This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json) Hash identifier: LMRMlCF6SOzGIFHv1wuuPmRavWw/jq+4OLd875GF404= Subject key identifier: C7:1F:3B:C5:54:1A:B4:BC:B1:3E:A2:40:80:BF:D9:89:43:EE:B6:9B Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Certificate serial: 019AF20902DA16CF810B58D1677CED8AAAFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft Manifest number: 0F16 Signing time: Sat 06 Dec 2025 05:01:08 +0000 Manifest this update: Sat 06 Dec 2025 05:01:08 +0000 Manifest next update: Sun 07 Dec 2025 05:01:08 +0000 Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=) 2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: qHHkltcfSthwOXjeNNGGwYj8rwA036RgJXdXsVPXRx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:02:da:16:cf:81:0b:58:d1:67:7c:ed:8a:aa:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee Validity Not Before: Dec 6 05:01:08 2025 GMT Not After : Dec 7 05:01:08 2025 GMT Subject: CN=c71f3bc5541ab4bcb13ea24080bfd98943eeb69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bc:b8:12:82:74:b0:84:df:e9:be:2d:78:36: 28:56:2b:8d:c2:b5:c8:b5:7d:20:31:8c:9d:db:5a: 28:60:cc:ae:17:c7:69:24:77:5d:44:d7:9c:37:2b: b8:4d:08:24:ee:b8:45:97:11:80:ba:5d:e7:d4:5e: b9:28:35:59:3e:f4:b5:cb:8d:0a:7e:7d:69:9b:26: 4d:c0:60:a2:25:72:1e:0b:3a:d6:b1:ee:dd:82:6b: d4:55:ed:85:45:86:da:10:55:74:9e:00:97:d5:ce: 05:0b:93:db:95:c9:4f:36:0b:97:04:ab:78:14:0d: b6:5c:d9:11:ea:0d:6d:15:92:8f:f3:9c:f2:a0:ee: dc:1c:d0:c3:6d:d3:d6:0b:9c:a9:1c:fa:5f:b5:29: 12:3d:f3:e4:61:3b:44:64:b4:67:bd:22:6e:74:27: 38:ce:01:a0:a7:eb:8b:a6:2b:20:5f:45:65:f0:73: b3:52:7e:96:40:c3:98:bf:e7:ae:04:1c:80:00:0b: 66:d9:a0:56:96:65:a0:2a:08:d8:d4:a3:4e:e6:7a: b5:1d:f1:b6:e6:3a:22:97:e4:82:e4:4f:d4:96:25: e8:d8:bd:3a:49:ac:31:f1:9f:bf:ef:cf:ae:f9:b4: 45:8a:9f:f5:54:e5:77:95:ca:c5:a0:9f:c0:5a:59: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1F:3B:C5:54:1A:B4:BC:B1:3E:A2:40:80:BF:D9:89:43:EE:B6:9B X509v3 Authority Key Identifier: keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:80:b3:af:49:f9:40:3b:0a:57:60:52:63:6f:60:a5:99:fe: 95:e4:0d:2e:13:42:51:c2:54:b5:88:e0:97:4c:a8:bf:56:37: d8:7a:cc:1c:a1:a7:97:1f:2b:82:93:7a:cf:96:a6:84:92:dc: f5:9d:ca:35:fb:f8:b6:13:a0:4a:57:7c:28:81:1f:6c:18:c8: ef:84:f6:8e:85:ed:9d:93:2c:67:0e:af:42:e7:46:99:82:b0: 74:c3:c6:d5:e1:96:f8:41:e6:98:68:1a:9e:4d:d4:b8:22:85: 5d:13:35:cf:60:22:8d:26:cc:6b:fd:f1:3a:d9:23:c4:4e:5c: 84:99:01:de:43:c3:9a:94:2b:86:58:c0:0b:41:e6:9a:f9:28: 20:dd:57:19:90:1c:cd:4e:06:d8:44:d4:4d:24:7d:e6:51:d9: b7:78:9c:d2:2e:6e:c0:d5:80:95:fa:0e:9e:69:ee:21:80:52: 42:62:40:f7:3a:a2:b7:2b:a2:c9:07:6e:0f:95:cf:92:80:14: 51:37:4d:c1:ae:39:82:89:75:3c:24:0d:66:f9:c6:cb:44:68: c7:bf:70:84:95:e1:8d:2e:68:2d:02:c0:00:d0:bb:0d:64:02: 42:31:18:9f:38:25:a3:49:d2:c8:59:4f:75:5e:13:4a:48:7d: 17:d2:0d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQLaFs+BC1jRZ3ztiqr9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOGRmNTJhZGZlMmZjZTZhZTk2ZjZmZTA1ZDE0MDg5ZTAy NDdjZWUwHhcNMjUxMjA2MDUwMTA4WhcNMjUxMjA3MDUwMTA4WjAzMTEwLwYDVQQD EyhjNzFmM2JjNTU0MWFiNGJjYjEzZWEyNDA4MGJmZDk4OTQzZWViNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7y4EoJ0sITf6b4teDYoViuNwrXI tX0gMYyd21ooYMyuF8dpJHddRNecNyu4TQgk7rhFlxGAul3n1F65KDVZPvS1y40K fn1pmyZNwGCiJXIeCzrWse7dgmvUVe2FRYbaEFV0ngCX1c4FC5PblclPNguXBKt4 FA22XNkR6g1tFZKP85zyoO7cHNDDbdPWC5ypHPpftSkSPfPkYTtEZLRnvSJudCc4 zgGgp+uLpisgX0Vl8HOzUn6WQMOYv+euBByAAAtm2aBWlmWgKgjY1KNO5nq1HfG2 5joil+SC5E/UliXo2L06Sawx8Z+/78+u+bRFip/1VOV3lcrFoJ/AWllJswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcfO8VUGrS8sT6iQIC/2YlD7rabMB8GA1UdIwQY MBaAFM+N9Srf4vzmrpb2/gXRQIngJHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTIt Zjc5N2UxZjU0NGQ5LzEvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mMjI3NDMtMTg5OC00N2U1LTk2ZTItZjc5N2UxZjU0NGQ5 LzEvejQzMUt0X2lfT2F1bHZiLUJkRkFpZUFrZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfICzr0n5 QDsKV2BSY29gpZn+leQNLhNCUcJUtYjgl0yov1Y32HrMHKGnlx8rgpN6z5amhJLc 9Z3KNfv4thOgSld8KIEfbBjI74T2joXtnZMsZw6vQudGmYKwdMPG1eGW+EHmmGga nk3UuCKFXRM1z2AijSbMa/3xOtkjxE5chJkB3kPDmpQrhljAC0HmmvkoIN1XGZAc zU4G2ETUTSR95lHZt3ic0i5uwNWAlfoOnmnuIYBSQmJA9zqityuiyQduD5XPkoAU UTdNwa45gol1PCQNZvnGy0Rox79whJXhjS5oLQLAANC7DWQCQjEYnzglo0nSyFlP dV4TSkh9F9INFw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:18 2025 by rpki-client