f4:36:17:79:88:17:3d:55:cd:5e:62:0c:cd:a7:8d: a5:1f:3e:81:f8:30:4c:c6:03:c6:e3:08:f6:a5:89: 4d:c5:24:17:d6:ba:ec:b3:e2:a3:60:84:4e:96:a8: 45:f1:c9:f4:9c:7b:74:21:16:db:1e:7c:20:ff:16: 45:bd:a4:81:66:90:82:e9:55:e0:c1:83:45:05:0c: d5:b7:6f:b6:8c:ca:9b:04:eb:0e:ca:01:86:90:09: 4f:21:a1:9c:46:73:b1:16:c1:62:ff:74:6e:7f:d4: fd:26:e0:8b:9d:1e:73:92:82:4c:e7:d5:07:f9:fc: 75:c6:63:62:0c:cf:c2:cd:7d:c5:6b:8e:cc:a6:4f: 36:f3:00:2d:a7:df:df:7b:95:2c:e2:85:f7:ef:36: 73:eb:30:3b:13:0a:87:5d:a7:02:90:96:a9:7b:a4: 91:d5:49:9a:43:5c:ce:a6:22:03:a6:54:6e:c4:29: 95:34:f6:d8:23:58:b2:eb:2a:e4:14:8a:b1:fe:be: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:3A:23:48:42:C5:69:00:76:31:93:A3:9C:27:0E:70:B9:8C:1E X509v3 Authority Key Identifier: keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b9:ac:39:8b:9f:20:b9:1e:b0:da:cc:6b:0f:49:d8:10:0b: 8e:7b:e6:4f:fd:eb:d1:f9:b5:d4:53:2c:63:b2:b7:1f:08:16: c9:9d:0b:11:b1:20:ec:72:1f:d1:eb:02:0d:ea:0e:78:5a:72: c2:51:e5:5d:a5:54:c9:f6:88:93:ca:a0:4d:df:36:37:58:a6: 2c:89:d2:59:b6:2c:98:d8:3d:1f:38:c3:4d:23:c1:a0:67:b1: d9:97:c5:07:f8:90:ab:f6:9a:2e:d6:52:c1:c4:ed:95:6d:f0: c7:52:a8:6a:78:a4:ff:ff:e3:34:36:e2:df:5f:9a:8e:01:af: f8:88:70:4d:34:7c:70:75:aa:f2:61:ea:3e:04:ae:63:95:d6: 3a:14:06:86:64:37:99:ea:ba:6f:d1:79:46:fe:10:fa:80:f9: bb:c4:5d:d8:6c:6b:b9:56:40:76:2e:45:12:11:11:54:29:d8: 72:d2:e1:43:c5:20:20:73:2a:7b:25:22:88:04:5e:c6:b0:91: 6d:87:4b:d5:1d:67:b4:94:a7:2f:16:07:93:23:9a:b5:3c:09: 35:be:49:60:dd:ee:63:e3:07:07:94:a8:2d:1f:27:3a:1b:c2: 2b:a5:59:fa:08:d7:75:b5:17:e0:b6:06:2e:f1:47:7d:c4:ba: 70:1b:a9:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz99Yg7N6CUjGeSVouR6xzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NTRmM2U2OTI3ZWM0YzdjOTdkMGYyMzZhOGMyNDUzNGE3 ZmNkZDQwHhcNMjUxMjA2MTQwMTM2WhcNMjUxMjA3MTQwMTM2WjAzMTEwLwYDVQQD EyhmNDdiM2EyMzQ4NDJjNTY5MDA3NjMxOTNhMzljMjcwZTcwYjk4YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v4KXnQYuNW5x2eS17jqOY/W0biK E/v9s9dELC4JEybNo0s1A6Loni7uXglinFAdkwaDIOW2gFCi8A70Nhd5iBc9Vc1e YgzNp42lHz6B+DBMxgPG4wj2pYlNxSQX1rrss+KjYIROlqhF8cn0nHt0IRbbHnwg /xZFvaSBZpCC6VXgwYNFBQzVt2+2jMqbBOsOygGGkAlPIaGcRnOxFsFi/3Ruf9T9 JuCLnR5zkoJM59UH+fx1xmNiDM/CzX3Fa47Mpk828wAtp9/fe5Us4oX37zZz6zA7 EwqHXacCkJape6SR1UmaQ1zOpiIDplRuxCmVNPbYI1iy6yrkFIqx/r4QwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR7OiNIQsVpAHYxk6OcJw5wuYweMB8GA1UdIwQY MBaAFEZU8+aSfsTHyX0PI2qMJFNKf83UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZmY0YTMtZDE5MS00YzZiLTgzNWEt YjgwNTA2MjJhYTk2LzEvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83ZmY0YTMtZDE5MS00YzZiLTgzNWEtYjgwNTA2MjJhYTk2 LzEvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbmsOYuf ILkesNrMaw9J2BALjnvmT/3r0fm11FMsY7K3HwgWyZ0LEbEg7HIf0esCDeoOeFpy wlHlXaVUyfaIk8qgTd82N1imLInSWbYsmNg9HzjDTSPBoGex2ZfFB/iQq/aaLtZS wcTtlW3wx1Koanik///jNDbi31+ajgGv+IhwTTR8cHWq8mHqPgSuY5XWOhQGhmQ3 meq6b9F5Rv4Q+oD5u8Rd2GxruVZAdi5FEhERVCnYctLhQ8UgIHMqeyUiiARexrCR bYdL1R1ntJSnLxYHkyOatTwJNb5JYN3uY+MHB5SoLR8nOhvCK6VZ+gjXdbUX4LYG LvFHfcS6cBupGw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:47 2025 by rpki-client