This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json) Hash identifier: tXic3z0WaG1YPDm8ITtZkfujd8pzEC3UGyjvSl/ICiI= Subject key identifier: 8C:97:DE:4F:A8:43:ED:1B:DD:E7:B2:34:62:FD:2E:34:16:DD:27:88 Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36 Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236 Certificate serial: 019AF0BEDC5B24B81450026B27AC4723865F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft Manifest number: 023E Signing time: Fri 05 Dec 2025 23:00:31 +0000 Manifest this update: Fri 05 Dec 2025 23:00:31 +0000 Manifest next update: Sat 06 Dec 2025 23:00:31 +0000 Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=) 2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: wK0fFeIvlT+kyaTOPiVAuLvrxf5ucOkOtIizI9nd+uo=) 3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:dc:5b:24:b8:14:50:02:6b:27:ac:47:23:86:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236 Validity Not Before: Dec 5 23:00:31 2025 GMT Not After : Dec 6 23:00:31 2025 GMT Subject: CN=8c97de4fa843ed1bdde7b23462fd2e3416dd2788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:72:d2:7f:64:e5:97:96:24:16:36:29:68: 00:e2:8f:73:60:6b:b2:3f:5b:f7:58:d0:9c:46:69: 42:e6:08:f5:4b:7c:4d:8d:82:fc:10:9c:e5:35:41: 99:c5:af:cd:d5:79:35:de:b3:2c:d2:0f:11:34:bf: 30:8f:58:0c:ef:97:17:4f:3f:b0:44:cd:53:85:d7: ad:95:86:9b:e5:1f:65:53:82:da:cf:03:8b:f8:b3: 18:84:ac:91:34:5e:af:57:22:90:cb:28:77:9c:ea: 32:45:1b:34:05:b5:f0:f1:f5:0f:5e:16:e4:c0:d3: 69:e5:30:3c:4b:10:34:4f:b1:ac:81:38:b4:bd:61: 51:2b:88:19:d9:ea:13:54:cb:1e:11:67:bd:df:aa: fe:1e:86:25:2d:71:d7:73:5d:80:a2:c0:c8:e9:a2: d6:da:93:1d:53:69:91:02:4f:86:c8:b7:28:59:cb: de:3b:3c:73:96:81:0a:44:bd:1f:6f:b1:cc:74:97: 5e:1e:7a:b4:b5:eb:f5:b2:ee:90:0f:09:03:9b:00: cd:39:13:b1:ab:51:0b:ee:53:eb:ae:c9:8d:9a:7f: b1:0b:7f:9f:59:18:6a:52:20:61:0c:41:96:42:72: 68:bc:9f:dc:77:7e:61:83:b0:9f:c4:a1:2e:6e:81: d3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:97:DE:4F:A8:43:ED:1B:DD:E7:B2:34:62:FD:2E:34:16:DD:27:88 X509v3 Authority Key Identifier: keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3c:83:a0:7b:78:78:c3:cd:09:1b:76:fb:2e:85:21:c6:0f: ec:6b:a8:9e:15:5e:6f:af:d4:ec:d1:ec:b9:23:38:58:e0:04: b0:70:a4:c7:50:01:11:b2:ff:df:af:f7:4e:4d:72:f2:df:90: 2a:d9:20:ba:c6:78:b9:a1:9e:8c:ca:76:d2:a1:58:36:6d:8d: ac:33:a7:54:5c:fd:9f:06:a4:5d:90:83:df:90:ec:02:27:b4: d5:9e:76:7f:05:8b:3a:55:ac:b7:11:3c:ee:0b:73:8f:d4:fc: fb:28:d7:10:8c:fc:27:f3:d9:ee:92:27:0b:1e:fe:98:df:91: dc:1d:cf:69:50:62:88:e3:e9:ea:8a:84:34:35:6f:e2:74:cb: 35:e2:1c:6f:58:36:01:53:c8:7b:79:9f:88:ee:a6:d5:ed:9e: 08:3c:05:30:e0:64:d2:38:48:aa:7d:40:a5:dd:63:c4:56:9e: 90:d6:e0:ce:92:34:fe:84:9e:eb:a6:bf:34:ba:a0:1e:39:d6: 58:d8:4a:4d:d6:41:41:22:b3:d5:5a:a0:75:9b:5c:2c:24:84: e6:af:5e:67:ad:3f:6e:db:0a:60:ce:22:ba:0d:79:de:e9:d4: c5:ef:95:97:ff:7d:ba:6d:d2:5f:65:9a:f9:5e:3e:d9:72:9f: 2e:4e:23:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtxbJLgUUAJrJ6xHI4ZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Mzc3OWU2YTc3YzdlNTgyMTMxOTg3NjRjZTJhYzBlNmJl ZTYyMzYwHhcNMjUxMjA1MjMwMDMxWhcNMjUxMjA2MjMwMDMxWjAzMTEwLwYDVQQD Eyg4Yzk3ZGU0ZmE4NDNlZDFiZGRlN2IyMzQ2MmZkMmUzNDE2ZGQyNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB5y0n9k5ZeWJBY2KWgA4o9zYGuy P1v3WNCcRmlC5gj1S3xNjYL8EJzlNUGZxa/N1Xk13rMs0g8RNL8wj1gM75cXTz+w RM1ThdetlYab5R9lU4LazwOL+LMYhKyRNF6vVyKQyyh3nOoyRRs0BbXw8fUPXhbk wNNp5TA8SxA0T7GsgTi0vWFRK4gZ2eoTVMseEWe936r+HoYlLXHXc12AosDI6aLW 2pMdU2mRAk+GyLcoWcveOzxzloEKRL0fb7HMdJdeHnq0tev1su6QDwkDmwDNOROx q1EL7lPrrsmNmn+xC3+fWRhqUiBhDEGWQnJovJ/cd35hg7CfxKEuboHTOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyX3k+oQ+0b3eeyNGL9LjQW3SeIMB8GA1UdIwQY MBaAFEc3eeanfH5YITGYdkzirA5r7mI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEt NThkNjY0MjEwNjY5LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEtNThkNjY0MjEwNjY5 LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzyDoHt4 eMPNCRt2+y6FIcYP7GuonhVeb6/U7NHsuSM4WOAEsHCkx1ABEbL/36/3Tk1y8t+Q KtkgusZ4uaGejMp20qFYNm2NrDOnVFz9nwakXZCD35DsAie01Z52fwWLOlWstxE8 7gtzj9T8+yjXEIz8J/PZ7pInCx7+mN+R3B3PaVBiiOPp6oqENDVv4nTLNeIcb1g2 AVPIe3mfiO6m1e2eCDwFMOBk0jhIqn1Apd1jxFaekNbgzpI0/oSe66a/NLqgHjnW WNhKTdZBQSKz1VqgdZtcLCSE5q9eZ60/btsKYM4iug153unUxe+Vl/99um3SX2Wa +V4+2XKfLk4jMw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:07 2025 by rpki-client