This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: XwzPOqeqwkP0IsWXSfA3o+jKzqE5nSiwL818uV++JHU= Subject key identifier: CE:AC:61:B1:BE:F6:E8:9C:91:17:E4:95:F9:0D:1B:9F:96:A3:60:95 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019AF1643F6CB4134F8F9004D6A068D051FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 17AF Signing time: Sat 06 Dec 2025 02:01:10 +0000 Manifest this update: Sat 06 Dec 2025 02:01:10 +0000 Manifest next update: Sun 07 Dec 2025 02:01:10 +0000 Files and hashes: 1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=) 2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=) 3: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 4: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 5: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: lTgrEbLLGfQnQRA5rzK7ImnlIVaFlwuvcTJ8AN6jGQc=) 6: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 7: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 8: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 9: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 10: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 11: jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa (hash: z9nO7OrTD7V+7NYFDciSzCdGUenMxnQfYKHhLdiznOo=) 12: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) 13: uAswi2cRK_R4XEmz2KryL_bRIvc.roa (hash: lGkmLJGMW98lhszGgEj5yLC0iPASHSud2DBzOk1U8uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3f:6c:b4:13:4f:8f:90:04:d6:a0:68:d0:51:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 6 02:01:10 2025 GMT Not After : Dec 7 02:01:10 2025 GMT Subject: CN=ceac61b1bef6e89c9117e495f90d1b9f96a36095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:8b:90:89:ab:3a:11:71:33:5f:73:bd:98: 4b:1e:23:cd:e0:59:ba:86:9f:f0:2b:63:b8:5f:a4: 62:3b:6c:73:65:bf:69:cf:83:77:ac:8f:fd:db:21: fa:ed:bb:30:76:fb:27:73:22:cc:4f:cd:56:12:6d: cc:5b:ef:5c:58:7f:dc:6f:b7:d2:87:bd:04:e0:5a: dd:22:3a:a7:c8:99:d2:0b:a1:4b:40:ec:60:9f:82: 63:52:21:aa:b4:4e:f7:30:95:8c:52:38:2b:fe:82: e7:37:88:60:53:08:d5:dd:8a:c6:f7:ee:3f:79:36: 55:0f:8f:dd:a7:99:c9:56:ff:45:38:9d:8a:70:2f: 9f:61:0f:1c:d4:3a:93:40:6b:bb:b2:3a:3f:cc:13: 7a:ba:57:73:65:91:64:0f:37:8e:54:7e:52:7b:ef: a0:c8:e6:3c:73:d0:c1:99:57:5a:8c:97:66:e6:b0: 86:9d:40:f6:19:e5:ba:4c:49:c2:93:74:7e:5c:ad: b1:42:0f:d9:07:a3:f6:b8:4c:d4:2f:e6:7f:62:67: 8c:45:5f:b8:1c:43:af:e7:6f:ea:d6:21:7f:40:6a: 3d:c4:0f:c1:e8:60:02:39:b9:e9:5a:4c:f6:88:35: 29:aa:17:18:d6:67:81:02:34:5f:89:1f:3a:d9:c9: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AC:61:B1:BE:F6:E8:9C:91:17:E4:95:F9:0D:1B:9F:96:A3:60:95 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:90:28:d9:ec:73:fa:cf:11:ba:98:98:31:4f:74:02:d2:e4: ba:94:fc:b4:18:ae:a9:41:6f:5a:ab:1e:12:70:73:4c:36:28: 38:7e:7d:25:39:a0:b9:1e:d9:b8:89:c7:7d:2f:d9:17:2f:1c: 96:49:32:02:17:bc:74:26:59:a9:b7:d7:c2:3b:a2:eb:f2:12: ce:1d:db:9f:78:fa:d2:21:59:45:bd:c7:10:65:1c:45:a6:64: d8:c1:96:83:42:0d:81:0a:00:9a:3d:a5:12:7a:81:e9:34:00: e9:50:77:4d:a0:21:08:a3:d2:08:af:13:66:53:e9:13:a4:59: 29:ba:c4:00:93:96:e3:53:33:44:13:3d:33:76:59:bb:cd:32: cd:68:8e:e2:6f:ce:31:1f:69:be:24:da:23:4e:94:7b:a7:b6: c9:34:43:15:5e:d5:50:7d:30:e1:ec:a1:5c:b9:47:ce:f5:b9: cb:61:52:db:04:a8:17:2e:fe:f3:2c:77:84:a6:9e:1b:85:9f: fc:4d:64:05:0c:54:07:39:bd:a4:e0:68:cc:60:6a:10:b0:1e: 63:b9:79:b6:f0:98:30:d6:47:1a:7d:11:95:d2:3f:33:98:a0: 21:64:06:cc:e5:f4:19:a1:4c:28:51:0c:01:b3:51:0a:20:6f: a2:3f:9a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD9stBNPj5AE1qBo0FH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjA2MDIwMTEwWhcNMjUxMjA3MDIwMTEwWjAzMTEwLwYDVQQD EyhjZWFjNjFiMWJlZjZlODljOTExN2U0OTVmOTBkMWI5Zjk2YTM2MDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmyLkImrOhFxM19zvZhLHiPN4Fm6 hp/wK2O4X6RiO2xzZb9pz4N3rI/92yH67bswdvsncyLMT81WEm3MW+9cWH/cb7fS h70E4FrdIjqnyJnSC6FLQOxgn4JjUiGqtE73MJWMUjgr/oLnN4hgUwjV3YrG9+4/ eTZVD4/dp5nJVv9FOJ2KcC+fYQ8c1DqTQGu7sjo/zBN6uldzZZFkDzeOVH5Se++g yOY8c9DBmVdajJdm5rCGnUD2GeW6TEnCk3R+XK2xQg/ZB6P2uEzUL+Z/YmeMRV+4 HEOv52/q1iF/QGo9xA/B6GACObnpWkz2iDUpqhcY1meBAjRfiR862cmKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6sYbG+9uickRfklfkNG5+Wo2CVMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5Ao2exz +s8RupiYMU90AtLkupT8tBiuqUFvWqseEnBzTDYoOH59JTmguR7ZuInHfS/ZFy8c lkkyAhe8dCZZqbfXwjui6/ISzh3bn3j60iFZRb3HEGUcRaZk2MGWg0INgQoAmj2l EnqB6TQA6VB3TaAhCKPSCK8TZlPpE6RZKbrEAJOW41MzRBM9M3ZZu80yzWiO4m/O MR9pviTaI06Ue6e2yTRDFV7VUH0w4eyhXLlHzvW5y2FS2wSoFy7+8yx3hKaeG4Wf /E1kBQxUBzm9pOBozGBqELAeY7l5tvCYMNZHGn0RldI/M5igIWQGzOX0GaFMKFEM AbNRCiBvoj+asw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:18 2025 by rpki-client