This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json) Hash identifier: 0KL0Pf6p4K4FWLWR90yROwovhmZjkKeHJdpHny87aGI= Subject key identifier: 67:82:8E:AA:C3:5A:F1:3A:29:19:9D:64:D4:05:A0:FF:2E:05:BB:62 Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Certificate serial: 019AF19AA204AE35ED7EED7B17105874518D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft Manifest number: 0482 Signing time: Sat 06 Dec 2025 03:00:34 +0000 Manifest this update: Sat 06 Dec 2025 03:00:34 +0000 Manifest next update: Sun 07 Dec 2025 03:00:34 +0000 Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=) 2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=) 3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 8Iw+BELo+Voaj3iPRU48avFSj5poDW034HZ9dsyooBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:a2:04:ae:35:ed:7e:ed:7b:17:10:58:74:51:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Validity Not Before: Dec 6 03:00:34 2025 GMT Not After : Dec 7 03:00:34 2025 GMT Subject: CN=67828eaac35af13a29199d64d405a0ff2e05bb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:d9:4b:56:e3:68:e8:c3:a5:4d:c7:22:f8: e0:cf:e5:6b:98:f4:48:4c:b4:c2:da:02:47:a6:8b: a0:2f:5e:56:fe:ad:b0:b0:db:a7:90:6b:3a:9e:b5: 61:c4:66:f2:80:1c:56:a2:2c:b1:42:50:e2:c4:27: 3a:9e:9c:d8:8f:1d:94:81:c6:6f:d6:01:b9:d5:b8: af:55:b0:7e:73:c6:0b:ac:c8:a0:49:88:db:c7:99: 2d:32:5a:55:fd:d8:6f:08:f7:ac:ed:f2:0a:62:c0: ce:59:5a:eb:cd:29:b3:2e:9a:51:cd:6e:df:a9:53: a9:a9:a4:47:aa:9e:27:bc:9a:65:a3:ba:ca:e1:7a: 4b:70:ba:b2:d6:e4:62:14:f7:8e:df:9c:ff:08:43: 70:b9:94:2e:72:6e:95:09:d9:41:17:5a:84:37:6f: 15:b7:ac:ff:9f:69:67:6e:03:eb:d4:d1:f3:3b:0c: d8:76:10:c9:14:a2:3f:5b:32:c3:04:a9:bd:88:cf: 01:64:24:8b:a3:aa:73:cc:a6:8b:b2:d3:bf:4a:0f: 37:f3:a9:b6:df:0a:95:b6:2b:93:79:01:78:a1:f4: 29:f3:97:83:18:3b:d7:bd:a6:da:5d:b7:4f:2f:bc: 6a:33:fd:cd:bf:36:e0:a4:32:80:69:b2:ea:c4:cb: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:82:8E:AA:C3:5A:F1:3A:29:19:9D:64:D4:05:A0:FF:2E:05:BB:62 X509v3 Authority Key Identifier: keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:44:52:72:e4:40:19:29:5d:ad:89:7c:9c:5c:d4:40:cf:20: 21:7f:ef:17:46:4c:e2:52:53:6f:0a:db:83:b2:ce:ff:75:0c: e8:05:45:b6:d4:89:17:fd:ea:f0:05:58:31:ec:7a:71:71:18: d1:b5:9a:91:38:57:7f:8e:85:d2:66:db:1c:75:16:a2:f1:16: 07:4b:fa:66:a5:24:6c:12:14:32:37:e5:cf:80:aa:09:4b:a4: ac:3d:12:fb:8c:69:cd:2c:41:0f:20:20:6f:fb:20:7b:6a:c7: df:60:cb:02:38:9d:52:08:03:58:09:ff:a9:11:74:45:a8:6e: be:a1:71:35:f7:92:7a:ae:44:a7:c2:09:68:64:a3:6f:86:96: ac:da:dd:da:c2:1c:53:5a:0e:24:6e:79:38:c5:f3:d5:89:ba: 52:1c:d4:c4:46:05:09:81:80:7b:24:df:de:84:85:54:5e:54: b2:40:74:51:2b:be:bb:6f:fe:38:17:93:7e:24:40:f5:6c:c8: 7f:64:13:1c:76:76:45:13:48:23:33:8e:a6:64:19:e2:88:6f: ac:73:6c:42:38:c1:ac:9d:94:d8:ee:30:25:f5:b5:49:67:0b: 26:10:81:c4:25:21:22:b6:9c:68:bf:67:cd:4d:78:a0:14:4f: 47:5d:2f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmqIErjXtfu17FxBYdFGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll NWQ0ZTIwHhcNMjUxMjA2MDMwMDM0WhcNMjUxMjA3MDMwMDM0WjAzMTEwLwYDVQQD Eyg2NzgyOGVhYWMzNWFmMTNhMjkxOTlkNjRkNDA1YTBmZjJlMDViYjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkTZS1bjaOjDpU3HIvjgz+VrmPRI TLTC2gJHpougL15W/q2wsNunkGs6nrVhxGbygBxWoiyxQlDixCc6npzYjx2UgcZv 1gG51bivVbB+c8YLrMigSYjbx5ktMlpV/dhvCPes7fIKYsDOWVrrzSmzLppRzW7f qVOpqaRHqp4nvJplo7rK4XpLcLqy1uRiFPeO35z/CENwuZQucm6VCdlBF1qEN28V t6z/n2lnbgPr1NHzOwzYdhDJFKI/WzLDBKm9iM8BZCSLo6pzzKaLstO/Sg8386m2 3wqVtiuTeQF4ofQp85eDGDvXvabaXbdPL7xqM/3NvzbgpDKAabLqxMvy1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeCjqrDWvE6KRmdZNQFoP8uBbtiMB8GA1UdIwQY MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0RScuRA GSldrYl8nFzUQM8gIX/vF0ZM4lJTbwrbg7LO/3UM6AVFttSJF/3q8AVYMex6cXEY 0bWakThXf46F0mbbHHUWovEWB0v6ZqUkbBIUMjflz4CqCUukrD0S+4xpzSxBDyAg b/sge2rH32DLAjidUggDWAn/qRF0RahuvqFxNfeSeq5Ep8IJaGSjb4aWrNrd2sIc U1oOJG55OMXz1Ym6UhzUxEYFCYGAeyTf3oSFVF5UskB0USu+u2/+OBeTfiRA9WzI f2QTHHZ2RRNIIzOOpmQZ4ohvrHNsQjjBrJ2U2O4wJfW1SWcLJhCBxCUhIracaL9n zU14oBRPR10vWg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:16 2025 by rpki-client