This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json) Hash identifier: a4iyEKvajqP0kP6qXP2bGcO2iNKN+1MqFlAiY/If1T0= Subject key identifier: BF:19:4F:40:E2:00:31:3B:DC:34:0F:16:48:68:FF:45:44:06:92:72 Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019AF2766E2871545BFBC264971025DE9651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft Manifest number: 0781 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa (hash: 1fDwwlAjSpOtIIFVkTnVEbqYyBXnYG415TFYdUrUKtg=) 2: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=) 3: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=) 4: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=) 5: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=) 6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: KHawsbf2uptK3FXnUdsiOcYeiPTNdjEBga1VeHGmbx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6e:28:71:54:5b:fb:c2:64:97:10:25:de:96:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=bf194f40e200313bdc340f164868ff4544069272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5d:84:30:3e:2f:4e:a1:06:e0:f5:19:ec:a3: ff:45:56:a8:37:98:e2:b4:98:9e:68:d5:83:65:6e: f7:e7:a9:52:2c:14:0c:c2:d0:15:20:28:71:8a:bf: b9:c5:98:06:b4:5d:f2:3e:22:c6:f9:20:08:31:c3: a4:66:41:97:75:22:c4:d1:09:49:02:ac:0b:4e:40: eb:0f:60:e1:97:4f:8f:1e:7f:de:12:c3:04:4e:f9: 5b:58:44:0d:1a:aa:19:71:12:8b:73:1a:13:ad:3f: c8:53:4b:e1:76:a0:01:ed:eb:1c:ce:13:e2:ee:e9: 69:d4:74:1f:57:a1:2f:e5:3c:72:20:9b:9a:3f:ee: b9:36:0b:39:e7:27:70:cf:81:0d:64:6a:dc:26:6d: ec:6e:e5:1d:6c:8a:a8:4e:f3:f2:0a:bd:9d:ce:42: ad:fd:3c:43:ab:fc:ae:3d:4b:46:02:36:e6:aa:a4: 93:dd:e1:10:13:55:3c:bc:73:96:b8:16:5b:3d:cd: 9a:fb:9c:17:7d:3e:a3:e6:ba:8b:86:5e:7c:b7:74: d1:3f:41:0e:d8:c2:b0:e0:73:ec:fe:a4:cf:9a:84: 0c:09:3e:22:8d:01:f1:05:43:e4:fc:5a:ad:c9:b5: ef:30:9e:a6:ad:5a:51:a6:16:99:89:df:a9:74:1e: 07:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:19:4F:40:E2:00:31:3B:DC:34:0F:16:48:68:FF:45:44:06:92:72 X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:59:52:07:59:7f:7b:34:36:63:16:38:22:58:0d:a4:36:b6: d4:8c:dd:f1:ab:aa:3f:cb:7e:1e:0e:07:30:2c:03:0a:2c:1a: 2c:6d:d8:28:07:52:6b:65:c4:9b:8b:95:5b:ba:d9:1c:d2:5b: e6:e8:6d:c3:17:f6:a5:6e:8a:42:9c:1c:4c:94:03:ff:e0:e7: 47:b2:b7:18:f8:ee:05:c0:55:1e:1d:9d:09:1d:07:1c:12:39: ca:14:37:8b:ed:35:12:91:47:fd:fd:5c:09:b2:a1:e7:74:31: b4:fe:59:73:78:b9:5d:2e:30:46:06:00:91:90:98:2d:79:32: 47:93:3d:f0:2a:85:87:6e:b5:ae:11:40:4b:55:66:19:b2:66: 25:fd:cd:91:14:bc:98:ca:5a:bd:2a:88:52:9c:e3:0b:70:5b: 15:92:5c:d2:58:f9:07:96:48:ca:ae:b9:18:b1:a5:8d:5e:a4: 84:91:b4:57:39:df:3e:84:ee:05:31:24:f9:70:be:fd:76:d5: 6c:a5:3c:3e:91:72:98:00:cc:3d:bd:c0:44:c9:57:6c:fa:80: ef:b8:43:e5:5f:4f:aa:48:7a:90:94:a8:d1:ae:57:11:ea:dc: dc:01:28:97:a5:9d:a5:2b:7b:21:f8:ac:b9:5e:b6:3c:38:8a: 62:e2:e7:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm4ocVRb+8JklxAl3pZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhiZjE5NGY0MGUyMDAzMTNiZGMzNDBmMTY0ODY4ZmY0NTQ0MDY5MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul2EMD4vTqEG4PUZ7KP/RVaoN5ji tJieaNWDZW7356lSLBQMwtAVIChxir+5xZgGtF3yPiLG+SAIMcOkZkGXdSLE0QlJ AqwLTkDrD2Dhl0+PHn/eEsMETvlbWEQNGqoZcRKLcxoTrT/IU0vhdqAB7esczhPi 7ulp1HQfV6Ev5TxyIJuaP+65Ngs55ydwz4ENZGrcJm3sbuUdbIqoTvPyCr2dzkKt /TxDq/yuPUtGAjbmqqST3eEQE1U8vHOWuBZbPc2a+5wXfT6j5rqLhl58t3TRP0EO 2MKw4HPs/qTPmoQMCT4ijQHxBUPk/FqtybXvMJ6mrVpRphaZid+pdB4H1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8ZT0DiADE73DQPFkho/0VEBpJyMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJllSB1l/ ezQ2YxY4IlgNpDa21Izd8auqP8t+Hg4HMCwDCiwaLG3YKAdSa2XEm4uVW7rZHNJb 5uhtwxf2pW6KQpwcTJQD/+DnR7K3GPjuBcBVHh2dCR0HHBI5yhQ3i+01EpFH/f1c CbKh53QxtP5Zc3i5XS4wRgYAkZCYLXkyR5M98CqFh261rhFAS1VmGbJmJf3NkRS8 mMpavSqIUpzjC3BbFZJc0lj5B5ZIyq65GLGljV6khJG0VznfPoTuBTEk+XC+/XbV bKU8PpFymADMPb3ARMlXbPqA77hD5V9Pqkh6kJSo0a5XEerc3AEol6WdpSt7Ifis uV62PDiKYuLnSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:00 2025 by rpki-client