This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json) Hash identifier: 74S47vI0cxuLWi8Nf+xW2sJ+4grlSQOMR+BJceqpbYM= Subject key identifier: 4B:33:06:24:F6:E0:1F:C4:95:DF:9E:9A:37:6A:93:90:CD:63:66:82 Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5 Certificate serial: 019AF352067C862493121CFA3C56EEA6E3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:30 +0000 Manifest this update: Sat 06 Dec 2025 11:00:30 +0000 Manifest next update: Sun 07 Dec 2025 11:00:30 +0000 Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: CgFNOkgZnhVjDoYktsjmWJdxguNmzX8WwwZknhv2GSQ=) 2: g2292tg5HkQKxN5v3A20HQE7HPE.roa (hash: 8kwF0PMfxaM4q7cGmN1tVvvHsfTo4uOxn6Qw92CswWg=) 3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:06:7c:86:24:93:12:1c:fa:3c:56:ee:a6:e3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5 Validity Not Before: Dec 6 11:00:30 2025 GMT Not After : Dec 7 11:00:30 2025 GMT Subject: CN=4b330624f6e01fc495df9e9a376a9390cd636682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:eb:f0:9b:36:03:07:45:c7:61:5c:cc:f2:ac: 86:6a:51:2d:53:d9:83:74:e5:0c:a6:95:8d:fe:23: e2:f4:41:86:87:ca:f3:96:ef:2e:72:2f:cb:a8:ce: 80:32:44:78:f6:28:33:29:3f:e0:0d:7a:bd:09:e8: 51:c2:e7:41:b0:f8:55:5b:3d:5e:2c:31:98:8b:1d: e2:58:96:67:0a:c0:a0:3b:0b:14:75:56:51:4f:dd: 86:0d:b6:ec:4e:b7:4f:0d:96:fe:ce:4f:be:c3:e7: 97:08:2d:4a:ac:fb:3c:9c:16:b4:5c:88:9a:a8:c5: a8:f7:46:c3:7f:a7:51:7c:4b:b7:81:fb:6e:c0:31: 35:2a:9c:25:06:42:2f:79:08:36:85:d9:44:75:70: 0e:e1:4b:2e:38:29:92:af:e5:20:e0:23:d2:e1:43: fb:b0:70:63:b4:bf:da:cd:c3:23:40:15:3d:92:77: f5:c2:1c:fa:39:7e:13:21:17:4c:e8:43:5c:7d:c8: a6:68:5a:c7:31:00:91:03:04:33:5e:8a:75:f5:03: 6a:bf:57:c1:de:af:00:4c:78:c4:d8:27:a9:63:16: 9a:21:9f:84:49:b2:a2:9f:2a:bf:fd:ef:e6:35:ca: f5:f2:41:30:e0:73:36:db:61:6b:3a:80:14:25:34: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:06:24:F6:E0:1F:C4:95:DF:9E:9A:37:6A:93:90:CD:63:66:82 X509v3 Authority Key Identifier: keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:4e:41:42:67:21:b2:b1:a7:21:b1:ee:8c:3a:a6:3f:7b: a9:03:92:8a:60:e1:73:74:1a:7b:7b:4f:e8:2b:85:62:38:32: 8c:4c:23:22:5c:10:ae:d0:a9:e6:7f:95:95:43:18:fd:98:e7: 34:c7:8f:7f:c1:74:4b:64:f6:c7:aa:65:fc:81:3a:c4:b8:f3: 82:5e:9d:1e:eb:e9:fa:9a:50:82:57:c3:64:8b:86:10:05:c8: 79:d9:53:11:c3:a7:57:36:14:19:2a:eb:2a:93:7d:7c:7e:bb: 62:b6:25:fe:bb:33:ca:90:fa:ca:55:d0:a6:9b:1e:eb:96:35: 0a:94:30:4c:3e:0e:fd:79:60:6f:64:d6:02:a5:60:16:55:c5: 31:c6:2a:ca:7a:00:06:1e:8a:9b:c7:40:49:b3:b8:eb:03:18: c7:97:e3:86:26:9d:f7:ad:1e:7b:18:18:a7:12:e2:50:2f:07: bf:f5:3e:e3:a7:50:a3:60:af:0c:45:05:15:5e:25:0e:e8:76: c2:98:b7:06:f3:5c:38:18:03:db:be:75:43:e8:76:ed:6f:a8: 22:76:c5:e4:30:07:31:1e:de:b3:30:29:21:cf:70:93:6f:b0: d1:b2:7e:4c:07:46:83:0e:e2:da:24:2d:f3:a3:86:85:58:7c: f3:35:7b:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgZ8hiSTEhz6PFbupuPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWIyZmQwMDUzYmRkN2U3Nzc1Mzk4ZGIxNjNiZWU4Nzcy NDc4YTUwHhcNMjUxMjA2MTEwMDMwWhcNMjUxMjA3MTEwMDMwWjAzMTEwLwYDVQQD Eyg0YjMzMDYyNGY2ZTAxZmM0OTVkZjllOWEzNzZhOTM5MGNkNjM2NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4evwmzYDB0XHYVzM8qyGalEtU9mD dOUMppWN/iPi9EGGh8rzlu8uci/LqM6AMkR49igzKT/gDXq9CehRwudBsPhVWz1e LDGYix3iWJZnCsCgOwsUdVZRT92GDbbsTrdPDZb+zk++w+eXCC1KrPs8nBa0XIia qMWo90bDf6dRfEu3gftuwDE1KpwlBkIveQg2hdlEdXAO4UsuOCmSr+Ug4CPS4UP7 sHBjtL/azcMjQBU9knf1whz6OX4TIRdM6ENcfcimaFrHMQCRAwQzXop19QNqv1fB 3q8ATHjE2CepYxaaIZ+ESbKinyq//e/mNcr18kEw4HM222FrOoAUJTS7IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEszBiT24B/Eld+emjdqk5DNY2aCMB8GA1UdIwQY MBaAFEWbL9AFO91+d3U5jbFjvuh3JHilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYt YWI4ZTk3ZDg1NWNjLzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8yZGRkNTgtNjAzNy00OTRiLTk5MmYtYWI4ZTk3ZDg1NWNj LzEvUlpzdjBBVTczWDUzZFRtTnNXTy02SGNrZUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX5OQUJn IbKxpyGx7ow6pj97qQOSimDhc3Qae3tP6CuFYjgyjEwjIlwQrtCp5n+VlUMY/Zjn NMePf8F0S2T2x6pl/IE6xLjzgl6dHuvp+ppQglfDZIuGEAXIedlTEcOnVzYUGSrr KpN9fH67YrYl/rszypD6ylXQppse65Y1CpQwTD4O/Xlgb2TWAqVgFlXFMcYqynoA Bh6Km8dASbO46wMYx5fjhiad960eexgYpxLiUC8Hv/U+46dQo2CvDEUFFV4lDuh2 wpi3BvNcOBgD2751Q+h27W+oInbF5DAHMR7eszApIc9wk2+w0bJ+TAdGgw7i2iQt 86OGhVh88zV7CA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:10 2025 by rpki-client