This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json) Hash identifier: xpBUa/ka9Imz4lgx9K9Hoz7XynSVMOzhZrn84IDJ+M4= Subject key identifier: DC:50:C8:5C:E1:91:F3:1F:F2:B0:73:8B:06:6A:05:C9:38:BE:E6:EE Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019AF3F70609BE628273E35894B8AA51D35C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft Manifest number: 1584 Signing time: Sat 06 Dec 2025 14:00:43 +0000 Manifest this update: Sat 06 Dec 2025 14:00:43 +0000 Manifest next update: Sun 07 Dec 2025 14:00:43 +0000 Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=) 2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=) 3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=) 4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: LzquKmBJJi1fLGM52+fKn131IWHSEHT6NpWTfikexWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:06:09:be:62:82:73:e3:58:94:b8:aa:51:d3:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Dec 6 14:00:43 2025 GMT Not After : Dec 7 14:00:43 2025 GMT Subject: CN=dc50c85ce191f31ff2b0738b066a05c938bee6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:0b:6c:6f:85:8a:d6:7f:82:3f:1e:73:5e: c3:d1:a7:20:c6:70:a0:fb:89:8b:1b:1a:be:99:cc: c2:2c:11:ea:6b:73:55:ee:57:cf:66:6b:22:42:a2: 43:cd:c9:27:44:bf:34:72:59:ce:07:3f:af:f0:04: db:97:d9:dd:e7:ed:47:ff:de:c9:ce:f5:f0:3a:86: 53:a9:ae:aa:45:a9:69:c9:86:3a:b3:09:f4:8e:01: 8f:4b:67:e6:a6:17:55:a1:94:a4:e2:43:ef:6b:ea: cc:76:01:ac:dd:17:7d:3c:d0:ac:71:42:76:aa:14: 8e:e0:ea:8f:48:fa:42:1d:b1:c7:f4:fc:0e:a6:dc: 5b:67:45:9f:2f:a3:8f:66:a0:4d:12:18:fc:87:bf: 5e:89:41:d6:d0:1b:87:c2:82:74:d9:49:e3:2b:ab: 6c:c5:b0:ed:65:25:a6:38:e8:0d:c7:db:c6:64:73: 97:66:ab:d8:c7:07:ba:fc:58:81:9c:86:21:0d:f1: 2d:36:06:39:2f:ca:fc:11:8c:6b:35:3c:62:ae:97: ef:88:04:8e:67:a0:79:3f:50:b3:b6:62:6e:00:15: 89:47:a6:b9:99:8c:00:1b:ec:da:e4:5a:0c:7f:cf: a0:89:8c:6e:72:52:0d:d7:3a:ba:5b:bf:e4:b0:9d: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:50:C8:5C:E1:91:F3:1F:F2:B0:73:8B:06:6A:05:C9:38:BE:E6:EE X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:61:b9:b4:a4:84:26:ea:24:e7:d0:be:db:79:56:44:e2:be: 53:98:a0:db:38:60:a5:e4:b3:f6:71:ce:12:b1:5e:02:b5:3f: 6e:ab:d6:43:cc:f8:83:eb:ac:8b:2d:27:83:32:01:f5:5c:60: 52:0d:f1:4a:cd:b4:63:ba:3f:27:85:6b:99:14:c5:a6:66:8c: 55:57:37:1a:88:cb:2e:30:4f:9a:8e:35:a4:db:e6:1d:8e:5f: 6e:94:81:b4:5f:90:5f:bb:67:93:44:20:97:53:c8:b6:27:be: cf:72:6e:fd:8e:08:f5:e0:c1:e4:15:00:8b:d9:55:4e:a6:1d: 10:21:34:42:ed:fd:60:13:57:4a:d9:89:1d:6d:58:6f:96:99: b0:14:77:73:21:63:df:80:31:60:11:86:c1:b4:38:19:08:62: ec:32:87:f5:c3:f2:1a:54:14:a0:36:1c:3b:31:69:71:de:f5: fc:6f:b8:cb:d7:f8:90:dc:1c:05:9a:97:69:b9:47:52:f9:41: 75:55:53:16:ce:e3:9e:53:fa:e3:79:d2:fe:b4:a3:07:82:26: ed:a2:a7:dd:c4:c0:54:0d:fd:7c:ee:93:37:cb:6c:a1:6d:97: 71:7c:9f:70:4e:e7:af:e4:71:19:4b:81:66:8e:b6:bf:34:3d: 5a:2a:ae:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wYJvmKCc+NYlLiqUdNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjUxMjA2MTQwMDQzWhcNMjUxMjA3MTQwMDQzWjAzMTEwLwYDVQQD EyhkYzUwYzg1Y2UxOTFmMzFmZjJiMDczOGIwNjZhMDVjOTM4YmVlNmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RYLbG+FitZ/gj8ec17D0acgxnCg +4mLGxq+mczCLBHqa3NV7lfPZmsiQqJDzcknRL80clnOBz+v8ATbl9nd5+1H/97J zvXwOoZTqa6qRalpyYY6swn0jgGPS2fmphdVoZSk4kPva+rMdgGs3Rd9PNCscUJ2 qhSO4OqPSPpCHbHH9PwOptxbZ0WfL6OPZqBNEhj8h79eiUHW0BuHwoJ02UnjK6ts xbDtZSWmOOgNx9vGZHOXZqvYxwe6/FiBnIYhDfEtNgY5L8r8EYxrNTxirpfviASO Z6B5P1CztmJuABWJR6a5mYwAG+za5FoMf8+giYxuclIN1zq6W7/ksJ1JwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxQyFzhkfMf8rBziwZqBck4vubuMB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGG5tKSE Juok59C+23lWROK+U5ig2zhgpeSz9nHOErFeArU/bqvWQ8z4g+usiy0ngzIB9Vxg Ug3xSs20Y7o/J4VrmRTFpmaMVVc3GojLLjBPmo41pNvmHY5fbpSBtF+QX7tnk0Qg l1PItie+z3Ju/Y4I9eDB5BUAi9lVTqYdECE0Qu39YBNXStmJHW1Yb5aZsBR3cyFj 34AxYBGGwbQ4GQhi7DKH9cPyGlQUoDYcOzFpcd71/G+4y9f4kNwcBZqXablHUvlB dVVTFs7jnlP643nS/rSjB4Im7aKn3cTAVA39fO6TN8tsoW2XcXyfcE7nr+RxGUuB Zo62vzQ9Wiquzg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:37 2025 by rpki-client