This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json) Hash identifier: UIKS6QvZKnuzVUDtAUPei8ZE5jb+pLJzWKnOPAFVVDU= Subject key identifier: A4:19:B3:E5:A9:0B:9A:D6:A8:E5:2E:A6:C2:87:19:5A:EA:02:DE:3A Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Certificate serial: 019AF3C0C8843864C1A169B81AF2D081FF90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 13:01:28 +0000 Manifest this update: Sat 06 Dec 2025 13:01:28 +0000 Manifest next update: Sun 07 Dec 2025 13:01:28 +0000 Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=) 2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: kopd8Nfp78lRiPMBZTOCmLupqLgGNsY6D+Z6G/cezxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:c8:84:38:64:c1:a1:69:b8:1a:f2:d0:81:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Validity Not Before: Dec 6 13:01:28 2025 GMT Not After : Dec 7 13:01:28 2025 GMT Subject: CN=a419b3e5a90b9ad6a8e52ea6c287195aea02de3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:ed:18:26:52:9e:27:a6:fa:cf:0a:60:e1: 85:fd:e8:64:8e:20:fa:1d:1b:fb:dc:d0:fa:4c:8b: be:84:12:99:2f:5c:84:3c:a2:e3:8a:5b:b4:1c:f0: 47:7a:72:6e:fc:60:c6:ae:bc:1f:d3:d0:f9:d0:73: 32:42:1a:f4:d0:72:6d:1b:48:a0:cf:83:a6:75:8b: 38:ef:08:16:fb:d5:4f:08:f8:fc:61:71:03:c8:5f: 4d:e7:0d:02:64:b7:ff:f2:26:c9:5a:6a:7c:53:8a: c3:5c:a8:63:4a:98:37:65:2d:c9:8a:37:ab:d0:99: 81:47:ac:b2:93:91:aa:fd:f6:70:e9:d4:7e:77:ae: ca:0d:2f:0d:2a:57:41:c9:6c:b9:ef:93:84:5f:d6: 17:5d:bd:ad:8a:9c:57:f2:17:1d:d4:96:c8:9f:0e: bf:ee:f8:f7:38:8e:1f:9e:f2:b4:8a:7f:e3:b1:0f: 2c:ba:85:52:d6:b1:50:f1:4e:e5:ef:4b:ed:80:04: 26:53:bf:de:3d:41:7d:c8:ab:65:ba:71:cb:fc:cb: d1:60:80:3e:7f:94:48:d5:58:33:81:54:66:0f:d8: 37:62:37:a1:66:4f:8c:14:e2:26:01:8f:79:8b:1d: 65:09:35:6c:49:15:a5:58:a4:6b:0e:78:1a:73:d3: 2c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:19:B3:E5:A9:0B:9A:D6:A8:E5:2E:A6:C2:87:19:5A:EA:02:DE:3A X509v3 Authority Key Identifier: keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:33:15:2a:02:88:f9:05:26:80:cf:4b:ea:29:06:a0:cf:06: 63:a5:c9:fd:aa:1b:48:b4:42:21:87:65:6a:bf:71:77:95:3d: 29:0f:18:93:5b:0e:1e:ec:3d:77:b8:60:4e:fe:18:db:13:4e: 7d:1c:a1:f7:8a:f6:68:13:e1:0e:d7:12:ee:5a:ca:5a:69:88: 96:53:c2:ec:ce:09:7e:0a:d9:b0:07:b3:b2:a1:60:83:3b:e9: 63:c5:0a:30:6d:cb:ef:62:84:24:b4:f5:92:38:de:2f:b9:14: 19:bf:09:f4:b5:60:9c:dc:ae:7c:8a:7d:87:da:a6:f6:5b:d6: 86:c3:dc:21:04:0e:64:c8:7b:e0:e0:4a:c9:d7:41:a7:fc:e5: e1:ad:80:c1:9d:0d:e1:c1:82:e8:03:d5:41:6f:7a:a4:62:2d: 92:4f:f7:4e:fe:77:a4:03:01:99:b3:1e:2f:36:c4:4a:f2:22: 68:a1:f0:97:92:98:2e:ef:13:25:6a:87:0f:da:4b:d4:ef:d1: 6d:41:22:67:e5:41:81:0e:c1:eb:47:56:42:7f:65:f8:90:d0: 37:40:50:75:70:80:21:cc:4d:4a:cf:bd:ae:7e:86:47:fb:ce: f1:8e:fc:0b:7e:eb:07:56:8e:42:f7:46:a3:77:56:d9:80:c7: bb:2c:11:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwMiEOGTBoWm4GvLQgf+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl N2Y3NTcwHhcNMjUxMjA2MTMwMTI4WhcNMjUxMjA3MTMwMTI4WjAzMTEwLwYDVQQD EyhhNDE5YjNlNWE5MGI5YWQ2YThlNTJlYTZjMjg3MTk1YWVhMDJkZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/tGCZSniem+s8KYOGF/ehkjiD6 HRv73ND6TIu+hBKZL1yEPKLjilu0HPBHenJu/GDGrrwf09D50HMyQhr00HJtG0ig z4OmdYs47wgW+9VPCPj8YXEDyF9N5w0CZLf/8ibJWmp8U4rDXKhjSpg3ZS3Jijer 0JmBR6yyk5Gq/fZw6dR+d67KDS8NKldByWy575OEX9YXXb2tipxX8hcd1JbInw6/ 7vj3OI4fnvK0in/jsQ8suoVS1rFQ8U7l70vtgAQmU7/ePUF9yKtlunHL/MvRYIA+ f5RI1VgzgVRmD9g3YjehZk+MFOImAY95ix1lCTVsSRWlWKRrDngac9MsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQZs+WpC5rWqOUupsKHGVrqAt46MB8GA1UdIwQY MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjMVKgKI +QUmgM9L6ikGoM8GY6XJ/aobSLRCIYdlar9xd5U9KQ8Yk1sOHuw9d7hgTv4Y2xNO fRyh94r2aBPhDtcS7lrKWmmIllPC7M4JfgrZsAezsqFggzvpY8UKMG3L72KEJLT1 kjjeL7kUGb8J9LVgnNyufIp9h9qm9lvWhsPcIQQOZMh74OBKyddBp/zl4a2AwZ0N 4cGC6APVQW96pGItkk/3Tv53pAMBmbMeLzbESvIiaKHwl5KYLu8TJWqHD9pL1O/R bUEiZ+VBgQ7B60dWQn9l+JDQN0BQdXCAIcxNSs+9rn6GR/vO8Y78C37rB1aOQvdG o3dW2YDHuywRmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:00 2025 by rpki-client