This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json) Hash identifier: lmDgz9HbBAgAoy+/KgH7B/83GFh2Aakj4mQztfv6aGQ= Subject key identifier: 18:2E:42:BD:D9:21:6E:C9:AA:F5:7D:9F:2E:E0:56:40:6E:62:0A:23 Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756 Certificate serial: 019AF0BF585C5B1D01D0DEA2C3C703C324F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft Manifest number: 0196 Signing time: Fri 05 Dec 2025 23:01:02 +0000 Manifest this update: Fri 05 Dec 2025 23:01:02 +0000 Manifest next update: Sat 06 Dec 2025 23:01:02 +0000 Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=) 2: WKKdAS92LVILbjnTiiXNrRI_064.asa (hash: WU7xtDYPq+tmZfgD8wJKGXUqlisupARfwtckbBQ0ds0=) 3: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: ripT97etHLVpBbtmhtooJkIh+6DmXqllG8R0vP/dslA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:58:5c:5b:1d:01:d0:de:a2:c3:c7:03:c3:24:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756 Validity Not Before: Dec 5 23:01:02 2025 GMT Not After : Dec 6 23:01:02 2025 GMT Subject: CN=182e42bdd9216ec9aaf57d9f2ee056406e620a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:15:64:70:c3:90:3b:46:6e:a5:06:6b:1d:65: 28:64:15:92:51:20:83:34:d1:31:40:ae:3a:0e:cf: 49:22:d8:49:22:89:c0:20:ff:c0:15:77:2e:df:aa: 70:a0:64:18:20:da:6d:a4:47:6c:e3:54:f0:64:2a: 35:82:b9:16:8e:92:b2:b3:12:71:35:b2:2b:8b:07: 5e:6f:c1:f0:1d:fb:6c:56:96:a5:d7:b0:2e:1d:6d: bb:7b:69:98:2d:ed:a9:69:3d:ef:7d:85:fb:17:bb: ab:64:21:c6:17:08:e7:c9:19:a1:26:47:0c:49:0e: 8d:b6:31:5b:b0:d0:57:69:6f:8d:51:d4:b0:bf:16: 3d:f7:51:5b:fc:54:85:55:25:e1:de:e6:f2:e6:99: d7:8a:53:f7:97:36:45:9d:b9:78:b6:68:77:67:79: 72:c0:2d:fe:4d:a0:b4:3d:64:dd:1a:42:f7:b5:b5: 16:d1:c5:61:69:6e:9e:44:c9:33:aa:56:ce:3f:d3: cb:c7:09:6c:ab:23:88:c2:05:ed:d7:0b:df:e6:a8: ae:52:d6:2b:1e:8a:4c:60:5b:1c:ff:4b:fd:ce:1d: 4b:21:ba:80:0a:e4:5f:16:ba:0a:59:36:b4:48:fa: 9e:61:62:eb:67:3d:1b:b0:3d:25:66:95:64:37:54: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:42:BD:D9:21:6E:C9:AA:F5:7D:9F:2E:E0:56:40:6E:62:0A:23 X509v3 Authority Key Identifier: keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a1:56:96:1f:af:bd:e6:c0:9c:e6:89:6e:72:5b:6b:88:d8: d7:63:55:35:fc:b9:21:90:be:4b:e0:17:ad:b5:67:4b:19:f3: cc:73:3f:83:41:38:5d:a5:6c:cc:43:15:4b:c1:45:3d:e0:61: 17:84:1f:1b:00:b8:43:29:9b:d5:f2:c5:ee:53:2b:60:5e:19: a6:78:ab:01:84:3c:ef:a0:78:f6:7c:05:d3:d3:85:ba:cc:99: f7:61:c9:e9:af:1d:8f:a3:05:36:93:a0:b6:ea:4c:3d:7f:a9: ee:dd:02:aa:a8:56:9d:a0:75:c9:55:d2:cc:4d:3c:99:73:cd: 4a:a6:d2:ab:54:1c:97:fb:ac:7f:eb:75:f2:98:76:b9:50:59: f2:d7:13:e6:d6:a7:5e:b2:de:f9:f9:cb:bf:44:9c:98:c1:e0: f5:c7:12:88:7d:9f:bc:ce:54:28:a0:eb:6e:db:d6:6d:5c:a7: ee:2a:69:c9:53:9d:3d:74:86:bf:da:7d:78:8e:44:55:75:d8: 03:26:1e:1e:fa:16:2b:35:d4:0c:68:61:11:6b:10:c4:7f:91: 3e:59:49:5d:4f:05:3f:b0:5a:98:98:88:a0:88:fe:44:59:ef: 28:98:91:58:bd:13:9f:bc:c7:a9:ea:d8:1f:4e:82:3a:2b:c7: b8:81:42:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1hcWx0B0N6iw8cDwyTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk MTQ3NTYwHhcNMjUxMjA1MjMwMTAyWhcNMjUxMjA2MjMwMTAyWjAzMTEwLwYDVQQD EygxODJlNDJiZGQ5MjE2ZWM5YWFmNTdkOWYyZWUwNTY0MDZlNjIwYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BVkcMOQO0ZupQZrHWUoZBWSUSCD NNExQK46Ds9JIthJIonAIP/AFXcu36pwoGQYINptpEds41TwZCo1grkWjpKysxJx NbIriwdeb8HwHftsVpal17AuHW27e2mYLe2paT3vfYX7F7urZCHGFwjnyRmhJkcM SQ6NtjFbsNBXaW+NUdSwvxY991Fb/FSFVSXh3uby5pnXilP3lzZFnbl4tmh3Z3ly wC3+TaC0PWTdGkL3tbUW0cVhaW6eRMkzqlbOP9PLxwlsqyOIwgXt1wvf5qiuUtYr HopMYFsc/0v9zh1LIbqACuRfFroKWTa0SPqeYWLrZz0bsD0lZpVkN1QONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBguQr3ZIW7JqvV9ny7gVkBuYgojMB8GA1UdIwQY MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1 LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKFWlh+v vebAnOaJbnJba4jY12NVNfy5IZC+S+AXrbVnSxnzzHM/g0E4XaVszEMVS8FFPeBh F4QfGwC4Qymb1fLF7lMrYF4ZpnirAYQ876B49nwF09OFusyZ92HJ6a8dj6MFNpOg tupMPX+p7t0CqqhWnaB1yVXSzE08mXPNSqbSq1Qcl/usf+t18ph2uVBZ8tcT5tan XrLe+fnLv0ScmMHg9ccSiH2fvM5UKKDrbtvWbVyn7ippyVOdPXSGv9p9eI5EVXXY AyYeHvoWKzXUDGhhEWsQxH+RPllJXU8FP7BamJiIoIj+RFnvKJiRWL0Tn7zHqerY H06COivHuIFCVw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:20 2025 by rpki-client