This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json) Hash identifier: CXyI6IP1cnt7A8aVwCIP9z0j4g7gxxzns1Q1XKzt0Wo= Subject key identifier: 93:85:BB:30:06:C6:BB:94:1A:D6:64:6F:99:92:F0:9C:09:2D:5C:60 Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Certificate serial: 019AF12D3D34D8069B870A0079C2F84FFE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft Manifest number: 1236 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=) 2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: oUFJ82ET7rQHJuqrr335ptwx+LyzZQwTem0JW4tr7VY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3d:34:d8:06:9b:87:0a:00:79:c2:f8:4f:fe:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0 Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=9385bb3006c6bb941ad6646f9992f09c092d5c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:db:20:a9:c2:86:83:43:9b:bf:66:85:cf: d4:3d:be:a4:8b:6a:30:cb:f3:0c:e5:51:91:79:85: e9:3d:cc:fa:92:88:01:e7:70:ec:9a:51:e0:9c:0d: 3e:d2:4f:d8:16:83:93:f7:2a:29:8a:aa:08:e1:f1: 33:d5:4e:41:ef:d7:7a:0b:7c:cb:91:26:48:61:28: 5e:e1:ee:a4:26:f2:4d:53:2b:ef:3f:f2:fd:49:d2: ca:82:4c:46:03:83:d9:40:56:6b:67:0b:d5:f2:44: 87:37:e9:0f:67:33:dc:3e:32:bf:f5:13:1d:fb:6d: 78:39:dc:0a:17:7c:04:58:8c:06:98:1d:6f:e4:f3: b9:33:cc:65:60:04:c9:c1:40:6a:8f:61:f0:ef:ac: 95:fa:19:8f:db:59:38:83:df:ed:89:01:88:be:af: 89:44:ca:fc:51:bb:0e:2e:1a:7b:be:7a:32:30:c2: ac:b4:9b:1d:00:8f:45:02:90:a7:0c:7e:a0:4e:ae: e2:3b:a8:39:d5:04:3e:a6:48:b9:31:79:9c:9e:10: ef:58:e1:be:e4:b3:65:14:e3:c8:80:49:a5:6c:e2: fb:c0:d6:67:40:af:fc:3f:73:a8:76:71:ad:0a:4e: 95:ad:0e:e1:ae:f7:58:43:85:7f:b6:8d:f7:b1:bf: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:BB:30:06:C6:BB:94:1A:D6:64:6F:99:92:F0:9C:09:2D:5C:60 X509v3 Authority Key Identifier: keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b2:ca:05:aa:43:1d:9a:b3:62:36:6f:02:30:77:27:16:01: 02:be:1f:5c:3f:c8:e2:18:fa:b1:82:44:c1:d2:f4:07:a8:92: c5:d3:f8:6a:5f:6e:52:f5:86:56:bf:e0:fa:1f:f3:0d:98:cf: 24:ed:5c:ab:58:dc:85:9b:ec:93:04:1a:2d:d4:d8:45:f5:bf: d1:31:d8:4d:dd:3f:5b:27:f3:d4:64:e4:9d:3b:fa:36:dd:a4: 3b:06:35:60:14:9c:a2:65:c0:16:42:8c:46:f3:f6:ad:9c:7b: ac:86:99:97:03:3b:a7:33:10:b0:bc:b9:91:92:d5:0e:79:0e: 4a:4a:c7:97:61:51:60:a5:ae:78:31:39:cc:98:6f:be:1d:82: da:b9:a6:67:ce:3c:d4:c4:2c:3c:29:80:87:d1:04:32:f2:58: 71:08:73:22:0c:44:0e:81:fb:17:3d:79:1b:d1:0c:41:7d:59: f1:ae:b7:c3:7c:7d:5e:d2:2c:7b:37:39:c4:ee:08:fe:c8:c8: 5f:1f:b4:88:7c:19:c4:2e:65:b7:56:20:4c:88:01:69:63:4c: 70:f2:eb:51:11:9e:c2:0f:20:3b:24:77:4a:56:f5:54:e6:7a: 7b:c6:03:bd:7d:4e:06:7c:7e:99:04:da:aa:6b:c9:d9:c8:96: d8:55:43:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT002AabhwoAecL4T/4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh NWZhZTAwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD Eyg5Mzg1YmIzMDA2YzZiYjk0MWFkNjY0NmY5OTkyZjA5YzA5MmQ1YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEnbIKnChoNDm79mhc/UPb6ki2ow y/MM5VGReYXpPcz6kogB53DsmlHgnA0+0k/YFoOT9yopiqoI4fEz1U5B79d6C3zL kSZIYShe4e6kJvJNUyvvP/L9SdLKgkxGA4PZQFZrZwvV8kSHN+kPZzPcPjK/9RMd +214OdwKF3wEWIwGmB1v5PO5M8xlYATJwUBqj2Hw76yV+hmP21k4g9/tiQGIvq+J RMr8UbsOLhp7vnoyMMKstJsdAI9FApCnDH6gTq7iO6g51QQ+pki5MXmcnhDvWOG+ 5LNlFOPIgEmlbOL7wNZnQK/8P3OodnGtCk6VrQ7hrvdYQ4V/to33sb8V5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOFuzAGxruUGtZkb5mS8JwJLVxgMB8GA1UdIwQY MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt YzBjYTgwYTA1ZTJhLzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbLKBapD HZqzYjZvAjB3JxYBAr4fXD/I4hj6sYJEwdL0B6iSxdP4al9uUvWGVr/g+h/zDZjP JO1cq1jchZvskwQaLdTYRfW/0THYTd0/Wyfz1GTknTv6Nt2kOwY1YBScomXAFkKM RvP2rZx7rIaZlwM7pzMQsLy5kZLVDnkOSkrHl2FRYKWueDE5zJhvvh2C2rmmZ848 1MQsPCmAh9EEMvJYcQhzIgxEDoH7Fz15G9EMQX1Z8a63w3x9XtIsezc5xO4I/sjI Xx+0iHwZxC5lt1YgTIgBaWNMcPLrURGewg8gOyR3Slb1VOZ6e8YDvX1OBnx+mQTa qmvJ2ciW2FVDjA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:32 2025 by rpki-client