This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json) Hash identifier: NvcwBRYRtek8jlvdkDb1b5ZpkhOK+uLiuYOX5lHuLDI= Subject key identifier: FF:FA:B5:E2:75:C6:F3:CB:E0:D4:B2:15:49:7F:E3:A3:BF:E4:20:11 Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Certificate serial: 019AF1D1BBBC005F6F018A2456764477EC84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft Manifest number: 033E Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: 8UP-HnXT6ZiBdaOYlDB66hT_Z2k.roa (hash: cDjhHlc7QRM8+yZv2BHSK6rJJPG1sbZBDn/UhAV5syE=) 2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 8BWqpmPxbfEWVE2vDVU45REp1m81hA+Mgkb5Jhg7aM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bb:bc:00:5f:6f:01:8a:24:56:76:44:77:ec:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=fffab5e275c6f3cbe0d4b215497fe3a3bfe42011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:d9:e3:2b:db:15:10:7d:62:c5:9e:5c:01: 78:95:f7:7c:ff:5b:0b:44:2f:34:ec:bc:fb:46:31: fc:56:77:8e:cb:3e:9f:ca:41:ef:5e:dd:d7:6e:80: d8:ce:be:c5:37:cb:7b:a6:32:ba:57:b4:af:bb:85: 98:d6:b4:5a:7a:e5:d8:36:81:7f:fe:3b:61:40:bd: a1:e5:34:b6:a0:e1:82:07:f4:24:56:7c:fa:9f:3c: 64:25:b5:ff:b6:99:1e:e4:df:bf:bb:fc:c8:38:94: ee:74:6a:d1:fe:76:ac:26:ed:0a:55:2e:70:c8:e3: 99:0b:ba:24:ae:1b:ef:b7:94:91:0b:25:9f:4b:d0: 1b:2f:e9:cb:25:56:15:04:d3:41:5c:24:7b:25:1a: bc:55:3b:c4:54:82:65:e3:05:a8:e5:ea:ad:1f:b0: 47:84:13:59:0a:77:56:8d:ce:27:e4:de:df:e2:17: 53:35:1f:cd:a4:50:88:3d:5f:f0:a2:59:a5:5f:16: b3:63:ff:d3:c9:16:8e:62:1a:90:ff:f2:70:2b:a4: 8d:84:9e:b8:bc:5e:95:be:7a:6d:b9:c6:e0:eb:cd: 1f:fd:4d:83:c6:b6:91:ef:7d:c0:ef:2c:aa:49:89: e1:1a:6c:19:f0:9f:1c:13:dc:3f:ec:9b:f4:89:3b: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FA:B5:E2:75:C6:F3:CB:E0:D4:B2:15:49:7F:E3:A3:BF:E4:20:11 X509v3 Authority Key Identifier: keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:88:ba:fc:82:6d:15:d4:03:40:8b:80:36:e9:7e:0b:89:db: 0a:18:13:0a:ac:cc:00:df:b5:09:fd:83:ee:34:8b:61:8c:65: 13:a1:2e:e8:89:c8:74:6a:1a:de:54:ff:9e:03:62:97:15:f0: 05:98:69:95:06:bb:0c:7c:7b:30:a7:04:09:93:08:53:88:96: 5a:1b:66:64:01:74:16:16:2d:8b:5c:fe:5f:74:8d:8e:5b:86: 98:82:8b:ee:fe:8f:6e:9a:d9:5a:3c:f7:9d:8d:cd:6f:b5:0d: 50:56:33:36:4a:81:0a:a5:1e:c6:38:12:4a:b5:2a:2e:50:cc: b6:53:f8:d0:14:7e:5e:1b:83:5b:8f:f1:8d:5d:98:69:d3:d3: 7e:c1:6d:d2:2e:39:be:0f:7c:ec:b0:59:60:6b:84:a0:83:ca: 8a:05:aa:27:10:f5:62:c5:fb:0a:e1:fb:6e:78:f1:bc:1d:c9: f0:04:2f:6d:89:2f:b7:1b:67:92:56:36:e3:72:6a:3e:de:88: 3f:db:dd:98:9f:13:36:63:a7:48:c8:9b:bb:0d:5c:45:a1:53: d8:3e:0d:7f:dc:ad:62:79:e5:d5:31:75:94:83:88:37:96:2a: a3:d9:58:74:24:12:8f:05:1e:6f:02:23:46:9b:d0:74:17:47: 28:e6:95:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bu8AF9vAYokVnZEd+yEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3 MmI1NzgwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EyhmZmZhYjVlMjc1YzZmM2NiZTBkNGIyMTU0OTdmZTNhM2JmZTQyMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkjZ4yvbFRB9YsWeXAF4lfd8/1sL RC807Lz7RjH8VneOyz6fykHvXt3XboDYzr7FN8t7pjK6V7Svu4WY1rRaeuXYNoF/ /jthQL2h5TS2oOGCB/QkVnz6nzxkJbX/tpke5N+/u/zIOJTudGrR/nasJu0KVS5w yOOZC7okrhvvt5SRCyWfS9AbL+nLJVYVBNNBXCR7JRq8VTvEVIJl4wWo5eqtH7BH hBNZCndWjc4n5N7f4hdTNR/NpFCIPV/wolmlXxazY//TyRaOYhqQ//JwK6SNhJ64 vF6Vvnptucbg680f/U2DxraR733A7yyqSYnhGmwZ8J8cE9w/7Jv0iTsBSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/6teJ1xvPL4NSyFUl/46O/5CARMB8GA1UdIwQY MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1 LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoi6/IJt FdQDQIuANul+C4nbChgTCqzMAN+1Cf2D7jSLYYxlE6Eu6InIdGoa3lT/ngNilxXw BZhplQa7DHx7MKcECZMIU4iWWhtmZAF0FhYti1z+X3SNjluGmIKL7v6PbprZWjz3 nY3Nb7UNUFYzNkqBCqUexjgSSrUqLlDMtlP40BR+XhuDW4/xjV2YadPTfsFt0i45 vg987LBZYGuEoIPKigWqJxD1YsX7CuH7bnjxvB3J8AQvbYkvtxtnklY243JqPt6I P9vdmJ8TNmOnSMibuw1cRaFT2D4Nf9ytYnnl1TF1lIOIN5Yqo9lYdCQSjwUebwIj RpvQdBdHKOaVgg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:54 2025 by rpki-client