This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft File: Zy8OQrCKpFH8WDo1jsNw_70trGg.mft (raw, json) Hash identifier: a90JYSVLn4pZh5uRJ2u5UF44CvDBQwhoB+YEjt30Vk0= Subject key identifier: BA:09:46:A2:7D:C3:7E:43:BC:4A:81:C6:32:57:AB:AE:83:E8:B1:DD Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Certificate serial: 019AF1D191073064F72F355B00CC80506787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 04:00:34 +0000 Manifest this update: Sat 06 Dec 2025 04:00:34 +0000 Manifest next update: Sun 07 Dec 2025 04:00:34 +0000 Files and hashes: 1: 23FE1oy_BAZmJkd81HCsu1MHa4M.roa (hash: XgMSku4Hr0QiLLVlfP0P+OjcCWijIwZIMflI7dpCQf8=) 2: 4dR87DFU1h-_n9gWgjfEcPKRNjQ.roa (hash: 2sOA9bFKi1Li43Qu+cU631T12GoMBvyIUcumh0ZnQK8=) 3: LVg-ErjqsGpN_7dfxXrM1NJLcgo.roa (hash: 3vPL4LbfqaoCiLmMXdpcZ0SWEsuh6HbkyOFi9gXwiDM=) 4: ZxVRcH6hGQs4gCKz7zXkJ2_0maA.roa (hash: rqrMCzYgEY7X02NzXOKY4O8TfCQzErK1najWC4lkNO8=) 5: Zy8OQrCKpFH8WDo1jsNw_70trGg.crl (hash: 9wON2p729C0L2lS04lFUsmJ3QeThHNIoKJVapT7p6sA=) 6: fyUduA7iLRzPOu8jJXAMIB-HOkE.roa (hash: cIQaQBrp3go+iSKqU55ZO7AX4q6Ht8Tb5+J8gXHDuFM=) 7: x5KUP4b7M2UneG9R4Ty3aaoRU6E.roa (hash: 4r2sex74amynzwpK3bDSHVwPPeVxELbxt3yfW0ijSTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:91:07:30:64:f7:2f:35:5b:00:cc:80:50:67:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68 Validity Not Before: Dec 6 04:00:34 2025 GMT Not After : Dec 7 04:00:34 2025 GMT Subject: CN=ba0946a27dc37e43bc4a81c63257abae83e8b1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:8a:46:7e:85:22:86:a6:55:1d:54:a2:78: 17:ca:16:9d:ff:2d:8e:29:5f:0e:0f:2b:7b:7b:19: c7:af:8a:7c:07:59:b6:57:ad:b0:f8:ef:eb:bf:f9: 14:e1:49:a4:2b:f4:44:70:b2:8a:63:78:80:4e:59: f2:2d:29:7f:bf:85:f4:e2:bd:80:7b:40:ae:8f:c8: 21:01:a6:23:cf:4b:5b:9a:07:eb:d5:a1:21:b9:59: 44:0e:f5:8e:6c:28:01:55:5c:a8:40:8f:40:37:99: e6:4e:06:4d:79:4d:61:8e:a6:b7:c5:cc:f4:65:81: 49:e4:ee:5c:c1:51:78:0d:c4:b4:c9:b0:c0:c4:d4: 26:a2:48:f2:26:0f:47:07:45:68:cb:52:3c:91:da: 08:ad:75:6b:b5:f3:4d:d3:c6:8b:23:0e:83:c7:f7: 76:9f:3c:18:de:c7:9f:36:20:8b:e0:c5:31:be:72: 76:90:63:90:85:78:dc:9d:5a:fe:41:2e:08:ef:9e: a7:57:67:e6:2b:b1:b6:eb:24:59:0d:79:71:59:51: d8:89:9e:3f:f9:1a:97:cb:65:f3:0f:96:74:cc:6c: 6f:82:41:9b:63:97:40:86:a3:43:f2:c0:d1:79:84: 06:9d:6c:c4:dd:a0:e1:0a:1e:3f:2d:fd:01:0e:7c: 17:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:46:A2:7D:C3:7E:43:BC:4A:81:C6:32:57:AB:AE:83:E8:B1:DD X509v3 Authority Key Identifier: keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3b:82:ff:62:af:32:26:38:b9:a8:6e:5d:e9:52:9f:c5:ea: 67:6f:27:61:92:28:c5:dd:4d:3f:b1:41:84:d1:57:8e:78:89: 64:d3:78:16:a4:5c:41:8c:bf:5f:ac:78:cc:e5:1f:33:15:e8: c0:a0:71:5a:b3:62:86:14:ed:73:e0:fe:63:92:21:5f:9f:46: 07:f8:5b:1d:11:e4:51:ae:84:dd:6f:56:85:b4:88:58:67:3b: 1c:47:2e:2d:80:02:6b:8d:a4:ae:ca:a0:cf:2f:38:09:37:56: c4:b2:f3:42:99:49:9a:7e:cd:40:30:c6:77:b4:37:b2:c1:08: 34:6d:1d:03:35:4f:2a:96:ea:41:a6:dd:dc:79:70:9c:78:92: 49:fa:4f:b0:05:38:33:42:75:62:37:25:69:79:69:d0:d7:df: a6:f2:be:89:e8:1e:0a:b4:dc:31:55:63:4e:3a:2f:b7:80:1d: 85:27:33:c8:d1:97:b8:ed:78:8c:63:ef:61:17:0e:1d:2f:9f: 83:73:cc:fa:2b:23:4d:35:c5:75:19:75:56:d3:6e:ae:c9:4c: 06:2f:42:fc:b4:dc:e1:4e:4c:4a:c1:e8:92:70:58:e2:c8:30: 9c:c1:8b:32:78:88:17:ef:d9:ea:a5:87:8a:9a:43:ff:af:62: 6a:62:70:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZEHMGT3LzVbAMyAUGeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MmYwZTQyYjA4YWE0NTFmYzU4M2EzNThlYzM3MGZmYmQy ZGFjNjgwHhcNMjUxMjA2MDQwMDM0WhcNMjUxMjA3MDQwMDM0WjAzMTEwLwYDVQQD EyhiYTA5NDZhMjdkYzM3ZTQzYmM0YTgxYzYzMjU3YWJhZTgzZThiMWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslyKRn6FIoamVR1UongXyhad/y2O KV8ODyt7exnHr4p8B1m2V62w+O/rv/kU4UmkK/REcLKKY3iATlnyLSl/v4X04r2A e0Cuj8ghAaYjz0tbmgfr1aEhuVlEDvWObCgBVVyoQI9AN5nmTgZNeU1hjqa3xcz0 ZYFJ5O5cwVF4DcS0ybDAxNQmokjyJg9HB0Voy1I8kdoIrXVrtfNN08aLIw6Dx/d2 nzwY3sefNiCL4MUxvnJ2kGOQhXjcnVr+QS4I756nV2fmK7G26yRZDXlxWVHYiZ4/ +RqXy2XzD5Z0zGxvgkGbY5dAhqND8sDReYQGnWzE3aDhCh4/Lf0BDnwXtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoJRqJ9w35DvEqBxjJXq66D6LHdMB8GA1UdIwQY MBaAFGcvDkKwiqRR/Fg6NY7DcP+9LaxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTct ZjBiOTYyZjUyNDE0LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81OWE2YjktY2QyMC00Y2Q3LWI0YTctZjBiOTYyZjUyNDE0 LzEvWnk4T1FyQ0twRkg4V0RvMWpzTndfNzB0ckdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDuC/2Kv MiY4uahuXelSn8XqZ28nYZIoxd1NP7FBhNFXjniJZNN4FqRcQYy/X6x4zOUfMxXo wKBxWrNihhTtc+D+Y5IhX59GB/hbHRHkUa6E3W9WhbSIWGc7HEcuLYACa42krsqg zy84CTdWxLLzQplJmn7NQDDGd7Q3ssEING0dAzVPKpbqQabd3HlwnHiSSfpPsAU4 M0J1YjclaXlp0NffpvK+iegeCrTcMVVjTjovt4AdhSczyNGXuO14jGPvYRcOHS+f g3PM+isjTTXFdRl1VtNurslMBi9C/LTc4U5MSsHoknBY4sgwnMGLMniIF+/Z6qWH ippD/69iamJwPg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:52 2025 by rpki-client