This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json) Hash identifier: B8YkdT7A8NXYrxBHUrTDlIWwnx/deBwA/g0FhVVuHxg= Subject key identifier: C1:79:56:22:75:1D:AD:5D:10:08:DE:32:E6:52:DA:6B:18:04:83:9A Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019AF91D6366EDC19E3D02A34FD73AE9825C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft Manifest number: 0FD4 Signing time: Sun 07 Dec 2025 14:00:44 +0000 Manifest this update: Sun 07 Dec 2025 14:00:44 +0000 Manifest next update: Mon 08 Dec 2025 14:00:44 +0000 Files and hashes: 1: 5WgcdrlGb7MVaF-nd4hP1QAkOnk.roa (hash: 3kqQzuANh+iGQZ1sMEi5NixE/pfQb2Az43AwVlQm4DM=) 2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: lcmbW9+R56XmmBMraguPKbTz7Ogkg4q64o3XEzcjnPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:1d:63:66:ed:c1:9e:3d:02:a3:4f:d7:3a:e9:82:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Dec 7 14:00:44 2025 GMT Not After : Dec 8 14:00:44 2025 GMT Subject: CN=c1795622751dad5d1008de32e652da6b1804839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:12:5f:aa:02:8e:42:dc:ea:71:16:57:07: dc:bb:d9:30:5e:df:1c:e7:59:2b:5f:e9:53:18:76: 96:11:40:0a:89:c4:59:56:e4:eb:5c:be:d8:11:0a: b4:65:5d:b5:82:85:c2:91:49:d9:45:25:f7:8b:7c: 38:2f:48:4e:5b:1f:74:59:37:e2:c6:29:79:d4:de: 0d:bf:ec:bc:6b:21:1c:9c:96:d0:37:49:8f:b6:e9: 9f:ec:11:26:21:6a:63:30:74:77:dd:31:b3:21:3b: d9:0a:92:dd:7c:32:e2:4c:0e:6b:83:cf:77:93:0c: 4b:9a:1b:79:de:a5:8b:6b:5d:eb:86:83:74:eb:80: 18:e2:ad:3f:7b:c0:3d:47:bb:a7:13:02:66:cf:15: 2b:87:92:a1:d3:7e:31:ec:63:e5:12:d5:04:19:3c: 36:00:14:bc:6c:4d:29:14:5a:bb:bd:b1:cb:43:ef: cc:95:f6:3f:ea:85:61:16:bb:ce:a2:7e:b3:0a:35: d6:44:66:9e:18:69:44:7e:78:e1:59:71:75:e9:85: 7f:d0:49:0a:40:08:7e:e2:23:fe:ac:b0:73:3f:c4: 44:47:f7:81:5d:ed:14:9f:d4:d1:e3:b7:36:d8:5c: b4:0e:b3:3a:b8:62:c0:68:69:c4:5d:a4:6f:f7:92: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:56:22:75:1D:AD:5D:10:08:DE:32:E6:52:DA:6B:18:04:83:9A X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bb:b1:a9:11:69:35:fc:9d:d4:63:f7:1c:7d:15:2d:02:1e: 3f:31:cb:6d:45:16:6d:d2:d6:11:37:7c:62:ba:d6:a6:c1:07: d2:b7:01:d8:25:f5:52:bc:80:3f:a6:ec:41:33:f4:95:b0:2f: ca:58:d6:ff:23:ca:50:6b:71:d7:6d:dd:8b:ba:33:98:98:e8: ed:f4:10:0b:b2:0c:48:8a:39:d1:97:1e:0a:55:eb:f4:1e:64: 7c:d8:93:bc:b8:bd:f4:39:ab:ca:e8:3f:de:78:fd:7b:ed:c3: f7:c8:70:cb:ec:48:9c:a3:a8:20:da:e8:41:32:46:e6:d4:09: 67:0f:14:c3:a8:8c:11:97:dc:4f:06:66:eb:b7:7f:a7:33:49: 67:be:6a:75:ed:5b:b4:43:ca:74:08:cc:5e:d1:27:00:d2:70: 7f:08:35:12:22:b8:59:26:b5:0e:a1:b7:8a:69:49:93:f1:d0: 38:32:67:2b:d3:05:64:16:8b:94:25:2d:d8:3b:a9:02:ea:5b: 34:a9:bc:18:0f:90:e4:36:66:71:7b:71:97:09:2a:da:4f:0c: 89:dc:e8:81:90:40:62:3e:b5:f3:34:05:6e:46:c7:63:ca:98: b8:8b:58:b9:2c:0c:5e:40:73:a5:02:1d:5e:b4:51:7f:e4:31: 47:8f:68:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5HWNm7cGePQKjT9c66YJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjUxMjA3MTQwMDQ0WhcNMjUxMjA4MTQwMDQ0WjAzMTEwLwYDVQQD EyhjMTc5NTYyMjc1MWRhZDVkMTAwOGRlMzJlNjUyZGE2YjE4MDQ4MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zsSX6oCjkLc6nEWVwfcu9kwXt8c 51krX+lTGHaWEUAKicRZVuTrXL7YEQq0ZV21goXCkUnZRSX3i3w4L0hOWx90WTfi xil51N4Nv+y8ayEcnJbQN0mPtumf7BEmIWpjMHR33TGzITvZCpLdfDLiTA5rg893 kwxLmht53qWLa13rhoN064AY4q0/e8A9R7unEwJmzxUrh5Kh034x7GPlEtUEGTw2 ABS8bE0pFFq7vbHLQ+/MlfY/6oVhFrvOon6zCjXWRGaeGGlEfnjhWXF16YV/0EkK QAh+4iP+rLBzP8RER/eBXe0Un9TR47c22Fy0DrM6uGLAaGnEXaRv95I5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMF5ViJ1Ha1dEAjeMuZS2msYBIOaMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7uxqRFp Nfyd1GP3HH0VLQIePzHLbUUWbdLWETd8YrrWpsEH0rcB2CX1UryAP6bsQTP0lbAv yljW/yPKUGtx123di7ozmJjo7fQQC7IMSIo50ZceClXr9B5kfNiTvLi99Dmryug/ 3nj9e+3D98hwy+xInKOoINroQTJG5tQJZw8Uw6iMEZfcTwZm67d/pzNJZ75qde1b tEPKdAjMXtEnANJwfwg1EiK4WSa1DqG3imlJk/HQODJnK9MFZBaLlCUt2DupAupb NKm8GA+Q5DZmcXtxlwkq2k8MidzogZBAYj618zQFbkbHY8qYuItYuSwMXkBzpQId XrRRf+QxR49o0g== -----END CERTIFICATE-----Generated at Sun Dec 7 16:57:41 2025 by rpki-client