This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json) Hash identifier: KrBnwoZwoVm3uDW2StE4QwY44FCmuIgOVv9/CwoEyxU= Subject key identifier: 46:E8:ED:2E:AD:61:7B:D7:DF:A1:85:EF:9A:42:08:93:E9:A8:84:81 Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Certificate serial: 019AF12ECAAD15C94A1B959402381FADD3C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft Manifest number: 0A86 Signing time: Sat 06 Dec 2025 01:02:46 +0000 Manifest this update: Sat 06 Dec 2025 01:02:46 +0000 Manifest next update: Sun 07 Dec 2025 01:02:46 +0000 Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: 3tURaOsZ9mCi8gstzXcvaa4Rodr2CWxNAe5rOfoQF4s=) 2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ca:ad:15:c9:4a:1b:95:94:02:38:1f:ad:d3:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Validity Not Before: Dec 6 01:02:46 2025 GMT Not After : Dec 7 01:02:46 2025 GMT Subject: CN=46e8ed2ead617bd7dfa185ef9a420893e9a88481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:32:92:37:dc:f4:0f:d6:29:dc:45:3a:c9: 20:66:3e:7e:aa:94:b9:bc:c2:72:a2:d5:82:d1:96: 79:95:7b:11:a9:8c:8a:1a:dc:89:4d:40:0f:bc:d1: 9b:0b:a4:72:2c:8c:b9:6f:e7:44:88:6f:e6:92:e4: 5c:33:1e:b4:01:63:5a:de:ac:bd:ea:8e:41:92:ba: a1:cf:da:8f:f6:90:c0:c3:0f:6b:4c:b8:e8:ed:b4: 29:28:7d:64:98:2e:e6:01:9a:29:9d:f2:8d:93:9e: be:e4:37:35:e0:2e:f7:4e:0b:19:33:db:e5:fc:a7: 64:bb:cf:e5:ca:cb:1b:57:77:34:3c:71:28:76:eb: 17:33:57:89:e0:b0:35:3a:d4:49:46:9f:b4:1a:a8: 2e:15:87:d0:8f:6e:f7:d1:bc:38:01:e5:22:5b:82: c4:73:dc:06:f9:ba:58:b0:79:62:89:ab:3d:88:43: 1e:50:63:07:84:7f:9c:3e:67:54:c7:40:85:ed:9b: e4:ec:b9:30:97:98:ce:9e:80:64:a3:0b:6f:e5:3d: 44:99:dd:ff:45:66:a8:62:c7:95:fd:0f:3f:f0:3c: 39:8c:d0:55:27:3b:91:d3:76:66:93:78:65:1d:fc: d0:f0:26:0d:69:e9:b5:f8:16:5d:1b:42:b5:02:4d: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E8:ED:2E:AD:61:7B:D7:DF:A1:85:EF:9A:42:08:93:E9:A8:84:81 X509v3 Authority Key Identifier: keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:68:34:e7:e9:d5:99:24:28:cb:7a:cc:75:e4:29:27:32:01: 90:46:fd:9e:6b:ba:cc:18:99:51:91:4d:2b:19:18:21:61:91: 0b:b1:1e:bf:21:57:1a:2e:ff:ca:5e:bc:c5:ca:0d:a9:92:9c: 4e:1c:2d:08:0d:cb:44:0e:79:f2:5e:d1:13:44:11:39:2f:15: 2b:77:c1:5a:87:c1:78:21:9d:3d:1d:00:ea:2a:44:52:d4:9e: d9:75:1b:21:40:02:0b:8c:04:0d:ff:bf:03:cb:2a:62:75:03: 50:80:b1:d9:02:c1:de:4a:81:7c:a7:82:1f:ed:30:a7:0f:66: ba:0b:c1:5a:34:ef:68:c4:e4:f5:d3:7d:7c:d2:41:1e:71:6d: 3b:e9:15:d0:fb:90:e5:ec:96:47:e5:cc:a7:29:3f:5b:b8:b8: b0:b7:f5:08:85:a6:60:77:df:5c:f8:dc:9b:4f:16:04:12:80: 99:5a:56:7e:6a:38:9f:a0:d5:ba:73:dd:1c:72:10:1e:de:d1: 96:d6:f2:04:da:fc:8a:ad:94:a5:27:78:4a:be:ce:1d:ac:43: 57:98:17:05:bb:af:2b:72:cc:43:a4:b9:7e:6e:f0:ca:20:77: 6a:54:a6:e2:b7:db:17:26:41:12:22:4b:fc:d6:9e:64:dc:bc: 7f:44:59:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsqtFclKG5WUAjgfrdPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz YzZmZDkwHhcNMjUxMjA2MDEwMjQ2WhcNMjUxMjA3MDEwMjQ2WjAzMTEwLwYDVQQD Eyg0NmU4ZWQyZWFkNjE3YmQ3ZGZhMTg1ZWY5YTQyMDg5M2U5YTg4NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsQykjfc9A/WKdxFOskgZj5+qpS5 vMJyotWC0ZZ5lXsRqYyKGtyJTUAPvNGbC6RyLIy5b+dEiG/mkuRcMx60AWNa3qy9 6o5Bkrqhz9qP9pDAww9rTLjo7bQpKH1kmC7mAZopnfKNk56+5Dc14C73TgsZM9vl /Kdku8/lyssbV3c0PHEodusXM1eJ4LA1OtRJRp+0GqguFYfQj2730bw4AeUiW4LE c9wG+bpYsHliias9iEMeUGMHhH+cPmdUx0CF7Zvk7Lkwl5jOnoBkowtv5T1Emd3/ RWaoYseV/Q8/8Dw5jNBVJzuR03Zmk3hlHfzQ8CYNaem1+BZdG0K1Ak05UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbo7S6tYXvX36GF75pCCJPpqISBMB8GA1UdIwQY MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGg05+nV mSQoy3rMdeQpJzIBkEb9nmu6zBiZUZFNKxkYIWGRC7EevyFXGi7/yl68xcoNqZKc ThwtCA3LRA558l7RE0QROS8VK3fBWofBeCGdPR0A6ipEUtSe2XUbIUACC4wEDf+/ A8sqYnUDUICx2QLB3kqBfKeCH+0wpw9mugvBWjTvaMTk9dN9fNJBHnFtO+kV0PuQ 5eyWR+XMpyk/W7i4sLf1CIWmYHffXPjcm08WBBKAmVpWfmo4n6DVunPdHHIQHt7R ltbyBNr8iq2UpSd4Sr7OHaxDV5gXBbuvK3LMQ6S5fm7wyiB3alSm4rfbFyZBEiJL /NaeZNy8f0RZwg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:06 2025 by rpki-client