This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json) Hash identifier: c/8BNtmG94qlJKXpmygSMOkJXTfiJl/s9Hbu7WQYOts= Subject key identifier: 1B:09:9B:63:EE:6C:CD:60:DE:3C:E4:6C:C7:A6:76:D6:2E:03:2C:F8 Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Certificate serial: 019AF276E3C16B687E37F8CA0C1121BBEABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft Manifest number: 0661 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=) 2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: lLHDETRCupEZjHq9s68XH4kWS1BDJiFvhJpLe2C2Nh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e3:c1:6b:68:7e:37:f8:ca:0c:11:21:bb:ea:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=1b099b63ee6ccd60de3ce46cc7a676d62e032cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:f7:5a:e9:a5:d9:81:68:49:69:08:90:4e: c6:87:a1:d1:0d:f3:80:b6:f3:49:24:63:12:8a:5a: 32:b1:a6:eb:34:31:e6:17:d1:b3:15:03:a0:d1:f4: ef:54:35:39:54:be:20:94:de:62:40:1e:7a:fc:71: c1:03:ae:50:26:5c:07:d5:da:f3:8c:46:1d:8b:48: f8:dc:5d:68:f3:4f:94:ec:d9:e5:34:d9:d9:d7:ed: 8d:2f:7a:34:4a:af:95:6c:13:1a:7c:4a:b6:85:65: a8:e6:95:a4:18:25:30:a1:10:48:35:4d:6b:5a:ce: 98:0e:59:58:61:2b:94:d2:09:b5:2d:fd:a0:02:1e: 53:1d:ae:12:58:fd:01:93:f4:cb:0b:e8:3c:36:62: bc:ad:d6:6b:b4:a4:d1:d7:b2:6a:8f:67:45:d8:bc: 28:39:09:6d:14:32:99:82:ee:84:2e:14:b1:45:38: 00:e8:7d:cf:10:15:c4:4a:e9:34:56:e6:71:4e:11: e5:1c:1c:1d:d7:b0:64:4d:c2:28:db:68:ba:c1:35: b4:53:c9:0e:c7:a3:5a:a0:f7:de:94:e7:59:e0:6e: 1d:12:ec:df:67:1f:c0:b4:f8:86:02:92:51:32:86: 4c:64:d5:f2:eb:f6:ef:92:67:1d:31:2d:25:a6:80: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:09:9B:63:EE:6C:CD:60:DE:3C:E4:6C:C7:A6:76:D6:2E:03:2C:F8 X509v3 Authority Key Identifier: keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5d:c8:44:42:f5:e5:11:c3:fa:0a:15:7b:a3:15:43:86:af: 4e:97:94:99:b6:77:60:f8:b0:ee:60:8f:2c:9e:34:7c:26:ba: e5:0f:c9:ee:30:02:81:8a:e3:7f:0b:b3:5b:e0:af:22:a5:5f: fe:9f:8a:7d:75:36:70:bf:20:cc:a9:2b:25:8e:3b:6d:27:cd: 52:4f:d1:7d:b9:09:a9:f5:35:cf:86:5c:d9:69:c2:b7:5f:cd: b0:12:6a:57:9a:7d:6f:dd:9c:d1:c3:e8:f2:a6:2a:1a:ff:02: 2e:5e:74:76:f1:41:a1:8e:f6:97:be:fd:8e:ea:9d:66:14:76: 1f:b5:e4:8f:d8:f1:67:76:12:9c:be:38:00:df:7b:0c:f5:44: cb:bf:f2:ac:22:f2:5b:34:0f:22:32:dd:75:64:b4:84:7f:ac: 4e:c9:bf:76:a7:af:a5:e3:50:cf:76:94:a3:b7:18:53:e2:51: 4a:4a:d0:af:85:fe:67:ec:88:ac:7f:20:3b:03:d6:6e:89:cd: 7e:0d:32:6d:8c:54:e9:ae:8f:2c:3f:b4:79:67:d2:47:68:78: e4:f9:7c:d0:fe:f2:f4:83:1a:3f:99:3f:7a:82:43:45:e4:0a: 24:f6:7e:21:5f:f2:cf:fd:f0:7e:db:5e:47:4f:e6:6b:71:cd: 90:a1:35:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduPBa2h+N/jKDBEhu+q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm MmRjNzcwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD EygxYjA5OWI2M2VlNmNjZDYwZGUzY2U0NmNjN2E2NzZkNjJlMDMyY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc73Wuml2YFoSWkIkE7Gh6HRDfOA tvNJJGMSiloysabrNDHmF9GzFQOg0fTvVDU5VL4glN5iQB56/HHBA65QJlwH1drz jEYdi0j43F1o80+U7NnlNNnZ1+2NL3o0Sq+VbBMafEq2hWWo5pWkGCUwoRBINU1r Ws6YDllYYSuU0gm1Lf2gAh5THa4SWP0Bk/TLC+g8NmK8rdZrtKTR17Jqj2dF2Lwo OQltFDKZgu6ELhSxRTgA6H3PEBXESuk0VuZxThHlHBwd17BkTcIo22i6wTW0U8kO x6NaoPfelOdZ4G4dEuzfZx/AtPiGApJRMoZMZNXy6/bvkmcdMS0lpoCRtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsJm2PubM1g3jzkbMemdtYuAyz4MB8GA1UdIwQY MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut ZDJkYjczZmYzMWJjLzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF3IREL1 5RHD+goVe6MVQ4avTpeUmbZ3YPiw7mCPLJ40fCa65Q/J7jACgYrjfwuzW+CvIqVf /p+KfXU2cL8gzKkrJY47bSfNUk/RfbkJqfU1z4Zc2WnCt1/NsBJqV5p9b92c0cPo 8qYqGv8CLl50dvFBoY72l779juqdZhR2H7Xkj9jxZ3YSnL44AN97DPVEy7/yrCLy WzQPIjLddWS0hH+sTsm/dqevpeNQz3aUo7cYU+JRSkrQr4X+Z+yIrH8gOwPWbonN fg0ybYxU6a6PLD+0eWfSR2h45Pl80P7y9IMaP5k/eoJDReQKJPZ+IV/yz/3wftte R0/ma3HNkKE1JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:50 2025 by rpki-client