This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json) Hash identifier: drvVoaQlgnEJYkO6PkqjJZk3g8c4WiFIFzdjlb5Npyc= Subject key identifier: FF:B5:12:AF:FC:EB:61:FF:E3:AC:2C:F3:9B:5A:3D:03:68:8E:7B:00 Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be Certificate serial: 019AF1D24F84D5CDAB40F888E985AE80D589 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft Manifest number: 0126 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: gIxZrWlHl0oRXmPccq0bAMsTD7c.roa (hash: icJylGKFEOgR2y+9aMtSkzbhz2/KK1SV2PGADtfOVCk=) 2: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: SyPQSWzs0UDZUhOhlFNqtFZo8vI8rNSmKTIITKxBpnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4f:84:d5:cd:ab:40:f8:88:e9:85:ae:80:d5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=ffb512affceb61ffe3ac2cf39b5a3d03688e7b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:c4:b9:e8:7b:8f:c0:61:d2:5f:fb:b7:25: 0a:9a:4e:1f:9f:8e:d5:17:a7:22:d7:be:9c:18:cc: 2c:45:19:6b:e0:7c:60:f8:05:d5:db:a1:af:9c:d9: b6:cf:ef:b1:17:12:d7:5a:8f:f2:a0:aa:07:7d:93: 48:98:e3:48:49:be:7e:89:bb:e4:9c:68:2b:be:04: 31:65:bb:f8:68:e6:d4:3a:2d:c5:3f:cd:87:c2:23: b9:aa:77:40:c9:71:58:86:91:cd:23:b5:ae:25:43: f6:d1:00:48:23:7e:a7:ea:4e:f7:ba:0e:23:95:19: ef:a4:84:73:5d:a2:f4:48:cc:d6:bb:ec:4f:59:21: de:62:21:2b:95:b9:07:63:a7:23:82:ce:0d:76:ae: b5:b9:fc:22:2f:78:80:54:79:5f:2d:ff:2e:29:5b: 1e:5e:98:a4:db:2e:7f:15:ca:9a:bf:ff:c2:6c:a3: a1:37:60:f8:72:17:d3:9b:87:e0:c2:33:a4:3e:5e: 35:62:ae:d3:31:d5:8a:e0:dd:a0:e6:d5:43:d8:d5: fe:34:d5:40:dd:c8:a1:5d:cd:ae:26:5e:d4:15:0e: 96:71:fc:ae:f2:f8:e0:ae:28:3d:1a:02:ef:31:6d: 7d:23:2e:94:4d:6c:0a:0c:fb:e3:c3:4e:2e:1b:d7: 51:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B5:12:AF:FC:EB:61:FF:E3:AC:2C:F3:9B:5A:3D:03:68:8E:7B:00 X509v3 Authority Key Identifier: keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:8b:af:1f:93:f1:0c:5c:e2:41:66:a5:a4:39:51:96:b4:ac: e0:f0:73:7b:b3:44:4a:8b:c7:de:a6:fc:1f:cd:75:15:9e:98: 41:d7:7c:3b:8f:e9:2e:e8:c7:58:e6:6e:c0:32:64:86:c8:ea: 96:4c:c1:82:b8:83:6d:67:88:35:67:2b:df:cf:48:67:a0:71: 0c:b6:f8:84:0f:c2:36:4a:a4:da:a6:53:72:1c:96:6d:4d:fd: 63:68:c2:fa:af:19:dc:21:62:a8:09:75:c7:25:0f:b7:33:eb: 76:9f:ff:64:32:cd:f2:67:34:a2:65:65:2d:d3:bb:17:e2:af: 93:16:29:d6:b8:be:86:d1:28:ff:e2:e4:91:c1:50:16:48:3d: 57:20:d1:49:63:33:69:f5:77:20:f6:dd:be:bc:0d:ef:e7:1a: e3:59:c8:66:11:36:8d:29:7a:3b:6a:49:cb:19:20:d1:fa:6c: ee:72:97:c6:4b:6d:7b:a9:40:d0:6b:f3:81:65:9f:ca:db:cc: a2:c8:95:b0:4f:72:bd:e1:9c:21:e1:78:a0:63:e5:19:70:33: 8c:e6:36:2a:d3:07:15:0b:d5:9f:9f:43:86:8d:8c:50:a4:8e: 6b:a3:72:36:95:f3:c9:5e:a6:ff:f1:b3:c1:22:bb:83:d0:58: d6:7e:14:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k+E1c2rQPiI6YWugNWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTQ2OTRlYzI0ZWE3MTVkY2EyZDI3YTMyMWMwNGJkMGIw YzkwYmUwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhmZmI1MTJhZmZjZWI2MWZmZTNhYzJjZjM5YjVhM2QwMzY4OGU3YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjEueh7j8Bh0l/7tyUKmk4fn47V F6ci176cGMwsRRlr4Hxg+AXV26GvnNm2z++xFxLXWo/yoKoHfZNImONISb5+ibvk nGgrvgQxZbv4aObUOi3FP82HwiO5qndAyXFYhpHNI7WuJUP20QBII36n6k73ug4j lRnvpIRzXaL0SMzWu+xPWSHeYiErlbkHY6cjgs4Ndq61ufwiL3iAVHlfLf8uKVse Xpik2y5/Fcqav//CbKOhN2D4chfTm4fgwjOkPl41Yq7TMdWK4N2g5tVD2NX+NNVA 3cihXc2uJl7UFQ6Wcfyu8vjgrig9GgLvMW19Iy6UTWwKDPvjw04uG9dRJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+1Eq/862H/46ws85taPQNojnsAMB8GA1UdIwQY MBaAFM/kaU7CTqcV3KLSejIcBL0LDJC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUt YzViNjRjNTI4ZTI4LzEvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUtYzViNjRjNTI4ZTI4 LzEvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxIuvH5Px DFziQWalpDlRlrSs4PBze7NESovH3qb8H811FZ6YQdd8O4/pLujHWOZuwDJkhsjq lkzBgriDbWeINWcr389IZ6BxDLb4hA/CNkqk2qZTchyWbU39Y2jC+q8Z3CFiqAl1 xyUPtzPrdp//ZDLN8mc0omVlLdO7F+KvkxYp1ri+htEo/+LkkcFQFkg9VyDRSWMz afV3IPbdvrwN7+ca41nIZhE2jSl6O2pJyxkg0fps7nKXxktte6lA0GvzgWWfytvM osiVsE9yveGcIeF4oGPlGXAzjOY2KtMHFQvVn59Dho2MUKSOa6NyNpXzyV6m//Gz wSK7g9BY1n4U7g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:58 2025 by rpki-client