This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json) Hash identifier: mxKgCTVT3wsdDLZZJlKH6lobdtVuAPwoStspMxBj31g= Subject key identifier: F9:C3:64:F5:17:8B:FA:4A:02:99:BA:03:28:81:C2:F5:92:6E:BC:7F Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06 Certificate serial: 019B33E8A1A4D8428A2622BD3491DAD03E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 00:00:42 +0000 Manifest this update: Fri 19 Dec 2025 00:00:42 +0000 Manifest next update: Sat 20 Dec 2025 00:00:42 +0000 Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=) 2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: 5BTr4JJAJgtWWZdEaTFOKFH8l6/i2wJuT35/DQRbCBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:a1:a4:d8:42:8a:26:22:bd:34:91:da:d0:3e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06 Validity Not Before: Dec 19 00:00:42 2025 GMT Not After : Dec 20 00:00:42 2025 GMT Subject: CN=f9c364f5178bfa4a0299ba032881c2f5926ebc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:5e:68:15:59:1a:4d:d9:e1:01:06:a9:6b: 24:86:70:48:a4:76:f6:b7:3e:9e:ac:66:fa:73:fd: 71:a8:d0:9e:ed:46:7f:d4:71:26:0d:88:d5:38:ac: b3:ac:95:48:96:dd:f1:4f:25:0f:c1:56:8f:b2:03: 89:1a:6f:26:49:45:00:60:63:38:19:f7:05:a3:7a: cd:d8:8f:fe:e9:fe:28:fc:c6:56:5b:24:3c:47:1b: f4:6c:46:0f:09:35:79:c1:fa:9b:dd:49:2f:33:b1: 39:dc:07:41:48:42:0f:cb:2f:92:f4:5f:23:b0:0c: c7:c9:62:4d:31:22:19:5b:39:96:b9:74:5f:8f:cd: d5:7b:3f:a5:46:68:b0:c3:5e:47:96:a5:1e:b2:3b: 48:c1:f4:41:9d:f3:b1:8b:76:40:7d:00:96:d0:4d: bf:27:00:41:e8:a2:4c:18:12:d9:35:24:67:a8:09: ce:d3:8c:97:52:91:c3:13:4e:64:51:9c:09:07:45: 0f:4a:d2:6f:5d:54:97:a6:18:78:52:fc:71:3e:16: f6:13:9b:c0:cf:f1:a3:ea:50:83:2e:69:21:a4:8c: 81:6c:d8:eb:fb:a9:32:9c:07:5f:f5:77:8f:e6:9a: c7:42:07:db:c6:e5:a4:fe:21:2e:d3:91:0f:7a:d1: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C3:64:F5:17:8B:FA:4A:02:99:BA:03:28:81:C2:F5:92:6E:BC:7F X509v3 Authority Key Identifier: keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:30:dc:dc:3e:8e:a2:3d:ce:f2:a9:c5:b2:b7:30:ec:e4:86: a4:71:97:27:8f:00:e2:44:e3:8a:03:e2:f0:f2:b1:c6:e9:27: f5:0c:5c:86:1f:68:74:ff:8e:ff:7c:00:f3:b5:fe:3e:37:49: 03:75:c6:38:92:b1:18:48:41:3a:58:15:c0:fa:04:ac:ac:6b: c3:09:c5:0e:6f:fa:44:8b:e3:39:95:d9:56:30:59:36:34:5e: af:20:2d:9f:71:f7:33:55:41:52:ae:33:e8:4e:57:84:48:f2: c0:e7:52:9f:c7:89:8e:3a:ea:2c:4d:cf:62:df:cd:5b:d0:99: f4:dc:ee:71:39:43:28:c9:ac:a9:5b:05:cc:b2:8f:c4:17:0e: bb:90:22:90:8e:51:56:3c:6c:12:34:5f:c3:bc:35:7c:90:56: b3:e6:c8:63:4e:08:49:4f:67:c5:e4:68:fd:9f:81:f4:39:6a: 7a:07:c2:9c:45:33:4d:19:c8:8c:1c:04:19:2c:af:4b:48:16: 51:a2:37:be:04:80:05:23:ac:9c:89:40:4c:54:09:ef:b3:68: 12:20:f4:df:c1:b1:05:21:bc:ae:d2:eb:bd:60:94:23:1e:5f: 57:5b:b1:14:87:90:ae:dd:bb:72:59:24:6d:18:ba:02:61:1f: 8b:ac:d7:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6KGk2EKKJiK9NJHa0D5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMzkyZjI4ZGVjNmI4Y2NlYjdjZDcwZTdhZjcxZDhjZGNh YTlhMDYwHhcNMjUxMjE5MDAwMDQyWhcNMjUxMjIwMDAwMDQyWjAzMTEwLwYDVQQD EyhmOWMzNjRmNTE3OGJmYTRhMDI5OWJhMDMyODgxYzJmNTkyNmViYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbxeaBVZGk3Z4QEGqWskhnBIpHb2 tz6erGb6c/1xqNCe7UZ/1HEmDYjVOKyzrJVIlt3xTyUPwVaPsgOJGm8mSUUAYGM4 GfcFo3rN2I/+6f4o/MZWWyQ8Rxv0bEYPCTV5wfqb3UkvM7E53AdBSEIPyy+S9F8j sAzHyWJNMSIZWzmWuXRfj83Vez+lRmiww15HlqUesjtIwfRBnfOxi3ZAfQCW0E2/ JwBB6KJMGBLZNSRnqAnO04yXUpHDE05kUZwJB0UPStJvXVSXphh4UvxxPhb2E5vA z/Gj6lCDLmkhpIyBbNjr+6kynAdf9XeP5prHQgfbxuWk/iEu05EPetGcCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnDZPUXi/pKApm6AyiBwvWSbrx/MB8GA1UdIwQY MBaAFK85LyjexrjM63zXDnr3HYzcqpoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2Yt YWI5ZWFkYjFkNzk3LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yZjM2ZDQtNzJlMS00MDQ2LWI3M2YtYWI5ZWFkYjFkNzk3 LzEvcnprdktON0d1TXpyZk5jT2V2Y2RqTnlxbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzDc3D6O oj3O8qnFsrcw7OSGpHGXJ48A4kTjigPi8PKxxukn9Qxchh9odP+O/3wA87X+PjdJ A3XGOJKxGEhBOlgVwPoErKxrwwnFDm/6RIvjOZXZVjBZNjReryAtn3H3M1VBUq4z 6E5XhEjywOdSn8eJjjrqLE3PYt/NW9CZ9NzucTlDKMmsqVsFzLKPxBcOu5AikI5R VjxsEjRfw7w1fJBWs+bIY04ISU9nxeRo/Z+B9DlqegfCnEUzTRnIjBwEGSyvS0gW UaI3vgSABSOsnIlATFQJ77NoEiD038GxBSG8rtLrvWCUIx5fV1uxFIeQrt27clkk bRi6AmEfi6zXLA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:19:04 2025 by rpki-client