This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json) Hash identifier: UUyEXRyddoJ7ivDBwKGxKxyAYguZOYoajv64+TA4RIs= Subject key identifier: D3:45:23:E3:17:3B:D8:0F:B6:3C:18:C1:89:4A:1C:2B:61:42:92:F8 Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Certificate serial: 019AF6537EAF3A977BA3DF2C2F4B0D8048B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft Manifest number: 0BB6 Signing time: Sun 07 Dec 2025 01:00:58 +0000 Manifest this update: Sun 07 Dec 2025 01:00:58 +0000 Manifest next update: Mon 08 Dec 2025 01:00:58 +0000 Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=) 2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=) 3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: Q66UaG4ov9abizoeAQuqtyjvbRcn24zYsSQv69d3R8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:7e:af:3a:97:7b:a3:df:2c:2f:4b:0d:80:48:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Validity Not Before: Dec 7 01:00:58 2025 GMT Not After : Dec 8 01:00:58 2025 GMT Subject: CN=d34523e3173bd80fb63c18c1894a1c2b614292f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:8f:12:9c:43:41:4d:92:ce:5c:02:85:48: 9e:3f:2b:d2:c6:a9:5b:1b:a4:a1:28:42:da:c9:8b: 87:bb:91:12:e6:c3:14:85:12:76:42:e0:b7:86:5e: 7a:da:c4:92:84:f3:06:cd:ea:47:87:75:4a:eb:2d: 05:10:e4:4d:00:9a:d3:0a:a3:5d:46:12:2b:7d:c8: bf:47:bd:c8:0f:94:72:47:b2:36:79:ca:e9:4d:3e: e7:d8:8f:88:5a:f6:e7:4e:88:57:f1:e9:6f:26:97: ae:9e:bb:56:69:d5:ac:68:73:61:02:07:56:d8:7b: 30:d2:0b:b1:15:ef:b4:18:8e:6b:03:f4:b3:85:08: ff:b2:b2:71:76:1c:f0:ed:a7:6b:b0:f8:9e:92:f5: 48:d4:c0:ba:0c:18:4d:d0:05:65:15:c1:b9:cc:f0: b9:50:81:82:12:b7:ef:d5:2d:a0:3f:d8:43:19:0a: 14:ae:d2:02:f3:0b:77:74:47:60:56:69:26:8e:c9: 0b:ae:d1:f2:f6:38:60:83:7c:c0:56:c5:73:37:4e: b5:17:d4:f6:12:67:ca:25:da:37:da:b1:27:00:de: 62:82:4e:c5:d6:9e:07:c6:3d:dd:09:46:9b:2c:e2: f4:ef:55:1e:5f:1d:3c:f7:be:4a:28:0f:00:7d:f5: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:23:E3:17:3B:D8:0F:B6:3C:18:C1:89:4A:1C:2B:61:42:92:F8 X509v3 Authority Key Identifier: keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6e:36:51:cb:a2:87:ff:72:1f:17:bb:8d:4c:56:fc:40:4e: 4e:26:7c:24:10:a1:13:7b:dc:0a:49:11:23:fe:3b:7e:a4:be: e0:f0:7c:42:84:8c:ca:cc:93:3c:af:3f:f3:fe:06:66:1e:46: 3e:15:b3:a1:10:3e:88:83:9a:3d:77:93:8e:8e:57:c2:d0:fb: 2e:aa:3a:8d:ef:59:28:2d:2b:04:d7:a2:5f:92:72:a1:e7:9d: 65:ea:94:4a:74:91:a8:fc:5c:3e:3e:fe:9e:42:e2:a9:f0:ba: aa:47:3c:d8:dc:b5:6f:34:e8:6c:bd:df:4a:bb:ad:5d:8b:08: 98:4d:35:56:b8:69:36:2f:1c:b5:0a:20:6a:cb:f4:bb:95:8b: 82:a5:95:03:c9:25:ea:70:4e:d7:90:3c:72:9a:c3:e4:ab:f3: cb:b4:1d:3f:1c:f5:dc:7b:b5:f9:19:3f:e4:48:d7:ab:74:f0: d9:82:32:5c:17:70:1f:2d:39:5c:bd:d5:db:c1:63:75:f0:5f: 33:ed:86:5a:c2:d0:fa:22:d4:ac:1a:63:1a:25:18:f8:f3:9e: 2c:55:ac:cc:7e:64:1e:eb:f4:55:ef:74:1a:a7:9a:56:a0:b0: 8f:f1:d9:c0:b8:43:64:f9:11:27:86:99:71:81:62:70:88:b1: 02:08:36:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U36vOpd7o98sL0sNgEi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk ZWJiMGYwHhcNMjUxMjA3MDEwMDU4WhcNMjUxMjA4MDEwMDU4WjAzMTEwLwYDVQQD EyhkMzQ1MjNlMzE3M2JkODBmYjYzYzE4YzE4OTRhMWMyYjYxNDI5MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviiPEpxDQU2SzlwChUiePyvSxqlb G6ShKELayYuHu5ES5sMUhRJ2QuC3hl562sSShPMGzepHh3VK6y0FEORNAJrTCqNd RhIrfci/R73ID5RyR7I2ecrpTT7n2I+IWvbnTohX8elvJpeunrtWadWsaHNhAgdW 2Hsw0guxFe+0GI5rA/SzhQj/srJxdhzw7adrsPiekvVI1MC6DBhN0AVlFcG5zPC5 UIGCErfv1S2gP9hDGQoUrtIC8wt3dEdgVmkmjskLrtHy9jhgg3zAVsVzN061F9T2 EmfKJdo32rEnAN5igk7F1p4Hxj3dCUabLOL071UeXx08975KKA8AffUFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNFI+MXO9gPtjwYwYlKHCthQpL4MB8GA1UdIwQY MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX242Ucui h/9yHxe7jUxW/EBOTiZ8JBChE3vcCkkRI/47fqS+4PB8QoSMysyTPK8/8/4GZh5G PhWzoRA+iIOaPXeTjo5XwtD7Lqo6je9ZKC0rBNeiX5JyoeedZeqUSnSRqPxcPj7+ nkLiqfC6qkc82Ny1bzTobL3fSrutXYsImE01VrhpNi8ctQogasv0u5WLgqWVA8kl 6nBO15A8cprD5Kvzy7QdPxz13Hu1+Rk/5EjXq3Tw2YIyXBdwHy05XL3V28FjdfBf M+2GWsLQ+iLUrBpjGiUY+POeLFWszH5kHuv0Ve90GqeaVqCwj/HZwLhDZPkRJ4aZ cYFicIixAgg2EQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:38 2025 by rpki-client