This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json) Hash identifier: 0iIERdGDIyQcKBGmLzpnRNk/EWWA+b6uHfwpXir5pik= Subject key identifier: 91:18:A1:5E:28:A8:53:FE:97:70:72:3E:A1:06:7F:E6:00:BC:23:C6 Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb Certificate serial: 019AF3C02E55F2AF8055AB31F7913C6C1F72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft Manifest number: 109F Signing time: Sat 06 Dec 2025 13:00:49 +0000 Manifest this update: Sat 06 Dec 2025 13:00:49 +0000 Manifest next update: Sun 07 Dec 2025 13:00:49 +0000 Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=) 2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: CX1uLN/GX/vaQwvgC1ObhcliXnioK6DcHwZ98VHMeQQ=) 3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:2e:55:f2:af:80:55:ab:31:f7:91:3c:6c:1f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb Validity Not Before: Dec 6 13:00:49 2025 GMT Not After : Dec 7 13:00:49 2025 GMT Subject: CN=9118a15e28a853fe9770723ea1067fe600bc23c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:f4:09:63:91:8a:f5:be:11:83:73:7b:d1: 1c:01:2c:73:d4:fd:a3:07:1e:58:4e:f0:66:3f:e9: 13:17:67:f3:f7:ab:7c:b7:0a:4d:9c:e1:5e:fc:af: d6:84:0e:80:4c:0b:1b:42:02:4f:02:d7:f3:d4:a0: 72:39:4e:be:09:db:59:b6:96:da:ae:3a:21:0f:01: e9:8e:49:90:c9:9f:91:b6:74:5e:25:8e:12:12:92: 2c:3a:3f:f5:4c:1e:95:7b:ff:26:9c:02:ad:18:95: 9e:1f:c8:e3:c3:b9:c3:06:eb:67:f1:29:43:1b:e5: 91:49:6f:6a:d3:29:07:8f:e3:71:eb:ac:6d:20:fb: 5e:e8:b9:91:c1:93:5d:60:49:93:b0:0f:32:da:7e: e4:90:17:8c:cf:a2:f0:bd:46:ee:32:9e:a9:b8:fc: 47:67:05:e5:3b:c5:b8:15:b6:26:b4:aa:55:0c:e3: 32:7d:f8:fc:f9:80:3a:e7:02:1e:5c:bf:cf:a3:f6: 79:4c:67:2b:0b:ef:c3:5d:b2:b9:27:f3:99:e8:80: 7e:27:98:bc:27:be:9d:5d:e5:ba:bf:4f:e7:50:a2: 2d:e6:87:50:df:07:4f:68:95:50:a1:2a:10:23:97: 2d:e8:62:3a:c4:ba:b8:8f:dc:32:ce:44:c5:98:06: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:18:A1:5E:28:A8:53:FE:97:70:72:3E:A1:06:7F:E6:00:BC:23:C6 X509v3 Authority Key Identifier: keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:8e:d6:17:ee:c4:af:09:27:d5:c2:1e:e3:45:29:13:4b: 1a:ef:7e:70:35:14:a6:98:b2:6c:d6:a5:28:65:f7:c2:37:1e: f6:4e:c1:f1:e1:ab:62:c0:8a:d7:04:d3:af:1d:0b:cc:ef:8e: 5d:3f:93:a2:02:03:7d:76:2b:76:6b:58:a5:8f:9b:7f:42:c3: da:ca:4d:5b:43:88:7b:ad:7d:de:93:02:d5:68:ba:b7:27:40: dd:7a:60:ff:a4:c2:8b:35:a3:94:18:65:7b:31:09:0d:8d:51: c9:03:b6:4b:03:97:a2:12:f1:f2:1e:49:11:bf:3b:c6:f1:54: a3:de:be:a4:cc:65:41:4e:95:d6:c5:ce:f5:45:77:a7:8d:9e: b6:79:78:09:4c:10:f3:b0:4e:c7:91:16:b6:1d:df:c3:8d:6d: 6a:0d:35:90:89:ef:81:c7:30:17:b6:1b:82:48:75:aa:f8:a6: 54:75:4a:3a:dc:a0:04:6c:ee:c4:9c:b2:e7:ca:a7:07:d3:78: 89:0f:2b:6d:41:01:3e:44:55:d1:01:86:0e:0f:48:eb:f5:60: c5:04:8d:8f:b7:38:d7:f3:6c:2d:3b:3c:c2:29:61:25:f4:22: 26:ac:fc:45:26:d5:2b:94:37:30:a1:d8:e3:63:35:a8:0d:58: 0b:da:51:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwC5V8q+AVasx95E8bB9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTYyZWE1NjYwNTQ2NTZlZjgyYWFjZTJkNzFjNzZkMWIw Yjg4YmIwHhcNMjUxMjA2MTMwMDQ5WhcNMjUxMjA3MTMwMDQ5WjAzMTEwLwYDVQQD Eyg5MTE4YTE1ZTI4YTg1M2ZlOTc3MDcyM2VhMTA2N2ZlNjAwYmMyM2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqH0CWORivW+EYNze9EcASxz1P2j Bx5YTvBmP+kTF2fz96t8twpNnOFe/K/WhA6ATAsbQgJPAtfz1KByOU6+CdtZtpba rjohDwHpjkmQyZ+RtnReJY4SEpIsOj/1TB6Ve/8mnAKtGJWeH8jjw7nDButn8SlD G+WRSW9q0ykHj+Nx66xtIPte6LmRwZNdYEmTsA8y2n7kkBeMz6LwvUbuMp6puPxH ZwXlO8W4FbYmtKpVDOMyffj8+YA65wIeXL/Po/Z5TGcrC+/DXbK5J/OZ6IB+J5i8 J76dXeW6v0/nUKIt5odQ3wdPaJVQoSoQI5ct6GI6xLq4j9wyzkTFmAa8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEYoV4oqFP+l3ByPqEGf+YAvCPGMB8GA1UdIwQY MBaAFEWWLqVmBUZW74Kqzi1xx20bC4i7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5Mjgt YzVjMDgyYTMxM2Y3LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5MjgtYzVjMDgyYTMxM2Y3 LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT+O1hfu xK8JJ9XCHuNFKRNLGu9+cDUUppiybNalKGX3wjce9k7B8eGrYsCK1wTTrx0LzO+O XT+TogIDfXYrdmtYpY+bf0LD2spNW0OIe6193pMC1Wi6tydA3Xpg/6TCizWjlBhl ezEJDY1RyQO2SwOXohLx8h5JEb87xvFUo96+pMxlQU6V1sXO9UV3p42etnl4CUwQ 87BOx5EWth3fw41tag01kInvgccwF7Ybgkh1qvimVHVKOtygBGzuxJyy58qnB9N4 iQ8rbUEBPkRV0QGGDg9I6/VgxQSNj7c41/NsLTs8wilhJfQiJqz8RSbVK5Q3MKHY 42M1qA1YC9pR5A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:33 2025 by rpki-client