This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json) Hash identifier: FyEGZmMHekos3XOEv1yLo6lb2sI6/kKg6HLx4BA2nSU= Subject key identifier: 78:5C:66:91:75:28:C1:59:D5:03:90:2B:4D:FB:70:3A:3E:17:97:E9 Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9 Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9 Certificate serial: 019AF12E382B66B5590EC6D601C9007E4D5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:09 +0000 Manifest this update: Sat 06 Dec 2025 01:02:09 +0000 Manifest next update: Sun 07 Dec 2025 01:02:09 +0000 Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: VABcwTOdT36jxnK/DStHsMfU5xc5yQwfzhtuKg9GRc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:38:2b:66:b5:59:0e:c6:d6:01:c9:00:7e:4d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9 Validity Not Before: Dec 6 01:02:09 2025 GMT Not After : Dec 7 01:02:09 2025 GMT Subject: CN=785c66917528c159d503902b4dfb703a3e1797e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b9:b1:0d:66:48:b1:21:c4:71:f5:5a:e0:dd: d5:52:e6:ac:73:1f:8b:e7:da:68:84:e4:2b:d5:31: 08:63:dc:cb:7c:f9:4f:46:27:2d:f4:e3:99:aa:6d: 3a:88:67:b1:db:d1:e6:93:83:be:04:d7:b8:7e:39: c4:2e:6d:d9:b4:56:a0:a9:e3:70:34:b4:20:7e:6f: ee:a7:ca:05:dd:af:dd:c0:64:29:5c:57:8a:5a:9c: c5:a8:c1:11:d9:f8:bc:f8:0a:18:7a:ce:02:e8:7b: f7:18:5a:8e:f8:4f:db:86:2f:70:a3:ef:ac:96:d7: a4:10:90:3b:6a:7a:0f:27:5e:35:3d:ee:21:be:fc: c6:00:dc:a8:a3:19:f9:c1:cc:c3:cc:a7:6f:41:f3: 7e:03:04:6e:fb:e4:5c:71:69:5b:ed:d4:9b:79:48: 83:de:c1:06:ac:ee:69:d2:2b:94:d9:0b:ee:c7:dc: 8d:86:53:9f:41:b4:22:68:15:43:ed:e3:da:4d:aa: 77:49:0a:0b:f6:00:11:94:e1:82:e2:7d:97:a4:cf: 55:03:16:a2:64:e9:32:74:4d:ce:57:cf:96:9d:f6: 95:36:98:ca:c0:b3:ab:b2:26:99:76:d7:84:4e:f5: 00:71:34:4b:b9:7d:10:e6:aa:c9:4d:50:b9:89:93: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5C:66:91:75:28:C1:59:D5:03:90:2B:4D:FB:70:3A:3E:17:97:E9 X509v3 Authority Key Identifier: keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:16:c0:6d:97:14:c5:16:23:5f:9f:f8:30:a0:85:8d:58:21: 68:09:0e:73:17:49:24:62:fc:0b:ae:12:2a:fc:64:42:4a:47: 19:6b:70:47:c6:ee:1e:57:c7:5b:e2:f8:fe:51:ac:a2:78:8f: cd:bd:8e:93:94:47:19:93:e7:82:af:41:40:bd:95:ab:fa:04: 5b:39:cc:1e:bc:94:cd:f5:90:02:69:35:d2:17:a3:be:67:76: 62:20:b2:8f:f6:b3:80:bf:c8:7d:9c:db:06:82:9f:3d:78:ac: ed:52:66:d6:d3:8e:a0:89:fa:49:35:4d:6b:cb:9c:fa:7b:3b: 4e:8f:05:05:d8:07:14:9e:cc:a6:be:36:8f:eb:0f:96:8b:58: 23:8f:c0:c6:8c:6f:63:f9:fc:4e:c4:99:56:1c:82:92:00:17: 13:16:45:5a:f2:02:f4:66:aa:80:78:88:21:18:43:fb:7f:27: 9c:17:9f:51:28:eb:df:0d:6c:fc:e5:57:05:6d:ba:e2:1e:fa: d4:73:24:24:65:fe:8d:32:8f:66:b4:28:8a:13:8c:26:38:6f: 8a:09:ca:42:e3:a3:32:66:74:88:fa:a4:27:dc:b0:3b:d7:a6: 39:c7:d7:23:36:c4:d3:cc:7e:d8:b6:68:00:bb:e2:a5:55:b6: e4:70:67:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjgrZrVZDsbWAckAfk1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzZjdmM2Y4MjVmOGU4YzI1NjVlYWVmYjY2ZTc3NDRjOTI5 NWRjYzkwHhcNMjUxMjA2MDEwMjA5WhcNMjUxMjA3MDEwMjA5WjAzMTEwLwYDVQQD Eyg3ODVjNjY5MTc1MjhjMTU5ZDUwMzkwMmI0ZGZiNzAzYTNlMTc5N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLmxDWZIsSHEcfVa4N3VUuascx+L 59pohOQr1TEIY9zLfPlPRict9OOZqm06iGex29Hmk4O+BNe4fjnELm3ZtFagqeNw NLQgfm/up8oF3a/dwGQpXFeKWpzFqMER2fi8+AoYes4C6Hv3GFqO+E/bhi9wo++s ltekEJA7anoPJ141Pe4hvvzGANyooxn5wczDzKdvQfN+AwRu++RccWlb7dSbeUiD 3sEGrO5p0iuU2Qvux9yNhlOfQbQiaBVD7ePaTap3SQoL9gARlOGC4n2XpM9VAxai ZOkydE3OV8+WnfaVNpjKwLOrsiaZdteETvUAcTRLuX0Q5qrJTVC5iZO7iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhcZpF1KMFZ1QOQK037cDo+F5fpMB8GA1UdIwQY MBaAFKP38/gl+OjCVl6u+2bndEySldzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAt YjBhYTdmZDYyMTliLzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAtYjBhYTdmZDYyMTli LzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRbAbZcU xRYjX5/4MKCFjVghaAkOcxdJJGL8C64SKvxkQkpHGWtwR8buHlfHW+L4/lGsoniP zb2Ok5RHGZPngq9BQL2Vq/oEWznMHryUzfWQAmk10hejvmd2YiCyj/azgL/IfZzb BoKfPXis7VJm1tOOoIn6STVNa8uc+ns7To8FBdgHFJ7Mpr42j+sPlotYI4/Axoxv Y/n8TsSZVhyCkgAXExZFWvIC9GaqgHiIIRhD+38nnBefUSjr3w1s/OVXBW264h76 1HMkJGX+jTKPZrQoihOMJjhvignKQuOjMmZ0iPqkJ9ywO9emOcfXIzbE08x+2LZo ALvipVW25HBnGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:06:08 2025 by rpki-client