This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json) Hash identifier: UZzNI2ItWlfxhY1iL5Kap/EbnN7zNMvcjL5OoBy+izk= Subject key identifier: 8A:E6:49:A0:FE:50:F7:A9:53:BA:DC:44:37:26:59:F1:1E:F8:12:B1 Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Certificate serial: 019AF23FEB53B8D303A4F15675D37E27AC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=) 2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: v41oXgWGzUaRslcrdHzpkjsjKfavqwm42GxN/wuMqMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:eb:53:b8:d3:03:a4:f1:56:75:d3:7e:27:ac:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=8ae649a0fe50f7a953badc44372659f11ef812b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:8d:6f:66:a4:d6:60:07:03:33:69:d3:de: 1f:78:96:a3:39:4e:ad:06:50:6b:67:3b:92:d7:05: c0:d4:a0:fe:a9:03:2c:81:50:4d:6f:57:ab:c3:f3: 06:eb:3a:94:3d:51:e6:41:a8:00:ef:74:a5:4d:79: 69:da:38:8d:d6:63:3c:9e:16:0d:12:ac:38:36:90: 69:0a:2a:5e:41:ea:4e:48:73:e7:78:a3:ab:3e:b6: 58:f7:8a:05:4f:10:26:6e:ea:89:59:10:3c:41:1e: 68:91:bb:ba:7d:a7:fa:52:3d:e9:8b:1e:68:e7:98: 1b:f2:fa:c8:8f:9b:c3:55:1e:5a:c3:37:5e:16:9d: f5:ae:88:e4:01:63:60:5f:ad:fb:d9:cb:b0:1b:32: 63:ec:e5:3a:a6:40:83:30:e3:85:c5:aa:77:ae:bf: 2b:ac:70:aa:26:a5:4b:6c:21:fa:84:9f:fe:70:6f: 55:ba:b4:f5:c1:d7:69:0d:3e:b5:a4:09:02:69:c2: 94:f8:a8:2c:06:f7:12:8a:aa:d8:3d:de:d2:b6:cf: 4f:b9:0c:d6:58:9e:0d:5e:bf:57:02:a3:f2:e6:a1: 1f:3f:ea:7c:1c:79:96:80:1d:bc:6b:94:f1:01:7a: 11:78:ee:49:23:e5:60:3f:7f:84:b6:dd:98:ce:3d: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E6:49:A0:FE:50:F7:A9:53:BA:DC:44:37:26:59:F1:1E:F8:12:B1 X509v3 Authority Key Identifier: keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:24:c0:4e:48:4d:c0:c9:6d:f4:32:ad:1b:50:d1:72:89:b6: 02:85:0e:1a:b2:48:53:37:ae:36:b9:e4:08:31:54:1e:81:1b: bb:6b:b7:83:7d:76:70:c3:7a:4b:ba:f1:3b:ab:a0:0d:5b:e4: 94:61:25:5b:bd:be:38:35:94:52:c0:38:a7:82:c9:6e:64:97: b4:43:a7:2b:d0:67:28:85:22:7e:8d:a3:ad:98:4d:f0:5b:f4: 7f:cc:d3:b6:cb:b8:bb:50:44:f0:bc:ed:30:c8:c6:c6:bb:70: 95:94:61:38:c1:44:48:2a:26:a4:71:10:4f:87:85:3e:ce:5e: e5:f7:19:eb:50:57:1e:c2:f5:49:ad:4e:6c:1c:a0:84:99:5a: 43:2f:55:21:3c:36:a8:d7:33:f5:f7:a7:73:da:dc:8b:08:7b: 83:4a:4d:72:fb:68:2a:34:c3:6d:b3:cd:8d:0e:58:dd:42:39: 86:f2:cd:b6:32:37:66:18:1b:ea:a3:9c:6b:29:fa:b9:13:1a: d9:79:45:ba:11:c0:41:70:c9:85:a0:81:1b:d8:c1:dd:c3:ab: e9:9b:8d:c9:f3:4a:a2:6d:55:e9:f3:c7:c4:e0:d3:cb:fc:da: 8a:4f:39:9c:7c:25:93:32:c6:23:ac:64:3e:77:c4:3c:f6:8c: d8:8a:c5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+tTuNMDpPFWddN+J6wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi YjhjMjUwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD Eyg4YWU2NDlhMGZlNTBmN2E5NTNiYWRjNDQzNzI2NTlmMTFlZjgxMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNqNb2ak1mAHAzNp094feJajOU6t BlBrZzuS1wXA1KD+qQMsgVBNb1erw/MG6zqUPVHmQagA73SlTXlp2jiN1mM8nhYN Eqw4NpBpCipeQepOSHPneKOrPrZY94oFTxAmbuqJWRA8QR5okbu6faf6Uj3pix5o 55gb8vrIj5vDVR5awzdeFp31rojkAWNgX6372cuwGzJj7OU6pkCDMOOFxap3rr8r rHCqJqVLbCH6hJ/+cG9VurT1wddpDT61pAkCacKU+KgsBvcSiqrYPd7Sts9PuQzW WJ4NXr9XAqPy5qEfP+p8HHmWgB28a5TxAXoReO5JI+VgP3+Ett2Yzj27MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrmSaD+UPepU7rcRDcmWfEe+BKxMB8GA1UdIwQY MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0 LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiTATkhN wMlt9DKtG1DRcom2AoUOGrJIUzeuNrnkCDFUHoEbu2u3g312cMN6S7rxO6ugDVvk lGElW72+ODWUUsA4p4LJbmSXtEOnK9BnKIUifo2jrZhN8Fv0f8zTtsu4u1BE8Lzt MMjGxrtwlZRhOMFESCompHEQT4eFPs5e5fcZ61BXHsL1Sa1ObByghJlaQy9VITw2 qNcz9fenc9rciwh7g0pNcvtoKjTDbbPNjQ5Y3UI5hvLNtjI3Zhgb6qOcayn6uRMa 2XlFuhHAQXDJhaCBG9jB3cOr6ZuNyfNKom1V6fPHxODTy/zaik85nHwlkzLGI6xk PnfEPPaM2IrFFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:58 2025 by rpki-client