This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json) Hash identifier: U5APO07KK4EhZAGf2cH1s99UOyAgmkQsaKbsFgj+c1s= Subject key identifier: 85:13:C2:81:F5:16:EE:75:66:13:A2:E9:D9:3E:91:20:9F:0B:68:AE Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36 Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036 Certificate serial: 019AF12E871126C53898D24ABE0371B86DB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft Manifest number: 046F Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: 8NRIip7PRvYkRKm_8iGpYTYG-fQ.roa (hash: baP/2HoWmnxywqu4ozYPStRBgvEVcCSlNjY9VrvxlOY=) 2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: lBoyPTqJ+UGpRbjhu0LsjrdcGeH4I09ybkHPEUPrACQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:87:11:26:c5:38:98:d2:4a:be:03:71:b8:6d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036 Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=8513c281f516ee756613a2e9d93e91209f0b68ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:9a:19:37:4e:a3:b8:62:2c:b9:b2:2b:fe: 72:19:99:c0:24:f3:13:a2:72:2d:25:8b:67:d5:a8: d0:f3:a6:8f:1c:f5:87:a6:0e:73:7f:f7:26:44:42: e5:99:a5:f5:6c:21:3d:43:50:15:f9:15:0c:17:09: 64:2c:62:60:20:17:ba:71:dd:88:a2:f3:ec:ea:57: 2a:b5:ad:c0:10:8d:12:d6:0c:39:75:4d:cd:9c:3d: 00:f9:23:0b:45:ae:75:59:3d:02:25:d2:58:12:d6: 19:09:b7:95:76:35:e8:c6:82:35:16:27:9f:9e:23: dc:c7:4e:78:66:48:27:c0:f1:4d:0f:93:ea:98:71: 4e:5e:64:90:d4:ae:7e:1e:2e:81:43:71:39:a3:8e: 3c:88:a9:57:c9:26:2c:7b:73:cd:39:27:31:7e:b9: 31:2f:29:de:d3:63:dd:36:9d:9a:0a:5a:b3:50:50: 82:6d:cf:34:1c:b0:64:fb:6c:1e:4c:26:33:48:11: 1c:b1:d6:db:8b:ff:92:f0:f0:d7:b2:7c:1d:db:ac: 66:db:af:00:91:42:9b:71:64:b1:3e:f7:66:45:bb: 73:c8:df:1f:95:f7:fe:31:30:e0:72:92:f5:15:e1: 50:a8:b1:7e:9d:6d:e4:8f:05:a1:f5:68:a9:13:18: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:C2:81:F5:16:EE:75:66:13:A2:E9:D9:3E:91:20:9F:0B:68:AE X509v3 Authority Key Identifier: keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:99:e5:8f:2e:27:0b:08:b0:2a:11:3d:05:c4:39:4f:90:0c: da:6a:59:de:76:4c:e9:91:f8:ad:97:2a:ba:88:da:f8:43:f9: de:ca:b3:17:c9:53:f5:2f:ce:d6:18:c1:2f:32:f4:76:63:36: a3:af:9c:99:bb:4f:06:ab:29:58:22:07:7c:41:fe:e1:5d:8d: 6c:00:a8:5e:11:cd:05:57:01:0a:e3:79:02:eb:a0:d5:ed:56: db:29:72:db:b1:8d:44:d6:d5:ba:28:12:1a:47:a5:7d:60:49: d6:4e:6a:fc:4a:6d:be:77:92:6c:a7:2a:8b:9f:78:a9:4f:5c: c2:1b:4c:32:96:80:89:27:7c:62:88:0a:e8:e3:53:2e:43:28: bf:79:82:32:ca:a1:ff:58:d0:f9:e0:75:f4:ad:b4:8e:0e:04: 15:22:74:52:c6:92:b7:62:96:23:90:7a:02:50:b5:e2:e3:22: 6e:e5:1d:0d:0f:f4:23:85:9a:58:ea:fb:3c:50:e5:39:5a:e4: ee:1f:b1:68:44:f7:ca:c0:af:db:92:1f:91:05:b8:54:0e:78: bf:98:c4:27:5b:43:ef:bd:4e:5b:25:af:db:8e:1a:38:a5:46: 48:8b:29:5e:d2:26:62:3a:2c:0b:2a:2c:ef:77:41:70:4a:3f: 46:85:b3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLocRJsU4mNJKvgNxuG20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTEzMTY2MTMwZDI5ZDVhZDhhNjA3ZDgxNDk4ZGE2NjAy NmQwMzYwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD Eyg4NTEzYzI4MWY1MTZlZTc1NjYxM2EyZTlkOTNlOTEyMDlmMGI2OGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tKaGTdOo7hiLLmyK/5yGZnAJPMT onItJYtn1ajQ86aPHPWHpg5zf/cmRELlmaX1bCE9Q1AV+RUMFwlkLGJgIBe6cd2I ovPs6lcqta3AEI0S1gw5dU3NnD0A+SMLRa51WT0CJdJYEtYZCbeVdjXoxoI1Fief niPcx054ZkgnwPFND5PqmHFOXmSQ1K5+Hi6BQ3E5o448iKlXySYse3PNOScxfrkx Lyne02PdNp2aClqzUFCCbc80HLBk+2weTCYzSBEcsdbbi/+S8PDXsnwd26xm268A kUKbcWSxPvdmRbtzyN8flff+MTDgcpL1FeFQqLF+nW3kjwWh9WipExhTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUTwoH1Fu51ZhOi6dk+kSCfC2iuMB8GA1UdIwQY MBaAFM+hMWYTDSnVrYpgfYFJjaZgJtA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUt MGM2NmJkMzQwMTlhLzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUtMGM2NmJkMzQwMTlh LzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZnljy4n CwiwKhE9BcQ5T5AM2mpZ3nZM6ZH4rZcquoja+EP53sqzF8lT9S/O1hjBLzL0dmM2 o6+cmbtPBqspWCIHfEH+4V2NbACoXhHNBVcBCuN5Auug1e1W2yly27GNRNbVuigS GkelfWBJ1k5q/EptvneSbKcqi594qU9cwhtMMpaAiSd8YogK6ONTLkMov3mCMsqh /1jQ+eB19K20jg4EFSJ0UsaSt2KWI5B6AlC14uMibuUdDQ/0I4WaWOr7PFDlOVrk 7h+xaET3ysCv25IfkQW4VA54v5jEJ1tD771OWyWv244aOKVGSIspXtImYjosCyos 73dBcEo/RoWzGA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:36:55 2025 by rpki-client