This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json) Hash identifier: +qVsWAdbqk8Birs4qjXsBm2n7FwlVFavQ/ptFBY98Ts= Subject key identifier: A9:D6:62:69:6D:75:5E:E6:19:9B:26:20:13:0E:A2:97:81:EA:5B:5C Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Certificate serial: 019B35A01C0FE93454357BCD90564B1306D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft Manifest number: 0492 Signing time: Fri 19 Dec 2025 08:00:43 +0000 Manifest this update: Fri 19 Dec 2025 08:00:43 +0000 Manifest next update: Sat 20 Dec 2025 08:00:43 +0000 Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: pw4k8yX3EYfOlW02D8j8VXR3J5fOikqNNXhKutSsBqw=) 2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:1c:0f:e9:34:54:35:7b:cd:90:56:4b:13:06:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Validity Not Before: Dec 19 08:00:43 2025 GMT Not After : Dec 20 08:00:43 2025 GMT Subject: CN=a9d662696d755ee6199b2620130ea29781ea5b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ad:40:9d:72:57:a9:46:a1:df:78:fa:84:80: 5c:c7:13:f2:7c:ac:e4:cc:33:93:6f:c8:b2:46:e6: ac:b2:0f:a4:d8:e9:13:3b:c3:76:52:85:88:86:07: c3:ed:0d:9e:88:eb:86:c3:7a:c5:1a:8c:bd:e1:68: b8:96:ce:5f:b1:13:f3:e8:eb:6d:7e:ad:50:11:e4: a2:f8:53:53:36:25:06:4e:1f:7d:d5:36:cd:40:5c: a1:a7:15:66:ea:41:f9:7c:ac:30:91:33:21:78:e4: 76:dc:03:ec:4d:6d:57:f1:34:6d:b5:d6:87:f4:58: 42:cd:83:72:23:ab:b5:49:2c:51:ab:49:29:01:44: c9:47:11:c6:bd:c8:87:b6:60:ea:f6:83:7a:5d:29: 88:7c:16:01:2e:c2:cd:c6:e8:5a:68:dd:c4:86:2d: 19:c7:82:2b:5c:1d:f5:d4:f0:24:f8:65:1d:ed:90: c7:9c:6f:51:e5:95:b4:53:4d:ca:da:92:ce:da:d3: 77:77:9f:f1:ab:cc:7f:23:d3:ee:ed:c5:26:b7:e2: 2c:e7:9e:5a:16:cf:d2:85:bf:69:ec:4a:6c:36:ca: 4a:61:e3:24:ee:7f:fb:3f:72:b6:04:d5:01:4e:8f: e8:64:a6:4f:96:43:8b:9f:d8:a6:bf:c5:e6:86:71: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:62:69:6D:75:5E:E6:19:9B:26:20:13:0E:A2:97:81:EA:5B:5C X509v3 Authority Key Identifier: keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:33:92:10:83:dc:d0:f3:73:17:e8:3a:22:91:24:2b:87:e7: da:61:d8:db:0d:70:07:17:7f:a0:77:b1:43:80:e5:19:d4:de: 2f:9a:ed:5e:ae:80:43:5c:bb:de:4c:7e:95:f4:f3:b6:4a:14: e3:d8:9f:86:89:9a:c0:66:6e:57:4b:27:97:2b:b7:7a:a7:7d: fa:97:d7:7d:c8:0c:8f:bf:cf:4e:a1:ce:47:e7:60:ad:b1:b7: fb:eb:13:52:3b:a6:dc:e7:3d:30:4f:a5:1d:4a:09:25:b7:51: 29:f8:85:3c:48:e7:b5:4e:fe:55:47:b9:ca:7d:22:40:ad:cf: d0:99:42:56:aa:b7:fd:60:e4:2b:5a:49:57:4c:73:88:6c:d0: 2e:db:2b:a6:8f:42:0d:e8:4b:cd:1f:eb:4a:7b:e6:94:5d:ab: e3:f1:cc:8f:57:50:39:01:16:bc:e2:c5:d1:f0:b6:08:be:4b: b7:90:35:57:3a:c9:56:bb:9c:54:da:11:d3:0b:0b:41:ec:91: 6e:15:99:8d:48:c7:1f:a1:94:6d:f0:c7:cb:c8:f4:67:6c:65: 28:eb:00:c3:7a:0d:57:37:76:f6:c7:b0:50:03:41:2f:50:d5: 69:be:0a:6e:cd:5c:01:69:8c:9f:da:71:8b:93:b7:8f:09:02: a0:1d:34:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oBwP6TRUNXvNkFZLEwbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2 N2VlZmEwHhcNMjUxMjE5MDgwMDQzWhcNMjUxMjIwMDgwMDQzWjAzMTEwLwYDVQQD EyhhOWQ2NjI2OTZkNzU1ZWU2MTk5YjI2MjAxMzBlYTI5NzgxZWE1YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA361AnXJXqUah33j6hIBcxxPyfKzk zDOTb8iyRuassg+k2OkTO8N2UoWIhgfD7Q2eiOuGw3rFGoy94Wi4ls5fsRPz6Ott fq1QEeSi+FNTNiUGTh991TbNQFyhpxVm6kH5fKwwkTMheOR23APsTW1X8TRttdaH 9FhCzYNyI6u1SSxRq0kpAUTJRxHGvciHtmDq9oN6XSmIfBYBLsLNxuhaaN3Ehi0Z x4IrXB311PAk+GUd7ZDHnG9R5ZW0U03K2pLO2tN3d5/xq8x/I9Pu7cUmt+Is555a Fs/Shb9p7EpsNspKYeMk7n/7P3K2BNUBTo/oZKZPlkOLn9imv8XmhnGkQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnWYmltdV7mGZsmIBMOopeB6ltcMB8GA1UdIwQY MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4 LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzOSEIPc 0PNzF+g6IpEkK4fn2mHY2w1wBxd/oHexQ4DlGdTeL5rtXq6AQ1y73kx+lfTztkoU 49ifhomawGZuV0snlyu3eqd9+pfXfcgMj7/PTqHOR+dgrbG3++sTUjum3Oc9ME+l HUoJJbdRKfiFPEjntU7+VUe5yn0iQK3P0JlCVqq3/WDkK1pJV0xziGzQLtsrpo9C DehLzR/rSnvmlF2r4/HMj1dQOQEWvOLF0fC2CL5Lt5A1VzrJVrucVNoR0wsLQeyR bhWZjUjHH6GUbfDHy8j0Z2xlKOsAw3oNVzd29sewUANBL1DVab4Kbs1cAWmMn9px i5O3jwkCoB00ig== -----END CERTIFICATE-----Generated at Fri Dec 19 13:49:10 2025 by rpki-client