This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json) Hash identifier: 86cPuUWYBN/a6zTqs4guA6VbScm8gpfgHhwDtptoMpY= Subject key identifier: 25:BC:26:81:0B:44:F6:D4:39:BE:B7:26:4A:C0:D6:B4:51:8F:D2:11 Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff Certificate serial: 019AF31CE8F96421305EC0A82744DFE74E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft Manifest number: 0DEF Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=) 2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: OTOY5xqlmYAlMNSW6+M6lU5jLNwBxPismKjBKxV9nIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e8:f9:64:21:30:5e:c0:a8:27:44:df:e7:4e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=25bc26810b44f6d439beb7264ac0d6b4518fd211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:3e:00:b8:c0:0a:db:1d:e1:a6:c0:a5:07: 6c:a1:f7:f7:2b:03:4f:3e:5d:b6:22:a7:83:ea:3f: 97:36:72:42:d2:88:82:b9:0b:5b:7c:74:d5:62:6c: 26:1c:ee:27:55:ed:ed:20:8d:4e:fb:89:57:f3:6e: 0c:32:80:ae:01:bf:f2:a4:85:47:d7:ba:e8:ec:51: a9:b6:0d:d0:4f:09:ad:43:92:aa:61:0d:4f:16:e4: 12:06:78:e5:c8:67:85:90:ac:e9:43:58:a9:7e:16: e5:86:60:aa:6c:f0:fe:6a:28:60:b5:03:92:92:c1: f6:a8:33:3a:20:29:f0:85:b2:59:04:62:1c:86:7c: 7d:b0:53:a2:06:5f:b1:b9:2d:e4:00:48:91:5b:5f: cb:41:fb:e8:ba:18:6c:c6:a3:5c:ef:03:9e:e1:32: 88:0d:bc:48:92:c8:a6:32:d2:56:98:82:48:9c:bf: cd:39:7f:ed:ed:05:ae:06:1d:d3:80:ec:25:1b:8b: 11:23:02:8e:06:f7:59:24:3f:23:2d:69:58:5b:a3: fd:44:fd:b1:0f:4d:4f:09:41:d4:5c:1a:ec:ba:e5: d1:36:46:5c:e4:68:59:45:da:4a:9e:0b:d8:49:5d: e3:8e:33:d6:94:db:ed:d7:68:89:5e:b0:5f:13:f5: a9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BC:26:81:0B:44:F6:D4:39:BE:B7:26:4A:C0:D6:B4:51:8F:D2:11 X509v3 Authority Key Identifier: keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d1:33:47:d2:d1:43:f5:a0:30:13:c4:c6:c5:81:6f:f3:5a: 8e:6b:22:29:4d:b6:36:70:a0:94:91:f7:53:3c:4f:0e:8a:5d: 87:7c:da:50:ab:b0:33:ca:a2:90:9c:f7:53:a5:bc:a1:fb:45: a5:be:29:8f:29:79:ea:39:bd:6c:00:dd:20:b0:00:8b:29:9c: d7:dc:92:a2:0d:d1:93:88:e4:96:9b:b8:ee:4f:cb:c8:f0:e4: 92:60:c7:bf:2a:d2:dd:d2:e4:06:6f:26:cf:ac:2a:fa:5d:f2: 89:76:5a:24:08:74:84:85:ff:96:32:a6:fe:51:c0:7e:87:d1: 5b:bf:12:a1:8f:51:ec:46:34:bd:d7:3f:9f:43:1e:42:b1:0d: 5d:d0:33:db:cd:84:a8:11:34:fa:2d:62:20:3f:72:0c:3f:85: 7c:39:98:80:65:e9:25:4c:20:c6:40:b0:56:41:b3:73:b0:7a: 2b:ce:83:92:53:53:c0:7c:b2:c6:21:50:bd:2a:74:a8:18:e5: 89:d1:03:de:f8:00:9a:41:55:1d:2f:d6:89:15:b7:a5:0c:43: d3:e8:79:ec:67:8e:bc:1b:f3:aa:d9:b5:c3:1a:8b:37:d5:a8: c2:f9:7a:a9:1a:5d:22:e0:9c:b5:f6:83:42:38:f9:a8:a3:12: 90:29:43:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOj5ZCEwXsCoJ0Tf506eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGJkNjQ5MDczNjQ2YzFmNGMzYjAxY2FjYWE3MmUyMDll OWRhZmYwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EygyNWJjMjY4MTBiNDRmNmQ0MzliZWI3MjY0YWMwZDZiNDUxOGZkMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuo+ALjACtsd4abApQdsoff3KwNP Pl22IqeD6j+XNnJC0oiCuQtbfHTVYmwmHO4nVe3tII1O+4lX824MMoCuAb/ypIVH 17ro7FGptg3QTwmtQ5KqYQ1PFuQSBnjlyGeFkKzpQ1ipfhblhmCqbPD+aihgtQOS ksH2qDM6ICnwhbJZBGIchnx9sFOiBl+xuS3kAEiRW1/LQfvouhhsxqNc7wOe4TKI DbxIksimMtJWmIJInL/NOX/t7QWuBh3TgOwlG4sRIwKOBvdZJD8jLWlYW6P9RP2x D01PCUHUXBrsuuXRNkZc5GhZRdpKngvYSV3jjjPWlNvt12iJXrBfE/WpkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW8JoELRPbUOb63JkrA1rRRj9IRMB8GA1UdIwQY MBaAFGeL1kkHNkbB9MOwHKyqcuIJ6dr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2Ut ZWQ3OGNiNzY2NjFjLzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2UtZWQ3OGNiNzY2NjFj LzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9EzR9LR Q/WgMBPExsWBb/NajmsiKU22NnCglJH3UzxPDopdh3zaUKuwM8qikJz3U6W8oftF pb4pjyl56jm9bADdILAAiymc19ySog3Rk4jklpu47k/LyPDkkmDHvyrS3dLkBm8m z6wq+l3yiXZaJAh0hIX/ljKm/lHAfofRW78SoY9R7EY0vdc/n0MeQrENXdAz282E qBE0+i1iID9yDD+FfDmYgGXpJUwgxkCwVkGzc7B6K86DklNTwHyyxiFQvSp0qBjl idED3vgAmkFVHS/WiRW3pQxD0+h57GeOvBvzqtm1wxqLN9Wowvl6qRpdIuCctfaD Qjj5qKMSkClDkA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:38:37 2025 by rpki-client