This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json) Hash identifier: h1RNM41+/i5GHohW7P6mx4YsYCUJLd97D7jAAS1LQXI= Subject key identifier: DB:B9:E7:CD:91:5D:78:F3:32:AD:13:3F:BF:15:A3:19:88:F1:2C:83 Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98 Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98 Certificate serial: 019AF276B48C333D8BEDC97FB82C38AA453D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft Manifest number: 0DA1 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=) 2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: LZBDILogHkbhYb2WjTQtqbs2iNjZEbhYL/bzWO/d6j4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b4:8c:33:3d:8b:ed:c9:7f:b8:2c:38:aa:45:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98 Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=dbb9e7cd915d78f332ad133fbf15a31988f12c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:d3:fb:99:7f:ad:47:ee:d9:c1:96:c4:62: 9f:d3:e5:db:80:88:32:dc:db:0f:d0:9d:11:44:dc: f5:30:5e:8d:3f:79:42:bc:b8:f8:97:a6:87:e2:0a: 5e:50:8c:28:9f:a4:16:94:b8:fe:1e:7f:3a:71:7a: ea:3b:e9:e8:fe:b4:68:97:55:2b:c3:5c:89:2d:00: 22:c8:80:7a:12:78:fa:39:14:87:f3:bc:20:c4:5f: ee:15:ae:b2:a9:d4:e4:21:bb:31:c4:89:a1:9d:ce: 82:a4:a8:81:29:df:e7:90:f8:4b:53:db:d9:7a:84: fd:72:03:40:3a:a3:0a:d7:d9:85:3e:41:70:4e:d3: d4:cf:c8:cb:d2:75:17:de:0d:1d:10:b6:50:21:70: 9d:45:88:e6:11:30:e2:5f:4c:46:f6:f4:f3:31:ad: 11:b5:94:2e:9b:80:53:9f:27:fe:97:1e:63:82:d2: 76:47:e8:e7:40:41:ec:40:5b:5d:1e:aa:28:56:cd: fb:ff:98:ea:8d:cc:f5:1e:be:a9:c8:da:59:56:ce: 37:4f:6b:01:f6:1a:f0:fc:a4:bd:05:77:52:5d:69: 7b:09:45:49:e3:bf:66:eb:12:62:1c:fc:6d:19:36: 02:f4:b6:f5:32:ee:88:74:07:59:47:75:8c:c1:60: 4a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B9:E7:CD:91:5D:78:F3:32:AD:13:3F:BF:15:A3:19:88:F1:2C:83 X509v3 Authority Key Identifier: keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:8e:13:9e:73:2b:52:81:da:84:82:bc:7f:80:ae:5d:bd: a3:b9:bd:51:2b:55:5c:1e:78:f8:b1:91:13:0e:ae:4d:d6:6f: ec:34:67:36:b4:37:4d:c5:b5:50:97:f7:ff:50:d1:b9:4a:2e: f8:ca:38:b1:85:d7:82:25:92:8e:06:77:38:6f:d2:2a:1d:b9: 94:98:a6:ff:d4:4e:cd:f5:b2:78:d0:9c:a2:f2:13:3c:d7:dd: 9e:d3:2e:fb:f0:bd:2d:ab:3d:6b:17:b0:af:2b:98:c1:d5:3e: 16:fa:5f:44:90:60:e3:0e:08:97:99:05:73:50:93:08:93:2c: a4:51:13:e0:7a:f7:21:fe:12:86:51:08:63:2c:f8:09:d1:99: 19:d9:05:21:77:c3:d8:ea:f1:c5:30:8a:f2:ab:ba:7f:ca:9e: 8a:21:06:75:35:b9:44:6d:d3:39:51:b8:08:29:bb:ba:f0:4a: c6:4c:9d:2f:68:5f:59:d1:cd:81:f9:5a:c9:46:56:22:19:ec: 4d:8a:9f:11:6e:69:cc:b2:4b:e0:c2:96:d7:38:55:24:41:62: 17:6a:e3:68:fd:b8:c4:a9:b0:c9:41:aa:ac:d7:a4:05:ab:f9: b9:3e:fc:2d:b6:ce:7c:c0:a2:7f:a3:2a:d7:8c:11:d5:2f:03: df:71:0f:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrSMMz2L7cl/uCw4qkU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzJkMGZjZTgzZmI2NzM4MmNlYWNlMzc1NmM4YjEzYzBh OTVjOTgwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EyhkYmI5ZTdjZDkxNWQ3OGYzMzJhZDEzM2ZiZjE1YTMxOTg4ZjEyYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvHT+5l/rUfu2cGWxGKf0+XbgIgy 3NsP0J0RRNz1MF6NP3lCvLj4l6aH4gpeUIwon6QWlLj+Hn86cXrqO+no/rRol1Ur w1yJLQAiyIB6Enj6ORSH87wgxF/uFa6yqdTkIbsxxImhnc6CpKiBKd/nkPhLU9vZ eoT9cgNAOqMK19mFPkFwTtPUz8jL0nUX3g0dELZQIXCdRYjmETDiX0xG9vTzMa0R tZQum4BTnyf+lx5jgtJ2R+jnQEHsQFtdHqooVs37/5jqjcz1Hr6pyNpZVs43T2sB 9hrw/KS9BXdSXWl7CUVJ479m6xJiHPxtGTYC9Lb1Mu6IdAdZR3WMwWBK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu5582RXXjzMq0TP78VoxmI8SyDMB8GA1UdIwQY MBaAFEcy0PzoP7Zzgs6s43VsixPAqVyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpMUV9PZ190bk9DenF6amRXeUxFOENwWEpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kY2FjZDItZDc4MC00NmY3LWE1YjYt NzljYzdhMTRiZjlhLzEvUnpMUV9PZ190bk9DenF6amRXeUxFOENwWEpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kY2FjZDItZDc4MC00NmY3LWE1YjYtNzljYzdhMTRiZjlh LzEvUnpMUV9PZ190bk9DenF6amRXeUxFOENwWEpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9SOE55z K1KB2oSCvH+Arl29o7m9UStVXB54+LGREw6uTdZv7DRnNrQ3TcW1UJf3/1DRuUou +Mo4sYXXgiWSjgZ3OG/SKh25lJim/9ROzfWyeNCcovITPNfdntMu+/C9Las9axew ryuYwdU+FvpfRJBg4w4Il5kFc1CTCJMspFET4Hr3If4ShlEIYyz4CdGZGdkFIXfD 2OrxxTCK8qu6f8qeiiEGdTW5RG3TOVG4CCm7uvBKxkydL2hfWdHNgflayUZWIhns TYqfEW5pzLJL4MKW1zhVJEFiF2rjaP24xKmwyUGqrNekBav5uT78LbbOfMCif6Mq 14wR1S8D33EPRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:55 2025 by rpki-client