This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json) Hash identifier: 9jrk0XyGh+0r4BXH6BYN8coM/24GXDjs8sq0R10sbw4= Subject key identifier: 6C:AD:93:5C:03:35:B3:66:04:85:E5:F2:4D:3D:C9:00:49:82:A3:C4 Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08 Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008 Certificate serial: 019AF19B46123FF4C6C4BB50D4CCA7B93DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft Manifest number: 11D1 Signing time: Sat 06 Dec 2025 03:01:16 +0000 Manifest this update: Sat 06 Dec 2025 03:01:16 +0000 Manifest next update: Sun 07 Dec 2025 03:01:16 +0000 Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=) 2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: +d3YVaB7IdaQ2HF4IwHNlErva48W/a+ZKbzaxFckBuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:46:12:3f:f4:c6:c4:bb:50:d4:cc:a7:b9:3d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008 Validity Not Before: Dec 6 03:01:16 2025 GMT Not After : Dec 7 03:01:16 2025 GMT Subject: CN=6cad935c0335b3660485e5f24d3dc9004982a3c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:9f:91:ff:0d:26:55:ae:2f:2e:0c:69:5b: be:9f:e7:92:50:c0:ef:f2:fd:41:5c:18:a8:1e:fb: 73:34:4e:b5:f4:b1:ae:d4:fe:5b:00:f1:b6:30:e2: 5c:16:c0:7a:10:f1:4d:68:0a:72:c7:74:f4:75:74: 64:ac:17:b7:69:2e:97:53:8f:12:08:c1:8e:c6:90: b7:50:7b:bb:c7:97:19:fb:a0:d3:84:5c:db:28:e0: fc:63:3f:82:49:61:03:80:c2:7b:91:0e:2e:23:6e: 7b:d9:5c:70:37:f0:90:df:19:bc:dc:62:64:3f:c5: b5:f7:ac:4c:c2:15:b5:31:20:d3:0a:5b:6b:4a:3e: 37:4e:6c:06:14:4b:ef:f6:40:ae:35:d1:54:99:c7: 22:1f:cb:e4:c8:de:64:e9:92:bf:06:3e:02:fd:f7: 0d:51:d1:66:4e:a3:85:36:40:73:70:e4:1b:3c:9b: c8:cb:62:69:c3:37:4c:7b:29:78:eb:6a:06:cf:24: c0:0a:76:4f:ac:e3:79:7b:da:37:83:bd:be:e1:3b: dc:4c:23:2c:7a:84:97:f0:9e:01:52:7c:a8:7d:3d: cd:73:bd:82:00:29:61:d4:df:47:c1:8a:90:da:56: 88:53:b3:d5:06:b0:13:87:db:ff:6c:23:c6:2d:27: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:93:5C:03:35:B3:66:04:85:E5:F2:4D:3D:C9:00:49:82:A3:C4 X509v3 Authority Key Identifier: keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:dc:c7:4d:7f:a4:07:ea:32:50:bf:f6:f1:34:5e:03:48:15: 12:38:e1:78:8e:02:bc:ab:7b:f4:72:b6:65:8d:fb:fe:69:b5: dd:3d:2f:af:5b:1a:ab:8b:40:13:82:bc:0d:70:41:b6:88:da: 3d:27:6f:50:ee:80:16:61:7e:71:92:91:90:c6:e5:82:fb:be: 0b:a2:3d:f1:d1:84:ac:41:4a:00:f7:4b:99:b7:de:87:87:ca: 40:55:47:88:25:c6:bb:a2:7d:63:20:a8:cf:ba:30:3f:9b:29: dd:e6:89:cf:ce:45:04:e2:8f:53:4c:57:53:95:0c:92:fa:c2: 84:22:af:1e:37:1b:99:e2:59:a9:ea:d2:f2:c5:81:43:68:a9: 08:e1:ab:48:54:c5:99:29:d8:97:67:ac:f8:9d:d3:be:89:c8: 6f:eb:03:11:cc:87:9a:6d:c3:ac:3c:4a:7a:74:65:a6:0a:b9: 5f:8f:0d:e5:4b:ab:da:20:76:70:f9:ea:ce:5d:4c:fc:df:58: 6e:4c:69:b0:86:de:03:20:36:02:ce:98:11:de:3d:86:02:e6: e0:ff:c8:dc:38:40:7c:76:50:53:dc:1e:b1:7a:29:e3:94:94: 2a:9b:7c:7e:93:73:df:d9:24:90:d5:6c:97:c9:d2:fd:91:9f: 95:df:ab:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0YSP/TGxLtQ1MynuT27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNzBmM2QxMTE4MzYxYjU5ZjMzMTVmNTkxNjQzZTFkYWJi YjIwMDgwHhcNMjUxMjA2MDMwMTE2WhcNMjUxMjA3MDMwMTE2WjAzMTEwLwYDVQQD Eyg2Y2FkOTM1YzAzMzViMzY2MDQ4NWU1ZjI0ZDNkYzkwMDQ5ODJhM2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pifkf8NJlWuLy4MaVu+n+eSUMDv 8v1BXBioHvtzNE619LGu1P5bAPG2MOJcFsB6EPFNaApyx3T0dXRkrBe3aS6XU48S CMGOxpC3UHu7x5cZ+6DThFzbKOD8Yz+CSWEDgMJ7kQ4uI2572VxwN/CQ3xm83GJk P8W196xMwhW1MSDTCltrSj43TmwGFEvv9kCuNdFUmcciH8vkyN5k6ZK/Bj4C/fcN UdFmTqOFNkBzcOQbPJvIy2JpwzdMeyl462oGzyTACnZPrON5e9o3g72+4TvcTCMs eoSX8J4BUnyofT3Nc72CAClh1N9HwYqQ2laIU7PVBrATh9v/bCPGLSeiOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGytk1wDNbNmBIXl8k09yQBJgqPEMB8GA1UdIwQY MBaAFM9w89ERg2G1nzMV9ZFkPh2ruyAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEt ZmJiOWY5MWM4Y2NlLzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEtZmJiOWY5MWM4Y2Nl LzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9zHTX+k B+oyUL/28TReA0gVEjjheI4CvKt79HK2ZY37/mm13T0vr1saq4tAE4K8DXBBtoja PSdvUO6AFmF+cZKRkMblgvu+C6I98dGErEFKAPdLmbfeh4fKQFVHiCXGu6J9YyCo z7owP5sp3eaJz85FBOKPU0xXU5UMkvrChCKvHjcbmeJZqerS8sWBQ2ipCOGrSFTF mSnYl2es+J3TvonIb+sDEcyHmm3DrDxKenRlpgq5X48N5Uur2iB2cPnqzl1M/N9Y bkxpsIbeAyA2As6YEd49hgLm4P/I3DhAfHZQU9wesXop45SUKpt8fpNz39kkkNVs l8nS/ZGfld+rLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:32 2025 by rpki-client