This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json) Hash identifier: elz5Bw4LtAf3dC1w3hd1H5mKua6Risa/f6VXLAlYNpw= Subject key identifier: 70:1A:29:00:26:31:70:3B:6B:34:5C:EA:3A:D4:CC:B9:85:16:66:24 Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce Certificate serial: 019AF12E1F99B19F73552A2936BCE32BC25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft Manifest number: 1073 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: H0csw70tg1YLoA3vUUu_9FfpWeo.roa (hash: 96mhdkJC387WSq+UOyuqsQUoHOrBk60wXsPffHfNcYE=) 2: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: PBoA2RRE5mltkukwwX13VSkpetHo/KgBY+EaEB9LtXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1f:99:b1:9f:73:55:2a:29:36:bc:e3:2b:c2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=701a29002631703b6b345cea3ad4ccb985166624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:d7:9a:89:c6:f9:ce:ab:54:2e:fc:92:b7: 0f:a6:28:14:37:ba:e0:6a:71:01:1b:f0:f3:fa:91: 03:f0:3c:70:59:4b:5e:79:c4:4f:fb:62:f4:69:aa: 8e:a5:27:26:c0:6b:44:89:2a:e1:73:1e:05:59:15: 97:4d:c9:d0:8b:18:e5:13:3f:c7:ef:ee:26:10:ca: 1f:44:b8:fb:61:1e:be:0a:4b:bb:8d:36:22:bb:20: 02:a5:57:51:68:29:9f:4a:fc:bb:cc:05:4b:b8:7a: f6:a1:e4:7f:96:0b:2a:76:05:fd:2c:e0:21:54:09: ea:24:f6:e8:c1:80:92:f8:a5:1d:a4:d0:ff:2b:14: 59:c6:b8:b8:55:55:40:46:3e:27:4d:6e:29:65:c2: 95:fe:cc:a0:a2:5a:bd:78:a5:c8:cd:68:9e:bf:c9: bc:bb:b2:24:99:5c:33:25:e8:98:bf:99:ef:3c:93: d1:df:25:20:ac:9a:17:1f:5c:4c:a5:62:8c:62:10: ae:d2:72:7a:c3:2f:4b:c7:6f:aa:ab:ac:fa:73:a5: 6a:c1:9d:84:7f:bd:e0:45:a7:62:95:9e:3f:c1:fd: f3:44:b0:c9:ff:f2:bc:5c:7d:f8:fe:d4:1f:03:64: 4a:f9:e7:d7:6f:39:5b:02:db:a6:a1:31:3a:b9:89: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1A:29:00:26:31:70:3B:6B:34:5C:EA:3A:D4:CC:B9:85:16:66:24 X509v3 Authority Key Identifier: keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:12:00:fa:74:73:7b:cf:be:ee:1e:6c:d6:37:27:b8:48:a0: 77:e9:ac:99:71:3a:b6:bd:17:ad:4c:7f:ab:8a:62:2a:cc:56: 70:7b:ba:73:57:84:40:8e:5e:63:1b:2a:b7:d8:3c:88:cc:f1: 84:7d:73:73:e8:4b:51:b5:ca:e6:b5:c6:63:cf:1c:2d:2c:19: cb:90:dd:e5:0a:5a:a5:63:30:90:72:84:28:a6:68:aa:72:01: 6d:6d:74:fb:15:5e:df:df:dc:74:33:1b:26:c5:de:7b:9e:c7: 54:8d:4f:d3:be:cd:5b:85:df:59:11:66:f5:10:4f:e3:42:2c: f7:b0:60:c8:c6:f1:a4:93:74:5b:fd:ed:9c:9d:36:b7:e1:63: e7:05:6f:f2:94:e7:7b:f5:87:90:fc:7e:db:f8:00:65:c2:3b: e8:55:ce:ca:22:fe:10:72:6f:06:e5:1d:ba:3d:73:fc:15:d1: 50:1c:28:9f:3f:d8:a0:32:e4:19:92:bb:68:f8:37:50:44:29: fc:30:af:f0:56:3f:bb:7c:18:16:ab:94:25:54:e2:c3:9f:4d: 16:ed:08:d9:60:5d:71:ab:49:8a:81:29:4d:1c:96:a1:b3:99: 9e:3f:db:89:7b:d6:d7:f4:69:1a:f1:8e:95:06:81:2c:89:19: 51:26:e8:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLh+ZsZ9zVSopNrzjK8JcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzVlODA3ZDM0OWQzMTU2NGY5ZmQ1NDYxMzhlMzU5OGUy MDA3Y2UwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg3MDFhMjkwMDI2MzE3MDNiNmIzNDVjZWEzYWQ0Y2NiOTg1MTY2NjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj07XmonG+c6rVC78krcPpigUN7rg anEBG/Dz+pED8DxwWUteecRP+2L0aaqOpScmwGtEiSrhcx4FWRWXTcnQixjlEz/H 7+4mEMofRLj7YR6+Cku7jTYiuyACpVdRaCmfSvy7zAVLuHr2oeR/lgsqdgX9LOAh VAnqJPbowYCS+KUdpND/KxRZxri4VVVARj4nTW4pZcKV/sygolq9eKXIzWiev8m8 u7IkmVwzJeiYv5nvPJPR3yUgrJoXH1xMpWKMYhCu0nJ6wy9Lx2+qq6z6c6VqwZ2E f73gRadilZ4/wf3zRLDJ//K8XH34/tQfA2RK+efXbzlbAtumoTE6uYllLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAaKQAmMXA7azRc6jrUzLmFFmYkMB8GA1UdIwQY MBaAFEc16AfTSdMVZPn9VGE441mOIAfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUt NWIxYjVkOTk0MGMxLzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUtNWIxYjVkOTk0MGMx LzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShIA+nRz e8++7h5s1jcnuEigd+msmXE6tr0XrUx/q4piKsxWcHu6c1eEQI5eYxsqt9g8iMzx hH1zc+hLUbXK5rXGY88cLSwZy5Dd5QpapWMwkHKEKKZoqnIBbW10+xVe39/cdDMb JsXee57HVI1P077NW4XfWRFm9RBP40Is97BgyMbxpJN0W/3tnJ02t+Fj5wVv8pTn e/WHkPx+2/gAZcI76FXOyiL+EHJvBuUduj1z/BXRUBwonz/YoDLkGZK7aPg3UEQp /DCv8FY/u3wYFquUJVTiw59NFu0I2WBdcatJioEpTRyWobOZnj/biXvW1/RpGvGO lQaBLIkZUSbopQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:42:57 2025 by rpki-client