This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json) Hash identifier: YcrDCjE6DR+ddrHSH21Z6ry0lToplNMDfu07fQm0HLA= Subject key identifier: 11:F2:C9:20:71:D1:CE:03:E8:D3:AA:F1:62:40:8A:0D:62:08:54:DF Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc Certificate serial: 019AF12E4E436687CFED2F3C11AE7FB95F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft Manifest number: 0A83 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=) 2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: 44o+0QUXqZUgBln/BaNMenycg1Na3ENZchjLVzY2Xmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4e:43:66:87:cf:ed:2f:3c:11:ae:7f:b9:5f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=11f2c92071d1ce03e8d3aaf162408a0d620854df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:73:43:28:b0:e3:dd:7e:a5:a0:35:1c:ba: 1c:00:3a:01:f9:39:36:8a:b8:5a:da:e2:a9:f8:54: f2:98:ee:a6:bf:20:9f:d1:74:96:cd:ca:53:51:f3: 62:ca:5b:43:b5:59:71:44:63:91:a8:ad:dd:bb:a4: e5:43:3b:af:d8:41:af:08:ee:d8:60:27:80:ea:e5: 2a:8c:8d:3a:a5:1d:25:71:c1:6c:a5:27:03:79:2c: 48:c3:ba:0f:80:2f:4d:0e:4f:a0:90:cb:71:bc:01: 96:e0:fc:c8:0d:22:dc:36:2b:b6:44:0d:63:b9:03: be:78:9c:d4:5a:44:d1:4b:87:d1:f0:45:61:20:0f: ea:73:2a:83:02:e2:b6:2d:76:bb:2b:e5:a0:0d:dc: 06:ef:2d:75:4c:d9:99:9f:d2:47:5e:af:f0:78:72: 8e:c9:90:96:40:c2:91:f0:61:fb:0d:2e:eb:7e:c2: 6a:67:c8:29:04:b4:80:25:8c:91:5b:15:65:57:06: 4a:d7:d3:15:cd:0d:73:51:f4:4d:3d:5e:f7:3e:90: 06:1f:9f:06:68:e9:85:45:fc:1c:ee:1c:82:8b:6a: 47:cb:25:f0:90:da:51:71:05:f6:6b:79:ca:54:44: 7d:43:45:c5:cb:90:67:3a:17:ae:36:c9:ca:1a:a1: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F2:C9:20:71:D1:CE:03:E8:D3:AA:F1:62:40:8A:0D:62:08:54:DF X509v3 Authority Key Identifier: keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1c:5f:45:25:67:0f:80:79:99:4f:ad:3f:f9:4b:12:30:9a: 8f:f9:38:b0:20:66:21:3a:39:18:12:49:ac:0e:3b:19:c6:f3: 3d:c3:31:e6:d5:d8:67:bc:c1:5a:4d:88:d2:32:ca:2e:cd:49: 06:cf:8d:1d:15:bd:1a:97:bd:58:2a:4a:26:71:57:ff:ef:e5: ea:b0:05:95:fa:20:e7:db:24:cc:df:88:78:d1:e7:9f:4e:32: 8f:5c:29:39:98:e5:ef:8f:f3:bc:cb:1d:53:fa:39:19:c7:0a: ad:d5:a5:e2:78:ec:f2:98:36:6c:bf:45:7f:37:40:69:3b:cc: 62:b7:27:8a:55:a1:f9:e6:1f:fa:1e:dd:35:29:94:c1:84:5c: 7d:7c:dc:82:b2:99:88:4c:b0:27:98:3b:43:1f:80:71:8f:79: 08:50:38:19:88:77:d5:e9:33:6a:ef:e0:27:91:ee:20:bb:97: 13:90:58:9c:75:71:a9:da:34:67:ec:c9:97:0c:fc:63:40:c3: 92:25:3a:88:b0:70:8a:ed:20:48:18:ee:8c:05:8e:c0:e3:51: 83:31:e7:33:35:74:6f:14:bf:5a:79:bf:f6:83:21:42:4a:51: 84:bd:68:72:e8:9b:22:2f:eb:2f:4f:43:5c:11:ec:72:5c:29: 5e:f4:aa:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLk5DZofP7S88Ea5/uV+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2RkYmM0YmIzODFkYmVmMjRkMmZmOGI0ZTFmMjNmMmRk ZjQwY2MwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EygxMWYyYzkyMDcxZDFjZTAzZThkM2FhZjE2MjQwOGEwZDYyMDg1NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz1zQyiw491+paA1HLocADoB+Tk2 irha2uKp+FTymO6mvyCf0XSWzcpTUfNiyltDtVlxRGORqK3du6TlQzuv2EGvCO7Y YCeA6uUqjI06pR0lccFspScDeSxIw7oPgC9NDk+gkMtxvAGW4PzIDSLcNiu2RA1j uQO+eJzUWkTRS4fR8EVhIA/qcyqDAuK2LXa7K+WgDdwG7y11TNmZn9JHXq/weHKO yZCWQMKR8GH7DS7rfsJqZ8gpBLSAJYyRWxVlVwZK19MVzQ1zUfRNPV73PpAGH58G aOmFRfwc7hyCi2pHyyXwkNpRcQX2a3nKVER9Q0XFy5BnOheuNsnKGqEsSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHyySBx0c4D6NOq8WJAig1iCFTfMB8GA1UdIwQY MBaAFEc928S7OB2+8k0v+LTh8j8t30DMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUt NjA0YjIwMWU2NWY4LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81NWJmOWYtMjQwZi00OWJiLWIzMGUtNjA0YjIwMWU2NWY4 LzEvUnozYnhMczRIYjd5VFNfNHRPSHlQeTNmUU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRxfRSVn D4B5mU+tP/lLEjCaj/k4sCBmITo5GBJJrA47GcbzPcMx5tXYZ7zBWk2I0jLKLs1J Bs+NHRW9Gpe9WCpKJnFX/+/l6rAFlfog59skzN+IeNHnn04yj1wpOZjl74/zvMsd U/o5GccKrdWl4njs8pg2bL9FfzdAaTvMYrcnilWh+eYf+h7dNSmUwYRcfXzcgrKZ iEywJ5g7Qx+AcY95CFA4GYh31ekzau/gJ5HuILuXE5BYnHVxqdo0Z+zJlwz8Y0DD kiU6iLBwiu0gSBjujAWOwONRgzHnMzV0bxS/Wnm/9oMhQkpRhL1ocuibIi/rL09D XBHsclwpXvSqIw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:54 2025 by rpki-client