This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft File: _RHEZUr3AuWW61DRP6SG202bzgo.mft (raw, json) Hash identifier: Qx2JyQjoWPRkS2usOuqd73SrJfuDPeyTLl1GT8udSyQ= Subject key identifier: 8D:17:47:6E:57:44:7D:B2:DF:C4:A8:07:0A:C8:37:BB:D6:27:92:D7 Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a Certificate serial: 019AF31C47278AE9AD32E943D787204DBC8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:47 +0000 Manifest this update: Sat 06 Dec 2025 10:01:47 +0000 Manifest next update: Sun 07 Dec 2025 10:01:47 +0000 Files and hashes: 1: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (hash: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=) 2: _RHEZUr3AuWW61DRP6SG202bzgo.crl (hash: AQvw94e6yL7dGe7sk5xPtl2qrinrSLUXhIF4VJgWBzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:47:27:8a:e9:ad:32:e9:43:d7:87:20:4d:bc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a Validity Not Before: Dec 6 10:01:47 2025 GMT Not After : Dec 7 10:01:47 2025 GMT Subject: CN=8d17476e57447db2dfc4a8070ac837bbd62792d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:3a:75:27:83:07:97:d1:70:d3:6f:f9:c4: db:b4:dd:ac:8d:55:76:ad:a1:a8:a5:49:3d:df:8a: 92:a4:72:ca:7e:4f:1a:98:47:8c:fb:e2:64:02:1c: 7f:ce:a3:53:c2:fb:c8:60:5a:6f:37:43:b3:29:ad: bd:1f:6a:b6:b3:f3:72:13:15:01:4d:74:87:cc:86: 10:8b:75:9c:ba:7d:8c:5f:b1:09:83:3b:e7:95:80: d4:ac:c1:26:a7:3a:99:91:a6:53:16:33:90:b4:26: 8e:18:fd:ee:0e:98:04:aa:11:8a:c6:b2:bf:0e:a4: de:d3:d1:50:b4:c2:68:d8:2c:bb:0d:15:07:e0:63: 74:1e:23:24:cc:ba:36:b9:6b:b9:bb:c7:d3:3f:c7: be:85:4a:e4:77:c6:e8:3b:02:4d:6a:92:d3:cf:34: 4d:27:2c:d8:a1:ac:05:ab:71:64:ce:89:37:8e:6f: 27:91:6f:bc:d5:e7:b3:3f:83:6c:34:99:10:2c:10: 86:47:d8:e0:9a:88:02:93:fe:1d:29:90:f8:3f:a5: dd:d0:64:77:c2:75:f8:87:52:1b:d7:1a:ec:10:3a: 47:4b:72:64:11:85:57:3a:d2:cb:ea:12:a9:82:4e: d3:7a:5e:13:39:47:3d:27:a7:5c:f3:b6:95:4b:5c: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:17:47:6E:57:44:7D:B2:DF:C4:A8:07:0A:C8:37:BB:D6:27:92:D7 X509v3 Authority Key Identifier: keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3c:df:b7:27:46:6b:71:04:a1:dd:1f:e6:d9:09:0d:2e:ee: fa:79:1c:5b:d9:14:12:66:20:4d:9c:71:97:1f:b1:1f:00:6d: 52:bf:9c:f6:1c:97:28:78:e2:4e:06:9b:3d:93:94:e6:74:b3: 58:a5:6d:63:f8:f5:4d:3c:e9:16:55:22:63:7d:1b:f3:9f:90: a3:aa:4e:de:eb:6e:4f:c4:a8:93:f9:53:7b:55:19:62:62:22: 77:1b:e5:4d:01:90:45:fa:98:b7:5c:42:c7:ab:02:36:d6:62: a5:fc:a7:d9:6e:e5:f1:b5:1e:3e:a8:37:9d:87:31:f2:77:ec: bc:1e:c8:b9:3b:79:15:93:b5:84:e3:f8:06:25:da:84:29:05: 9e:8e:79:21:53:c4:85:99:d4:96:20:0e:10:df:65:5d:e9:20: d2:e8:9e:3d:45:dd:c7:e2:e3:50:e3:d3:65:1e:25:3d:44:d7: b5:a4:bb:bc:9c:d9:8b:c9:8c:f6:27:21:37:31:b7:38:31:43: 35:04:16:c8:e0:0c:29:98:d8:11:ec:b7:b4:1c:60:c7:bc:34: 26:ea:91:90:91:30:0e:b7:a9:ae:f0:e3:ed:01:7b:ce:d2:63: e2:1f:c0:10:fd:28:6d:fe:ea:70:3e:9b:51:88:9d:69:fe:a3: 8e:79:ce:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEcniumtMulD14cgTbyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTFjNDY1NGFmNzAyZTU5NmViNTBkMTNmYTQ4NmRiNGQ5 YmNlMGEwHhcNMjUxMjA2MTAwMTQ3WhcNMjUxMjA3MTAwMTQ3WjAzMTEwLwYDVQQD Eyg4ZDE3NDc2ZTU3NDQ3ZGIyZGZjNGE4MDcwYWM4MzdiYmQ2Mjc5MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFA6dSeDB5fRcNNv+cTbtN2sjVV2 raGopUk934qSpHLKfk8amEeM++JkAhx/zqNTwvvIYFpvN0OzKa29H2q2s/NyExUB TXSHzIYQi3Wcun2MX7EJgzvnlYDUrMEmpzqZkaZTFjOQtCaOGP3uDpgEqhGKxrK/ DqTe09FQtMJo2Cy7DRUH4GN0HiMkzLo2uWu5u8fTP8e+hUrkd8boOwJNapLTzzRN JyzYoawFq3Fkzok3jm8nkW+81eezP4NsNJkQLBCGR9jgmogCk/4dKZD4P6Xd0GR3 wnX4h1Ib1xrsEDpHS3JkEYVXOtLL6hKpgk7Tel4TOUc9J6dc87aVS1x9lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0XR25XRH2y38SoBwrIN7vWJ5LXMB8GA1UdIwQY MBaAFP0RxGVK9wLllutQ0T+khttNm84KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JIRVpVcjNBdVdXNjFEUlA2U0cyMDJiemdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81ZTMxODUtMzhjNS00YTViLWJmMjQt Yzk1M2UzMzk4YzYzLzEvX1JIRVpVcjNBdVdXNjFEUlA2U0cyMDJiemdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC81ZTMxODUtMzhjNS00YTViLWJmMjQtYzk1M2UzMzk4YzYz LzEvX1JIRVpVcjNBdVdXNjFEUlA2U0cyMDJiemdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzzftydG a3EEod0f5tkJDS7u+nkcW9kUEmYgTZxxlx+xHwBtUr+c9hyXKHjiTgabPZOU5nSz WKVtY/j1TTzpFlUiY30b85+Qo6pO3utuT8Sok/lTe1UZYmIidxvlTQGQRfqYt1xC x6sCNtZipfyn2W7l8bUePqg3nYcx8nfsvB7IuTt5FZO1hOP4BiXahCkFno55IVPE hZnUliAOEN9lXekg0uiePUXdx+LjUOPTZR4lPUTXtaS7vJzZi8mM9ichNzG3ODFD NQQWyOAMKZjYEey3tBxgx7w0JuqRkJEwDreprvDj7QF7ztJj4h/AEP0obf7qcD6b UYidaf6jjnnOEw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:53 2025 by rpki-client