This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json) Hash identifier: 7gMpujx0krzPDeBki2WXZ/eAEah07PnFEgGDbVqfkXc= Subject key identifier: CC:FA:5F:F0:24:15:C5:FB:A6:8E:0C:D4:E3:71:56:1B:0B:C2:C5:A5 Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549 Certificate serial: 019AF23FD6E0FBAF1BE59DEA2A02F64EED39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft Manifest number: 06E4 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: jrr1ia1LQ/n1CgiMoO7r1uZwRKjAqPc1Dwpe2G5MfcE=) 2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d6:e0:fb:af:1b:e5:9d:ea:2a:02:f6:4e:ed:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e30c179cd42a8641583234501b18eff2515549 Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=ccfa5ff02415c5fba68e0cd4e371561b0bc2c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:b8:32:51:7f:76:ea:88:5e:bd:ed:5c:a7: f7:98:d5:3d:2c:e2:75:77:38:ce:9a:d1:64:c2:f9: 6b:75:14:16:56:0c:2e:90:82:78:2d:cb:e4:c6:a5: 38:d1:24:30:75:d1:29:d7:25:46:c5:51:9a:9e:4b: 51:12:21:9e:99:dd:64:43:08:73:67:7e:31:5f:cf: ef:0e:54:46:c8:f5:ef:1a:8c:5e:11:e9:40:a7:f2: b0:58:e7:6d:42:93:9e:d0:03:26:76:19:87:45:7a: 72:c0:e3:81:4f:11:df:56:85:d3:18:1c:98:4e:ed: 0a:0d:95:fc:81:ea:bf:f9:0b:e7:3d:17:5c:d0:77: b8:b3:fe:b5:0a:8f:3f:e6:bc:a7:26:62:08:97:c8: 6a:97:c4:d3:8e:5a:f0:5c:f4:d4:41:c3:69:0b:4b: 26:5b:cd:52:40:02:04:7b:53:34:a1:0c:1d:5d:3a: 8f:a1:72:e2:60:31:10:77:26:64:a1:70:5a:91:85: b7:de:89:ae:39:08:eb:93:20:8c:09:fb:b3:92:5d: ca:cc:5e:47:1e:8c:ae:d8:12:1e:d0:ca:35:79:3a: 0f:77:1f:1a:c2:3e:79:7d:7a:7b:e7:27:35:38:b6: b7:e3:72:36:1e:22:ac:3f:a1:4a:75:90:92:62:57: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FA:5F:F0:24:15:C5:FB:A6:8E:0C:D4:E3:71:56:1B:0B:C2:C5:A5 X509v3 Authority Key Identifier: keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:74:a3:04:5e:b6:74:91:26:97:d3:e4:37:1f:5f:38:23:08: c8:80:fa:20:66:27:32:f9:39:f6:e7:30:30:7c:ba:ce:ae:21: 12:99:82:db:90:97:87:41:25:32:72:be:67:c2:6a:ce:99:31: 0e:48:12:25:60:76:1e:bc:b2:61:08:68:0a:33:a1:7f:68:56: 5e:b8:dc:26:07:d2:6e:6f:d5:09:a8:56:f5:fd:8d:13:85:8b: 34:f7:ad:34:a4:c0:66:66:05:c8:e6:91:d1:2f:8a:7c:64:1c: 60:2c:ab:78:88:f5:61:97:01:e4:21:a3:df:ea:50:be:d2:d1: ea:5a:3e:2e:3e:d6:04:21:6e:d4:69:c1:25:77:33:da:78:6b: f1:47:77:60:2b:25:6d:13:99:20:2a:a4:f7:7e:42:68:c4:99: f9:46:59:d6:a1:95:18:59:57:42:f3:34:e0:10:90:26:9d:fe: 12:b1:98:c4:6f:b6:2d:ef:34:a3:c4:07:e2:d7:4a:a2:c8:d9: e8:e6:6f:4c:46:d2:09:22:f3:f0:1d:c0:f8:d8:5b:b0:36:ac: 87:4b:9a:d4:a1:16:25:27:91:b3:63:9f:f5:01:8c:89:7c:55: be:0c:ce:d0:de:e6:2a:3c:da:45:be:61:11:f4:7a:71:58:b8: a3:6c:08:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9bg+68b5Z3qKgL2Tu05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1 MTU1NDkwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD EyhjY2ZhNWZmMDI0MTVjNWZiYTY4ZTBjZDRlMzcxNTYxYjBiYzJjNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroe4MlF/duqIXr3tXKf3mNU9LOJ1 dzjOmtFkwvlrdRQWVgwukIJ4LcvkxqU40SQwddEp1yVGxVGanktREiGemd1kQwhz Z34xX8/vDlRGyPXvGoxeEelAp/KwWOdtQpOe0AMmdhmHRXpywOOBTxHfVoXTGByY Tu0KDZX8geq/+QvnPRdc0He4s/61Co8/5rynJmIIl8hql8TTjlrwXPTUQcNpC0sm W81SQAIEe1M0oQwdXTqPoXLiYDEQdyZkoXBakYW33omuOQjrkyCMCfuzkl3KzF5H Hoyu2BIe0Mo1eToPdx8awj55fXp75yc1OLa343I2HiKsP6FKdZCSYleLQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz6X/AkFcX7po4M1ONxVhsLwsWlMB8GA1UdIwQY MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0 LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHSjBF62 dJEml9PkNx9fOCMIyID6IGYnMvk59ucwMHy6zq4hEpmC25CXh0ElMnK+Z8Jqzpkx DkgSJWB2HryyYQhoCjOhf2hWXrjcJgfSbm/VCahW9f2NE4WLNPetNKTAZmYFyOaR 0S+KfGQcYCyreIj1YZcB5CGj3+pQvtLR6lo+Lj7WBCFu1GnBJXcz2nhr8Ud3YCsl bROZICqk935CaMSZ+UZZ1qGVGFlXQvM04BCQJp3+ErGYxG+2Le80o8QH4tdKosjZ 6OZvTEbSCSLz8B3A+NhbsDash0ua1KEWJSeRs2Of9QGMiXxVvgzO0N7mKjzaRb5h EfR6cVi4o2wIvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:44 2025 by rpki-client