This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json) Hash identifier: anmfiNUZynY0a9ln2yODsGfX7dPaV4OCN0s1v2xpfq8= Subject key identifier: 72:D8:F4:58:A5:F6:64:6D:F8:1A:B0:25:DA:74:9D:B0:AA:54:76:61 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019AF12D1C3E44C2B6F2642EE60B11A547A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: 2Ch-i4CtydEazV6QR71K4kHh3ss.roa (hash: /rpBNodccaChgNsqRCzkzP22U9WQI5/NnJ3SOigmEpU=) 2: J9A57ywFh8i4qBexCOCj1MaZXCw.roa (hash: g9qGmokLfV87xI5mRPA4oZJkdfwEGJMfoUIer/zb0UQ=) 3: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (hash: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=) 4: OWRhH0FQBdukNGq2l--MnY_T16Q.roa (hash: 6IKG+JC8NO8uCZ4t2I5OCFvKu9ZDmYfjoRYztumtf8E=) 5: Q8r-yq-WBBDz2eDZB8gELGrrlnA.roa (hash: hU2zAel7ScEYqBZJx4eiwGyniI8FwzX0NfbqxlK/3V0=) 6: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: J+0wwWRQ23AhXuH0M3JyWs09Sqt2Nz+L9ygSCP7R6JE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1c:3e:44:c2:b6:f2:64:2e:e6:0b:11:a5:47:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=72d8f458a5f6646df81ab025da749db0aa547661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:e3:eb:fe:d6:91:74:13:23:ef:ef:69:c1: 90:54:35:ac:26:ab:91:7e:dd:ea:9f:a9:81:c6:04: a3:6d:60:1d:eb:59:3c:52:b4:f9:e2:7c:a2:f8:58: 39:cc:14:66:46:c3:33:10:d0:68:c5:2a:5a:5c:87: ae:33:05:51:7e:46:ac:5b:3e:94:fd:bd:98:fd:fd: 39:e6:9f:2c:68:92:1f:85:7b:c1:16:39:44:7b:9a: fc:bc:b4:63:57:c5:20:98:c8:7b:b0:6d:99:b0:e2: 98:a4:3e:d6:d6:e7:82:99:9f:04:18:b4:3c:4d:54: 90:ba:ca:08:ec:4a:fb:62:6a:3c:83:4b:96:2f:95: 2e:08:38:89:bc:95:20:ef:54:fc:0e:af:1b:d2:eb: b8:b9:6a:08:27:fc:bf:58:66:82:05:aa:a6:0c:24: cf:13:b0:f4:55:b2:8f:7f:e3:83:0d:ba:96:44:f6: 20:56:2c:97:28:56:15:c1:06:fc:dd:b7:16:9b:eb: f4:e1:9f:f3:bb:73:f5:8b:d1:43:0b:b9:02:e8:a5: 4f:58:b1:07:31:ad:c8:1d:49:13:f2:9e:e0:be:a8: 0d:e0:2d:ae:65:e6:0c:33:15:86:30:51:9a:23:de: d4:80:d0:47:fd:5b:7d:6a:d7:ab:99:e0:58:fa:d7: 4e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:F4:58:A5:F6:64:6D:F8:1A:B0:25:DA:74:9D:B0:AA:54:76:61 X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:2e:09:82:8b:a0:d2:73:58:92:2a:bb:85:bf:9a:6b:0e: f9:3a:4f:ab:75:e6:66:01:c4:df:42:fe:dd:46:67:47:43:94: b9:7b:3e:2f:63:ed:36:c6:ed:4c:cd:d5:27:7d:9a:f8:a4:28: e9:ed:47:79:84:68:d9:7b:9d:c2:30:69:09:21:f0:b8:b1:82: b4:36:2b:32:c7:91:46:c8:4f:8a:33:99:33:7a:ac:c2:d6:04: 3d:4a:c9:8c:a4:86:04:8b:af:49:b5:a1:c3:d4:0c:5b:b9:d1: c0:d4:62:28:7f:6c:85:e6:f8:61:7f:8c:a8:21:20:19:22:c7: 29:0a:f2:f4:57:f9:79:b0:b5:06:88:72:9b:a8:f9:5a:56:b9: b1:6a:17:19:79:07:5f:97:21:1c:55:2e:7d:a8:0c:16:58:78: 79:2d:48:79:35:55:7b:9b:27:9b:92:70:cd:3e:06:c5:d7:c3: f7:6b:a9:de:b6:28:89:f1:9a:0a:a8:ee:e2:a6:24:a1:36:38: bf:bc:6d:b7:20:d9:90:48:9b:7d:e9:df:63:b0:50:fe:1b:e3: 42:06:8c:d3:d4:fd:12:40:49:85:85:79:74:3f:ab:4a:d3:67: 6e:55:96:03:48:6d:6f:4d:98:85:7f:84:53:9a:18:5f:e0:95: 57:e8:38:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRw+RMK28mQu5gsRpUeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD Eyg3MmQ4ZjQ1OGE1ZjY2NDZkZjgxYWIwMjVkYTc0OWRiMGFhNTQ3NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A7j6/7WkXQTI+/vacGQVDWsJquR ft3qn6mBxgSjbWAd61k8UrT54nyi+Fg5zBRmRsMzENBoxSpaXIeuMwVRfkasWz6U /b2Y/f055p8saJIfhXvBFjlEe5r8vLRjV8UgmMh7sG2ZsOKYpD7W1ueCmZ8EGLQ8 TVSQusoI7Er7Ymo8g0uWL5UuCDiJvJUg71T8Dq8b0uu4uWoIJ/y/WGaCBaqmDCTP E7D0VbKPf+ODDbqWRPYgViyXKFYVwQb83bcWm+v04Z/zu3P1i9FDC7kC6KVPWLEH Ma3IHUkT8p7gvqgN4C2uZeYMMxWGMFGaI97UgNBH/Vt9atermeBY+tdO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLY9Fil9mRt+BqwJdp0nbCqVHZhMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6IuCYKL oNJzWJIqu4W/mmsO+TpPq3XmZgHE30L+3UZnR0OUuXs+L2PtNsbtTM3VJ32a+KQo 6e1HeYRo2XudwjBpCSHwuLGCtDYrMseRRshPijOZM3qswtYEPUrJjKSGBIuvSbWh w9QMW7nRwNRiKH9sheb4YX+MqCEgGSLHKQry9Ff5ebC1Bohym6j5Wla5sWoXGXkH X5chHFUufagMFlh4eS1IeTVVe5snm5JwzT4GxdfD92up3rYoifGaCqju4qYkoTY4 v7xttyDZkEibfenfY7BQ/hvjQgaM09T9EkBJhYV5dD+rStNnblWWA0htb02YhX+E U5oYX+CVV+g4WA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:05 2025 by rpki-client