This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json) Hash identifier: 9TVnk7eMyIK8pk/Dv0Nw1jfp6iZPRrZCXzxiPdQUdhQ= Subject key identifier: 45:3D:50:07:57:5E:3D:F2:F7:16:CA:AF:8C:87:CF:D2:32:5C:73:8B Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac Certificate serial: 019AF19B5107E4BE00D45B7AC48BE08D3719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft Manifest number: 047A Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=) 2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: HC/9LYktv3ktvt8NPlANW2x1k+1C0EFjZrLKVzN2C1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:51:07:e4:be:00:d4:5b:7a:c4:8b:e0:8d:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=453d5007575e3df2f716caaf8c87cfd2325c738b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:1b:35:ba:84:c5:74:51:48:ad:00:61:8c: b7:51:4e:d3:25:bc:12:7f:a7:ba:77:79:f3:5e:94: a6:c1:d0:72:74:94:4f:cc:83:3f:22:50:81:2a:a2: f0:24:d5:b9:c9:80:90:24:cb:de:3a:28:25:4b:48: 36:07:a0:a0:cf:07:fe:98:4a:92:39:5d:69:3c:91: c3:a8:54:bc:48:61:52:4f:10:90:5f:fb:9b:18:7b: 33:de:4c:15:3b:89:5e:15:d9:61:93:5c:bb:e9:72: 4d:38:56:e7:30:dd:62:35:9f:72:01:1a:43:da:04: bb:47:73:e5:83:04:27:ec:3a:4c:e5:6f:64:1c:85: ca:ba:e6:d4:10:f2:d9:d7:02:c7:a2:51:5d:f0:2d: 19:42:a8:88:18:01:9e:38:92:f1:c8:58:e4:34:77: bc:2d:07:92:2d:e9:73:08:d5:e3:04:ea:ea:67:65: d0:b9:d3:44:c7:f7:48:27:f7:3c:b5:72:29:29:9d: b8:7b:08:38:e2:93:25:cb:9f:b8:83:cc:7a:52:af: 2c:5c:8b:b1:41:85:c2:cd:35:77:16:f8:23:c6:97: e6:aa:7f:18:0a:a6:73:b1:51:0a:8b:5c:b7:47:75: fa:63:e9:0e:8d:71:83:23:c5:8e:8d:b6:3b:e6:ef: cc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:50:07:57:5E:3D:F2:F7:16:CA:AF:8C:87:CF:D2:32:5C:73:8B X509v3 Authority Key Identifier: keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:21:eb:25:36:9e:a1:9b:e7:32:63:86:c8:e4:bd:ed:38:e5: fb:18:54:dc:db:98:51:5c:64:e9:9d:01:b6:c8:f3:1f:37:49: 85:cd:99:21:70:1f:87:86:4e:22:d5:66:0c:9e:82:89:55:27: 54:a1:1c:ae:8d:bf:ce:ef:03:5b:da:ef:2b:0f:29:5b:6e:ac: d6:ea:9d:6b:ec:fd:d7:d8:05:31:5b:46:f0:38:cb:9f:a0:13: f5:1b:70:0d:39:c6:2a:86:4d:18:aa:ea:dd:f1:d6:19:02:ce: 2e:d0:c0:6b:5b:d4:bb:7a:c0:30:28:e8:bb:07:df:20:c0:01: 8a:4d:62:39:9e:cf:76:20:74:d6:88:b4:9a:44:7c:62:a5:1c: 98:58:41:97:3a:c4:a6:06:fd:6a:13:8f:b4:74:ac:ec:28:4b: 8b:67:c3:3c:5b:e6:47:32:33:32:7a:a8:c7:6a:88:95:c2:33: f5:da:0a:d9:2d:b1:97:74:76:ca:36:f8:1b:6f:ed:7b:d4:ee: d5:66:99:e0:2e:aa:b6:a3:6e:e9:39:34:6d:34:7d:08:88:a2: 4c:42:9f:86:f9:4d:b5:57:75:d1:b5:7e:dd:d6:eb:81:54:a0: 42:5c:5e:26:4d:71:76:04:a7:a8:e9:07:9e:a1:da:24:5f:09: 4d:1c:e5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1EH5L4A1Ft6xIvgjTcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1 Mzc0YWMwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg0NTNkNTAwNzU3NWUzZGYyZjcxNmNhYWY4Yzg3Y2ZkMjMyNWM3MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB0bNbqExXRRSK0AYYy3UU7TJbwS f6e6d3nzXpSmwdBydJRPzIM/IlCBKqLwJNW5yYCQJMveOiglS0g2B6Cgzwf+mEqS OV1pPJHDqFS8SGFSTxCQX/ubGHsz3kwVO4leFdlhk1y76XJNOFbnMN1iNZ9yARpD 2gS7R3PlgwQn7DpM5W9kHIXKuubUEPLZ1wLHolFd8C0ZQqiIGAGeOJLxyFjkNHe8 LQeSLelzCNXjBOrqZ2XQudNEx/dIJ/c8tXIpKZ24ewg44pMly5+4g8x6Uq8sXIux QYXCzTV3Fvgjxpfmqn8YCqZzsVEKi1y3R3X6Y+kOjXGDI8WOjbY75u/MTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU9UAdXXj3y9xbKr4yHz9IyXHOLMB8GA1UdIwQY MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSHrJTae oZvnMmOGyOS97Tjl+xhU3NuYUVxk6Z0BtsjzHzdJhc2ZIXAfh4ZOItVmDJ6CiVUn VKEcro2/zu8DW9rvKw8pW26s1uqda+z919gFMVtG8DjLn6AT9RtwDTnGKoZNGKrq 3fHWGQLOLtDAa1vUu3rAMCjouwffIMABik1iOZ7PdiB01oi0mkR8YqUcmFhBlzrE pgb9ahOPtHSs7ChLi2fDPFvmRzIzMnqox2qIlcIz9doK2S2xl3R2yjb4G2/te9Tu 1WaZ4C6qtqNu6Tk0bTR9CIiiTEKfhvlNtVd10bV+3dbrgVSgQlxeJk1xdgSnqOkH nqHaJF8JTRzlzw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:38 2025 by rpki-client