This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json) Hash identifier: FHzmLo7xkvdnkkjO1hVpa3v506LsXsYMfEXwqe1Rpnc= Subject key identifier: F4:D6:E9:CE:B2:CD:6A:A8:08:0B:0E:DE:34:DC:E6:D0:2C:72:71:D7 Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Certificate serial: 019AF3895C03A9E2F8C40864834B50CF7F40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft Manifest number: 0638 Signing time: Sat 06 Dec 2025 12:00:56 +0000 Manifest this update: Sat 06 Dec 2025 12:00:56 +0000 Manifest next update: Sun 07 Dec 2025 12:00:56 +0000 Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=) 2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: +1nJnviH76hlT4V+83k4mZyJTwUGXaGVXnfFyyN0bYI=) 3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5c:03:a9:e2:f8:c4:08:64:83:4b:50:cf:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Validity Not Before: Dec 6 12:00:56 2025 GMT Not After : Dec 7 12:00:56 2025 GMT Subject: CN=f4d6e9ceb2cd6aa8080b0ede34dce6d02c7271d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6f:23:f9:df:31:e4:94:5f:98:b5:50:8e:0f: b8:62:fb:c1:20:ba:e9:aa:72:da:dd:fd:1f:3c:0e: c9:a7:c0:18:a0:5a:01:c2:61:66:41:b1:17:96:32: a6:69:d1:4c:4a:3a:7a:53:9d:f4:18:d4:89:30:60: 86:03:be:93:bd:88:60:87:f0:72:fe:18:83:54:64: 02:8e:05:3a:c3:df:41:2a:b5:ce:a0:be:91:fc:d0: e9:e3:2e:32:92:17:80:7f:10:d9:12:c8:a2:59:82: 88:d4:f4:ae:40:b3:7d:06:78:dd:59:f9:51:f9:41: 50:23:00:d5:da:6d:58:2b:07:88:d6:eb:70:66:a9: 00:95:ac:be:cb:7e:b4:4a:d6:5d:f0:50:3c:bd:93: 82:db:e9:d7:82:33:ef:dc:e2:e7:74:fd:8f:f4:21: d6:57:83:69:bc:f7:79:5d:a4:96:a7:3f:ae:ea:49: bf:38:9e:b5:40:5c:e0:88:7e:e2:15:8b:3f:47:dd: 5c:b5:43:23:0d:4c:d9:46:37:a3:83:49:1e:0d:31: 64:39:68:2d:96:f8:8f:13:f6:e4:fd:22:b5:18:fa: f7:c5:2b:c1:72:04:17:00:a3:90:42:bd:f4:7a:17: 1a:10:1b:ba:d3:fe:93:e5:ca:95:0e:e5:9a:db:53: ff:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D6:E9:CE:B2:CD:6A:A8:08:0B:0E:DE:34:DC:E6:D0:2C:72:71:D7 X509v3 Authority Key Identifier: keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ff:31:5f:e0:61:4a:f0:1d:d9:2f:41:2f:55:65:df:6e:0f: 64:34:14:7a:9c:f5:c4:10:d6:20:f9:73:b6:3d:16:d8:bb:db: b9:85:99:db:9c:a9:d7:a1:eb:f4:f8:6b:e9:df:c6:6b:7f:0f: 77:d2:bf:ba:f9:42:e2:6d:9e:ac:eb:dc:7d:93:f5:fe:bc:81: e7:1b:3a:ff:31:7b:b2:db:9d:a9:9c:48:86:c2:5f:8d:80:7a: d0:3a:68:63:98:89:42:af:6b:df:95:e7:50:3f:97:64:54:d0: 46:bf:f2:36:99:bd:24:eb:58:b4:f6:e1:dd:da:09:12:7f:e9: 03:85:9e:ee:9d:c6:2e:76:dc:db:60:a1:14:c1:e0:89:83:8f: 62:4b:e0:4f:e8:83:68:fd:84:58:78:47:31:cf:f0:cd:ca:f1: 3b:6d:9e:9e:5e:6a:63:52:8a:58:69:2a:05:a6:42:14:79:bb: 87:83:19:e1:e6:58:bc:3c:21:dc:57:f3:49:5c:a5:1a:34:59: ca:50:5c:ec:03:bb:73:43:38:c3:a1:f5:8d:74:b3:d6:c7:07: ab:6b:35:92:eb:a4:d6:7c:8e:ee:f9:d9:c6:3c:b3:20:3d:2d: ea:f8:6b:be:14:a3:31:74:3e:6e:9d:bc:6a:2b:f7:e7:dc:07: aa:ea:ec:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVwDqeL4xAhkg0tQz39AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl NWE4ZDAwHhcNMjUxMjA2MTIwMDU2WhcNMjUxMjA3MTIwMDU2WjAzMTEwLwYDVQQD EyhmNGQ2ZTljZWIyY2Q2YWE4MDgwYjBlZGUzNGRjZTZkMDJjNzI3MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA428j+d8x5JRfmLVQjg+4YvvBILrp qnLa3f0fPA7Jp8AYoFoBwmFmQbEXljKmadFMSjp6U530GNSJMGCGA76TvYhgh/By /hiDVGQCjgU6w99BKrXOoL6R/NDp4y4ykheAfxDZEsiiWYKI1PSuQLN9BnjdWflR +UFQIwDV2m1YKweI1utwZqkAlay+y360StZd8FA8vZOC2+nXgjPv3OLndP2P9CHW V4NpvPd5XaSWpz+u6km/OJ61QFzgiH7iFYs/R91ctUMjDUzZRjejg0keDTFkOWgt lviPE/bk/SK1GPr3xSvBcgQXAKOQQr30ehcaEBu60/6T5cqVDuWa21P//QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTW6c6yzWqoCAsO3jTc5tAscnHXMB8GA1UdIwQY MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv8xX+Bh SvAd2S9BL1Vl324PZDQUepz1xBDWIPlztj0W2LvbuYWZ25yp16Hr9Phr6d/Ga38P d9K/uvlC4m2erOvcfZP1/ryB5xs6/zF7studqZxIhsJfjYB60DpoY5iJQq9r35Xn UD+XZFTQRr/yNpm9JOtYtPbh3doJEn/pA4We7p3GLnbc22ChFMHgiYOPYkvgT+iD aP2EWHhHMc/wzcrxO22enl5qY1KKWGkqBaZCFHm7h4MZ4eZYvDwh3FfzSVylGjRZ ylBc7AO7c0M4w6H1jXSz1scHq2s1kuuk1nyO7vnZxjyzID0t6vhrvhSjMXQ+bp28 aiv359wHqursdA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:13:03 2025 by rpki-client