This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json) Hash identifier: pfOjZxk9Ad7+GsA1uw+Sc8WelLw27Fj3M7wAb0wLhS0= Subject key identifier: EC:F5:63:35:35:0E:84:9F:75:84:83:9C:24:84:7D:B0:4D:0B:8B:DF Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15 Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415 Certificate serial: 019AF31C81CAFDD345866B963CBFBEA643BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: tvQlAvEaRYA9TBlrOlAi3Uq8j7wYOPLXS+ORgmpSA04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:81:ca:fd:d3:45:86:6b:96:3c:bf:be:a6:43:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415 Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=ecf56335350e849f7584839c24847db04d0b8bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:d8:ee:f8:4b:84:45:32:da:46:91:b9:c4: cc:2d:e6:c8:4a:a5:4f:b5:d8:65:9f:72:9c:c4:b4: d4:2b:e1:30:9b:93:8a:85:a6:eb:aa:17:30:92:46: 5d:80:a7:df:bb:eb:2b:f8:01:1c:fd:b0:cc:77:ce: a6:40:c9:5b:73:8c:a4:83:31:5a:d9:bb:da:b0:36: cd:03:f3:10:d3:f5:26:d4:fe:7e:0a:d9:25:02:5a: 09:b9:a2:63:0e:67:d1:07:99:34:4c:69:71:fb:6a: c0:99:dc:2c:ad:13:b5:0e:77:99:99:5f:25:76:b0: 09:0e:6f:20:a1:fd:2a:0a:a3:10:cc:f2:40:45:c7: 7c:02:a8:ab:5f:9f:08:94:6c:ad:18:e2:aa:d9:05: fa:15:f6:c5:85:ee:78:d8:d0:ce:a3:b4:04:56:a0: a5:e8:5c:49:e2:33:d3:6f:61:4a:5e:71:40:12:87: 7f:4a:b4:91:2e:06:a1:05:fc:25:bc:c2:60:58:bf: e6:83:16:eb:ea:06:e9:95:fe:47:61:70:c1:d2:a2: 6c:4e:f2:6c:0d:dd:ec:8d:d5:99:81:e9:94:bc:11: 4e:d0:ae:7e:eb:96:36:d2:96:46:ce:8d:85:7a:f0: 52:90:4c:c8:3a:8b:e8:ae:35:ba:81:46:11:d0:89: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F5:63:35:35:0E:84:9F:75:84:83:9C:24:84:7D:B0:4D:0B:8B:DF X509v3 Authority Key Identifier: keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5d:4c:10:66:ea:ed:57:4d:79:58:91:db:f7:e6:5b:99:fc: c3:1f:ff:50:76:ad:50:23:e5:28:c0:fc:07:22:4e:f9:38:d5: 7a:24:5a:cf:85:d9:ae:15:c7:e2:e6:95:84:60:fb:bf:3b:2c: 9b:04:9c:8b:52:67:c1:91:76:ff:dc:ce:a9:f9:b5:66:2f:de: 3a:b9:c7:6c:07:ea:36:21:c1:79:b8:aa:1d:11:7e:7b:2c:c4: 72:80:f7:43:65:22:9d:ce:bd:0d:2e:2c:e4:17:51:1b:04:b2: 55:75:4a:71:8a:f1:2d:c1:8c:d5:e6:b5:87:a2:6d:e3:7d:63: 26:08:e8:e0:78:77:57:f1:2e:14:dc:63:f8:36:bf:91:d1:21: f8:b1:82:2c:83:73:7b:2d:47:ba:43:55:3c:80:a7:27:ca:b7: 4f:f8:0f:83:ca:12:a3:ac:51:e1:aa:0c:49:5b:a1:f9:65:45: 12:d8:1b:30:d8:69:16:08:00:f6:a3:a0:35:5f:ff:ce:30:65: 65:cb:f1:90:40:bb:99:6c:5c:af:de:11:ac:1e:65:6c:d5:e9: ed:64:74:91:b3:e2:9e:cc:b1:9a:31:3d:1e:83:b3:56:3c:49: 9b:56:e0:fe:85:f5:25:5d:72:b1:fa:b2:71:dd:f5:56:a0:51: 43:0f:65:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIHK/dNFhmuWPL++pkO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTgxY2U3MTk0MmQ0NTcyOWY4NzA2ZTJiYjFiMDE0OWE1 MmI0MTUwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EyhlY2Y1NjMzNTM1MGU4NDlmNzU4NDgzOWMyNDg0N2RiMDRkMGI4YmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso3Y7vhLhEUy2kaRucTMLebISqVP tdhln3KcxLTUK+Ewm5OKhabrqhcwkkZdgKffu+sr+AEc/bDMd86mQMlbc4ykgzFa 2bvasDbNA/MQ0/Um1P5+CtklAloJuaJjDmfRB5k0TGlx+2rAmdwsrRO1DneZmV8l drAJDm8gof0qCqMQzPJARcd8AqirX58IlGytGOKq2QX6FfbFhe542NDOo7QEVqCl 6FxJ4jPTb2FKXnFAEod/SrSRLgahBfwlvMJgWL/mgxbr6gbplf5HYXDB0qJsTvJs Dd3sjdWZgemUvBFO0K5+65Y20pZGzo2FevBSkEzIOovorjW6gUYR0InN0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOz1YzU1DoSfdYSDnCSEfbBNC4vfMB8GA1UdIwQY MBaAFEWYHOcZQtRXKfhwbiuxsBSaUrQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUt NjIxMjgwMmFlMTZlLzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUtNjIxMjgwMmFlMTZl LzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV1MEGbq 7VdNeViR2/fmW5n8wx//UHatUCPlKMD8ByJO+TjVeiRaz4XZrhXH4uaVhGD7vzss mwSci1JnwZF2/9zOqfm1Zi/eOrnHbAfqNiHBebiqHRF+eyzEcoD3Q2Uinc69DS4s 5BdRGwSyVXVKcYrxLcGM1ea1h6Jt431jJgjo4Hh3V/EuFNxj+Da/kdEh+LGCLINz ey1HukNVPICnJ8q3T/gPg8oSo6xR4aoMSVuh+WVFEtgbMNhpFggA9qOgNV//zjBl ZcvxkEC7mWxcr94RrB5lbNXp7WR0kbPinsyxmjE9HoOzVjxJm1bg/oX1JV1ysfqy cd31VqBRQw9lQg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:35 2025 by rpki-client