This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json) Hash identifier: tEWNQxblF1y2/vY5sng03uQEFEuhLiheb/Z9zwVDT3c= Subject key identifier: B9:77:06:88:4D:C2:26:FB:7F:53:B7:08:55:42:31:61:DF:7B:A1:CF Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3 Certificate serial: 019AF61C4751D49F3B8917403188A969C78D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft Manifest number: 08D7 Signing time: Sun 07 Dec 2025 00:00:39 +0000 Manifest this update: Sun 07 Dec 2025 00:00:39 +0000 Manifest next update: Mon 08 Dec 2025 00:00:39 +0000 Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: xgpBc8ZYnNFwdlMaWxfbTGsfTwKggG/5v5TX2spl4LQ=) 2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:47:51:d4:9f:3b:89:17:40:31:88:a9:69:c7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3 Validity Not Before: Dec 7 00:00:39 2025 GMT Not After : Dec 8 00:00:39 2025 GMT Subject: CN=b97706884dc226fb7f53b70855423161df7ba1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:8b:15:d8:06:9f:24:41:10:d6:19:51:8a: 6e:de:fb:f7:03:f3:06:d3:e6:f6:ee:a8:03:b3:94: f9:f7:b6:f8:16:54:0d:56:22:45:f3:1e:6e:d6:14: ef:d0:dc:f9:53:cf:1c:0b:12:71:b2:da:7c:74:c2: 50:df:b7:5a:53:c7:68:14:d5:2b:b6:0a:79:e5:74: c1:b2:18:c7:ad:47:6c:e9:cd:93:30:66:ee:83:50: b5:56:23:63:7a:86:bb:c2:1a:3f:cc:ec:15:05:34: 4c:fb:ee:36:8b:ba:f0:94:25:5a:e1:8f:83:de:f8: df:51:b9:7d:5a:51:01:0a:2a:75:d2:4d:18:b8:36: b7:02:fb:ea:ae:51:c8:a5:59:6e:c3:8b:5e:e1:98: 99:fc:48:7c:fe:3a:79:14:32:0e:0e:55:71:06:27: b3:82:94:26:48:55:58:61:fb:07:85:f3:01:4d:01: 9d:29:fe:33:f0:d8:ab:91:52:8a:60:2c:6c:02:2c: 1d:de:e4:ff:52:3c:8a:60:58:20:91:43:fd:ec:b3: 35:c4:d6:15:47:b0:a0:5b:86:34:a6:8c:cb:5d:2e: c1:db:b0:0c:c9:9b:3c:6f:d6:f7:0e:a4:4b:9f:b0: 59:1f:07:9c:49:c5:c4:86:9b:79:cd:93:ba:21:72: b5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:77:06:88:4D:C2:26:FB:7F:53:B7:08:55:42:31:61:DF:7B:A1:CF X509v3 Authority Key Identifier: keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f2:bc:fe:ea:3f:b2:02:c4:51:7a:12:b1:19:6d:73:9f:f0: b6:00:da:06:fc:19:33:73:ec:57:43:de:11:db:f9:f2:c4:af: 20:4e:22:d8:4e:fc:0f:77:9c:f1:00:d4:2e:33:37:f1:66:69: 71:7f:fa:5e:60:23:8f:24:c9:5c:b6:b8:fb:f2:4c:5f:ce:bd: 89:0b:0b:74:4f:ed:70:77:ed:71:c7:af:2c:a2:6d:54:20:b8: f0:a8:ab:ad:e4:64:ed:3e:ee:e0:08:a5:9a:1b:ae:31:a6:95: 29:f4:b7:0c:a1:11:62:da:2d:69:85:f0:e8:79:6d:ad:50:e7: ff:1e:7e:e1:16:ba:37:32:31:a1:31:94:32:99:0d:da:59:02: 08:c7:e4:21:11:fe:3b:94:0f:ba:0d:cc:a5:d0:e2:20:28:66: f1:1c:b2:d8:f0:0b:6a:d5:f6:6a:53:97:7c:dc:6b:0e:0f:4f: b8:d9:d2:e3:dc:8a:b8:10:a5:7b:37:25:98:c5:8c:b8:a7:94: 23:0e:76:e8:7e:6f:92:bf:39:45:1b:22:ea:7f:9f:92:df:6a: 88:9e:21:d4:7e:b8:e5:24:cf:e5:d0:2d:2d:49:7f:e5:74:87: 45:bf:11:24:df:26:72:8b:1e:08:4d:14:b0:60:37:25:a5:c6: a3:45:ad:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEdR1J87iRdAMYipaceNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3M2Y0OTg1OTI0NTc4NTlmMjZmYjVhNjEwYjdiNTFlZjUy NDEzZjMwHhcNMjUxMjA3MDAwMDM5WhcNMjUxMjA4MDAwMDM5WjAzMTEwLwYDVQQD EyhiOTc3MDY4ODRkYzIyNmZiN2Y1M2I3MDg1NTQyMzE2MWRmN2JhMWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EqLFdgGnyRBENYZUYpu3vv3A/MG 0+b27qgDs5T597b4FlQNViJF8x5u1hTv0Nz5U88cCxJxstp8dMJQ37daU8doFNUr tgp55XTBshjHrUds6c2TMGbug1C1ViNjeoa7who/zOwVBTRM++42i7rwlCVa4Y+D 3vjfUbl9WlEBCip10k0YuDa3AvvqrlHIpVluw4te4ZiZ/Eh8/jp5FDIODlVxBiez gpQmSFVYYfsHhfMBTQGdKf4z8NirkVKKYCxsAiwd3uT/UjyKYFggkUP97LM1xNYV R7CgW4Y0pozLXS7B27AMyZs8b9b3DqRLn7BZHwecScXEhpt5zZO6IXK1aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl3BohNwib7f1O3CFVCMWHfe6HPMB8GA1UdIwQY MBaAFEc/SYWSRXhZ8m+1phC3tR71JBPzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2Et ZjhmNDkyYWY0ODBlLzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MjgyMzctZWZkNy00NzI2LTkwY2EtZjhmNDkyYWY0ODBl LzEvUno5SmhaSkZlRm55YjdXbUVMZTFIdlVrRV9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/K8/uo/ sgLEUXoSsRltc5/wtgDaBvwZM3PsV0PeEdv58sSvIE4i2E78D3ec8QDULjM38WZp cX/6XmAjjyTJXLa4+/JMX869iQsLdE/tcHftccevLKJtVCC48KirreRk7T7u4Ail mhuuMaaVKfS3DKERYtotaYXw6HltrVDn/x5+4Ra6NzIxoTGUMpkN2lkCCMfkIRH+ O5QPug3MpdDiIChm8Ryy2PALatX2alOXfNxrDg9PuNnS49yKuBClezclmMWMuKeU Iw526H5vkr85RRsi6n+fkt9qiJ4h1H645STP5dAtLUl/5XSHRb8RJN8mcoseCE0U sGA3JaXGo0WtiQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:06:50 2025 by rpki-client