This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json) Hash identifier: MR3K4zZLpQmHyUxtWPi+DIokgG3UnBJMPIVWaEQo0k8= Subject key identifier: 3C:15:04:0C:C4:08:F8:F8:3C:E4:BD:25:BC:E8:B5:C0:6A:FD:C0:56 Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8 Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8 Certificate serial: 019AF3F785BFC00C740BD372FF73C28BDED7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft Manifest number: 065D Signing time: Sat 06 Dec 2025 14:01:16 +0000 Manifest this update: Sat 06 Dec 2025 14:01:16 +0000 Manifest next update: Sun 07 Dec 2025 14:01:16 +0000 Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=) 2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: VE64cmi9SHQRUHZafH9slSGmtMzpDrfnu7nSCMdjp88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:85:bf:c0:0c:74:0b:d3:72:ff:73:c2:8b:de:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8 Validity Not Before: Dec 6 14:01:16 2025 GMT Not After : Dec 7 14:01:16 2025 GMT Subject: CN=3c15040cc408f8f83ce4bd25bce8b5c06afdc056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:f4:09:9a:27:ef:63:b9:7f:32:64:33:74: 74:19:78:10:9f:1d:7d:c4:bc:2a:23:3d:0e:26:25: fc:15:8f:31:4b:ce:dc:45:32:6c:de:56:1b:c5:8e: b8:7a:a3:f4:5b:7c:00:cc:70:f3:b6:13:38:48:71: 77:f4:f5:92:c7:d0:3d:58:0d:dd:a8:98:cd:62:60: cb:e5:5b:35:de:73:c9:c8:08:bd:75:f5:f3:ae:f0: 6b:c7:0b:f6:51:d1:cf:45:50:17:d3:a6:28:18:86: a7:b7:69:66:49:f5:69:6e:af:cb:85:0c:62:e2:9f: ca:c0:9c:5e:5f:43:b3:29:b8:51:7b:40:69:4f:b1: b2:11:f3:49:25:4c:93:47:d9:b1:53:25:8f:35:27: 7b:26:44:59:cb:53:9d:6f:f4:b0:a2:36:ad:d0:b3: b6:1f:08:b6:20:ec:84:b7:3f:65:cc:c7:b1:bd:49: a7:ef:73:0d:e0:f0:f9:0b:28:63:90:75:50:46:bf: 04:31:fb:ae:d3:0e:7b:83:9a:87:76:54:39:9a:1e: 64:1e:dc:85:13:d6:8f:69:90:76:46:aa:00:02:88: 47:9a:60:a4:cc:e8:46:bc:5a:39:24:40:9e:52:6a: 0b:93:9f:98:43:08:82:91:f9:6a:35:2a:e3:8b:f4: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:15:04:0C:C4:08:F8:F8:3C:E4:BD:25:BC:E8:B5:C0:6A:FD:C0:56 X509v3 Authority Key Identifier: keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:1c:f2:a3:bd:60:26:09:ec:a1:a2:57:c8:ae:a2:3e:18: 85:30:f5:82:5d:6f:14:38:99:5b:7e:73:e1:4d:5e:4d:89:2e: c1:7d:f5:dd:78:5f:b6:ff:d9:23:cd:84:70:ae:f4:41:97:05: 27:11:d3:56:0a:7f:91:f7:33:37:fb:ff:b8:db:4b:96:cd:19: 94:5e:fd:bc:30:bc:f5:e6:17:50:8f:af:ca:5a:d5:b2:28:b6: 23:09:9f:00:24:cd:15:90:13:6d:57:3c:2f:ed:be:61:b6:0d: 17:93:4f:c5:48:21:98:40:7d:e0:df:76:6d:62:12:55:3f:c0: ad:c1:65:fd:d2:9d:02:6e:2f:53:16:8b:c5:da:30:f5:60:60: 95:c3:d6:33:40:5e:20:b4:99:54:e5:38:94:30:0e:b4:6c:f7: 5d:a4:ff:b1:43:c3:3b:64:8c:66:00:d7:a4:d0:d9:ae:49:5a: 11:3d:b9:39:2a:1e:d8:2e:79:32:ed:4d:57:f2:db:b9:07:3d: c1:55:76:80:ab:e8:1c:7e:07:f4:eb:57:cf:f6:cf:2f:9b:97: 37:50:2c:86:2b:58:a3:6e:19:16:f6:df:9f:a1:c7:8b:17:b5: 9b:b0:eb:44:30:77:32:41:48:70:98:c2:02:e1:36:40:0d:8a: 09:27:6b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94W/wAx0C9Ny/3PCi97XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3 ZmQwZDgwHhcNMjUxMjA2MTQwMTE2WhcNMjUxMjA3MTQwMTE2WjAzMTEwLwYDVQQD EygzYzE1MDQwY2M0MDhmOGY4M2NlNGJkMjViY2U4YjVjMDZhZmRjMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB70CZon72O5fzJkM3R0GXgQnx19 xLwqIz0OJiX8FY8xS87cRTJs3lYbxY64eqP0W3wAzHDzthM4SHF39PWSx9A9WA3d qJjNYmDL5Vs13nPJyAi9dfXzrvBrxwv2UdHPRVAX06YoGIant2lmSfVpbq/LhQxi 4p/KwJxeX0OzKbhRe0BpT7GyEfNJJUyTR9mxUyWPNSd7JkRZy1Odb/Swojat0LO2 Hwi2IOyEtz9lzMexvUmn73MN4PD5CyhjkHVQRr8EMfuu0w57g5qHdlQ5mh5kHtyF E9aPaZB2RqoAAohHmmCkzOhGvFo5JECeUmoLk5+YQwiCkflqNSrji/SepwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwVBAzECPj4POS9JbzotcBq/cBWMB8GA1UdIwQY MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1 LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWIc8qO9 YCYJ7KGiV8iuoj4YhTD1gl1vFDiZW35z4U1eTYkuwX313Xhftv/ZI82EcK70QZcF JxHTVgp/kfczN/v/uNtLls0ZlF79vDC89eYXUI+vylrVsii2IwmfACTNFZATbVc8 L+2+YbYNF5NPxUghmEB94N92bWISVT/ArcFl/dKdAm4vUxaLxdow9WBglcPWM0Be ILSZVOU4lDAOtGz3XaT/sUPDO2SMZgDXpNDZrklaET25OSoe2C55Mu1NV/LbuQc9 wVV2gKvoHH4H9OtXz/bPL5uXN1AshitYo24ZFvbfn6HHixe1m7DrRDB3MkFIcJjC AuE2QA2KCSdrmg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:55 2025 by rpki-client