This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json) Hash identifier: Zq3RiYwR4NxWc9rXqdhAXhl/FJRfQqku1NuMci4JBdQ= Subject key identifier: 5D:B7:F2:FC:1A:93:4D:07:45:4B:03:20:7D:E7:A1:7B:FD:10:F4:DE Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Certificate serial: 019AF1D186D5662D76F2B5462969283045FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: gw8U4TmpsS35V0mP1koAuIkImkEtLBarY90bJL2Yxes=) 2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:86:d5:66:2d:76:f2:b5:46:29:69:28:30:45:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=5db7f2fc1a934d07454b03207de7a17bfd10f4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:ec:11:b0:f5:01:d1:2c:c2:c9:37:a1:68: 9e:64:4a:7e:49:fe:ef:74:1f:1a:0e:c3:b3:6a:2f: f4:3e:bb:ad:d5:8e:68:bd:f7:89:e4:d6:87:4b:4c: 24:4a:59:4d:a3:78:b3:67:ae:bc:3d:c1:e9:17:1a: 6b:0a:43:0a:02:26:43:86:f3:ef:40:07:2e:bb:96: b2:3f:4b:5f:02:1f:99:1b:ca:00:01:f6:64:3d:56: 28:96:7f:a3:6b:c3:e0:6c:a0:dd:ab:03:3c:ef:b8: fe:3b:87:18:ac:89:33:56:b5:fb:9d:7d:51:53:06: 8f:60:18:c0:d0:d3:f6:fc:a3:8c:d2:0d:7a:4c:75: fd:b5:94:94:d4:5d:63:36:b4:53:1a:04:a0:e7:f7: b0:d7:f0:18:28:05:4f:bd:b5:5c:5f:37:13:2e:ae: e4:bb:0a:d7:ca:71:ea:1b:f8:8f:99:73:ad:80:08: 8a:3d:b9:ee:f0:b7:8f:08:3f:80:ba:56:58:f3:da: 76:bf:de:29:ef:6f:67:c9:98:22:25:f2:85:e8:52: fb:31:f1:b4:6d:15:2b:0f:d4:90:26:bd:34:f3:ae: 14:f2:e0:21:79:2b:40:d6:3e:3b:0b:50:8b:42:c9: 0c:80:bf:9c:23:1a:68:a7:cf:fd:27:c0:dd:6d:75: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B7:F2:FC:1A:93:4D:07:45:4B:03:20:7D:E7:A1:7B:FD:10:F4:DE X509v3 Authority Key Identifier: keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:44:5f:95:d1:32:01:48:43:e5:32:2c:51:0c:f3:10:ce:24: 86:e0:42:a2:2c:8d:99:5d:d3:e3:5b:43:a4:74:1b:27:cc:79: 26:af:b3:2e:54:9b:93:92:01:84:18:8c:60:3c:f3:b9:d3:4a: c4:05:e1:7f:ed:cf:cd:75:75:fc:eb:fb:1c:f4:a9:60:6f:b5: 60:b4:20:49:02:1d:27:28:35:f0:43:16:e5:91:2a:0c:07:06: 3d:63:43:21:74:a4:b5:58:55:a4:37:07:05:49:58:19:53:ba: 2d:af:6b:11:9a:e6:a6:35:3d:20:e1:d2:47:e8:44:19:90:62: 6f:84:c2:25:79:42:e2:be:e1:de:7e:cc:8c:59:ca:47:63:25: 93:90:77:81:75:be:10:d5:7d:6a:e1:be:86:12:16:b5:53:df: 4f:cd:58:d0:4a:0c:3e:62:1b:34:e9:d7:4a:43:f1:3f:71:08: f6:f0:7e:4f:ce:38:89:75:eb:e0:6c:5e:59:fa:4e:9c:9f:39: bb:9d:88:21:58:d6:37:e0:f8:e1:44:39:79:47:c9:72:20:1f: 5b:39:f7:02:8e:c8:82:c9:5f:d7:ae:dc:04:f4:aa:71:d2:a2: 85:6f:b3:e2:b2:06:50:c8:50:2b:13:a3:27:35:2e:21:76:9f: 96:ee:11:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YbVZi128rVGKWkoMEX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1 ZDNmNTAwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD Eyg1ZGI3ZjJmYzFhOTM0ZDA3NDU0YjAzMjA3ZGU3YTE3YmZkMTBmNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArErsEbD1AdEswsk3oWieZEp+Sf7v dB8aDsOzai/0Prut1Y5ovfeJ5NaHS0wkSllNo3izZ668PcHpFxprCkMKAiZDhvPv QAcuu5ayP0tfAh+ZG8oAAfZkPVYoln+ja8PgbKDdqwM877j+O4cYrIkzVrX7nX1R UwaPYBjA0NP2/KOM0g16THX9tZSU1F1jNrRTGgSg5/ew1/AYKAVPvbVcXzcTLq7k uwrXynHqG/iPmXOtgAiKPbnu8LePCD+AulZY89p2v94p729nyZgiJfKF6FL7MfG0 bRUrD9SQJr00864U8uAheStA1j47C1CLQskMgL+cIxpop8/9J8DdbXU8GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF238vwak00HRUsDIH3noXv9EPTeMB8GA1UdIwQY MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0RfldEy AUhD5TIsUQzzEM4khuBCoiyNmV3T41tDpHQbJ8x5Jq+zLlSbk5IBhBiMYDzzudNK xAXhf+3PzXV1/Ov7HPSpYG+1YLQgSQIdJyg18EMW5ZEqDAcGPWNDIXSktVhVpDcH BUlYGVO6La9rEZrmpjU9IOHSR+hEGZBib4TCJXlC4r7h3n7MjFnKR2Mlk5B3gXW+ ENV9auG+hhIWtVPfT81Y0EoMPmIbNOnXSkPxP3EI9vB+T844iXXr4GxeWfpOnJ85 u52IIVjWN+D44UQ5eUfJciAfWzn3Ao7Igslf167cBPSqcdKihW+z4rIGUMhQKxOj JzUuIXaflu4RLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:12 2025 by rpki-client