This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json) Hash identifier: MZmrZgqop6SfsyxIi/Q2DlTj2WYLahNaeDtBRC/Da+I= Subject key identifier: 8B:29:9E:CA:B2:39:B6:4C:1D:0F:C6:FC:6E:F5:09:13:C0:FC:1F:D9 Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Certificate serial: 019AF05135C0F52AC47D98C7ADB19720A4D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 21:00:45 +0000 Manifest this update: Fri 05 Dec 2025 21:00:45 +0000 Manifest next update: Sat 06 Dec 2025 21:00:45 +0000 Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=) 2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: RDKVmStmkBKUvkKYam7DmIcIfCKT6c9+94jEbcTGwqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:35:c0:f5:2a:c4:7d:98:c7:ad:b1:97:20:a4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Validity Not Before: Dec 5 21:00:45 2025 GMT Not After : Dec 6 21:00:45 2025 GMT Subject: CN=8b299ecab239b64c1d0fc6fc6ef50913c0fc1fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:b4:4c:4a:d1:8b:c7:25:d9:64:99:83:ae: 8c:6d:3a:06:ee:54:d7:2d:17:1b:07:52:85:20:f8: 07:cb:4e:c4:18:93:99:c0:44:19:e5:5d:4d:99:e8: d6:5d:b8:bf:ad:a7:e2:32:f3:e0:c5:46:7f:02:b3: be:af:8d:4b:18:42:1d:c6:b4:6d:0a:c5:d5:71:08: 82:ec:0b:1e:c6:03:fe:f7:94:29:0d:db:fe:93:a0: 11:95:77:11:6f:d6:17:22:c2:c6:61:22:4e:37:65: 11:9e:10:91:c5:94:78:57:01:68:7d:ae:55:60:82: 0f:e7:40:de:ee:1f:bd:21:70:70:66:21:bd:db:21: 61:0d:af:19:71:73:86:83:a4:39:8c:1b:9e:7a:8a: 42:b4:51:d2:d5:4a:16:03:4f:5a:b2:ba:04:83:ab: 5d:d2:db:3b:12:62:19:15:33:61:48:78:c9:ba:4c: 41:a3:75:e0:dd:bc:18:bc:4d:2d:01:81:b5:f2:70: 40:85:95:61:eb:a0:36:50:f7:5b:c9:bf:a4:dc:ef: fa:7b:cc:93:a1:00:76:b3:47:7e:16:0e:d6:07:4b: c6:6d:63:5a:d5:64:93:6d:bb:c2:43:b2:c5:1c:13: 12:7b:ca:6e:1c:fa:a1:b0:df:8d:dd:a4:35:4b:16: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:29:9E:CA:B2:39:B6:4C:1D:0F:C6:FC:6E:F5:09:13:C0:FC:1F:D9 X509v3 Authority Key Identifier: keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0f:6c:6d:20:cc:6b:15:94:d7:90:29:0f:56:27:1f:6c:7d: 46:61:31:94:ed:f6:1f:05:39:fc:53:d9:c4:8d:49:a9:06:52: b0:63:a5:31:21:5d:ff:f1:8c:99:f7:cf:9e:ab:c3:9c:b5:60: 1a:87:72:7d:97:f9:80:14:41:55:06:40:7e:c8:c7:67:69:bc: 70:34:c8:fa:a0:ea:3c:2b:13:10:90:f6:7c:81:80:39:17:45: 75:2e:5d:3c:85:18:cd:dd:d6:ff:c2:d5:58:9f:31:d3:51:bc: a6:7a:4a:c9:42:70:0b:d6:08:ef:c1:9c:91:2c:7a:4f:04:18: d2:24:4e:9d:14:f7:3f:42:ac:3a:b1:98:58:df:36:b7:bc:60: f7:51:6a:19:f1:22:0b:82:55:de:f9:97:59:36:cf:e7:33:5e: 83:e9:01:76:e6:b4:7f:c2:d0:ea:54:80:cd:55:27:7d:37:f5: f9:c4:46:4b:be:cb:da:77:e1:b1:2c:10:d5:f8:34:5f:95:74: da:05:35:b1:0d:f0:e0:66:f9:ea:4d:d7:9f:92:ba:e4:f6:20: 01:7e:0c:8c:58:df:ed:0e:f0:74:80:01:55:3b:d0:40:90:b1: 99:27:9c:47:20:74:18:8b:2e:c5:af:96:68:43:05:19:f0:b3: a7:53:58:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUTXA9SrEfZjHrbGXIKTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDE1Y2JhMjJlMzMxYWRhOTFmZjRkYzY2ODhlNWZhMGFm NDU3NjkwHhcNMjUxMjA1MjEwMDQ1WhcNMjUxMjA2MjEwMDQ1WjAzMTEwLwYDVQQD Eyg4YjI5OWVjYWIyMzliNjRjMWQwZmM2ZmM2ZWY1MDkxM2MwZmMxZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3e0TErRi8cl2WSZg66MbToG7lTX LRcbB1KFIPgHy07EGJOZwEQZ5V1NmejWXbi/rafiMvPgxUZ/ArO+r41LGEIdxrRt CsXVcQiC7AsexgP+95QpDdv+k6ARlXcRb9YXIsLGYSJON2URnhCRxZR4VwFofa5V YIIP50De7h+9IXBwZiG92yFhDa8ZcXOGg6Q5jBueeopCtFHS1UoWA09asroEg6td 0ts7EmIZFTNhSHjJukxBo3Xg3bwYvE0tAYG18nBAhZVh66A2UPdbyb+k3O/6e8yT oQB2s0d+Fg7WB0vGbWNa1WSTbbvCQ7LFHBMSe8puHPqhsN+N3aQ1SxaG8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIspnsqyObZMHQ/G/G71CRPA/B/ZMB8GA1UdIwQY MBaAFGdBXLoi4zGtqR/03GaI5foK9FdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDIt NjY2NDNlMDY2M2RmLzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDItNjY2NDNlMDY2M2Rm LzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKg9sbSDM axWU15ApD1YnH2x9RmExlO32HwU5/FPZxI1JqQZSsGOlMSFd//GMmffPnqvDnLVg GodyfZf5gBRBVQZAfsjHZ2m8cDTI+qDqPCsTEJD2fIGAORdFdS5dPIUYzd3W/8LV WJ8x01G8pnpKyUJwC9YI78GckSx6TwQY0iROnRT3P0KsOrGYWN82t7xg91FqGfEi C4JV3vmXWTbP5zNeg+kBdua0f8LQ6lSAzVUnfTf1+cRGS77L2nfhsSwQ1fg0X5V0 2gU1sQ3w4Gb56k3Xn5K65PYgAX4MjFjf7Q7wdIABVTvQQJCxmSecRyB0GIsuxa+W aEMFGfCzp1NYVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:00 2025 by rpki-client