This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json) Hash identifier: E75T5i1mpvDJqgZsAsSZhmxQc7KhUH3FfjaDahu+9KU= Subject key identifier: 09:6F:23:00:62:79:7C:FB:74:DF:0D:63:3A:01:2F:41:D6:AC:02:F4 Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4 Certificate serial: 019AF19B411C816A8E25E80C7AB75EA19B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=) 2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: eHD1KxNf7YzxXKiSFtS1FC55efqOjnwNnwb4CFPUX8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:41:1c:81:6a:8e:25:e8:0c:7a:b7:5e:a1:9b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=096f230062797cfb74df0d633a012f41d6ac02f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:18:46:b6:c0:6e:3b:2b:88:2f:7d:d0:e4: f2:ed:87:4a:fb:a2:87:3b:28:0b:d7:7b:9b:7c:e6: 8b:bc:56:dc:14:75:a2:2e:cb:a3:1b:b5:59:51:13: 01:52:c3:c9:57:b8:c6:02:5a:f9:47:3e:e5:c3:25: db:66:32:33:dd:46:10:c2:2f:f0:a5:02:5e:11:d3: 41:7b:35:23:80:76:57:81:a5:24:41:10:b0:80:cc: 15:23:e8:cf:45:5a:dd:c1:b7:d9:24:9d:18:d2:77: 55:fa:cf:16:5d:9e:e9:3e:76:2d:93:81:b2:90:fe: 50:7f:de:fb:8c:17:9c:32:d9:63:9b:22:9a:2c:9d: fd:c7:a3:dc:1e:00:3e:6e:18:58:8a:be:a4:2b:e0: d9:ae:6b:b5:52:92:4a:dc:cd:7c:4e:c2:d0:66:e8: f8:26:38:80:7a:ff:ce:3f:ea:e0:8d:6f:c1:ba:6a: 31:c2:da:ce:30:6d:0a:73:ca:c9:3f:7e:0a:5f:2a: 37:e1:b9:b0:65:1c:58:f9:44:0c:fe:61:64:4a:7e: 48:8e:e2:38:0c:c7:b3:14:cd:b0:22:39:6a:b1:7b: 2e:bb:76:e9:40:5a:97:dd:52:99:5b:db:3e:b5:a2: 0a:5d:40:9b:e7:cf:27:47:2b:29:9b:97:8e:00:57: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6F:23:00:62:79:7C:FB:74:DF:0D:63:3A:01:2F:41:D6:AC:02:F4 X509v3 Authority Key Identifier: keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:06:78:a2:c4:d1:3a:79:4c:ad:b7:ad:c4:1e:1b:0a:69:ba: fc:3f:61:a7:93:35:98:76:64:ce:7d:67:f2:24:77:07:c9:dd: 7d:d2:04:a2:7c:9d:97:61:7a:d6:30:3d:d1:65:96:78:9c:1a: a8:a4:22:da:7d:01:98:75:f6:33:04:16:4f:e8:a8:31:75:b7: 50:76:31:d2:17:ad:1d:a9:58:9a:a5:d6:53:c9:61:8a:54:b5: f5:0e:98:05:a8:b4:7b:09:5b:41:24:f5:bf:f7:61:c5:4b:e5: 1a:08:d8:3b:b1:cf:5d:be:e3:8d:0d:bc:0a:6a:47:5c:3f:41: ed:62:b9:05:d1:01:bc:3c:c0:ae:f4:5f:de:7d:55:ac:c0:05: 5a:84:94:3f:7d:30:96:02:aa:a1:f7:d1:be:07:61:df:12:e8: c2:99:dc:22:9f:3c:cd:4d:8b:be:5c:5b:81:4a:ef:f1:a1:fe: 8f:32:b6:ea:a8:13:bf:9f:40:06:cf:20:a7:f2:f3:a3:cf:bc: 36:bd:69:ae:4f:ed:b5:21:73:72:0a:a1:e2:bc:3f:ed:fc:60: 0a:e2:d3:04:8b:a3:27:23:de:dc:5b:22:31:60:ce:9a:db:b9: 82:47:86:2e:98:50:4c:08:09:d7:57:48:6b:9f:7c:df:26:b1: 42:3d:b4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0EcgWqOJegMerdeoZs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDE2NzgxYmNhNjRjMmIyMzY0MzRlZGVmZmU2ZTQ1MmU3 MTYyZDQwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EygwOTZmMjMwMDYyNzk3Y2ZiNzRkZjBkNjMzYTAxMmY0MWQ2YWMwMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPMYRrbAbjsriC990OTy7YdK+6KH OygL13ubfOaLvFbcFHWiLsujG7VZURMBUsPJV7jGAlr5Rz7lwyXbZjIz3UYQwi/w pQJeEdNBezUjgHZXgaUkQRCwgMwVI+jPRVrdwbfZJJ0Y0ndV+s8WXZ7pPnYtk4Gy kP5Qf977jBecMtljmyKaLJ39x6PcHgA+bhhYir6kK+DZrmu1UpJK3M18TsLQZuj4 JjiAev/OP+rgjW/BumoxwtrOMG0Kc8rJP34KXyo34bmwZRxY+UQM/mFkSn5IjuI4 DMezFM2wIjlqsXsuu3bpQFqX3VKZW9s+taIKXUCb588nRyspm5eOAFduOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAlvIwBieXz7dN8NYzoBL0HWrAL0MB8GA1UdIwQY MBaAFGfRZ4G8pkwrI2Q07e/+bkUucWLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEt YWQ1OTU1N2UyOGMyLzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEtYWQ1OTU1N2UyOGMy LzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAZ4osTR OnlMrbetxB4bCmm6/D9hp5M1mHZkzn1n8iR3B8ndfdIEonydl2F61jA90WWWeJwa qKQi2n0BmHX2MwQWT+ioMXW3UHYx0hetHalYmqXWU8lhilS19Q6YBai0ewlbQST1 v/dhxUvlGgjYO7HPXb7jjQ28CmpHXD9B7WK5BdEBvDzArvRf3n1VrMAFWoSUP30w lgKqoffRvgdh3xLowpncIp88zU2LvlxbgUrv8aH+jzK26qgTv59ABs8gp/Lzo8+8 Nr1prk/ttSFzcgqh4rw/7fxgCuLTBIujJyPe3FsiMWDOmtu5gkeGLphQTAgJ11dI a5983yaxQj20sg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:43 2025 by rpki-client