This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json) Hash identifier: SV7A3BrOJlc1yQLh8oqY1hALLDJX00LJQ7wnoRAIu7Q= Subject key identifier: 47:B0:4C:02:21:41:50:EF:8B:C3:7D:72:4F:E8:83:21:FD:44:65:6C Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Certificate serial: 019AF31CEB2B1AB7215F05E85456245F65F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=) 2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: qw2+gx6rAlUgnu1AnMVmyntiBk/LAWD8Ktvm9PXb9vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:eb:2b:1a:b7:21:5f:05:e8:54:56:24:5f:65:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=47b04c02214150ef8bc37d724fe88321fd44656c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4e:b5:8e:2a:ce:54:92:c0:20:c0:2b:ec:64: a2:e4:3e:14:8e:09:99:04:27:da:d7:4d:31:24:3e: 67:a0:69:b0:7b:1e:80:fd:28:c2:c2:20:0e:17:04: 74:21:b1:41:71:ed:e9:43:28:88:df:49:86:2e:c9: d1:da:d7:a6:2c:0b:91:4c:61:6a:34:de:6d:ab:da: b9:f6:6f:d8:9e:e7:12:84:e9:77:48:70:46:bd:94: d2:ff:2c:d6:5c:79:b3:d8:8c:ef:bc:00:da:f6:f6: d3:f7:09:cc:13:06:b0:1a:54:ce:5e:50:1f:b8:a4: 24:d1:ae:db:7c:a4:58:eb:49:93:87:2f:35:38:0b: 90:ab:fc:23:c2:5f:7e:b8:74:39:87:8a:fa:d1:30: 55:21:29:d0:9b:d0:56:fc:df:8c:68:d1:c2:2e:31: 17:13:33:e5:88:f9:d7:aa:b1:69:58:7a:41:58:8e: 09:c2:1e:67:b9:3c:94:d4:f4:d8:0c:9d:c2:fe:a5: 7c:97:12:bd:28:23:98:be:67:7b:aa:c6:fd:3a:43: ec:8a:4b:3e:fa:dd:88:f0:ca:87:de:51:c3:d3:a5: e5:17:89:79:42:3b:86:b0:15:db:25:7d:e0:d2:35: 53:32:60:0d:73:b1:b3:73:ba:ae:07:d0:20:bb:f0: 86:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:4C:02:21:41:50:EF:8B:C3:7D:72:4F:E8:83:21:FD:44:65:6C X509v3 Authority Key Identifier: keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:ae:b5:39:e1:c7:ee:9c:a1:a0:5b:03:7e:3a:51:3f:30:7b: de:f9:e2:ec:a6:09:24:88:35:f7:3f:6d:79:f3:cf:31:c6:7e: 5e:17:42:4c:f5:83:e4:2f:4a:1f:d6:73:5f:33:7c:e4:8f:33: 4d:4c:e3:37:2d:ec:dd:25:b9:2a:c7:58:c9:ef:1d:01:68:90: 93:61:e4:2b:6e:bd:bc:e6:4d:2d:eb:70:29:a4:0b:58:d5:6f: 83:7a:85:8e:3a:9e:2d:37:7e:63:3b:51:9d:a9:87:10:34:24: 4c:4a:6b:72:f5:c4:e0:b6:27:d7:79:36:3f:35:fa:50:87:b4: 46:3e:5d:db:3c:56:27:91:c4:2c:b5:79:80:3f:33:83:fe:c6: d5:65:83:8e:c4:86:7f:42:de:2f:f3:17:2d:11:ba:d7:36:21: 91:00:e6:7e:ad:3a:f1:a3:82:64:4b:e9:79:e5:d3:7e:97:dd: fc:66:1a:45:60:40:43:04:88:4f:5a:e3:e7:77:c2:35:06:fd: 1c:62:21:00:6c:27:2c:ca:92:c2:5d:35:46:6a:cc:d8:08:0b: d0:fb:54:73:53:96:8a:cb:aa:fe:fd:a2:d3:c1:68:2d:2f:d3: d0:66:ae:39:1c:7c:64:14:bd:92:c1:bd:37:61:b2:55:41:be: 9f:ce:19:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOsrGrchXwXoVFYkX2X3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjUxYTI1ZDJmMzkyMjUyNGE2YTY5YjFkN2Q2MWNkM2Nj MmE4ZGEwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD Eyg0N2IwNGMwMjIxNDE1MGVmOGJjMzdkNzI0ZmU4ODMyMWZkNDQ2NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU61jirOVJLAIMAr7GSi5D4UjgmZ BCfa100xJD5noGmwex6A/SjCwiAOFwR0IbFBce3pQyiI30mGLsnR2temLAuRTGFq NN5tq9q59m/YnucShOl3SHBGvZTS/yzWXHmz2IzvvADa9vbT9wnMEwawGlTOXlAf uKQk0a7bfKRY60mThy81OAuQq/wjwl9+uHQ5h4r60TBVISnQm9BW/N+MaNHCLjEX EzPliPnXqrFpWHpBWI4Jwh5nuTyU1PTYDJ3C/qV8lxK9KCOYvmd7qsb9OkPsiks+ +t2I8MqH3lHD06XlF4l5QjuGsBXbJX3g0jVTMmANc7Gzc7quB9Agu/CGVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEewTAIhQVDvi8N9ck/ogyH9RGVsMB8GA1UdIwQY MBaAFGf1GiXS85IlJKammx19Yc08wqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYt NTYyNmI1NGQxYTIxLzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYtNTYyNmI1NGQxYTIx LzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyq61OeHH 7pyhoFsDfjpRPzB73vni7KYJJIg19z9tefPPMcZ+XhdCTPWD5C9KH9ZzXzN85I8z TUzjNy3s3SW5KsdYye8dAWiQk2HkK269vOZNLetwKaQLWNVvg3qFjjqeLTd+YztR namHEDQkTEprcvXE4LYn13k2PzX6UIe0Rj5d2zxWJ5HELLV5gD8zg/7G1WWDjsSG f0LeL/MXLRG61zYhkQDmfq068aOCZEvpeeXTfpfd/GYaRWBAQwSIT1rj53fCNQb9 HGIhAGwnLMqSwl01RmrM2AgL0PtUc1OWisuq/v2i08FoLS/T0GauORx8ZBS9ksG9 N2GyVUG+n84Zhg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:10 2025 by rpki-client