This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json) Hash identifier: HrQ1ut/maZVEdsJffPVoUh6FTfkJbMNuBWSnmUxB+pU= Subject key identifier: 54:C0:3C:B3:26:69:51:42:8D:C8:AF:C2:84:55:67:D6:B3:47:A3:2E Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681 Certificate serial: 019AF2773A233D1A3DB09A07024536DB568D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft Manifest number: 10A4 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=) 2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=) 3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: mHweNWFCSdCpd67u0fyqqYg/7RtzoGWupwQkNQmrNkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3a:23:3d:1a:3d:b0:9a:07:02:45:36:db:56:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=54c03cb3266951428dc8afc2845567d6b347a32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:a2:1b:f4:ad:a4:9d:59:e3:ae:05:a6:f7: 6c:f2:9d:40:42:68:b6:5d:0c:b7:e1:7b:c0:34:74: 4b:b3:83:ad:28:8a:e6:7f:46:3e:28:3b:49:91:ee: 5a:e2:d5:41:74:b2:c6:01:7a:85:10:ca:9e:42:fa: c1:f1:b6:d2:38:34:a3:21:4b:f8:71:35:3a:83:f5: 73:ef:6e:d0:26:ea:f0:d5:51:0e:95:fa:70:01:93: 21:5d:8b:93:c7:1c:28:46:1e:67:62:8c:ee:05:88: 07:b1:e4:51:0f:8b:42:88:4e:fc:a3:7f:e5:a1:33: 83:70:fd:4c:d1:4a:89:b3:73:ff:b7:60:4d:36:2a: 9b:fa:61:cc:2c:91:56:9b:5b:12:1d:f5:5f:43:d7: 53:3f:b4:14:44:0d:3e:c3:e9:61:59:00:c9:7d:81: 68:70:3c:0b:63:3c:7b:bf:b9:6b:a1:53:15:0c:40: 11:fb:e6:b8:70:98:12:3c:5a:32:54:74:22:5e:60: db:50:61:82:d4:7b:af:bd:16:ab:6c:2e:86:79:9d: 8e:21:ac:f6:1b:ac:46:ab:fc:98:53:31:0c:91:61: 22:30:81:03:72:7e:92:ea:da:fb:6b:d4:be:b0:59: b7:f1:03:bd:94:18:14:9f:33:1d:30:c0:aa:4a:14: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:3C:B3:26:69:51:42:8D:C8:AF:C2:84:55:67:D6:B3:47:A3:2E X509v3 Authority Key Identifier: keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ba:47:15:c7:2b:db:4a:0f:6c:0e:f3:53:cf:c0:bf:55:95: 88:21:f9:39:80:03:e0:88:11:c0:4c:1f:e0:f6:91:ea:1e:ff: 3a:38:ed:df:2f:f8:bd:db:91:20:ff:d0:2b:90:a3:fd:c9:45: b9:55:04:c3:7e:96:96:ea:2d:87:07:75:38:e3:4f:5b:6a:2d: 9f:d6:e0:52:5a:ca:39:3a:3d:17:17:85:93:4b:51:4e:22:10: a1:e8:97:b5:2e:59:a2:0e:72:c1:dd:3e:fd:34:df:31:f1:7b: c7:31:66:b8:d7:99:be:71:35:37:80:9f:1b:c7:54:e8:c2:86: 70:1d:1e:d0:32:ea:07:34:17:44:5b:ab:f1:c7:49:7f:9e:e9: 81:a9:66:75:0d:29:3b:7d:32:6d:b2:5d:63:dc:f8:95:e7:a7: 7b:46:0e:7d:56:6b:11:ed:72:94:3b:9e:a3:b2:32:51:7b:85: 1d:a6:4b:50:ea:59:6b:59:40:40:4d:b4:32:94:82:20:4b:a5: f4:02:83:76:7a:ba:f0:22:36:15:46:c6:b3:50:d6:e5:bf:e1: 83:f2:17:2b:01:c5:1d:b7:38:1b:06:2f:76:70:1d:3e:81:87: 40:10:d0:9c:56:20:d8:7e:fa:eb:17:a3:84:75:b3:49:ca:ad: d0:33:7c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzojPRo9sJoHAkU221aNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy NDg2ODEwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD Eyg1NGMwM2NiMzI2Njk1MTQyOGRjOGFmYzI4NDU1NjdkNmIzNDdhMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEeiG/StpJ1Z464Fpvds8p1AQmi2 XQy34XvANHRLs4OtKIrmf0Y+KDtJke5a4tVBdLLGAXqFEMqeQvrB8bbSODSjIUv4 cTU6g/Vz727QJurw1VEOlfpwAZMhXYuTxxwoRh5nYozuBYgHseRRD4tCiE78o3/l oTODcP1M0UqJs3P/t2BNNiqb+mHMLJFWm1sSHfVfQ9dTP7QURA0+w+lhWQDJfYFo cDwLYzx7v7lroVMVDEAR++a4cJgSPFoyVHQiXmDbUGGC1HuvvRarbC6GeZ2OIaz2 G6xGq/yYUzEMkWEiMIEDcn6S6tr7a9S+sFm38QO9lBgUnzMdMMCqShRY4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTAPLMmaVFCjcivwoRVZ9azR6MuMB8GA1UdIwQY MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3 LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7pHFccr 20oPbA7zU8/Av1WViCH5OYAD4IgRwEwf4PaR6h7/Ojjt3y/4vduRIP/QK5Cj/clF uVUEw36Wluothwd1OONPW2otn9bgUlrKOTo9FxeFk0tRTiIQoeiXtS5Zog5ywd0+ /TTfMfF7xzFmuNeZvnE1N4CfG8dU6MKGcB0e0DLqBzQXRFur8cdJf57pgalmdQ0p O30ybbJdY9z4leene0YOfVZrEe1ylDueo7IyUXuFHaZLUOpZa1lAQE20MpSCIEul 9AKDdnq68CI2FUbGs1DW5b/hg/IXKwHFHbc4GwYvdnAdPoGHQBDQnFYg2H766xej hHWzScqt0DN8eg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:27 2025 by rpki-client