This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json) Hash identifier: EQ+HuMsL5uNs74oVQLZd/QtLw6s9LVm+xTW6MKMJxwU= Subject key identifier: 74:0C:AA:35:D7:9D:D0:C3:B0:F7:25:9F:39:46:C2:35:3F:8D:79:CB Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f Certificate serial: 019AF31B24980DE44FCC2E5546DA53BE880C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft Manifest number: 0A24 Signing time: Sat 06 Dec 2025 10:00:33 +0000 Manifest this update: Sat 06 Dec 2025 10:00:33 +0000 Manifest next update: Sun 07 Dec 2025 10:00:33 +0000 Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=) 2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: 0aQkeo3eiKC0CBgSyh2Ng/8+jg5BUI9SZ0ajQpUWBfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:24:98:0d:e4:4f:cc:2e:55:46:da:53:be:88:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f Validity Not Before: Dec 6 10:00:33 2025 GMT Not After : Dec 7 10:00:33 2025 GMT Subject: CN=740caa35d79dd0c3b0f7259f3946c2353f8d79cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:cd:9c:fb:4d:d5:8a:03:b3:51:05:45:f7: 45:c5:3a:19:7c:2a:0e:8c:53:94:73:0d:a4:0e:3c: 88:a6:df:06:a0:d2:0e:8a:b2:79:7a:64:cd:f1:e0: 93:e8:cb:c9:85:4e:60:7d:16:41:f6:d5:c3:18:32: 42:fe:d0:13:43:62:4b:c3:49:55:52:57:11:31:8b: 64:5b:ae:b3:91:77:06:3d:94:7d:40:61:6f:83:b0: 56:26:0c:18:07:10:77:f6:79:ec:73:83:0e:49:e9: 2f:e1:37:80:5c:35:77:29:ac:bb:b4:05:f2:aa:cc: e7:9b:bf:a7:e6:72:38:9a:b0:0c:e8:a0:7e:55:f3: 2a:7c:25:1c:c0:f1:c6:8a:9d:18:90:ba:d4:25:87: 58:2c:84:03:6f:02:77:f1:68:f0:f6:e0:ea:e1:12: 20:3c:f3:a8:06:19:7e:49:47:18:e3:31:2f:9f:d4: a1:65:5f:b7:15:f0:e4:49:b5:2a:1c:0f:86:54:d6: af:54:fb:f8:cf:82:57:7e:07:b1:94:d0:a4:b6:3b: f4:83:10:dc:33:8e:f2:d9:b8:5e:71:c7:1d:da:34: 92:dc:2b:c4:db:da:0d:a9:75:f7:d5:48:7e:2c:c1: 6c:5c:0c:d1:b7:ce:74:8f:4a:f1:96:4a:e9:34:b8: 68:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0C:AA:35:D7:9D:D0:C3:B0:F7:25:9F:39:46:C2:35:3F:8D:79:CB X509v3 Authority Key Identifier: keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:78:a0:9a:01:c0:f9:de:8f:e4:3e:57:c5:9c:94:41:61:45: b9:ca:de:4c:c4:2f:b0:b4:d5:0b:75:a2:bf:23:a4:15:b7:e3: 4c:7f:a5:03:70:c9:89:f6:3f:a6:79:2c:83:54:3a:84:65:74: 51:d5:1f:02:0d:1f:e9:33:90:74:3f:f0:a2:0f:98:16:d4:da: f6:37:54:07:c9:bb:f3:4a:0a:c4:b5:13:fa:d2:89:64:33:ff: ac:a8:c9:81:41:62:ae:76:0d:8f:15:fc:fd:19:cb:55:72:04: 10:ba:bf:9e:88:17:45:40:9a:37:34:b7:b1:f1:3f:d4:ae:21: 03:8d:bd:a8:aa:9a:bb:65:f4:38:63:5e:eb:61:8c:03:f4:c8: 7c:59:95:e9:92:38:7a:1d:c0:06:95:18:d4:fc:d9:21:7d:27: 9a:c5:6f:0b:8f:d3:2f:ea:1c:26:5e:f9:ee:71:3b:f2:66:1a: b2:6f:77:58:7d:59:aa:22:45:f8:5e:48:7e:09:8f:6a:d8:78: 1b:17:6f:8c:b6:7c:b2:72:ac:1e:34:47:16:20:27:d9:f8:bf: ac:10:3e:f4:f2:4b:bc:25:2a:b5:b2:fc:d8:82:00:57:a9:4f: bf:e2:a5:b0:6c:3a:b0:ba:b0:61:43:77:af:4b:13:c8:40:12: 1a:37:12:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGySYDeRPzC5VRtpTvogMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1 MGVmMGYwHhcNMjUxMjA2MTAwMDMzWhcNMjUxMjA3MTAwMDMzWjAzMTEwLwYDVQQD Eyg3NDBjYWEzNWQ3OWRkMGMzYjBmNzI1OWYzOTQ2YzIzNTNmOGQ3OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHNnPtN1YoDs1EFRfdFxToZfCoO jFOUcw2kDjyIpt8GoNIOirJ5emTN8eCT6MvJhU5gfRZB9tXDGDJC/tATQ2JLw0lV UlcRMYtkW66zkXcGPZR9QGFvg7BWJgwYBxB39nnsc4MOSekv4TeAXDV3Kay7tAXy qsznm7+n5nI4mrAM6KB+VfMqfCUcwPHGip0YkLrUJYdYLIQDbwJ38Wjw9uDq4RIg PPOoBhl+SUcY4zEvn9ShZV+3FfDkSbUqHA+GVNavVPv4z4JXfgexlNCktjv0gxDc M47y2bhecccd2jSS3CvE29oNqXX31Uh+LMFsXAzRt850j0rxlkrpNLho8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQMqjXXndDDsPclnzlGwjU/jXnLMB8GA1UdIwQY MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3igmgHA +d6P5D5XxZyUQWFFucreTMQvsLTVC3WivyOkFbfjTH+lA3DJifY/pnksg1Q6hGV0 UdUfAg0f6TOQdD/wog+YFtTa9jdUB8m780oKxLUT+tKJZDP/rKjJgUFirnYNjxX8 /RnLVXIEELq/nogXRUCaNzS3sfE/1K4hA429qKqau2X0OGNe62GMA/TIfFmV6ZI4 eh3ABpUY1PzZIX0nmsVvC4/TL+ocJl757nE78mYasm93WH1ZqiJF+F5IfgmPath4 GxdvjLZ8snKsHjRHFiAn2fi/rBA+9PJLvCUqtbL82IIAV6lPv+KlsGw6sLqwYUN3 r0sTyEASGjcSPw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:27 2025 by rpki-client