This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json) Hash identifier: SUtZozmJotOMwpckE4ecT7VA19GA3EleCd8JQtaxc5k= Subject key identifier: 97:77:D2:C5:41:85:4E:FA:FA:8D:99:37:C0:46:29:FD:AE:23:76:BA Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Certificate serial: 019B30E8F313EAD4D6F3A695EB9E900089D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft Manifest number: 0540 Signing time: Thu 18 Dec 2025 10:02:11 +0000 Manifest this update: Thu 18 Dec 2025 10:02:11 +0000 Manifest next update: Fri 19 Dec 2025 10:02:11 +0000 Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: rnFBDSHHTX+BAzo9QFpoJfXqxDdHT/EdLaSfWHg2imA=) 2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:f3:13:ea:d4:d6:f3:a6:95:eb:9e:90:00:89:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Validity Not Before: Dec 18 10:02:11 2025 GMT Not After : Dec 19 10:02:11 2025 GMT Subject: CN=9777d2c541854efafa8d9937c04629fdae2376ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:a5:74:0b:c2:f4:19:4c:52:69:34:5d:08: fc:11:37:00:67:2c:7b:55:cb:3d:48:5c:67:4b:a7: d8:9f:be:53:2a:83:0b:4b:88:5f:82:43:ad:a8:9c: 55:51:70:70:1d:07:7c:ea:35:e1:39:08:0a:bc:06: fd:d7:56:c7:6c:2e:6f:94:43:7c:23:30:1e:e3:42: e5:b1:c7:db:b0:c8:fc:d2:4b:3d:57:2f:7b:d1:d0: 37:bf:33:fc:dd:ed:3b:6d:14:dc:c7:06:87:20:26: 90:86:07:94:84:da:cc:ff:8d:2f:5d:6c:c8:c6:b0: 18:75:42:44:dd:82:49:e1:2a:e4:11:be:34:6f:19: 48:ce:4b:6f:a5:1f:80:35:c0:19:57:76:03:6d:8a: 00:28:ec:a9:fe:d5:29:66:44:a0:ae:5a:db:42:84: 74:84:b9:c4:28:33:6c:8b:64:6d:db:74:94:98:6b: 82:2d:38:78:e7:0f:6b:a3:f9:ad:e3:7f:20:c9:d6: c3:dc:02:a2:53:75:bf:bd:23:25:5a:44:92:d5:51: b7:a2:7c:16:62:42:b0:eb:e6:27:4b:56:a1:b9:62: 13:6a:88:b4:87:32:46:48:36:72:f1:3e:9c:50:4e: 35:54:a1:36:d3:17:af:bb:87:5d:63:59:d6:c3:74: f4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:77:D2:C5:41:85:4E:FA:FA:8D:99:37:C0:46:29:FD:AE:23:76:BA X509v3 Authority Key Identifier: keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:cb:b8:5d:f3:77:53:e6:2f:4f:d0:26:3b:34:74:09:cc:56: 8f:42:0f:0e:32:a5:c3:52:47:c2:e3:de:18:38:54:18:4c:e5: 68:08:81:c0:d7:74:02:1e:af:86:36:76:db:6b:99:59:ec:50: 50:41:93:93:47:ce:6a:28:a3:67:e9:a6:60:f7:94:42:2b:86: 84:a6:d5:3a:47:27:f5:10:be:d5:cd:ba:bd:88:4a:8a:fb:4d: 11:1c:25:a9:42:01:b9:73:66:c6:3b:47:c0:c7:0b:38:4e:54: 3b:3d:24:44:99:bf:5d:2c:31:9f:e1:a9:3f:f3:4c:e4:21:36: ef:f1:9d:58:53:4b:ac:10:bd:b5:4b:e6:11:98:41:08:b8:c9: 21:cf:e0:fa:6b:d3:af:72:ee:2a:67:ee:54:a4:d8:06:13:ef: f1:73:7b:5a:00:a2:36:54:c8:a0:68:04:36:a3:59:e7:4e:e4: 8b:f1:41:9c:ca:90:21:82:76:c9:d1:4b:64:74:57:97:a0:19: 8b:e2:04:f5:f1:34:32:32:14:b2:04:91:45:bf:63:46:80:91: 1e:25:e5:4a:a9:fa:c6:f6:22:5d:d4:bd:d9:01:f9:9c:cf:8d: bb:0b:b0:c7:3b:41:c0:8c:6e:0c:5b:95:c0:70:4b:cd:6f:16: 2a:40:eb:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6PMT6tTW86aV656QAInVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1 MmE3YWUwHhcNMjUxMjE4MTAwMjExWhcNMjUxMjE5MTAwMjExWjAzMTEwLwYDVQQD Eyg5Nzc3ZDJjNTQxODU0ZWZhZmE4ZDk5MzdjMDQ2MjlmZGFlMjM3NmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35CldAvC9BlMUmk0XQj8ETcAZyx7 Vcs9SFxnS6fYn75TKoMLS4hfgkOtqJxVUXBwHQd86jXhOQgKvAb911bHbC5vlEN8 IzAe40LlscfbsMj80ks9Vy970dA3vzP83e07bRTcxwaHICaQhgeUhNrM/40vXWzI xrAYdUJE3YJJ4SrkEb40bxlIzktvpR+ANcAZV3YDbYoAKOyp/tUpZkSgrlrbQoR0 hLnEKDNsi2Rt23SUmGuCLTh45w9ro/mt438gydbD3AKiU3W/vSMlWkSS1VG3onwW YkKw6+YnS1ahuWITaoi0hzJGSDZy8T6cUE41VKE20xevu4ddY1nWw3T0kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd30sVBhU76+o2ZN8BGKf2uI3a6MB8GA1UdIwQY MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8u4XfN3 U+YvT9AmOzR0CcxWj0IPDjKlw1JHwuPeGDhUGEzlaAiBwNd0Ah6vhjZ222uZWexQ UEGTk0fOaiijZ+mmYPeUQiuGhKbVOkcn9RC+1c26vYhKivtNERwlqUIBuXNmxjtH wMcLOE5UOz0kRJm/XSwxn+GpP/NM5CE27/GdWFNLrBC9tUvmEZhBCLjJIc/g+mvT r3LuKmfuVKTYBhPv8XN7WgCiNlTIoGgENqNZ507ki/FBnMqQIYJ2ydFLZHRXl6AZ i+IE9fE0MjIUsgSRRb9jRoCRHiXlSqn6xvYiXdS92QH5nM+NuwuwxztBwIxuDFuV wHBLzW8WKkDrSw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:49:43 2025 by rpki-client