This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json) Hash identifier: sWYMV8D0rIRgqFgr2/pu/Ccs0esWOXCoZoDptr6hMuI= Subject key identifier: F3:E8:1B:74:52:1E:9D:A2:73:5A:35:9F:07:AC:5D:AF:12:93:10:D8 Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5 Certificate serial: 019AF12D82FF02F62A0CE1F4C963F7F1A776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft Manifest number: 12C0 Signing time: Sat 06 Dec 2025 01:01:22 +0000 Manifest this update: Sat 06 Dec 2025 01:01:22 +0000 Manifest next update: Sun 07 Dec 2025 01:01:22 +0000 Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=) 2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=) 3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=) 4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=) 5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=) 6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=) 7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: E4c9IeIBqAtpB/No8WTtacYOkZbfiqv16/0NjJLA3no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:82:ff:02:f6:2a:0c:e1:f4:c9:63:f7:f1:a7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5 Validity Not Before: Dec 6 01:01:22 2025 GMT Not After : Dec 7 01:01:22 2025 GMT Subject: CN=f3e81b74521e9da2735a359f07ac5daf129310d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:33:0a:6a:00:14:d5:08:ac:2a:0e:e1:6d:8f: 32:a8:13:3e:48:49:5f:d9:96:6b:d7:42:a4:12:74: 01:42:52:ab:83:91:93:a9:47:e5:23:47:f8:f1:90: 15:fd:17:f2:e1:6b:29:2b:8c:9e:39:a3:09:47:de: cc:41:99:f4:bb:fc:27:0b:8e:10:fe:13:82:c4:84: 0c:9f:71:2e:bb:f6:f2:e7:fd:fa:0c:09:31:22:1b: 23:77:73:1d:f5:eb:ea:e5:1d:dc:ee:41:fa:3c:c9: 67:d6:2b:2e:40:b9:e8:ed:5a:f1:11:29:6f:77:59: ec:ec:65:ba:fc:c2:1b:64:1c:4c:17:54:32:50:a0: 48:41:9b:ef:32:9b:57:f4:31:17:45:6c:28:f1:e2: 68:60:0d:54:72:74:1b:6d:5d:2e:8a:5a:44:70:38: 9e:8e:03:be:7f:8b:43:b0:f0:bb:b2:ff:6e:ed:97: 05:8c:ea:22:86:5b:0c:1b:b1:a5:81:21:0a:8d:38: 41:6f:5e:e5:8e:cd:01:b1:3e:65:85:c2:07:7d:39: d4:e2:e5:08:ad:f5:ae:f7:03:b3:0e:19:19:c5:04: c6:44:d8:3c:14:f9:9b:20:a1:77:bd:f5:23:97:12: 30:85:3f:3a:55:fd:02:39:2c:2c:49:88:4a:f5:46: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E8:1B:74:52:1E:9D:A2:73:5A:35:9F:07:AC:5D:AF:12:93:10:D8 X509v3 Authority Key Identifier: keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:82:e5:32:e5:71:8e:e6:7b:36:dd:f8:5f:4e:b2:a6:f8:0e: 92:8e:20:f4:fa:3c:8c:44:61:76:f5:8a:6e:49:c2:5d:dd:00: 8f:d1:92:30:96:b4:0e:02:30:2e:a4:37:80:eb:10:4d:30:23: c9:df:80:1b:4d:b8:51:22:c6:b2:26:19:85:03:ec:6f:cc:12: 47:3f:29:c4:fe:70:58:07:1c:a9:af:0e:aa:91:cb:e4:c2:65: 22:92:85:55:3a:24:48:76:22:03:aa:2f:46:41:48:68:96:2a: 92:f7:c5:b3:9e:91:26:65:68:c5:61:a0:05:b6:75:3b:c6:f8: 1a:34:8d:d4:ea:66:b9:0c:78:8c:56:30:e8:46:c8:b8:44:7f: f0:1f:7f:de:7c:c5:77:34:eb:af:1c:7a:0f:24:0a:e7:9b:95: d0:8a:eb:cd:cb:2d:0c:86:71:99:3d:e2:2a:9c:3a:2a:c6:ae: 97:90:2b:4b:8e:6c:cf:cd:ac:52:62:23:2f:5b:07:8b:07:88: 76:8b:9a:0c:82:55:0e:5a:d1:8e:ed:87:1d:e7:c9:0f:8d:cb: 97:f2:5c:ed:c4:25:a5:49:4b:4a:d4:ee:a4:d3:ab:16:b1:33: 7c:32:eb:41:22:33:9f:94:f7:17:55:85:d1:70:7d:cd:da:c1: 76:3d:37:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYL/AvYqDOH0yWP38ad2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj NDE1ZDUwHhcNMjUxMjA2MDEwMTIyWhcNMjUxMjA3MDEwMTIyWjAzMTEwLwYDVQQD EyhmM2U4MWI3NDUyMWU5ZGEyNzM1YTM1OWYwN2FjNWRhZjEyOTMxMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzMKagAU1QisKg7hbY8yqBM+SElf 2ZZr10KkEnQBQlKrg5GTqUflI0f48ZAV/Rfy4WspK4yeOaMJR97MQZn0u/wnC44Q /hOCxIQMn3Euu/by5/36DAkxIhsjd3Md9evq5R3c7kH6PMln1isuQLno7VrxESlv d1ns7GW6/MIbZBxMF1QyUKBIQZvvMptX9DEXRWwo8eJoYA1UcnQbbV0uilpEcDie jgO+f4tDsPC7sv9u7ZcFjOoihlsMG7GlgSEKjThBb17ljs0BsT5lhcIHfTnU4uUI rfWu9wOzDhkZxQTGRNg8FPmbIKF3vfUjlxIwhT86Vf0COSwsSYhK9UbA7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPoG3RSHp2ic1o1nwesXa8SkxDYMB8GA1UdIwQY MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoLlMuVx juZ7Nt34X06ypvgOko4g9Po8jERhdvWKbknCXd0Aj9GSMJa0DgIwLqQ3gOsQTTAj yd+AG024USLGsiYZhQPsb8wSRz8pxP5wWAccqa8OqpHL5MJlIpKFVTokSHYiA6ov RkFIaJYqkvfFs56RJmVoxWGgBbZ1O8b4GjSN1OpmuQx4jFYw6EbIuER/8B9/3nzF dzTrrxx6DyQK55uV0IrrzcstDIZxmT3iKpw6Ksaul5ArS45sz82sUmIjL1sHiweI douaDIJVDlrRju2HHefJD43Ll/Jc7cQlpUlLStTupNOrFrEzfDLrQSIzn5T3F1WF 0XB9zdrBdj03cw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:29 2025 by rpki-client