This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json) Hash identifier: FUGb9TH5NIzs3S6+e/vBJWEVUe8s78N7RZXLtm5x2vA= Subject key identifier: 2E:EE:02:D1:E7:AC:1A:F5:20:B7:E9:F5:50:33:64:2B:AA:FC:95:5A Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9 Certificate serial: 019AF08875364E2BD64B83E768376FA55861 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft Manifest number: 0E37 Signing time: Fri 05 Dec 2025 22:01:06 +0000 Manifest this update: Fri 05 Dec 2025 22:01:06 +0000 Manifest next update: Sat 06 Dec 2025 22:01:06 +0000 Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: vMjm/D6HCIOJLd7WmCvbvtlHtm89XANVCe2ZThlpglc=) 2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:75:36:4e:2b:d6:4b:83:e7:68:37:6f:a5:58:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9 Validity Not Before: Dec 5 22:01:06 2025 GMT Not After : Dec 6 22:01:06 2025 GMT Subject: CN=2eee02d1e7ac1af520b7e9f55033642baafc955a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:56:21:e2:1b:de:94:12:67:71:0c:74:8a: 06:d2:96:e3:fb:d1:8b:8f:5d:42:2e:53:ea:4c:62: 60:92:3c:87:af:a5:3a:53:64:f4:77:e9:ab:26:64: c6:e8:3a:67:7c:b3:4e:cd:f8:6c:e0:3f:ed:91:51: 55:12:ad:48:59:9b:26:9c:f2:4d:98:0e:fb:20:61: e2:0b:64:dd:34:15:9e:bb:73:0c:3b:48:de:4e:ec: 21:55:f0:fe:51:62:66:ab:d7:ba:cc:76:e6:ad:70: b4:2d:6e:2f:17:63:a0:ca:76:8a:2f:9a:88:cf:c0: cd:6b:aa:ad:1a:35:12:74:4b:55:90:1d:73:ed:d5: 43:bb:43:62:6c:54:aa:f1:32:e2:c3:10:51:bb:59: 8c:f4:e0:aa:4c:ab:16:a6:a7:3f:86:0d:f7:11:3d: 66:72:3f:fb:2c:16:f0:77:32:82:2f:9c:36:e1:d9: ff:9c:64:21:11:4d:1b:4b:d2:80:f0:5f:85:5d:67: df:84:1a:a0:ff:9b:d3:16:82:d1:53:10:e5:a8:d1: b1:e8:af:39:0a:d5:1a:08:3a:4f:c8:b0:5d:65:8c: d5:cd:9c:0c:2d:1f:1d:4f:c2:fb:82:6c:19:c8:86: 93:3c:df:77:20:c1:5d:b7:a7:32:03:39:59:c9:3c: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EE:02:D1:E7:AC:1A:F5:20:B7:E9:F5:50:33:64:2B:AA:FC:95:5A X509v3 Authority Key Identifier: keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:21:a6:db:76:20:8f:23:97:3f:2e:2a:11:65:cd:2a:a6: 1d:78:7c:e0:1d:d2:17:bb:02:de:4d:fc:71:da:d0:4e:44:ce: 33:0a:8b:c3:24:aa:25:82:41:55:c9:b0:a9:24:6e:3e:a7:ef: 5e:a1:94:7e:13:26:b6:15:b5:0b:0c:3f:07:d8:6b:eb:83:26: 86:8f:02:2e:a9:3c:ef:bf:e9:07:95:d2:c5:18:2e:12:59:59: b1:a1:6d:83:1d:05:b2:9f:25:1f:5a:01:ed:81:a2:04:0f:ce: 15:82:9a:5d:7f:50:87:26:78:50:d4:f6:4d:c7:74:f5:c6:fd: ef:db:9e:6f:2f:8a:0f:b2:88:4e:e5:b6:06:dc:8f:7e:62:0a: 61:4d:eb:16:2b:c4:db:be:9a:64:2b:d5:c8:d8:65:bc:2f:cb: e5:6e:87:e1:e8:ba:da:e6:c0:f7:bb:d8:4f:94:52:84:f0:89: 4a:d0:64:7b:e7:97:25:fe:d0:a0:ae:17:e6:09:01:25:04:e9: 4d:65:9e:7c:cf:68:d8:ec:ba:20:95:ad:94:e2:c1:b7:87:46: 51:53:d4:cc:b0:7d:54:25:dc:83:fb:f5:64:cb:f0:1e:95:a4: 50:c6:96:72:b7:cb:e4:bb:86:a8:24:e2:e6:d1:e2:7c:f4:bb: 6d:5b:b1:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHU2TivWS4PnaDdvpVhhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTY2ZmEzN2M3NjRjZGM2MmEwMGJjYTJiMmIyYzg3OWZm Njk5ZDkwHhcNMjUxMjA1MjIwMTA2WhcNMjUxMjA2MjIwMTA2WjAzMTEwLwYDVQQD EygyZWVlMDJkMWU3YWMxYWY1MjBiN2U5ZjU1MDMzNjQyYmFhZmM5NTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW5WIeIb3pQSZ3EMdIoG0pbj+9GL j11CLlPqTGJgkjyHr6U6U2T0d+mrJmTG6DpnfLNOzfhs4D/tkVFVEq1IWZsmnPJN mA77IGHiC2TdNBWeu3MMO0jeTuwhVfD+UWJmq9e6zHbmrXC0LW4vF2OgynaKL5qI z8DNa6qtGjUSdEtVkB1z7dVDu0NibFSq8TLiwxBRu1mM9OCqTKsWpqc/hg33ET1m cj/7LBbwdzKCL5w24dn/nGQhEU0bS9KA8F+FXWffhBqg/5vTFoLRUxDlqNGx6K85 CtUaCDpPyLBdZYzVzZwMLR8dT8L7gmwZyIaTPN93IMFdt6cyAzlZyTwoywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7uAtHnrBr1ILfp9VAzZCuq/JVaMB8GA1UdIwQY MBaAFEUWb6N8dkzcYqALyisrLIef9pnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYt ZTA2NjBkMDIzMTA0LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYtZTA2NjBkMDIzMTA0 LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0shptt2 II8jlz8uKhFlzSqmHXh84B3SF7sC3k38cdrQTkTOMwqLwySqJYJBVcmwqSRuPqfv XqGUfhMmthW1Cww/B9hr64Mmho8CLqk877/pB5XSxRguEllZsaFtgx0Fsp8lH1oB 7YGiBA/OFYKaXX9QhyZ4UNT2Tcd09cb979ueby+KD7KITuW2BtyPfmIKYU3rFivE 276aZCvVyNhlvC/L5W6H4ei62ubA97vYT5RShPCJStBke+eXJf7QoK4X5gkBJQTp TWWefM9o2Oy6IJWtlOLBt4dGUVPUzLB9VCXcg/v1ZMvwHpWkUMaWcrfL5LuGqCTi 5tHifPS7bVux1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:50 2025 by rpki-client