This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json) Hash identifier: KfPoG4FimV1S5Q0Ae8SGr7lixYhwGD65esWOxHbF/xA= Subject key identifier: 01:FD:42:B6:B8:6E:37:A6:21:C8:02:7F:1D:D8:7E:F0:EF:61:28:1E Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019AF37BF47B6888411B213BA31BB0A45B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft Manifest number: 17AD Signing time: Sat 06 Dec 2025 11:46:18 +0000 Manifest this update: Sat 06 Dec 2025 11:46:18 +0000 Manifest next update: Sun 07 Dec 2025 11:46:18 +0000 Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=) 2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=) 3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=) 4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: HQc0bCHo7hGh8qwfG1m+5q7pd3hTc9jFsJB4zXUV2/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:7b:f4:7b:68:88:41:1b:21:3b:a3:1b:b0:a4:5b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Dec 6 11:46:18 2025 GMT Not After : Dec 7 11:46:18 2025 GMT Subject: CN=01fd42b6b86e37a621c8027f1dd87ef0ef61281e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:4e:56:4b:0c:23:36:b6:69:a2:64:75:76: 09:60:d1:f7:3c:bc:83:61:26:ba:4f:29:b9:69:1f: e1:62:11:47:cd:2c:7c:ee:f3:5c:66:96:f6:a2:bc: b5:b9:ab:2a:ed:b8:e2:e2:2d:98:26:0e:e6:39:fc: d4:b2:13:38:81:e1:9b:33:85:54:0d:58:9c:d3:0c: 19:50:b6:ad:9c:33:e2:7d:44:25:5a:d4:8f:72:38: 21:d1:59:db:43:fc:5a:30:d9:15:0e:fc:58:0e:a5: 25:57:28:6d:75:97:d1:04:86:e4:26:89:c1:7b:50: 26:36:e4:41:85:3a:27:8a:b5:f5:10:d6:74:a3:3c: ee:83:9f:fc:ec:90:15:81:7c:85:61:2d:07:9e:40: bd:81:91:ec:52:0e:7d:e8:fe:d9:44:5f:32:1e:5b: d3:ad:e9:78:d7:23:74:1b:a7:47:9d:84:ca:af:f6: d6:c4:62:1b:88:cf:85:e3:14:ab:64:e0:32:35:c9: 31:8c:eb:84:62:10:30:af:23:18:33:a0:fb:35:cd: 93:cd:2b:bc:48:20:49:64:6f:37:c3:03:94:99:00: 9f:d2:77:24:75:35:1c:c1:1a:25:28:22:e7:8a:2e: 47:fc:80:83:9c:30:7e:e5:24:1b:74:3f:20:62:d9: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FD:42:B6:B8:6E:37:A6:21:C8:02:7F:1D:D8:7E:F0:EF:61:28:1E X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dc:52:70:de:f6:c5:27:d4:79:0a:b9:c7:53:d7:0f:e2:79: 2b:08:ed:9f:ac:6a:35:30:4e:67:0b:b1:e2:b2:97:dd:1b:ff: 89:a3:b9:9b:95:e8:73:8b:1b:24:ba:38:28:81:11:07:ce:61: a3:34:76:2c:12:48:4a:78:46:42:25:28:05:4e:cf:fc:1b:5d: 30:6f:e5:7c:19:0c:a7:18:93:0e:35:78:07:01:1b:02:19:df: bc:35:5d:68:dd:e6:1b:19:62:8a:15:a0:d7:1a:1b:de:ef:c0: c2:ee:25:1c:3a:d2:b4:7d:1b:c1:36:cf:59:12:53:c5:cd:29: d1:65:af:01:22:b9:5a:85:10:b5:5c:a7:45:1e:e9:a0:19:eb: ea:c1:ac:82:84:0b:66:55:68:f8:ad:b2:b2:94:17:ab:58:94: 25:4e:87:12:ff:4c:19:0a:11:95:29:3a:d0:21:64:b3:bf:fc: df:c8:8c:37:49:0f:e1:72:af:f7:17:ff:76:25:7a:61:cf:28: 43:9b:1c:26:5f:53:f3:eb:1f:ef:62:e0:b6:85:88:d8:84:3d: 7a:63:ec:44:99:ef:a6:2c:84:bf:1b:16:91:30:15:97:e3:2c: fa:bb:a5:56:b7:6d:cb:6c:db:67:70:b8:49:ff:f1:d0:34:55: 6c:21:f0:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrze/R7aIhBGyE7oxuwpFssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjUxMjA2MTE0NjE4WhcNMjUxMjA3MTE0NjE4WjAzMTEwLwYDVQQD EygwMWZkNDJiNmI4NmUzN2E2MjFjODAyN2YxZGQ4N2VmMGVmNjEyODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEBOVksMIza2aaJkdXYJYNH3PLyD YSa6Tym5aR/hYhFHzSx87vNcZpb2ory1uasq7bji4i2YJg7mOfzUshM4geGbM4VU DVic0wwZULatnDPifUQlWtSPcjgh0VnbQ/xaMNkVDvxYDqUlVyhtdZfRBIbkJonB e1AmNuRBhTonirX1ENZ0ozzug5/87JAVgXyFYS0HnkC9gZHsUg596P7ZRF8yHlvT rel41yN0G6dHnYTKr/bWxGIbiM+F4xSrZOAyNckxjOuEYhAwryMYM6D7Nc2TzSu8 SCBJZG83wwOUmQCf0nckdTUcwRolKCLnii5H/ICDnDB+5SQbdD8gYtkixwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH9Qra4bjemIcgCfx3YfvDvYSgeMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtxScN72 xSfUeQq5x1PXD+J5Kwjtn6xqNTBOZwux4rKX3Rv/iaO5m5Xoc4sbJLo4KIERB85h ozR2LBJISnhGQiUoBU7P/BtdMG/lfBkMpxiTDjV4BwEbAhnfvDVdaN3mGxliihWg 1xob3u/Awu4lHDrStH0bwTbPWRJTxc0p0WWvASK5WoUQtVynRR7poBnr6sGsgoQL ZlVo+K2yspQXq1iUJU6HEv9MGQoRlSk60CFks7/838iMN0kP4XKv9xf/diV6Yc8o Q5scJl9T8+sf72LgtoWI2IQ9emPsRJnvpiyEvxsWkTAVl+Ms+rulVrdty2zbZ3C4 Sf/x0DRVbCHwAg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:15 2025 by rpki-client