This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json) Hash identifier: PH2YtUsaGj5jza+DojUmM19BZ5E0PxKr0/jm5PSUjvA= Subject key identifier: CE:F7:A0:61:F9:69:14:A5:B5:FE:21:91:96:86:75:5F:C7:75:83:79 Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43 Certificate serial: 019AF49C1C7A679A4D5A5107660356857294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=) 2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=) 3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: V6mtAgtntMhw6uu+6bwHZbn1T9SGVXxE+G5UGeDeBrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1c:7a:67:9a:4d:5a:51:07:66:03:56:85:72:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43 Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=cef7a061f96914a5b5fe21919686755fc7758379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:31:fa:7b:b1:0c:56:cd:87:05:cb:5b:78:42: e5:0d:85:b3:63:7a:0a:f4:bb:25:51:1f:ba:bc:71: a9:d3:fe:c4:bc:cc:35:04:b2:39:8e:ae:c6:7c:55: 61:74:e8:ba:21:98:51:0f:d8:d7:d5:51:f4:63:03: 7e:e4:72:bc:41:38:9f:df:c7:af:57:a7:f2:97:5e: d9:64:b3:f0:fc:58:39:54:4c:e7:cb:46:07:30:6c: d0:c8:75:1d:7c:e8:01:1e:fb:2a:5b:0d:3c:4f:9a: 62:91:b8:30:3d:26:ef:2c:c7:2f:7f:15:ad:d2:ba: 2e:a2:3a:8e:05:aa:54:2d:df:2e:8e:11:0b:ab:71: 2f:b0:e5:52:13:6d:bf:ab:be:fd:71:87:01:7c:66: 31:5a:1e:83:c2:5e:0c:9d:e9:61:b9:c6:d1:ec:17: f6:3e:e6:bc:af:3c:9d:3c:54:33:00:50:ed:66:7e: 53:13:b0:6c:88:bf:da:f5:16:54:db:e6:ab:12:bd: 7e:bb:82:cc:d5:f8:bc:0d:c5:35:c6:9f:8a:c6:db: 8c:1c:97:e5:34:83:d3:7f:1f:cd:04:f4:7b:ca:eb: 65:1d:7a:f0:3c:83:44:7d:97:b5:63:b5:b2:06:f9: 08:68:77:5a:5c:0e:c8:2c:77:29:32:47:93:5e:10: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F7:A0:61:F9:69:14:A5:B5:FE:21:91:96:86:75:5F:C7:75:83:79 X509v3 Authority Key Identifier: keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:de:26:24:b7:cb:15:24:52:09:b5:6c:18:32:fd:95:d3:4a: 77:51:ae:c5:c1:eb:67:4e:cc:b4:b4:22:33:39:58:af:ff:5d: 8c:da:95:b3:4e:f3:11:37:66:ce:68:64:5b:8c:0e:54:e4:2e: 44:e4:13:e7:90:22:29:51:39:3e:ec:49:32:48:cb:44:2c:02: ce:85:59:43:55:57:88:19:bd:57:be:f2:ff:fa:53:cc:57:aa: d0:7a:13:ea:1c:a3:b5:49:8c:ac:4e:16:df:62:7c:81:e3:29: 95:21:01:72:60:e7:7e:f8:9d:a0:ab:0e:3f:9f:ab:0e:d4:bb: 85:db:5b:f8:ff:f6:35:f5:f8:ba:38:d6:e2:5d:7e:b2:9f:66: 21:56:8e:54:0f:5e:fc:82:57:7a:74:08:8b:ba:c3:3d:ae:70: 76:20:d8:e6:ac:12:a3:35:1e:63:ac:0c:b7:da:ed:9b:2a:6f: 43:80:36:2d:78:28:b5:90:94:c2:cb:19:5d:28:c1:3a:36:60: be:c4:e6:10:b3:2d:05:bc:2a:52:6d:b1:b2:e5:cc:60:96:23: 8a:fb:50:85:c6:0e:21:f6:41:c7:43:03:b5:0a:3e:65:18:4a: 28:a2:a0:d4:a7:6c:2f:33:c0:3b:38:70:35:d1:0e:06:4d:a8: f4:42:53:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBx6Z5pNWlEHZgNWhXKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk MDFiNDMwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhjZWY3YTA2MWY5NjkxNGE1YjVmZTIxOTE5Njg2NzU1ZmM3NzU4Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDH6e7EMVs2HBctbeELlDYWzY3oK 9LslUR+6vHGp0/7EvMw1BLI5jq7GfFVhdOi6IZhRD9jX1VH0YwN+5HK8QTif38ev V6fyl17ZZLPw/Fg5VEzny0YHMGzQyHUdfOgBHvsqWw08T5pikbgwPSbvLMcvfxWt 0rouojqOBapULd8ujhELq3EvsOVSE22/q779cYcBfGYxWh6Dwl4MnelhucbR7Bf2 Pua8rzydPFQzAFDtZn5TE7BsiL/a9RZU2+arEr1+u4LM1fi8DcU1xp+KxtuMHJfl NIPTfx/NBPR7yutlHXrwPINEfZe1Y7WyBvkIaHdaXA7ILHcpMkeTXhA7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM73oGH5aRSltf4hkZaGdV/HdYN5MB8GA1UdIwQY MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0 LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN4mJLfL FSRSCbVsGDL9ldNKd1GuxcHrZ07MtLQiMzlYr/9djNqVs07zETdmzmhkW4wOVOQu ROQT55AiKVE5PuxJMkjLRCwCzoVZQ1VXiBm9V77y//pTzFeq0HoT6hyjtUmMrE4W 32J8geMplSEBcmDnfvidoKsOP5+rDtS7hdtb+P/2NfX4ujjW4l1+sp9mIVaOVA9e /IJXenQIi7rDPa5wdiDY5qwSozUeY6wMt9rtmypvQ4A2LXgotZCUwssZXSjBOjZg vsTmELMtBbwqUm2xsuXMYJYjivtQhcYOIfZBx0MDtQo+ZRhKKKKg1KdsLzPAOzhw NdEOBk2o9EJT+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:58 2025 by rpki-client