This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json) Hash identifier: UGnmYmOLVzJBarxPSRh0VnNkvf+azNilEpjB9bPp4FY= Subject key identifier: 3C:75:A5:22:EA:F4:F3:8B:78:4D:A9:C7:92:49:28:70:F2:55:1A:78 Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284 Certificate serial: 019AF2ADD5C0ADB8832DEFDC278EC34E253B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: 3jLIiZ66Pi6M8UmxumusfLTI7tzLf91nZf5cC0+J5kc=) 2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d5:c0:ad:b8:83:2d:ef:dc:27:8e:c3:4e:25:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=3c75a522eaf4f38b784da9c792492870f2551a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:a0:77:1a:2f:1c:4f:62:90:57:c2:b2:08: 44:10:d5:e2:61:fe:3a:07:91:ae:90:19:8d:09:7d: da:0b:b0:91:e5:86:fd:8b:49:e0:73:29:e4:88:2a: cd:f1:94:b9:74:71:ed:55:26:26:ff:4b:74:fe:e0: 47:cf:f2:ba:54:f1:78:48:a1:30:96:58:b9:32:d5: 4a:8a:5e:28:3b:a0:a9:96:bc:bf:79:9f:69:c8:58: 15:a3:ef:55:2a:91:41:70:02:bb:57:4b:b9:de:9b: c1:6e:e6:de:db:99:5f:75:ff:86:c7:5a:92:6c:2b: e9:a0:7a:e3:64:93:6e:2e:d4:ff:c2:80:73:a9:c9: 64:6f:a3:ae:7c:b5:39:df:1b:5a:af:b7:61:f6:0c: f7:dd:ab:6f:2e:db:62:8f:a6:f0:dc:14:2e:d9:11: 0b:03:e4:6c:88:4a:78:4f:5f:4d:ed:e1:cc:df:8a: 38:ce:23:0c:4d:9d:f1:b6:7b:58:48:fe:d6:88:3c: 86:1e:08:e2:20:9a:2f:0b:37:18:e2:40:2e:be:54: c3:ea:cd:b5:6a:28:56:f2:47:1b:87:22:15:99:65: 93:a0:4a:4e:d5:17:65:35:72:9e:fe:23:da:63:e7: a8:68:f3:f2:05:e6:f3:85:18:ee:e7:d9:81:74:28: 07:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:75:A5:22:EA:F4:F3:8B:78:4D:A9:C7:92:49:28:70:F2:55:1A:78 X509v3 Authority Key Identifier: keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fb:e4:f2:81:b0:7f:12:33:db:5d:bf:72:05:6e:70:ee:f1: 10:80:ab:01:3e:a6:7b:3a:4c:c8:54:41:83:d0:0a:a7:18:f3: c9:d4:67:ee:17:85:5a:8d:51:de:c4:98:59:ff:5c:81:57:28: 59:ba:df:c1:d6:82:9d:af:e2:ec:06:c3:74:4e:57:d7:ab:de: a2:5b:a2:ed:d4:5e:f7:38:fe:a8:08:c2:54:64:94:a3:79:29: 6c:eb:97:d3:3e:7a:15:47:29:1d:23:19:19:36:b3:15:4d:8c: 69:bd:5c:f6:b9:cb:06:f4:13:8e:d5:f9:24:53:05:7b:8b:b6: 50:07:ca:c6:66:e1:79:3b:93:06:dd:54:03:e9:c3:3c:42:52: 77:60:b0:bd:03:34:30:55:08:df:6e:1d:64:d6:bc:a0:ca:c2: 51:d5:21:f2:94:dd:93:6a:f5:52:9d:de:36:71:15:52:3b:de: d4:bd:4e:55:83:4a:11:ad:a6:9d:e7:fd:ff:3c:a4:51:3e:57: 70:bf:c0:06:8d:6c:07:0f:0b:84:17:67:81:94:31:5a:8d:ee: d1:3c:79:79:ca:a5:18:cf:13:27:89:8f:af:12:36:00:fb:6a: bb:53:6a:93:52:9c:06:54:8e:c8:22:45:fb:33:a9:26:04:b0: 8f:f0:e5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdXArbiDLe/cJ47DTiU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDM0ZmMwMzAwMmVhYTdmMzZiMmU3ZTYzNWVkYThjMzBj NDgyODQwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD EygzYzc1YTUyMmVhZjRmMzhiNzg0ZGE5Yzc5MjQ5Mjg3MGYyNTUxYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43+gdxovHE9ikFfCsghEENXiYf46 B5GukBmNCX3aC7CR5Yb9i0ngcynkiCrN8ZS5dHHtVSYm/0t0/uBHz/K6VPF4SKEw lli5MtVKil4oO6Cplry/eZ9pyFgVo+9VKpFBcAK7V0u53pvBbube25lfdf+Gx1qS bCvpoHrjZJNuLtT/woBzqclkb6OufLU53xtar7dh9gz33atvLttij6bw3BQu2REL A+RsiEp4T19N7eHM34o4ziMMTZ3xtntYSP7WiDyGHgjiIJovCzcY4kAuvlTD6s21 aihW8kcbhyIVmWWToEpO1RdlNXKe/iPaY+eoaPPyBebzhRju59mBdCgHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDx1pSLq9POLeE2px5JJKHDyVRp4MB8GA1UdIwQY MBaAFGfTT8AwAuqn82sufmNe2owwxIKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMt ZGM0MmM3NjkzZGY5LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8yOTlkNjEtNmI5Ni00MDU0LTk4YTMtZGM0MmM3NjkzZGY5 LzEvWjlOUHdEQUM2cWZ6YXk1LVkxN2FqRERFZ29RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/vk8oGw fxIz212/cgVucO7xEICrAT6mezpMyFRBg9AKpxjzydRn7heFWo1R3sSYWf9cgVco WbrfwdaCna/i7AbDdE5X16veolui7dRe9zj+qAjCVGSUo3kpbOuX0z56FUcpHSMZ GTazFU2Mab1c9rnLBvQTjtX5JFMFe4u2UAfKxmbheTuTBt1UA+nDPEJSd2CwvQM0 MFUI324dZNa8oMrCUdUh8pTdk2r1Up3eNnEVUjve1L1OVYNKEa2mnef9/zykUT5X cL/ABo1sBw8LhBdngZQxWo3u0Tx5ecqlGM8TJ4mPrxI2APtqu1Nqk1KcBlSOyCJF +zOpJgSwj/Dljw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:21 2025 by rpki-client