This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json) Hash identifier: TNxx8fBYVkBQPVuoZm4KCa5yjbP0SbOnExgI8a0v6Tc= Subject key identifier: 3E:A5:3C:7E:17:FD:84:C3:20:AE:67:7E:0D:7D:A2:63:73:55:FD:51 Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6 Certificate serial: 019AF2764D09806A1819C47D28BA37B5CF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=) 2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: clKusFoJn8dd/N8CWallVBblAME++mK91YxlOtOYzbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4d:09:80:6a:18:19:c4:7d:28:ba:37:b5:cf:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=3ea53c7e17fd84c320ae677e0d7da2637355fd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:50:bb:3b:59:bb:a6:4a:a3:e5:d5:e0:64: 8d:b9:0a:d8:25:27:5d:8c:4e:ff:7f:73:e1:b5:74: 91:65:b9:ec:64:35:bf:dd:f1:79:3b:41:95:e1:b7: 53:fd:b1:d9:d4:08:fb:b9:12:95:73:ac:11:6f:7c: ab:05:9b:32:0b:24:b7:ef:71:5e:3c:55:0f:4b:c2: 4d:5e:65:c6:29:1a:70:c6:41:4c:98:1a:e6:8b:5b: 39:3f:ac:94:37:55:1c:0c:a3:b8:92:3b:ed:94:e3: 93:a6:87:14:17:b6:40:61:a5:3b:d8:12:50:80:ea: 0f:f3:17:03:44:be:0c:3a:1a:7d:7a:cb:e3:4c:3e: 18:4c:c9:1b:34:05:be:d6:a0:e8:8e:ce:57:8f:76: 02:20:1f:ea:18:78:7a:35:d7:8c:79:df:5b:1b:f9: e5:29:50:63:24:ff:99:af:cd:4e:b7:0a:89:51:1d: f4:2e:ef:f8:ed:e6:a4:6c:90:58:30:cb:f9:12:d2: c2:c7:91:a5:8c:58:ab:b1:1a:9b:38:24:55:61:11: 40:74:1e:fb:d2:7f:0e:41:2b:33:a9:d4:a2:af:6a: 35:83:f1:21:6d:63:7c:ee:ef:7e:86:52:3e:bb:c7: a1:0e:f9:d2:c7:89:96:27:85:0e:ab:e6:9f:d9:a5: 69:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A5:3C:7E:17:FD:84:C3:20:AE:67:7E:0D:7D:A2:63:73:55:FD:51 X509v3 Authority Key Identifier: keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:26:d1:d9:42:5f:7e:a0:82:f9:70:c0:86:f7:bc:47:47:6e: 7d:2b:62:05:b4:fe:18:4a:73:ad:af:b4:35:d8:b6:94:be:02: 05:8b:7e:93:6c:ac:fd:91:d9:b6:fc:e2:a4:5d:aa:c7:68:97: 01:d1:23:1f:ad:9f:81:84:64:50:c0:e8:73:13:e4:e0:58:9a: fb:d0:91:b4:f0:83:d1:ed:9b:66:35:07:57:6d:46:d4:90:74: 55:7c:4c:a7:95:87:7b:0b:c9:5d:4f:97:9e:d0:cf:52:bc:a5: 1a:60:f3:0b:58:22:d7:91:69:ea:bc:98:49:0c:68:08:12:de: ff:24:1a:fd:c6:33:a7:dc:15:e1:e1:7f:76:1a:85:d7:d7:9e: ff:f2:e1:74:ea:e9:80:b6:a3:ed:24:a1:d2:50:37:fa:f0:2b: e3:67:6c:91:78:d9:66:2a:20:6b:ef:88:ec:ca:34:81:4e:94: 20:f4:18:1d:6f:93:78:1e:7b:b7:21:3f:00:f9:4c:ed:68:ab: d7:7f:b1:9c:22:6e:69:a7:42:58:cf:0b:91:b2:3d:f8:14:ce: 6f:a5:b1:43:01:3b:2a:b7:82:29:ff:c6:6c:d0:49:6e:77:5b: 2e:c6:22:19:48:8c:cc:d0:af:ee:a5:96:e1:d6:71:15:1c:ec: 42:3f:22:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydk0JgGoYGcR9KLo3tc+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5 MTJkZTYwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD EygzZWE1M2M3ZTE3ZmQ4NGMzMjBhZTY3N2UwZDdkYTI2MzczNTVmZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF5QuztZu6ZKo+XV4GSNuQrYJSdd jE7/f3PhtXSRZbnsZDW/3fF5O0GV4bdT/bHZ1Aj7uRKVc6wRb3yrBZsyCyS373Fe PFUPS8JNXmXGKRpwxkFMmBrmi1s5P6yUN1UcDKO4kjvtlOOTpocUF7ZAYaU72BJQ gOoP8xcDRL4MOhp9esvjTD4YTMkbNAW+1qDojs5Xj3YCIB/qGHh6NdeMed9bG/nl KVBjJP+Zr81OtwqJUR30Lu/47eakbJBYMMv5EtLCx5GljFirsRqbOCRVYRFAdB77 0n8OQSszqdSir2o1g/EhbWN87u9+hlI+u8ehDvnSx4mWJ4UOq+af2aVpbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6lPH4X/YTDIK5nfg19omNzVf1RMB8GA1UdIwQY MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2 LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATibR2UJf fqCC+XDAhve8R0dufStiBbT+GEpzra+0Ndi2lL4CBYt+k2ys/ZHZtvzipF2qx2iX AdEjH62fgYRkUMDocxPk4Fia+9CRtPCD0e2bZjUHV21G1JB0VXxMp5WHewvJXU+X ntDPUrylGmDzC1gi15Fp6ryYSQxoCBLe/yQa/cYzp9wV4eF/dhqF19ee//LhdOrp gLaj7SSh0lA3+vAr42dskXjZZioga++I7Mo0gU6UIPQYHW+TeB57tyE/APlM7Wir 13+xnCJuaadCWM8LkbI9+BTOb6WxQwE7KreCKf/GbNBJbndbLsYiGUiMzNCv7qWW 4dZxFRzsQj8i8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:46 2025 by rpki-client