This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json) Hash identifier: dLXMtwEVimW5K+pP4fBC59K4ADu/mw0G+98zCaBSR6Q= Subject key identifier: F2:2B:37:39:7B:05:40:7E:36:48:7F:95:AF:97:F6:54:D4:41:85:7C Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1 Certificate serial: 019AF3521C8E2F4052D32F8F5C4B2D47AEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft Manifest number: 032D Signing time: Sat 06 Dec 2025 11:00:35 +0000 Manifest this update: Sat 06 Dec 2025 11:00:35 +0000 Manifest next update: Sun 07 Dec 2025 11:00:35 +0000 Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=) 2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: 14T7oyeUlpSZ+i71v7cK69wBU6vLOEQ6Ut+Ni0roe+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1c:8e:2f:40:52:d3:2f:8f:5c:4b:2d:47:ae:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1 Validity Not Before: Dec 6 11:00:35 2025 GMT Not After : Dec 7 11:00:35 2025 GMT Subject: CN=f22b37397b05407e36487f95af97f654d441857c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:b7:db:15:27:20:97:fe:d6:d7:eb:d1:ac: 03:5b:68:82:b5:8e:11:b6:67:fe:55:0f:1a:a9:da: 76:d6:09:ae:30:0f:aa:85:ee:44:58:32:9a:8d:18: 7a:d5:7d:75:e1:ff:50:49:dd:d3:d6:ac:31:f2:58: bb:13:c9:cd:d6:8d:7a:a8:17:1c:5e:bb:09:8f:89: e4:66:66:b4:4d:5f:98:b2:35:88:0d:ab:e8:9a:4a: 0b:e8:76:77:6f:6c:21:10:99:87:5e:77:ab:dc:25: c2:be:b1:6b:61:8c:19:48:2b:51:4e:6d:9c:a0:fb: 33:68:ad:27:3e:8e:c1:93:0e:4b:f1:d1:07:fd:09: d5:90:24:b9:56:c5:13:4d:fb:65:dc:5f:ef:2b:30: 1f:b1:f8:03:bb:2e:04:7c:d5:10:44:11:af:43:4d: 45:fa:e2:9b:30:99:54:34:5a:03:0a:97:dc:b8:1d: 5e:a0:e3:91:c4:00:6c:48:f7:a1:ab:1d:08:41:07: 12:fa:83:22:00:c4:61:08:7b:3b:af:a6:97:7a:dc: 1b:a5:33:0f:d2:3e:29:77:50:31:be:6d:f5:ac:a5: 86:17:50:9a:24:36:b7:72:e8:50:6b:a6:42:a8:b0: b2:21:cd:ef:ca:f1:6f:d6:73:39:d4:2c:90:39:df: ac:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2B:37:39:7B:05:40:7E:36:48:7F:95:AF:97:F6:54:D4:41:85:7C X509v3 Authority Key Identifier: keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:41:fa:11:61:2b:75:6a:f2:0a:d9:ce:c0:e4:df:94:2b:6c: 9c:a4:f5:8d:63:ea:51:e7:c1:10:8a:bb:00:9c:9f:ce:b7:00: 6f:51:01:7a:35:5d:01:33:7a:ee:71:89:68:61:f7:f7:07:28: 59:4a:4c:15:1e:e3:64:a7:a2:51:ea:58:90:60:01:91:3e:a1: 58:92:3d:39:ca:5e:d9:b5:ca:96:e2:66:bf:9f:e3:aa:b6:7d: 89:e6:c7:ad:1d:d5:49:8e:ec:77:a0:8a:70:59:19:62:a7:b1: ec:9e:be:02:a9:0d:fd:5e:81:55:8e:6d:83:e7:19:00:73:a6: 7a:5d:38:31:d2:85:49:8a:69:89:5d:f6:98:b3:a1:ef:49:97: 7f:bc:9a:57:79:1a:b5:fe:cc:43:8b:55:ee:86:b8:54:11:4a: 07:6c:47:e5:86:37:bd:6e:cc:46:30:11:37:b6:a3:a7:d2:4e: 5a:d7:30:e7:a1:40:1d:01:fa:f5:7e:d5:14:51:2a:5a:5c:0e: b3:e0:30:43:00:03:98:6a:51:3a:08:f7:82:a3:23:37:a6:71: 12:78:19:ad:19:0a:f9:67:a2:01:50:40:89:89:49:be:f0:2b: b0:c2:04:e2:5f:d2:19:f5:d7:a0:db:3b:df:34:ca:5b:6a:74: ee:51:bc:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUhyOL0BS0y+PXEstR67dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0 ZDIxYjEwHhcNMjUxMjA2MTEwMDM1WhcNMjUxMjA3MTEwMDM1WjAzMTEwLwYDVQQD EyhmMjJiMzczOTdiMDU0MDdlMzY0ODdmOTVhZjk3ZjY1NGQ0NDE4NTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1632xUnIJf+1tfr0awDW2iCtY4R tmf+VQ8aqdp21gmuMA+qhe5EWDKajRh61X114f9QSd3T1qwx8li7E8nN1o16qBcc XrsJj4nkZma0TV+YsjWIDavomkoL6HZ3b2whEJmHXner3CXCvrFrYYwZSCtRTm2c oPszaK0nPo7Bkw5L8dEH/QnVkCS5VsUTTftl3F/vKzAfsfgDuy4EfNUQRBGvQ01F +uKbMJlUNFoDCpfcuB1eoOORxABsSPehqx0IQQcS+oMiAMRhCHs7r6aXetwbpTMP 0j4pd1Axvm31rKWGF1CaJDa3cuhQa6ZCqLCyIc3vyvFv1nM51CyQOd+sCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIrNzl7BUB+Nkh/la+X9lTUQYV8MB8GA1UdIwQY MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkH6EWEr dWryCtnOwOTflCtsnKT1jWPqUefBEIq7AJyfzrcAb1EBejVdATN67nGJaGH39wco WUpMFR7jZKeiUepYkGABkT6hWJI9Ocpe2bXKluJmv5/jqrZ9iebHrR3VSY7sd6CK cFkZYqex7J6+AqkN/V6BVY5tg+cZAHOmel04MdKFSYppiV32mLOh70mXf7yaV3ka tf7MQ4tV7oa4VBFKB2xH5YY3vW7MRjARN7ajp9JOWtcw56FAHQH69X7VFFEqWlwO s+AwQwADmGpROgj3gqMjN6ZxEngZrRkK+WeiAVBAiYlJvvArsMIE4l/SGfXXoNs7 3zTKW2p07lG8xg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:51 2025 by rpki-client