This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft File: FzLzNNirto74IlRtj2-OgVY8b9k.mft (raw, json) Hash identifier: opMlJ1AXkvTsyus7dsZZNmeERU0IhSsowcMgkrbAmf0= Subject key identifier: 86:F5:7C:C5:E9:8A:0D:88:77:D4:06:F5:DB:D1:56:77:58:39:F0:2B Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Certificate serial: 019B34C658FCF1F2ADF722ED821F1B19BE39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft Manifest number: 0AA9 Signing time: Fri 19 Dec 2025 04:02:52 +0000 Manifest this update: Fri 19 Dec 2025 04:02:52 +0000 Manifest next update: Sat 20 Dec 2025 04:02:52 +0000 Files and hashes: 1: FzLzNNirto74IlRtj2-OgVY8b9k.crl (hash: cbjZ34L+97NGdNOEfTQ7EwWtCzrZW9VnXnEEbu3iaBQ=) 2: bi5ZDVAxCgXHP4ptHVBQTkUpE6s.roa (hash: bndk3fWWVAXFwXPZNDDoiBYejq5Lux0P2PBtRDEnol8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:58:fc:f1:f2:ad:f7:22:ed:82:1f:1b:19:be:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Validity Not Before: Dec 19 04:02:52 2025 GMT Not After : Dec 20 04:02:52 2025 GMT Subject: CN=86f57cc5e98a0d8877d406f5dbd156775839f02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:1c:13:b1:34:7b:43:b5:4d:58:99:9f:26: 97:58:b9:b5:ce:1e:f3:63:b5:66:6c:b0:5d:6a:0b: 77:4c:f6:75:6b:3e:83:ea:80:b1:ef:5e:81:8a:9b: c5:6a:33:39:77:30:44:29:3b:16:aa:07:43:42:9e: 11:9f:8c:93:54:54:9b:27:35:1d:65:30:1c:2c:81: 66:68:78:89:b7:fd:39:2f:73:58:e9:b6:dd:54:ef: dc:aa:24:15:98:52:84:98:41:9f:aa:c1:61:29:d6: 59:66:bd:96:f7:32:9d:c1:e5:d5:7e:77:73:a6:f7: f0:1b:25:60:2b:6f:2a:d2:c0:c1:cb:fd:91:ff:c8: c3:07:2c:79:d4:d5:54:a6:e5:3c:13:cf:ca:b9:42: c0:96:d2:fe:16:df:64:d4:a4:fd:10:bd:16:d1:a3: 86:6b:c8:2f:5e:5d:b1:a3:e0:b8:93:3b:57:8b:f5: af:a7:e1:bc:8e:72:86:1d:d0:7c:b0:36:b7:4c:dd: dd:3c:1b:62:90:14:98:c1:71:bf:59:e5:1b:75:38: b9:1f:2f:56:cf:2f:7b:a1:cb:c9:ec:59:37:e6:75: 3e:59:68:7d:dd:7c:87:da:f2:68:c8:30:07:27:93: f1:65:56:bd:6f:8f:04:ce:b5:ee:11:8c:23:33:65: 9c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:7C:C5:E9:8A:0D:88:77:D4:06:F5:DB:D1:56:77:58:39:F0:2B X509v3 Authority Key Identifier: keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:04:5b:4e:61:b6:90:a9:a0:68:a0:0c:d4:cd:7f:6e:80:b7: 7e:5e:d2:8f:79:ea:03:55:6c:1e:56:dd:b2:60:70:b2:63:ab: 10:04:af:15:04:23:db:35:45:8c:3b:2d:c1:26:dc:ba:2e:65: e9:f8:f3:9a:4a:27:0e:47:8d:b3:e8:b2:bd:57:60:b1:6a:0e: f0:ab:d2:5d:dd:6e:f6:6f:a1:80:a1:d0:7d:bf:c1:a5:0e:d2: dd:a1:a3:1a:0e:fc:06:60:b1:ec:07:29:bc:05:dc:bd:9b:01: aa:c1:b2:f1:42:fd:5c:93:56:b3:36:4c:06:77:3e:22:96:90: d9:a5:f7:66:29:2f:09:27:7c:93:53:72:f0:a4:31:b2:6b:cd: 74:f3:25:0e:d3:be:21:46:05:b5:ac:9b:cd:7f:d1:b7:0b:45: 39:ff:79:bf:8b:1a:f0:6b:cf:6a:e0:8f:fc:e8:69:30:5f:23: f0:1a:59:2a:54:25:4b:96:ea:95:eb:f9:49:2d:f9:bb:f3:17: 2b:ca:94:eb:d0:22:91:55:ec:50:ef:9c:e6:32:f5:7e:49:c0: 2f:c3:c1:cc:7c:75:23:ad:df:c4:06:f2:39:f4:67:d7:9c:1e: 0b:b3:28:30:c4:93:8c:b3:c5:06:fa:af:4b:63:ef:6a:49:c5: d1:88:fb:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xlj88fKt9yLtgh8bGb45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz YzZmZDkwHhcNMjUxMjE5MDQwMjUyWhcNMjUxMjIwMDQwMjUyWjAzMTEwLwYDVQQD Eyg4NmY1N2NjNWU5OGEwZDg4NzdkNDA2ZjVkYmQxNTY3NzU4MzlmMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdscE7E0e0O1TViZnyaXWLm1zh7z Y7VmbLBdagt3TPZ1az6D6oCx716BipvFajM5dzBEKTsWqgdDQp4Rn4yTVFSbJzUd ZTAcLIFmaHiJt/05L3NY6bbdVO/cqiQVmFKEmEGfqsFhKdZZZr2W9zKdweXVfndz pvfwGyVgK28q0sDBy/2R/8jDByx51NVUpuU8E8/KuULAltL+Ft9k1KT9EL0W0aOG a8gvXl2xo+C4kztXi/Wvp+G8jnKGHdB8sDa3TN3dPBtikBSYwXG/WeUbdTi5Hy9W zy97ocvJ7Fk35nU+WWh93XyH2vJoyDAHJ5PxZVa9b48EzrXuEYwjM2WcQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb1fMXpig2Id9QG9dvRVndYOfArMB8GA1UdIwQY MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt MTNiNGI4MGM1NGJhLzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwRbTmG2 kKmgaKAM1M1/boC3fl7Sj3nqA1VsHlbdsmBwsmOrEASvFQQj2zVFjDstwSbcui5l 6fjzmkonDkeNs+iyvVdgsWoO8KvSXd1u9m+hgKHQfb/BpQ7S3aGjGg78BmCx7Acp vAXcvZsBqsGy8UL9XJNWszZMBnc+IpaQ2aX3ZikvCSd8k1Ny8KQxsmvNdPMlDtO+ IUYFtaybzX/RtwtFOf95v4sa8GvPauCP/OhpMF8j8BpZKlQlS5bqlev5SS35u/MX K8qU69AikVXsUO+c5jL1fknAL8PBzHx1I63fxAbyOfRn15weC7MoMMSTjLPFBvqv S2PvaknF0Yj7JQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:44:50 2025 by rpki-client