This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json) Hash identifier: RTfyvmLfUVv0/tPWsb1a+Vg0Vijj/40+VILXzEr/1eY= Subject key identifier: 05:F8:44:A1:0B:2B:05:EA:5D:A8:70:1A:EA:DF:48:70:A3:4A:31:4D Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a Certificate serial: 019AF46506F3BF3E4823D56B09E6504EB456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft Manifest number: 0C17 Signing time: Sat 06 Dec 2025 16:00:52 +0000 Manifest this update: Sat 06 Dec 2025 16:00:52 +0000 Manifest next update: Sun 07 Dec 2025 16:00:52 +0000 Files and hashes: 1: Qfx_N_kuqkMIUSgH6UsyRKgHZ0A.roa (hash: mwW72dFxHuPCDkV7oNKQ6TxIZ+d2OvHqW1889IPwVao=) 2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: GC5dctJMyT2FwcWAyWFGt4XN/jzS4J8SMp3GdeHzdNs=) 3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=) 4: mbFRU-NRDgaCZtRwIvozp820XcA.roa (hash: yp+s4wVuvdmccl+6zp8+zefq82PCIcoFDZltbTTtQqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:06:f3:bf:3e:48:23:d5:6b:09:e6:50:4e:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a Validity Not Before: Dec 6 16:00:52 2025 GMT Not After : Dec 7 16:00:52 2025 GMT Subject: CN=05f844a10b2b05ea5da8701aeadf4870a34a314d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:4f:aa:5a:75:5c:09:ee:57:c3:98:07:6f: 67:88:54:b2:78:de:b1:68:62:d7:83:51:76:8a:43: c3:3f:41:47:e2:1a:09:03:16:d4:f6:68:d8:58:65: 99:84:b1:14:c9:bc:f9:ae:7b:f1:70:ac:90:b3:b7: dd:36:6c:43:db:da:62:4b:dc:57:15:ef:c8:37:ba: ea:69:e6:4e:ee:ad:75:a6:8e:3d:9e:6d:8a:82:f6: 01:ec:c9:e8:82:59:d2:11:c5:6b:1a:d4:2c:2a:6b: 04:20:0d:0a:44:2f:06:06:98:ab:47:63:d3:81:10: fd:48:15:0d:f8:e0:5c:d4:5e:1d:e4:42:65:13:df: d6:cd:34:50:f4:67:16:62:74:d9:0e:35:59:c6:de: 8e:40:bb:c9:60:75:09:60:89:21:35:73:9a:ed:06: 35:f2:4f:d7:f5:e0:f0:4a:6f:e6:96:7e:37:4b:20: 1f:68:97:e4:6c:e9:fc:1f:6c:63:d8:90:71:47:14: e4:d1:17:3f:8a:1e:f7:f8:52:01:b1:8c:9f:0b:2a: ca:4b:64:09:f8:b6:ba:c9:07:c7:05:49:35:7c:c6: 95:95:18:28:6e:d0:59:fe:e2:3e:57:9c:4c:11:54: a1:a3:c8:41:2d:26:4d:df:d9:8f:d8:7c:18:e2:c6: 6d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F8:44:A1:0B:2B:05:EA:5D:A8:70:1A:EA:DF:48:70:A3:4A:31:4D X509v3 Authority Key Identifier: keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e9:f9:a1:fd:60:52:e8:f1:d2:8e:33:f8:a6:2b:66:85:0c: 6b:b0:65:83:fe:65:47:3c:f9:16:cb:ed:d8:61:9f:50:b5:94: 7e:f8:ea:cf:3f:58:70:ec:22:d2:67:83:aa:e4:1c:45:86:ae: 40:11:fc:17:2a:61:f4:4f:6d:0b:e6:e7:5a:b5:ea:e9:8a:20: 39:ee:4a:a2:99:bb:37:1b:17:50:ee:fc:87:cc:33:a3:51:e1: 86:6c:3b:fe:85:27:ab:3b:a9:ef:b7:00:0c:aa:b3:3b:7e:52: f7:4c:f6:1c:fc:38:68:41:ce:7a:5c:05:5f:a9:bf:05:80:51: 7b:59:12:d9:b5:ba:51:9c:cd:79:07:31:6c:4a:30:21:72:75: f6:2c:03:b7:66:47:88:32:20:61:dc:65:8a:08:7b:55:e4:bf: 09:6d:82:be:b4:87:bb:8c:e3:4e:1d:7d:ce:e4:93:28:21:65: e0:71:70:9b:4c:a6:46:e5:fb:77:18:5f:81:f2:91:b1:17:8b: 0a:e4:0a:4f:c6:ff:ce:a6:33:c4:c1:62:ba:00:91:b2:cc:96: fc:0d:67:13:8d:fb:0c:17:c7:62:5e:64:40:7f:47:ee:de:9c: 4f:3c:8d:fd:2c:cc:a9:0a:89:4b:b8:20:3c:5d:52:ee:7c:34: 9e:fc:9a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQbzvz5II9VrCeZQTrRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGU5YjJlZWZiMjA1MzQyMzgyYjYwNzJhOTAzZjlkOTgz NzA3MWEwHhcNMjUxMjA2MTYwMDUyWhcNMjUxMjA3MTYwMDUyWjAzMTEwLwYDVQQD EygwNWY4NDRhMTBiMmIwNWVhNWRhODcwMWFlYWRmNDg3MGEzNGEzMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUJPqlp1XAnuV8OYB29niFSyeN6x aGLXg1F2ikPDP0FH4hoJAxbU9mjYWGWZhLEUybz5rnvxcKyQs7fdNmxD29piS9xX Fe/IN7rqaeZO7q11po49nm2KgvYB7MnoglnSEcVrGtQsKmsEIA0KRC8GBpirR2PT gRD9SBUN+OBc1F4d5EJlE9/WzTRQ9GcWYnTZDjVZxt6OQLvJYHUJYIkhNXOa7QY1 8k/X9eDwSm/mln43SyAfaJfkbOn8H2xj2JBxRxTk0Rc/ih73+FIBsYyfCyrKS2QJ +La6yQfHBUk1fMaVlRgobtBZ/uI+V5xMEVSho8hBLSZN39mP2HwY4sZttwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX4RKELKwXqXahwGurfSHCjSjFNMB8GA1UdIwQY MBaAFGaOmy7vsgU0I4K2ByqQP52YNwcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMt NGMwOGZmZTEwMDc2LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80YTEzMDUtMzkxYy00NDZjLTlhMzMtNGMwOGZmZTEwMDc2 LzEvWm82Ykx1LXlCVFFqZ3JZSEtwQV9uWmczQnhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOn5of1g Uujx0o4z+KYrZoUMa7Blg/5lRzz5Fsvt2GGfULWUfvjqzz9YcOwi0meDquQcRYau QBH8Fyph9E9tC+bnWrXq6YogOe5Kopm7NxsXUO78h8wzo1Hhhmw7/oUnqzup77cA DKqzO35S90z2HPw4aEHOelwFX6m/BYBRe1kS2bW6UZzNeQcxbEowIXJ19iwDt2ZH iDIgYdxligh7VeS/CW2CvrSHu4zjTh19zuSTKCFl4HFwm0ymRuX7dxhfgfKRsReL CuQKT8b/zqYzxMFiugCRssyW/A1nE437DBfHYl5kQH9H7t6cTzyN/SzMqQqJS7gg PF1S7nw0nvya2A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:34:22 2025 by rpki-client