This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json) Hash identifier: vQH3I8ALOUs9t3H2vNGiBwswis3ji3XhjqmWxTxXg4w= Subject key identifier: 87:C5:B9:4B:78:4C:DA:B3:79:0F:49:BF:9F:0D:25:5D:19:13:DD:DE Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019AF0888FACE617521FA316AF044E27B5D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft Manifest number: 0F12 Signing time: Fri 05 Dec 2025 22:01:12 +0000 Manifest this update: Fri 05 Dec 2025 22:01:12 +0000 Manifest next update: Sat 06 Dec 2025 22:01:12 +0000 Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=) 2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=) 3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: GCpkqDy4slt/X/GljfRyLHMhlnond4SS190re17sUjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:8f:ac:e6:17:52:1f:a3:16:af:04:4e:27:b5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Dec 5 22:01:12 2025 GMT Not After : Dec 6 22:01:12 2025 GMT Subject: CN=87c5b94b784cdab3790f49bf9f0d255d1913ddde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:5f:5d:19:56:c0:5c:9e:28:67:e5:b8:42: ef:69:76:bd:19:9f:a0:46:13:ec:fa:e8:c1:48:08: ce:78:6f:42:59:96:d3:73:4f:ca:2c:ce:39:f9:0b: d9:ed:9e:c8:83:05:d0:f2:ba:c3:a8:89:ce:dc:73: ae:3a:a3:17:cf:51:9c:24:60:22:bb:e5:14:35:e8: 36:93:5f:f9:db:c2:20:5e:e7:ec:27:dd:04:b5:76: d0:99:d7:23:78:ad:18:16:83:e5:0e:05:e5:25:e1: 3d:27:cf:bb:22:06:47:fd:d8:18:21:d0:37:64:e1: 8b:b2:d7:0f:60:b2:ea:0f:e0:ce:82:8e:ce:46:c6: 74:68:41:f3:ce:30:2e:d8:0e:35:71:37:e4:d4:b2: d7:04:6f:ac:2a:53:62:67:bb:ad:dc:e4:75:07:ad: 46:6e:ff:7a:ae:1e:36:af:29:b0:51:62:77:a0:47: f1:d6:e6:9a:3e:c1:bc:85:00:f4:98:5a:33:ca:cc: be:db:eb:31:1b:65:a4:78:66:11:90:df:de:54:b0: c6:46:f4:89:f9:2e:e7:2f:3a:63:a7:3b:25:58:a1: 57:33:de:cc:00:c3:ff:56:f4:04:24:f7:6e:08:70: 12:b2:9f:d3:fc:47:73:1d:16:f2:e3:03:e9:6a:42: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C5:B9:4B:78:4C:DA:B3:79:0F:49:BF:9F:0D:25:5D:19:13:DD:DE X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:8d:09:a6:37:ad:7c:f5:60:ef:e4:a6:c5:ac:ce:b3:6b: f9:fa:46:bd:b1:28:c0:c8:f9:38:38:10:57:4f:5a:9d:e4:e0: 45:24:b6:6b:f3:ab:b9:15:49:7f:0e:31:81:94:ac:62:b2:de: 77:16:73:b2:ec:5c:79:80:30:34:03:9f:70:d2:0c:80:57:38: 33:a4:0a:9d:e5:a7:03:9b:96:cf:53:90:7c:0f:ae:4d:61:cc: 60:fa:fc:c0:15:f8:ca:37:2f:b5:a4:1c:4b:97:a8:69:13:30: bc:d1:de:b6:bf:e8:9c:a9:74:f2:63:59:76:ab:1e:24:81:0a: b4:78:25:19:a3:27:fc:b5:da:05:98:67:aa:c9:2b:d6:2f:fe: b2:e3:0d:f1:04:18:83:c2:7f:89:6f:ee:71:00:4f:df:bb:b2: 2f:ef:4a:51:40:50:b8:f2:7f:6e:a0:73:b9:58:75:33:f5:25: 7d:10:8b:6a:e6:0e:dd:ba:5a:f2:f6:3f:b3:25:1a:fb:d1:f1: f0:9f:b8:97:d6:59:a9:22:1f:79:14:e0:d2:b8:79:10:a0:05: 58:49:58:3f:b9:dd:bf:29:c4:ee:be:31:22:95:01:38:43:1c: f1:41:f6:5a:7f:8f:a6:00:de:5b:fb:bf:da:3d:13:1c:77:67: a6:a6:e7:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiI+s5hdSH6MWrwROJ7XUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjUxMjA1MjIwMTEyWhcNMjUxMjA2MjIwMTEyWjAzMTEwLwYDVQQD Eyg4N2M1Yjk0Yjc4NGNkYWIzNzkwZjQ5YmY5ZjBkMjU1ZDE5MTNkZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy41fXRlWwFyeKGfluELvaXa9GZ+g RhPs+ujBSAjOeG9CWZbTc0/KLM45+QvZ7Z7IgwXQ8rrDqInO3HOuOqMXz1GcJGAi u+UUNeg2k1/528IgXufsJ90EtXbQmdcjeK0YFoPlDgXlJeE9J8+7IgZH/dgYIdA3 ZOGLstcPYLLqD+DOgo7ORsZ0aEHzzjAu2A41cTfk1LLXBG+sKlNiZ7ut3OR1B61G bv96rh42rymwUWJ3oEfx1uaaPsG8hQD0mFozysy+2+sxG2WkeGYRkN/eVLDGRvSJ +S7nLzpjpzslWKFXM97MAMP/VvQEJPduCHASsp/T/EdzHRby4wPpakKUHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfFuUt4TNqzeQ9Jv58NJV0ZE93eMB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieWNCaY3 rXz1YO/kpsWszrNr+fpGvbEowMj5ODgQV09aneTgRSS2a/OruRVJfw4xgZSsYrLe dxZzsuxceYAwNAOfcNIMgFc4M6QKneWnA5uWz1OQfA+uTWHMYPr8wBX4yjcvtaQc S5eoaRMwvNHetr/onKl08mNZdqseJIEKtHglGaMn/LXaBZhnqskr1i/+suMN8QQY g8J/iW/ucQBP37uyL+9KUUBQuPJ/bqBzuVh1M/UlfRCLauYO3bpa8vY/syUa+9Hx 8J+4l9ZZqSIfeRTg0rh5EKAFWElYP7ndvynE7r4xIpUBOEMc8UH2Wn+PpgDeW/u/ 2j0THHdnpqbncg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:11 2025 by rpki-client