This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json) Hash identifier: puscf85+VmWvkJlxebyEz4K5/1om0KTM2+Cpk2Rq2So= Subject key identifier: D5:1D:CC:F6:53:B6:BB:E9:38:88:B8:C8:1A:36:24:4B:C4:13:53:DC Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a Certificate serial: 019AF276E15053F9DE77FB3CF146F0AEC37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft Manifest number: 0C18 Signing time: Sat 06 Dec 2025 07:01:08 +0000 Manifest this update: Sat 06 Dec 2025 07:01:08 +0000 Manifest next update: Sun 07 Dec 2025 07:01:08 +0000 Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: rl1A1zkOCjzdEipiSfWHlNjxWfdkABIg8UbsD8ajX1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e1:50:53:f9:de:77:fb:3c:f1:46:f0:ae:c3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a Validity Not Before: Dec 6 07:01:08 2025 GMT Not After : Dec 7 07:01:08 2025 GMT Subject: CN=d51dccf653b6bbe93888b8c81a36244bc41353dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:d1:72:a5:9c:a8:ae:d0:1a:c9:02:48:b3: c8:00:c0:b7:9c:12:7a:4f:df:91:36:08:42:25:94: 1a:9a:de:62:64:f4:2c:81:25:91:be:28:e7:0f:26: 5c:de:56:29:da:fb:eb:fa:46:20:3e:85:0e:c8:7d: 99:67:68:3d:fe:79:68:42:b0:53:73:de:11:82:43: 78:61:82:4e:3d:ff:45:a8:d6:d7:18:0c:01:87:b4: d0:97:56:66:91:e6:fb:9f:4e:c6:31:77:a1:cd:a1: 8d:90:6e:d0:4b:bb:a2:a4:b8:4d:7e:c4:14:5b:c1: fa:ed:86:b0:12:6e:3e:de:22:c0:b4:da:dc:b2:e2: df:01:c9:69:af:12:72:72:29:7f:97:51:e9:b6:7a: 93:9d:d7:40:14:38:5f:92:29:41:a3:bf:2f:df:e1: 66:6a:ff:52:a8:ba:55:69:35:be:35:12:63:50:09: fb:41:74:a8:25:6b:9a:76:e2:65:27:5d:24:0d:3b: e7:be:66:4f:02:cf:b8:62:39:de:26:7f:8c:05:d7: 0c:2f:cd:ec:93:c5:16:37:8e:d7:9d:9b:f5:69:c6: 35:b3:49:7e:f2:67:ab:a9:78:28:9c:08:56:62:24: 66:db:e7:88:d4:3e:d8:c4:22:05:24:75:da:b9:e2: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1D:CC:F6:53:B6:BB:E9:38:88:B8:C8:1A:36:24:4B:C4:13:53:DC X509v3 Authority Key Identifier: keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5b:16:16:fa:3e:5a:4a:4e:30:2f:67:93:91:90:f6:64:16: ac:22:51:b9:13:c2:1d:36:40:26:70:58:ba:e6:ba:6e:d4:7c: 43:c7:3c:29:32:76:d2:7e:7a:c8:19:13:88:da:ee:56:d8:fb: b1:33:41:bf:59:bd:58:f5:97:a7:3e:28:12:ab:4f:ac:6b:1d: 81:e6:5a:4d:41:79:eb:b9:49:9d:ad:88:fe:29:48:5e:55:e9: 14:a1:b8:23:8c:97:66:c3:49:b5:e1:74:08:f8:a2:cd:9f:95: 70:46:7c:ab:ef:50:6e:36:0f:6f:33:e0:4a:46:81:ec:03:26: d9:c3:2b:ac:a8:d0:1b:09:b0:c1:41:04:ee:a8:e5:da:0f:42: f1:7e:63:1c:6d:5d:89:5d:8b:f3:68:d2:4c:aa:b7:61:59:b2: a6:5f:cd:62:69:fe:26:ef:c0:f4:d4:e0:0d:ae:0f:fb:23:8e: 7e:b0:83:76:5b:69:71:4b:ba:7c:b7:4e:b0:62:c8:35:da:67: 4c:b9:a7:9c:9d:9e:bb:c9:f2:3d:8c:ab:2b:76:32:24:33:87: cd:0f:84:22:16:0b:b7:b3:c8:7d:00:7d:db:44:ad:d7:9d:ac: 5f:a4:30:0d:e7:c4:4b:1f:75:c2:61:4b:af:fa:09:5c:93:1e: d4:c8:af:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduFQU/ned/s88UbwrsN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzJlYzBlOTFkYmJmOTRkZGExZDY1MDQ0N2QyNjg5NzZk NjIwOWEwHhcNMjUxMjA2MDcwMTA4WhcNMjUxMjA3MDcwMTA4WjAzMTEwLwYDVQQD EyhkNTFkY2NmNjUzYjZiYmU5Mzg4OGI4YzgxYTM2MjQ0YmM0MTM1M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzRcqWcqK7QGskCSLPIAMC3nBJ6 T9+RNghCJZQamt5iZPQsgSWRvijnDyZc3lYp2vvr+kYgPoUOyH2ZZ2g9/nloQrBT c94RgkN4YYJOPf9FqNbXGAwBh7TQl1Zmkeb7n07GMXehzaGNkG7QS7uipLhNfsQU W8H67YawEm4+3iLAtNrcsuLfAclprxJycil/l1HptnqTnddAFDhfkilBo78v3+Fm av9SqLpVaTW+NRJjUAn7QXSoJWuaduJlJ10kDTvnvmZPAs+4YjneJn+MBdcML83s k8UWN47XnZv1acY1s0l+8merqXgonAhWYiRm2+eI1D7YxCIFJHXaueI1zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUdzPZTtrvpOIi4yBo2JEvEE1PcMB8GA1UdIwQY MBaAFEcy7A6R27+U3aHWUER9Jol21iCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMt Nzg4ZGIwOWQwZmU2LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMtNzg4ZGIwOWQwZmU2 LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlsWFvo+ WkpOMC9nk5GQ9mQWrCJRuRPCHTZAJnBYuua6btR8Q8c8KTJ20n56yBkTiNruVtj7 sTNBv1m9WPWXpz4oEqtPrGsdgeZaTUF567lJna2I/ilIXlXpFKG4I4yXZsNJteF0 CPiizZ+VcEZ8q+9QbjYPbzPgSkaB7AMm2cMrrKjQGwmwwUEE7qjl2g9C8X5jHG1d iV2L82jSTKq3YVmypl/NYmn+Ju/A9NTgDa4P+yOOfrCDdltpcUu6fLdOsGLINdpn TLmnnJ2eu8nyPYyrK3YyJDOHzQ+EIhYLt7PIfQB920St152sX6QwDefESx91wmFL r/oJXJMe1MivWg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:20 2025 by rpki-client