This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json) Hash identifier: LrziP+wv6C9DHTGx7mzaQa4/Y2TUpW201LcwNwQAWVs= Subject key identifier: 29:1C:7A:F4:43:5A:E7:F2:E5:6C:C0:F8:D6:91:5F:E4:5D:DF:50:49 Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019AF19B26564B39022D000EC5413A0C29D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft Manifest number: 0A69 Signing time: Sat 06 Dec 2025 03:01:07 +0000 Manifest this update: Sat 06 Dec 2025 03:01:07 +0000 Manifest next update: Sun 07 Dec 2025 03:01:07 +0000 Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: MabvYbz5my5ZtoW8BaVkepCf9wLrVUQHbCmpzkHH6ZU=) 2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:26:56:4b:39:02:2d:00:0e:c5:41:3a:0c:29:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Dec 6 03:01:07 2025 GMT Not After : Dec 7 03:01:07 2025 GMT Subject: CN=291c7af4435ae7f2e56cc0f8d6915fe45ddf5049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:0d:b5:73:47:3f:b3:13:c0:64:03:c9:06: 1a:fc:27:5a:8f:0a:6f:dc:e4:eb:ef:f6:e3:51:fa: bb:74:85:d5:48:66:10:e3:fe:4c:18:40:33:83:3b: c5:70:da:d2:ee:f1:0b:aa:9f:bc:4c:80:ae:45:7d: ea:a0:38:fc:15:58:c6:94:40:27:6c:ca:4e:08:90: 77:8c:bb:d6:ee:9a:b9:75:2f:77:a3:15:80:cd:d9: 02:31:62:b4:9e:41:09:47:f2:90:56:83:f1:82:fe: 19:4e:c9:c3:39:89:7b:7f:9a:a5:33:7a:fb:3e:57: f8:fb:7c:56:f0:9f:62:9a:76:a7:61:5e:7b:e3:ff: 1c:61:46:25:44:c2:32:a4:d9:8f:c9:25:4d:e3:66: 14:1b:af:a5:19:3b:53:66:56:26:2e:bd:0f:68:05: f4:45:5b:1c:20:80:43:ef:dd:fd:89:81:78:81:fe: e3:15:21:8a:eb:12:36:4d:2b:3f:6c:f9:d2:86:a8: 65:0f:13:42:8b:77:16:f5:42:aa:28:3f:a8:ba:d8: ef:8b:dc:22:41:88:c1:9a:23:e1:4a:b4:38:60:29: ff:8a:6f:bb:12:fe:65:e0:1a:a1:23:58:20:64:cd: c8:14:c0:52:ab:32:29:4a:b0:7e:c7:85:5b:93:6c: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:7A:F4:43:5A:E7:F2:E5:6C:C0:F8:D6:91:5F:E4:5D:DF:50:49 X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d2:6c:8e:06:85:11:19:a6:61:37:80:e9:08:42:38:c5:bd: 6a:ba:3b:4e:3e:07:6a:ae:a3:50:76:98:cd:89:10:04:a8:de: c8:ae:15:1e:de:9d:3a:e7:5f:8e:74:24:81:d5:f9:6b:3d:c4: 2c:92:40:ef:b1:fe:97:67:b7:31:2c:27:af:b0:81:fe:d8:34: 11:0d:1e:c7:7d:5b:37:00:ed:e7:79:9c:7a:a5:d2:02:34:fe: b0:bb:73:b3:3f:0a:66:f8:0c:0f:84:cd:11:b3:cf:2f:d5:63: 37:cf:a3:67:e8:d6:cb:b7:ec:e1:bb:53:c2:96:cb:7d:6a:fb: df:c6:4a:ce:48:a6:9b:66:76:b6:c2:37:ed:eb:e8:49:a2:76: 99:bd:fa:ec:26:85:40:e7:11:ee:82:fc:95:b4:52:c5:81:db: 6b:5e:36:04:f3:7d:49:80:a0:3b:9b:f9:fb:1b:06:45:e0:5d: dd:09:92:bf:71:df:81:88:bd:e3:be:44:d4:46:ed:de:41:54: e2:6e:db:68:aa:ba:98:4d:4c:2b:00:9a:90:f0:b9:ed:a0:56: 03:cd:41:a2:df:22:3a:f7:40:26:ab:16:60:ab:fd:d7:f6:40: 2c:25:7c:42:aa:27:1f:a0:27:19:b7:1a:e5:00:3b:b0:9f:da: e0:ca:3f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyZWSzkCLQAOxUE6DCnRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjUxMjA2MDMwMTA3WhcNMjUxMjA3MDMwMTA3WjAzMTEwLwYDVQQD EygyOTFjN2FmNDQzNWFlN2YyZTU2Y2MwZjhkNjkxNWZlNDVkZGY1MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4YNtXNHP7MTwGQDyQYa/Cdajwpv 3OTr7/bjUfq7dIXVSGYQ4/5MGEAzgzvFcNrS7vELqp+8TICuRX3qoDj8FVjGlEAn bMpOCJB3jLvW7pq5dS93oxWAzdkCMWK0nkEJR/KQVoPxgv4ZTsnDOYl7f5qlM3r7 Plf4+3xW8J9imnanYV574/8cYUYlRMIypNmPySVN42YUG6+lGTtTZlYmLr0PaAX0 RVscIIBD7939iYF4gf7jFSGK6xI2TSs/bPnShqhlDxNCi3cW9UKqKD+outjvi9wi QYjBmiPhSrQ4YCn/im+7Ev5l4BqhI1ggZM3IFMBSqzIpSrB+x4Vbk2wkAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkcevRDWufy5WzA+NaRX+Rd31BJMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttJsjgaF ERmmYTeA6QhCOMW9aro7Tj4Haq6jUHaYzYkQBKjeyK4VHt6dOudfjnQkgdX5az3E LJJA77H+l2e3MSwnr7CB/tg0EQ0ex31bNwDt53mceqXSAjT+sLtzsz8KZvgMD4TN EbPPL9VjN8+jZ+jWy7fs4btTwpbLfWr738ZKzkimm2Z2tsI37evoSaJ2mb367CaF QOcR7oL8lbRSxYHba142BPN9SYCgO5v5+xsGReBd3QmSv3HfgYi9475E1Ebt3kFU 4m7baKq6mE1MKwCakPC57aBWA81Bot8iOvdAJqsWYKv91/ZALCV8QqonH6AnGbca 5QA7sJ/a4Mo/pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:59 2025 by rpki-client