This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json) Hash identifier: 84p2Na+6SYdbqG70Wr8B4v9/afxyAN/22cR5GyNTvKA= Subject key identifier: 1E:7C:27:E6:AF:A4:5F:FE:9D:F1:89:C3:E8:50:D1:8B:39:57:70:C6 Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019AF352D39A89ED97F391EC6320036AEC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft Manifest number: 0C71 Signing time: Sat 06 Dec 2025 11:01:22 +0000 Manifest this update: Sat 06 Dec 2025 11:01:22 +0000 Manifest next update: Sun 07 Dec 2025 11:01:22 +0000 Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: VEE/4Akk5GBAUiW6o/XP7UqUpJBdASwEm+5o01n9ee0=) 2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=) 3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:d3:9a:89:ed:97:f3:91:ec:63:20:03:6a:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Dec 6 11:01:22 2025 GMT Not After : Dec 7 11:01:22 2025 GMT Subject: CN=1e7c27e6afa45ffe9df189c3e850d18b395770c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9f:e2:67:e8:b2:57:9d:34:99:cb:52:3b:81: 07:56:80:48:ec:bd:08:29:24:76:fe:fd:2d:48:1c: d8:39:f2:27:ce:5d:3e:c8:07:32:ff:73:78:13:3e: e2:86:af:18:31:f6:7d:02:0a:3c:43:82:3b:b9:8f: 4a:2a:d6:4a:1f:5e:96:d2:42:fd:66:60:e8:71:89: 79:1d:6b:27:4f:72:f1:f6:70:90:b8:af:59:10:3a: 71:f4:6b:7b:d2:94:d8:ca:e3:7d:81:d7:f7:fd:fe: 5c:01:47:c6:a6:d5:ce:94:b8:75:0a:6b:a9:bd:42: 43:e1:b9:6b:76:0a:68:f7:dc:f1:ef:69:a6:fe:b4: 13:9a:68:04:f0:a3:d0:6c:c3:12:4b:3e:64:b5:70: e6:2c:08:2d:69:93:19:13:5b:2b:bf:4a:12:65:0b: c5:58:e4:d8:12:22:19:1f:66:a8:b6:94:02:73:ed: 74:4e:a5:c4:10:2d:33:34:a7:17:0a:bf:34:47:f7: aa:d7:e7:34:38:cc:81:ff:9d:dd:33:71:f9:81:08: 03:4d:e0:af:03:45:b7:e1:e5:b9:cf:e9:dc:af:4a: 44:c2:2e:f9:02:45:8e:51:e0:66:f4:3c:3f:15:e8: 34:ad:a2:8a:2d:18:c3:76:ea:5f:fa:1b:f4:7c:4b: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:7C:27:E6:AF:A4:5F:FE:9D:F1:89:C3:E8:50:D1:8B:39:57:70:C6 X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:84:49:55:06:9f:b1:f8:9b:76:d2:0e:2c:fd:d7:df:50:d3: c8:ee:6c:65:0a:81:82:c5:6b:ad:55:9f:d2:50:12:c6:1d:f0: 87:93:1e:8b:da:8c:32:d5:c7:b8:bf:80:e7:15:de:7a:22:5d: a2:d0:b5:bf:d3:65:c4:f2:38:1d:d4:d3:5f:00:5b:fa:57:c7: 3b:9b:b4:23:54:4a:9e:c4:58:4f:b7:18:84:e7:e9:d1:89:61: 8f:ef:d3:2a:7c:b3:44:b8:db:1a:14:91:93:14:8f:96:de:1f: 25:24:65:2b:7a:01:fd:03:16:92:1f:32:e8:e8:8b:d4:63:c2: c5:af:3f:45:ef:f8:be:1b:41:27:8d:05:ee:90:ef:9c:96:0c: ae:a7:64:bf:c2:13:7f:f2:b0:88:4b:1f:bd:26:14:9f:d4:b9: 40:f3:12:7a:76:bb:cf:29:7a:d9:1f:1b:3c:21:44:29:ab:2e: 77:0c:eb:a2:3b:b7:bb:ca:d6:3b:92:32:c3:de:6a:94:f3:83: 9f:d9:9d:f4:cf:13:b5:b7:6d:a8:f1:39:56:de:72:38:82:3f: 09:4a:b7:4d:11:17:44:1b:00:81:1a:7b:10:dc:29:f6:8f:da: ed:c0:d0:08:6a:b6:d7:d6:2b:74:d7:d0:31:e7:bb:59:47:8e: be:30:56:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUtOaie2X85HsYyADauyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjUxMjA2MTEwMTIyWhcNMjUxMjA3MTEwMTIyWjAzMTEwLwYDVQQD EygxZTdjMjdlNmFmYTQ1ZmZlOWRmMTg5YzNlODUwZDE4YjM5NTc3MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp/iZ+iyV500mctSO4EHVoBI7L0I KSR2/v0tSBzYOfInzl0+yAcy/3N4Ez7ihq8YMfZ9Ago8Q4I7uY9KKtZKH16W0kL9 ZmDocYl5HWsnT3Lx9nCQuK9ZEDpx9Gt70pTYyuN9gdf3/f5cAUfGptXOlLh1Cmup vUJD4blrdgpo99zx72mm/rQTmmgE8KPQbMMSSz5ktXDmLAgtaZMZE1srv0oSZQvF WOTYEiIZH2aotpQCc+10TqXEEC0zNKcXCr80R/eq1+c0OMyB/53dM3H5gQgDTeCv A0W34eW5z+ncr0pEwi75AkWOUeBm9Dw/Feg0raKKLRjDdupf+hv0fEv8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB58J+avpF/+nfGJw+hQ0Ys5V3DGMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4RJVQaf sfibdtIOLP3X31DTyO5sZQqBgsVrrVWf0lASxh3wh5Mei9qMMtXHuL+A5xXeeiJd otC1v9NlxPI4HdTTXwBb+lfHO5u0I1RKnsRYT7cYhOfp0Ylhj+/TKnyzRLjbGhSR kxSPlt4fJSRlK3oB/QMWkh8y6OiL1GPCxa8/Re/4vhtBJ40F7pDvnJYMrqdkv8IT f/KwiEsfvSYUn9S5QPMSena7zyl62R8bPCFEKasudwzroju3u8rWO5Iyw95qlPOD n9md9M8TtbdtqPE5Vt5yOII/CUq3TREXRBsAgRp7ENwp9o/a7cDQCGq219YrdNfQ Mee7WUeOvjBWzA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:51 2025 by rpki-client