This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json) Hash identifier: sbo+DLkJIubMDJGrcjSnGKftuGUA1xGNlQGUGhti9UI= Subject key identifier: 4D:DE:11:2C:0B:1F:F5:9E:A9:79:7A:3F:C7:8A:FB:D2:D3:C6:1F:38 Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Certificate serial: 019AF5E65C40CB5176E0B10E84B1A5DA08A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft Manifest number: 0DFF Signing time: Sat 06 Dec 2025 23:01:46 +0000 Manifest this update: Sat 06 Dec 2025 23:01:46 +0000 Manifest next update: Sun 07 Dec 2025 23:01:46 +0000 Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=) 2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=) 3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: 2BXlh86xsHyJT5kwKIOwyvG2nDdRxgAvJZ09BU6Gzlc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:5c:40:cb:51:76:e0:b1:0e:84:b1:a5:da:08:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Validity Not Before: Dec 6 23:01:46 2025 GMT Not After : Dec 7 23:01:46 2025 GMT Subject: CN=4dde112c0b1ff59ea9797a3fc78afbd2d3c61f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:9a:74:f7:d5:6d:4e:25:87:5e:9a:95:aa: 1e:f6:74:cf:d7:06:d5:3a:6a:63:09:6c:ee:4d:c9: d2:a9:cb:f0:36:1f:f7:44:64:d2:4f:ca:38:25:8f: 1d:65:ea:cb:c4:7b:d8:a6:ba:67:d6:04:fd:4c:06: dc:c5:bc:09:ff:11:9a:0a:3f:7b:e1:d9:77:1d:a1: a9:ab:f8:c9:45:e5:9f:b5:f8:27:ae:be:b1:3c:e0: 59:3b:2a:62:51:c8:e7:7d:dd:74:24:b0:de:ee:61: 1e:82:5b:10:94:02:ee:a3:08:f1:1e:bc:42:cc:cb: aa:74:3a:d8:fd:c8:84:71:aa:02:99:91:5f:c5:98: 08:be:a7:d9:4a:e1:b8:71:13:6d:d2:18:9e:9e:fe: e9:74:ca:10:af:72:4c:96:5b:66:15:16:07:2e:74: 6d:37:4e:3b:f3:2b:47:86:8c:fe:fd:5d:91:f3:ab: 20:70:e4:74:c8:af:51:ae:77:c0:0a:3c:81:1c:10: 58:57:b5:7c:72:05:74:47:bf:2a:10:f1:a6:eb:2f: 95:06:81:4b:fb:2c:c7:4e:4a:0b:0b:ea:ee:2a:b3: e6:3a:55:f4:27:af:e3:89:e0:70:4f:56:96:9d:70: 53:b2:52:66:a3:30:b2:c6:db:7f:44:1e:b9:d4:6e: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DE:11:2C:0B:1F:F5:9E:A9:79:7A:3F:C7:8A:FB:D2:D3:C6:1F:38 X509v3 Authority Key Identifier: keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a9:85:35:0e:b4:51:a4:d0:8e:b0:1f:ed:56:f5:82:b2:d8: c3:fb:39:e3:3d:48:90:ad:79:ca:94:5a:79:72:db:f4:22:96: 99:06:a7:9a:30:fd:90:05:f1:58:e7:57:b7:c5:b0:e0:ef:d4: 9f:23:1a:5f:ef:08:6b:93:18:61:37:9c:79:ae:7b:51:c1:d2: 16:a6:7c:3e:12:a2:24:81:77:c8:75:ce:6c:da:9d:d0:15:cd: 8d:8c:22:7c:ac:da:44:f3:d0:7e:22:63:88:07:b3:73:c9:ac: 2b:6d:ac:25:be:f3:3d:b7:29:5d:45:5e:37:df:25:73:73:f1: 4c:92:6b:5d:c6:d5:3d:7b:a6:3e:49:7a:82:14:2a:e2:12:1e: cf:5d:53:7a:46:3b:2d:5e:d0:88:a7:6e:6f:7e:61:7c:c0:1d: d3:cd:17:44:fa:18:e7:60:dd:a4:b9:94:d5:d9:14:3d:5f:be: e2:2f:ad:ca:0a:da:63:24:65:61:30:af:8d:91:53:39:bc:97: 98:6a:9d:be:72:d9:94:c3:6e:44:13:e7:8a:07:a8:c9:7f:84: 49:90:d8:bb:8b:b8:76:a8:9d:be:0d:ce:97:87:10:d4:aa:f4: 62:d6:d3:ab:9a:b5:8d:57:86:52:3a:60:f4:75:4b:70:68:2b: fa:d8:81:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15lxAy1F24LEOhLGl2gipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi Y2JkMjgwHhcNMjUxMjA2MjMwMTQ2WhcNMjUxMjA3MjMwMTQ2WjAzMTEwLwYDVQQD Eyg0ZGRlMTEyYzBiMWZmNTllYTk3OTdhM2ZjNzhhZmJkMmQzYzYxZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymSadPfVbU4lh16alaoe9nTP1wbV OmpjCWzuTcnSqcvwNh/3RGTST8o4JY8dZerLxHvYprpn1gT9TAbcxbwJ/xGaCj97 4dl3HaGpq/jJReWftfgnrr6xPOBZOypiUcjnfd10JLDe7mEeglsQlALuowjxHrxC zMuqdDrY/ciEcaoCmZFfxZgIvqfZSuG4cRNt0hienv7pdMoQr3JMlltmFRYHLnRt N0478ytHhoz+/V2R86sgcOR0yK9RrnfACjyBHBBYV7V8cgV0R78qEPGm6y+VBoFL +yzHTkoLC+ruKrPmOlX0J6/jieBwT1aWnXBTslJmozCyxtt/RB651G4rtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3eESwLH/WeqXl6P8eK+9LTxh84MB8GA1UdIwQY MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt NmU3NTYxNTM1YmJkLzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6mFNQ60 UaTQjrAf7Vb1grLYw/s54z1IkK15ypRaeXLb9CKWmQanmjD9kAXxWOdXt8Ww4O/U nyMaX+8Ia5MYYTecea57UcHSFqZ8PhKiJIF3yHXObNqd0BXNjYwifKzaRPPQfiJj iAezc8msK22sJb7zPbcpXUVeN98lc3PxTJJrXcbVPXumPkl6ghQq4hIez11TekY7 LV7QiKdub35hfMAd080XRPoY52DdpLmU1dkUPV++4i+tygraYyRlYTCvjZFTObyX mGqdvnLZlMNuRBPnigeoyX+ESZDYu4u4dqidvg3Ol4cQ1Kr0YtbTq5q1jVeGUjpg 9HVLcGgr+tiBGQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:36:02 2025 by rpki-client