This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json) Hash identifier: 7dgKVjiaUxXqlhXmhKzexwU++Oo3Z/QVk2Aog2fWDr4= Subject key identifier: E1:3A:22:C9:B3:EA:34:57:00:7E:E4:FA:BE:CD:55:11:B8:41:5C:BF Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Certificate serial: 019AF20931B943D8D59F3A07FB4844115B23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft Manifest number: 046F Signing time: Sat 06 Dec 2025 05:01:20 +0000 Manifest this update: Sat 06 Dec 2025 05:01:20 +0000 Manifest next update: Sun 07 Dec 2025 05:01:20 +0000 Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: LHExfENwI/UEgWxfBKZw/NoDuvz4DWYvHnYMAxvAkjU=) 2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:31:b9:43:d8:d5:9f:3a:07:fb:48:44:11:5b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Validity Not Before: Dec 6 05:01:20 2025 GMT Not After : Dec 7 05:01:20 2025 GMT Subject: CN=e13a22c9b3ea3457007ee4fabecd5511b8415cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:64:1c:b0:e2:00:50:5c:32:1a:46:e6:dd: 83:98:cc:13:7f:44:22:e4:8d:83:4a:7f:bb:8e:f7: 92:02:c3:e2:9c:80:92:76:d6:c6:1c:5d:c2:d4:06: 52:08:1f:56:fe:9c:67:6e:ac:0b:7d:5b:86:11:e4: 26:32:65:11:48:f5:3d:65:e7:21:2c:2f:df:84:cd: a6:53:64:c3:19:f0:c7:85:04:15:8d:89:a7:fd:f9: eb:f8:e0:69:9a:6e:70:25:f8:bb:47:d7:c0:49:93: ce:2c:23:7a:f7:b5:49:b7:bf:6b:db:08:d4:18:7f: 07:7f:71:e6:82:e9:95:8f:3b:9c:f3:90:cc:60:bc: 66:32:97:b5:2b:76:b8:a0:13:1f:57:e8:81:3f:58: 88:e2:e2:42:08:56:48:77:c1:3f:61:54:ec:da:71: 46:f6:17:f9:49:42:52:69:40:21:ca:f1:cc:7a:37: 49:63:42:d1:a8:de:0f:d4:3d:ef:ae:6e:43:0e:ab: 25:da:28:02:eb:c4:a6:83:06:27:5d:eb:50:ac:a5: ee:52:b0:51:a6:bd:5d:0c:02:71:6f:b1:20:ed:e2: bb:40:c2:f9:8d:1a:81:9a:0f:6e:e1:db:69:6e:eb: 46:fb:fe:cb:09:71:10:94:5c:a5:ce:d8:f3:03:c9: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:22:C9:B3:EA:34:57:00:7E:E4:FA:BE:CD:55:11:B8:41:5C:BF X509v3 Authority Key Identifier: keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f0:64:9f:90:e2:5a:c4:50:93:0e:c1:9b:52:7d:c7:12:30: 3f:60:20:fe:c6:98:15:3d:46:47:e4:d3:fd:7e:bb:c8:d9:b3: cb:d9:0c:d6:5c:43:a0:24:c4:bf:6a:69:b1:9c:16:f8:f2:57: 8f:bb:34:f6:60:9a:2d:e6:b0:15:e4:41:7b:aa:f3:30:04:3d: 82:32:ab:61:5a:4e:db:b2:88:5f:ef:77:89:56:5e:f5:a4:48: ce:1a:17:a7:ed:28:c5:28:1d:20:8b:8a:ae:9a:94:9e:6f:b5: 57:77:ba:41:47:e6:54:5c:6d:d1:60:88:45:c6:bb:d8:d5:58: 2f:42:21:2e:38:94:ff:35:46:de:83:3a:dd:4a:18:3f:15:ab: 2c:b9:86:0f:eb:73:d0:7b:a9:3e:11:e9:4b:07:e8:26:7d:21: 58:de:8c:04:fb:df:04:99:10:b7:ef:8e:cb:1d:ca:a0:cf:d5: 25:e6:0f:fa:59:c7:48:9c:cb:07:09:b4:46:14:57:51:0b:6d: 18:c3:03:55:81:1f:df:06:4b:48:92:a4:30:62:6e:80:97:0f: ef:54:b6:80:5a:f5:b7:45:cd:42:01:cb:3b:66:42:1d:41:a7: 58:77:15:2e:46:43:ac:13:69:df:22:5d:3e:4a:fe:b5:7b:91: b2:a4:28:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTG5Q9jVnzoH+0hEEVsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2 N2VlZmEwHhcNMjUxMjA2MDUwMTIwWhcNMjUxMjA3MDUwMTIwWjAzMTEwLwYDVQQD EyhlMTNhMjJjOWIzZWEzNDU3MDA3ZWU0ZmFiZWNkNTUxMWI4NDE1Y2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxtkHLDiAFBcMhpG5t2DmMwTf0Qi 5I2DSn+7jveSAsPinICSdtbGHF3C1AZSCB9W/pxnbqwLfVuGEeQmMmURSPU9Zech LC/fhM2mU2TDGfDHhQQVjYmn/fnr+OBpmm5wJfi7R9fASZPOLCN697VJt79r2wjU GH8Hf3HmgumVjzuc85DMYLxmMpe1K3a4oBMfV+iBP1iI4uJCCFZId8E/YVTs2nFG 9hf5SUJSaUAhyvHMejdJY0LRqN4P1D3vrm5DDqsl2igC68SmgwYnXetQrKXuUrBR pr1dDAJxb7Eg7eK7QML5jRqBmg9u4dtpbutG+/7LCXEQlFylztjzA8n3WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOE6Ismz6jRXAH7k+r7NVRG4QVy/MB8GA1UdIwQY MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4 LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/Bkn5Di WsRQkw7Bm1J9xxIwP2Ag/saYFT1GR+TT/X67yNmzy9kM1lxDoCTEv2ppsZwW+PJX j7s09mCaLeawFeRBe6rzMAQ9gjKrYVpO27KIX+93iVZe9aRIzhoXp+0oxSgdIIuK rpqUnm+1V3e6QUfmVFxt0WCIRca72NVYL0IhLjiU/zVG3oM63UoYPxWrLLmGD+tz 0HupPhHpSwfoJn0hWN6MBPvfBJkQt++Oyx3KoM/VJeYP+lnHSJzLBwm0RhRXUQtt GMMDVYEf3wZLSJKkMGJugJcP71S2gFr1t0XNQgHLO2ZCHUGnWHcVLkZDrBNp3yJd Pkr+tXuRsqQoqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:21 2025 by rpki-client