This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: ynzO5IU1iuZ8eEDv+fKpqY5Mh9B47YItTTi4H5YseAw= Subject key identifier: 40:8F:D8:D3:05:83:66:ED:B9:84:1E:24:8C:AA:63:17:EF:45:28:BC Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019AF2ADAFFDF503CF070F559BC4A56AB5B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0AC2 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 4: AcjZPvLVEctq4aWtM9Se4g1Hez4.roa (hash: m4DjUNQ10CarUgcdKKVdQWZBHX6pVTG/J1Gv/VX/MoI=) 5: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 6: GvpbXDZ3PvGHC6CRPFaBrB4OBOU.roa (hash: QK6+N1u3xwguItDTFCohthwXAVIsV2u4+FjHuAM9tAY=) 7: Pd7_BuMRngySvCOEXZzIMz9jyRk.roa (hash: sixeKX7UtbFferQNxLx2jnfuNmnIKZsouzMYORIygXY=) 8: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 9: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 10: XumlVyIVNMGHdK8sasVhYLHqWI0.roa (hash: sNAchm7qC5sJ8lucqaB2EFdUQUEmutQiLKjflZ2MgDg=) 11: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: szkX/qB0q4MTiSo+nhJnPkSjZLbAgwJmnyMuDOGZaFY=) 12: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 13: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 14: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 15: e7z0oRKCehd6Ea7tsIDH_CrT8g0.roa (hash: rqMdlglqnoJd6sqLsXF+uIqk3nINirrRe1Hs5mOfPEU=) 16: iCveD-Xjd5JabG_WX6frr5x6in0.roa (hash: 95l1uR3aj9xTQRq9TbMrNh9RKHM6w6gjilx0WBwNahE=) 17: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 18: qOlRf_FFYvzJtrv5C1ObqUNVUzk.roa (hash: EfOedSZueUJgPg3V0RQ+mS3lngajdnN3iZ8o0TSNE3A=) 19: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:af:fd:f5:03:cf:07:0f:55:9b:c4:a5:6a:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=408fd8d3058366edb9841e248caa6317ef4528bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:8d:3d:30:59:e9:ee:e1:57:9c:ff:1d:47: dd:c5:b0:6f:b8:f7:ed:68:f3:06:33:fd:f8:95:21: e2:c6:04:7e:4b:1f:54:ae:d4:ec:c1:1d:d9:dc:1a: 40:6a:12:98:49:7e:48:a6:fc:b1:71:1d:61:ae:c8: 91:f7:5a:0e:76:99:17:3f:96:65:b5:3e:99:1b:f2: 40:ad:aa:67:12:5e:9d:3f:70:e3:a7:30:52:51:1d: b3:65:b5:5a:ae:cb:9e:9a:10:cf:c6:50:a4:7c:2e: 0f:e6:fc:d3:50:6f:fa:e2:aa:47:5c:34:ff:a2:73: b9:ce:d3:0a:0e:fd:62:46:2a:67:79:24:60:b1:a0: 2c:12:a8:90:7f:69:b7:69:91:22:3f:27:da:e7:24: a9:e3:fd:e9:07:5b:63:be:32:d0:21:1f:27:ac:22: 79:00:e4:39:d7:81:89:a6:10:e8:fb:14:1b:4f:7c: e3:93:c9:f5:53:0d:cf:ca:5f:3c:76:82:fe:9a:c0: bf:29:6a:cc:18:68:ea:eb:42:21:ff:fe:b9:46:e5: db:33:09:81:e3:71:df:b0:76:73:3c:c2:6e:9f:40: 34:56:5c:4d:22:d0:58:7f:c6:19:1d:b3:c2:fb:ec: d5:fc:b1:7c:d9:5c:5d:17:be:cf:0b:9d:d6:63:72: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:D8:D3:05:83:66:ED:B9:84:1E:24:8C:AA:63:17:EF:45:28:BC X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fd:27:54:cc:5d:34:bb:dc:6d:7e:65:3e:9a:0a:05:0a:b2: 18:47:e1:02:26:1e:a0:42:58:81:08:92:4b:4d:73:a6:01:9f: ac:59:b5:c4:d4:dd:43:26:82:14:55:19:59:a5:66:ff:d3:95: 93:1d:76:1d:3b:b2:b3:45:17:6b:73:58:8c:4a:b7:7f:99:a8: b0:dd:d0:18:d4:53:03:e0:91:2e:3b:dc:a8:9c:3a:1f:5a:a5: 03:dc:78:c2:01:6b:f6:07:5c:66:4c:4d:da:8e:1a:ff:0f:64: 64:5e:9c:d8:c2:16:a5:35:62:d5:e0:b8:15:18:2a:dc:0d:43: 99:f8:c8:b8:84:96:82:8e:12:c7:92:38:41:06:80:36:17:f8: 97:5a:a9:69:4e:63:c2:ee:60:c5:87:e2:2c:12:2f:a8:36:41: 43:69:8f:83:a5:7f:62:0f:a1:a4:41:7e:24:d8:c1:c2:6f:84: 9f:e6:79:2c:71:4c:2f:29:0a:96:da:41:e1:13:d2:2c:be:5f: 1b:5c:9c:7a:9a:7f:2c:5b:45:33:69:4f:a3:64:81:e7:07:a5: 51:f4:26:09:6f:40:bc:df:26:c0:40:ab:ee:35:9e:65:89:91: 3a:24:a9:9c:bc:0c:6b:7f:be:47:a1:9d:91:be:d5:b9:d4:74: 9d:b9:a0:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryra/99QPPBw9Vm8SlarWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD Eyg0MDhmZDhkMzA1ODM2NmVkYjk4NDFlMjQ4Y2FhNjMxN2VmNDUyOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUqNPTBZ6e7hV5z/HUfdxbBvuPft aPMGM/34lSHixgR+Sx9UrtTswR3Z3BpAahKYSX5IpvyxcR1hrsiR91oOdpkXP5Zl tT6ZG/JArapnEl6dP3DjpzBSUR2zZbVarsuemhDPxlCkfC4P5vzTUG/64qpHXDT/ onO5ztMKDv1iRipneSRgsaAsEqiQf2m3aZEiPyfa5ySp4/3pB1tjvjLQIR8nrCJ5 AOQ514GJphDo+xQbT3zjk8n1Uw3Pyl88doL+msC/KWrMGGjq60Ih//65RuXbMwmB 43HfsHZzPMJun0A0VlxNItBYf8YZHbPC++zV/LF82VxdF77PC53WY3LKMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECP2NMFg2btuYQeJIyqYxfvRSi8MB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf0nVMxd NLvcbX5lPpoKBQqyGEfhAiYeoEJYgQiSS01zpgGfrFm1xNTdQyaCFFUZWaVm/9OV kx12HTuys0UXa3NYjEq3f5mosN3QGNRTA+CRLjvcqJw6H1qlA9x4wgFr9gdcZkxN 2o4a/w9kZF6c2MIWpTVi1eC4FRgq3A1DmfjIuISWgo4Sx5I4QQaANhf4l1qpaU5j wu5gxYfiLBIvqDZBQ2mPg6V/Yg+hpEF+JNjBwm+En+Z5LHFMLykKltpB4RPSLL5f G1ycepp/LFtFM2lPo2SB5welUfQmCW9AvN8mwECr7jWeZYmROiSpnLwMa3++R6Gd kb7VudR0nbmgEw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:04 2025 by rpki-client