This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: joEzDeYaUrcAMF4/22c8Ka52a9xPE5Ndr7H/bk6GsyI= Subject key identifier: 9F:54:35:82:0E:B0:45:51:68:A7:F3:51:50:E7:0E:49:AE:FD:D3:A2 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 019AF19B2F08E941CF15674FD479706EA349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 1729 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 2: Itnfb5cOidqPHmrm9ItGmwZzqpE.roa (hash: iss4kvemyRAUGLNEu7CN/erlN+DUp3hzgmc3aCXZAfU=) 3: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 4: Krcq7ZeGH2Lmub3dy5F_WRkHwYE.asa (hash: btWWldiqWlNfihUeJ1u/kiPDZiSycBx+qnGB18Pzzk0=) 5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 6: ShXwELNENSFmGBdjnWGg5NqouYI.roa (hash: CvtdGpDGnIEThk2qtR3nRVqJ7XKDlnHvbjdMw3b5GEg=) 7: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 8: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: oZsdivMj6YUFzfXoJoeCADPYn71SYozIC7wOvstJRpw=) 9: ccs7nyLFaW5A18K4O1qhpOVnDF0.roa (hash: kVq8Rt+cDTCddUdzX9poi4CfmBkJSUYFh1PJxqkXE8A=) 10: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 11: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 12: zIstcjB0l5dXMsxLJF-PmySyWoY.roa (hash: sZKTonBPo728p5sx2a7KurcsOwIi7QOOMBd8o6TZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2f:08:e9:41:cf:15:67:4f:d4:79:70:6e:a3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=9f5435820eb0455168a7f35150e70e49aefdd3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:fb:d7:30:8c:42:26:56:f8:6c:7a:fa:3a: 24:09:2a:f4:3d:d7:07:0d:ec:00:b2:8d:9b:9b:a3: 4e:88:c0:9e:35:83:1e:f2:72:a2:d3:eb:9c:98:45: a6:86:14:c0:50:d0:07:5d:73:01:d4:c2:76:de:31: 1a:ee:64:ea:cc:6b:ec:9a:fc:82:b1:71:fb:cb:26: ae:39:5d:46:ec:52:36:b2:27:57:68:19:a1:bc:f7: d8:ca:3d:78:b7:a5:af:23:b6:4c:89:78:29:6a:9d: 1f:42:5b:99:2e:e1:74:5c:c4:f0:b3:4f:2f:dd:ba: 8f:c1:e8:1f:71:08:93:d7:11:72:03:f8:e3:89:9f: 34:6f:a8:91:1b:0f:3b:03:32:9b:9e:ae:31:9d:a3: ae:25:d7:11:99:b9:7f:f6:30:e1:ee:39:73:37:e5: a4:c3:6e:25:2a:70:c2:a3:70:53:fd:19:97:15:71: ad:4c:86:2b:73:06:e6:24:18:5c:a9:eb:ee:9d:28: 33:32:75:8c:1a:27:7d:37:46:05:1c:24:2f:2a:61: 1c:95:8a:97:f1:81:e2:0b:6a:3a:f5:42:68:9c:fd: a0:b5:fb:38:06:6d:2b:03:89:81:c0:a3:12:b0:b1: d9:98:d0:3d:37:04:93:14:d2:31:62:4e:24:6a:c3: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:35:82:0E:B0:45:51:68:A7:F3:51:50:E7:0E:49:AE:FD:D3:A2 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5c:78:84:97:c4:e0:81:a2:db:11:8c:3f:47:17:1f:2a:bc: 71:c6:13:51:8a:c4:ee:d4:c4:fa:24:cc:3c:4d:c0:d8:79:fe: a0:ac:f7:f6:10:33:d0:90:a6:fd:8d:68:32:03:75:5d:73:b9: 51:fd:bd:a2:6c:36:2e:2b:0d:3e:4c:df:7c:6b:82:fa:49:d4: 4d:0e:9c:1a:d8:c4:a8:66:ac:3c:c6:d3:e7:0e:2e:81:a6:f3: 9c:24:5e:e7:36:df:c2:8b:be:c7:85:ac:b9:af:fd:6c:03:95: 27:bb:ed:a4:41:fd:e6:a5:43:71:ff:fa:2e:ad:36:bc:84:60: 31:bd:be:13:c9:f9:47:5b:5a:ad:b4:dc:60:f4:ca:09:a2:12: 2d:15:c2:ed:d0:eb:6d:8f:73:8f:1c:bc:5f:11:91:12:ba:fc: 17:83:fd:4b:f5:3d:d9:cf:22:7d:3e:dc:c4:63:52:42:78:c5: 27:43:a4:fb:c8:1d:70:a3:30:31:6d:cc:52:ac:2e:23:68:1f: 30:d6:bf:ea:65:d7:e6:23:af:3a:d1:ee:70:1d:f8:f1:fe:da: 00:f8:b7:40:78:fe:b0:03:35:7f:a4:3e:e4:4e:7b:83:1a:bd: 7b:78:03:2d:70:f7:e6:01:e2:1a:3a:50:a2:52:1a:69:3d:da: 07:35:25:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy8I6UHPFWdP1HlwbqNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD Eyg5ZjU0MzU4MjBlYjA0NTUxNjhhN2YzNTE1MGU3MGU0OWFlZmRkM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKH71zCMQiZW+Gx6+jokCSr0PdcH DewAso2bm6NOiMCeNYMe8nKi0+ucmEWmhhTAUNAHXXMB1MJ23jEa7mTqzGvsmvyC sXH7yyauOV1G7FI2sidXaBmhvPfYyj14t6WvI7ZMiXgpap0fQluZLuF0XMTws08v 3bqPwegfcQiT1xFyA/jjiZ80b6iRGw87AzKbnq4xnaOuJdcRmbl/9jDh7jlzN+Wk w24lKnDCo3BT/RmXFXGtTIYrcwbmJBhcqevunSgzMnWMGid9N0YFHCQvKmEclYqX 8YHiC2o69UJonP2gtfs4Bm0rA4mBwKMSsLHZmNA9NwSTFNIxYk4kasOk0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9UNYIOsEVRaKfzUVDnDkmu/dOiMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVx4hJfE 4IGi2xGMP0cXHyq8ccYTUYrE7tTE+iTMPE3A2Hn+oKz39hAz0JCm/Y1oMgN1XXO5 Uf29omw2LisNPkzffGuC+knUTQ6cGtjEqGasPMbT5w4ugabznCRe5zbfwou+x4Ws ua/9bAOVJ7vtpEH95qVDcf/6Lq02vIRgMb2+E8n5R1tarbTcYPTKCaISLRXC7dDr bY9zjxy8XxGRErr8F4P9S/U92c8ifT7cxGNSQnjFJ0Ok+8gdcKMwMW3MUqwuI2gf MNa/6mXX5iOvOtHucB348f7aAPi3QHj+sAM1f6Q+5E57gxq9e3gDLXD35gHiGjpQ olIaaT3aBzUljg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:49:18 2025 by rpki-client