This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json) Hash identifier: W6jntfs1inGMcPeQ+XgdIzTqXV4pNLgGuAkapfF/3IE= Subject key identifier: 28:A4:5B:22:A6:10:16:17:3A:77:2C:2C:0A:0F:6B:D1:3C:C4:8C:F9 Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540 Certificate serial: 019AF3C040C57F9B43234FA691071237CDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft Manifest number: 0DDD Signing time: Sat 06 Dec 2025 13:00:54 +0000 Manifest this update: Sat 06 Dec 2025 13:00:54 +0000 Manifest next update: Sun 07 Dec 2025 13:00:54 +0000 Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: whzym8iUCZHbtbxY1itus50r1YJaCz3pe1moCOArB7k=) 2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:40:c5:7f:9b:43:23:4f:a6:91:07:12:37:cd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540 Validity Not Before: Dec 6 13:00:54 2025 GMT Not After : Dec 7 13:00:54 2025 GMT Subject: CN=28a45b22a61016173a772c2c0a0f6bd13cc48cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:c4:9f:69:18:38:c5:cc:e1:c7:5e:d6:93: 48:dd:95:b4:4e:cf:75:33:b7:91:26:8d:aa:f0:db: 53:3f:7a:52:63:83:01:02:e9:9c:b7:78:fc:ae:74: f4:eb:ba:74:aa:36:5d:6b:e3:50:89:92:54:c1:89: 4d:49:24:4d:1f:fd:4b:4b:b3:ff:26:11:64:0d:44: 7d:b9:7f:dc:82:0f:a5:65:55:0b:6d:2f:0d:87:41: e0:ca:b1:73:d2:97:cf:c0:73:13:86:d6:ec:eb:7e: fe:2d:2d:d7:ea:27:df:fa:37:3f:b6:c1:ae:f8:ca: 3d:0e:95:db:51:4a:41:30:fd:b1:b8:ff:92:a4:38: 71:86:17:90:84:b2:15:ed:44:62:ac:62:05:8f:ed: 04:5f:a8:90:c4:de:c7:b7:67:db:1b:de:72:8f:6b: ed:b3:96:07:84:d3:3c:20:36:63:79:fb:dd:5f:65: f6:df:fc:61:3f:4b:41:5e:ed:d0:46:9c:80:76:a1: a2:74:a2:3e:b1:36:12:b2:2b:99:b5:bc:ee:18:54: ec:1e:76:2f:9c:ec:d0:92:1f:44:bb:78:60:b1:4b: 5b:13:c8:23:63:37:59:40:2b:b1:2a:97:de:22:c3: 21:06:d4:f6:0d:95:8b:2f:fa:7c:48:6c:b9:44:bd: 8b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A4:5B:22:A6:10:16:17:3A:77:2C:2C:0A:0F:6B:D1:3C:C4:8C:F9 X509v3 Authority Key Identifier: keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:da:bb:34:55:8f:1e:34:7c:f2:93:de:6c:a0:1a:8c:69:57: 9c:42:dc:ed:60:da:62:47:90:cf:99:12:20:ca:4e:13:25:30: 4a:1f:0e:65:7b:37:bc:87:23:ae:df:a1:df:ca:f4:2a:ca:00: ce:e0:0e:1e:85:16:a8:4f:d9:11:11:ca:42:c3:6a:4e:b0:a8: 07:b2:2a:92:5d:90:c1:41:d3:d9:e3:35:3c:c1:41:0a:53:8c: c9:d7:bb:74:91:68:8a:c2:f4:01:e3:2d:09:74:28:bd:9a:cd: 09:95:13:54:e9:e0:0b:ab:6d:ea:36:36:0c:1e:8b:a4:fc:d6: 09:72:a2:93:97:4c:ad:a0:8f:2f:c8:cb:7b:1d:cd:1d:72:c8: b2:7a:c0:35:a1:e3:b0:c4:a5:f8:79:21:d5:8c:e2:25:74:72: ec:26:04:40:70:33:01:30:87:1e:75:be:11:fa:73:a2:f7:18: 9b:ee:a9:cf:0a:4a:f9:20:f7:07:bc:38:e4:29:98:46:41:f4: 18:3c:68:44:bc:ab:fb:c1:8a:2e:1a:a1:c4:92:1d:df:98:c5: f4:88:2c:ea:44:56:1d:0d:14:b9:f0:ec:6f:e2:e3:2f:e4:6b: 89:ac:03:ed:7a:b7:f8:42:49:1b:b6:42:ba:25:9d:7c:14:65: 57:df:7f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEDFf5tDI0+mkQcSN83pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDY0ZGFjMDNmMWE1N2MxOTMxNjY3MTE4MDQ4ZDgyYzQz YzU1NDAwHhcNMjUxMjA2MTMwMDU0WhcNMjUxMjA3MTMwMDU0WjAzMTEwLwYDVQQD EygyOGE0NWIyMmE2MTAxNjE3M2E3NzJjMmMwYTBmNmJkMTNjYzQ4Y2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqejEn2kYOMXM4cde1pNI3ZW0Ts91 M7eRJo2q8NtTP3pSY4MBAumct3j8rnT067p0qjZda+NQiZJUwYlNSSRNH/1LS7P/ JhFkDUR9uX/cgg+lZVULbS8Nh0HgyrFz0pfPwHMThtbs637+LS3X6iff+jc/tsGu +Mo9DpXbUUpBMP2xuP+SpDhxhheQhLIV7URirGIFj+0EX6iQxN7Ht2fbG95yj2vt s5YHhNM8IDZjefvdX2X23/xhP0tBXu3QRpyAdqGidKI+sTYSsiuZtbzuGFTsHnYv nOzQkh9Eu3hgsUtbE8gjYzdZQCuxKpfeIsMhBtT2DZWLL/p8SGy5RL2LWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCikWyKmEBYXOncsLAoPa9E8xIz5MB8GA1UdIwQY MBaAFETWTawD8aV8GTFmcRgEjYLEPFVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUt ZTlkMmIzYTc4NzJjLzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUtZTlkMmIzYTc4NzJj LzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9q7NFWP HjR88pPebKAajGlXnELc7WDaYkeQz5kSIMpOEyUwSh8OZXs3vIcjrt+h38r0KsoA zuAOHoUWqE/ZERHKQsNqTrCoB7Iqkl2QwUHT2eM1PMFBClOMyde7dJFoisL0AeMt CXQovZrNCZUTVOngC6tt6jY2DB6LpPzWCXKik5dMraCPL8jLex3NHXLIsnrANaHj sMSl+Hkh1YziJXRy7CYEQHAzATCHHnW+EfpzovcYm+6pzwpK+SD3B7w45CmYRkH0 GDxoRLyr+8GKLhqhxJId35jF9Igs6kRWHQ0UufDsb+LjL+RriawD7Xq3+EJJG7ZC uiWdfBRlV99/Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:02 2025 by rpki-client