This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json) Hash identifier: xpzRFUvXOZQpfDhM/FlFOG7G96jq0Q22IoH8EhtceAA= Subject key identifier: 82:55:72:22:0A:F1:14:D0:1A:12:BA:82:81:9E:82:10:6A:56:A3:3F Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3 Certificate serial: 019AF50ADE04F26B825D5E268BD7614A265A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft Manifest number: 02F9 Signing time: Sat 06 Dec 2025 19:02:01 +0000 Manifest this update: Sat 06 Dec 2025 19:02:01 +0000 Manifest next update: Sun 07 Dec 2025 19:02:01 +0000 Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=) 2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: w4EnQm/NZLbLuuNblEHOdGYR6Y3UGt1O1jwLxbtkHR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:de:04:f2:6b:82:5d:5e:26:8b:d7:61:4a:26:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3 Validity Not Before: Dec 6 19:02:01 2025 GMT Not After : Dec 7 19:02:01 2025 GMT Subject: CN=825572220af114d01a12ba82819e82106a56a33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:5c:d3:bd:f9:0c:6f:e0:a8:30:ef:54:0f: fb:26:01:33:7d:a7:ca:26:8f:2f:e5:25:95:31:0b: 3b:bc:4d:19:76:38:23:a5:1f:4e:38:9f:64:cf:af: 2f:f7:5f:f0:b4:03:0c:4f:95:44:5d:19:12:c3:d3: 1b:f8:2b:ee:12:86:45:47:f7:4f:9e:94:39:ab:e1: 6b:a7:96:66:bc:09:84:e4:89:1e:c7:84:59:b4:32: 00:b7:57:20:45:f5:80:d8:25:cc:de:72:61:55:dc: 21:2d:40:6b:ce:65:4a:90:77:2b:dd:60:07:c3:96: fb:16:c3:5c:37:1a:1a:c9:e3:28:22:0f:4e:a1:2c: 69:72:2b:f1:c2:55:2b:e9:5b:03:f8:7f:19:36:a8: b0:9f:e3:5c:0e:f6:6c:46:30:7c:a8:36:79:70:36: ad:cb:67:1f:f7:47:b1:dd:28:ba:3d:41:50:4a:50: e8:01:2f:99:65:2b:b2:9f:ce:0d:5e:fd:43:65:93: cb:2c:93:27:2e:60:a2:ae:f3:9d:55:eb:e2:84:6f: f7:6e:7a:3f:b2:dc:4b:ee:6e:a6:88:ca:91:1b:ae: 87:36:d6:5f:60:6d:5d:78:44:28:b9:0e:e8:78:b0: 35:04:2e:d2:c8:c0:53:5e:30:63:a7:d0:6b:38:08: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:55:72:22:0A:F1:14:D0:1A:12:BA:82:81:9E:82:10:6A:56:A3:3F X509v3 Authority Key Identifier: keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3c:f2:de:86:c1:a1:43:3f:08:09:cf:3d:1a:79:9a:42:ff: d2:4e:cc:66:6e:1e:32:5d:41:ec:19:ed:9f:93:75:11:f7:38: d9:97:d9:61:22:bb:a4:f9:47:59:5f:05:f0:07:e2:33:97:13: 84:05:fe:e5:ab:d0:28:a1:e6:a2:77:2f:72:9b:1d:1b:2c:17: 3f:f9:cc:8d:89:8f:d2:af:17:1b:f2:89:a2:9e:01:9c:d8:71: c3:f9:a8:06:6e:cf:00:71:c4:7f:55:b4:76:e0:08:42:14:23: cc:39:4f:05:f2:9b:80:db:24:67:57:3a:c8:19:7a:ea:18:eb: a0:06:ad:b3:5b:f7:b8:b9:2a:29:0a:92:fc:bb:fd:5d:f9:e0: 25:8e:da:c6:41:90:b2:5c:f4:c6:c3:ef:4d:61:d5:f2:c7:d1: 67:a8:3d:f5:d7:2a:70:64:0d:35:6c:c9:73:98:1b:f8:4b:6f: bb:ce:c1:78:f3:76:3b:9e:6e:ba:e0:d7:6f:ff:de:e7:04:7d: 8e:4c:31:1d:13:2a:2e:d0:31:a0:9d:b6:5e:72:fd:90:0b:1e: b2:a9:7a:39:90:c6:da:e3:6e:db:55:96:7e:dd:67:4f:0c:6d: d2:38:93:3c:9f:94:5d:a1:75:b6:95:02:c4:b2:93:a7:1a:78: f1:6c:ce:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ct4E8muCXV4mi9dhSiZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj NTQ1YzMwHhcNMjUxMjA2MTkwMjAxWhcNMjUxMjA3MTkwMjAxWjAzMTEwLwYDVQQD Eyg4MjU1NzIyMjBhZjExNGQwMWExMmJhODI4MTllODIxMDZhNTZhMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61c0735DG/gqDDvVA/7JgEzfafK Jo8v5SWVMQs7vE0ZdjgjpR9OOJ9kz68v91/wtAMMT5VEXRkSw9Mb+CvuEoZFR/dP npQ5q+Frp5ZmvAmE5Ikex4RZtDIAt1cgRfWA2CXM3nJhVdwhLUBrzmVKkHcr3WAH w5b7FsNcNxoayeMoIg9OoSxpcivxwlUr6VsD+H8ZNqiwn+NcDvZsRjB8qDZ5cDat y2cf90ex3Si6PUFQSlDoAS+ZZSuyn84NXv1DZZPLLJMnLmCirvOdVevihG/3bno/ stxL7m6miMqRG66HNtZfYG1deEQouQ7oeLA1BC7SyMBTXjBjp9BrOAjDtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJVciIK8RTQGhK6goGeghBqVqM/MB8GA1UdIwQY MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDzy3obB oUM/CAnPPRp5mkL/0k7MZm4eMl1B7Bntn5N1Efc42ZfZYSK7pPlHWV8F8AfiM5cT hAX+5avQKKHmoncvcpsdGywXP/nMjYmP0q8XG/KJop4BnNhxw/moBm7PAHHEf1W0 duAIQhQjzDlPBfKbgNskZ1c6yBl66hjroAats1v3uLkqKQqS/Lv9XfngJY7axkGQ slz0xsPvTWHV8sfRZ6g99dcqcGQNNWzJc5gb+Etvu87BePN2O55uuuDXb//e5wR9 jkwxHRMqLtAxoJ22XnL9kAsesql6OZDG2uNu21WWft1nTwxt0jiTPJ+UXaF1tpUC xLKTpxp48WzOMg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:52 2025 by rpki-client