This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json) Hash identifier: iVzeuT6BfK24Esn6V5ZzjSdP2uwwP6F0MGLGeYcX6ko= Subject key identifier: EA:3E:7C:72:32:63:29:72:20:15:F6:C3:45:C7:11:C8:A7:4B:B9:8B Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019AF2ADBC642CEA03DDB22C45ED4193115C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft Manifest number: 0FEB Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=) 2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=) 3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=) 4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: jN7YtgZ77MIUNmieeIPFzQ04/7gcFpuLnywll4edgyM=) 5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=) 6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=) 7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bc:64:2c:ea:03:dd:b2:2c:45:ed:41:93:11:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=ea3e7c72326329722015f6c345c711c8a74bb98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:2b:4f:4f:8f:a0:89:4e:dd:1d:48:dc:80: a1:c1:ce:ab:cc:4c:30:85:1a:ab:a8:6a:c8:6c:19: 3f:18:59:d7:a0:33:65:b8:96:02:0a:3a:02:87:9f: 06:ca:3c:68:b9:1e:2a:b7:8d:60:f7:03:32:d9:99: 84:0c:6b:26:6a:4e:58:16:ed:b8:1e:41:42:9c:2f: 15:2b:76:b8:c9:85:1d:0c:52:0f:bd:11:5a:2e:f1: ec:b5:76:7e:c9:6d:bb:68:be:94:f5:dc:5d:63:75: cd:4e:60:18:7c:ff:4e:45:7b:3d:64:fb:4a:21:20: 0a:8b:a1:b3:b8:ff:f8:46:f7:22:44:10:61:5c:34: 40:60:fb:f9:8b:ae:47:16:a2:17:29:c1:9f:83:f6: 2e:c8:57:f0:5b:da:9f:dd:8a:ce:46:ba:5d:c2:1b: 7b:e7:b0:ca:1b:e3:0a:29:cd:e6:9f:c5:9b:14:04: b4:96:56:2e:4d:ed:81:e1:0c:70:8d:0c:d2:78:cb: ce:2c:f7:d3:aa:76:59:51:e5:32:55:9f:56:cc:8f: 09:0e:b5:c3:30:0a:18:5a:c0:fd:63:c1:6a:74:a8: 73:71:9b:fe:7e:69:08:16:f1:05:a0:25:9c:b9:eb: 0c:da:85:57:16:b7:1d:01:67:d5:86:e6:fb:57:08: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3E:7C:72:32:63:29:72:20:15:F6:C3:45:C7:11:C8:A7:4B:B9:8B X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e2:91:0e:57:70:90:f7:c9:b1:a0:0a:2d:d7:5b:10:27:4c: 29:7f:4e:98:d6:d1:6d:74:1b:cc:0d:78:4d:82:64:60:87:b1: a4:4d:07:55:b9:93:47:5b:7f:ba:21:50:26:65:02:5c:23:d1: d4:fe:9b:bb:24:4c:f5:62:eb:b7:8b:37:7a:2d:5f:0f:d7:6c: 65:df:b8:ef:a2:a6:08:a8:71:d4:61:dd:5e:cb:b6:eb:48:51: 12:06:a6:52:6a:56:08:9a:20:b0:d7:5e:14:99:41:34:3b:15: 71:13:c6:ad:30:11:31:2d:aa:b8:3d:0c:71:1a:51:1c:98:78: 24:ed:a4:4e:cf:a6:ed:df:19:df:5d:7d:c0:af:42:4f:43:42: 8f:a3:d9:ea:45:c6:e6:d4:9d:99:9d:df:59:b4:98:1a:eb:a2: 72:d0:fb:57:14:24:21:5b:8f:bb:07:c9:63:ee:fc:b0:7d:c3: b2:dc:e3:6b:78:39:45:d6:62:a4:e3:c4:f4:44:00:82:77:ad: 23:dc:29:1c:4c:e1:25:65:fd:de:bb:45:f4:04:37:39:16:f3: 3b:de:13:52:d5:d7:65:fb:ad:4a:f0:a4:2f:3c:1b:7a:c1:1c: 90:0a:d9:34:72:c4:c5:4c:d1:a5:b2:1b:38:cd:0a:d4:f2:e1: b5:62:b0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbxkLOoD3bIsRe1BkxFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EyhlYTNlN2M3MjMyNjMyOTcyMjAxNWY2YzM0NWM3MTFjOGE3NGJiOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynQrT0+PoIlO3R1I3IChwc6rzEww hRqrqGrIbBk/GFnXoDNluJYCCjoCh58GyjxouR4qt41g9wMy2ZmEDGsmak5YFu24 HkFCnC8VK3a4yYUdDFIPvRFaLvHstXZ+yW27aL6U9dxdY3XNTmAYfP9ORXs9ZPtK ISAKi6GzuP/4RvciRBBhXDRAYPv5i65HFqIXKcGfg/YuyFfwW9qf3YrORrpdwht7 57DKG+MKKc3mn8WbFAS0llYuTe2B4QxwjQzSeMvOLPfTqnZZUeUyVZ9WzI8JDrXD MAoYWsD9Y8FqdKhzcZv+fmkIFvEFoCWcuesM2oVXFrcdAWfVhub7VwgH8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo+fHIyYylyIBX2w0XHEcinS7mLMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+KRDldw kPfJsaAKLddbECdMKX9OmNbRbXQbzA14TYJkYIexpE0HVbmTR1t/uiFQJmUCXCPR 1P6buyRM9WLrt4s3ei1fD9dsZd+476KmCKhx1GHdXsu260hREgamUmpWCJogsNde FJlBNDsVcRPGrTARMS2quD0McRpRHJh4JO2kTs+m7d8Z3119wK9CT0NCj6PZ6kXG 5tSdmZ3fWbSYGuuictD7VxQkIVuPuwfJY+78sH3Dstzja3g5RdZipOPE9EQAgnet I9wpHEzhJWX93rtF9AQ3ORbzO94TUtXXZfutSvCkLzwbesEckArZNHLExUzRpbIb OM0K1PLhtWKwZg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:03 2025 by rpki-client