This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json) Hash identifier: xmD4PyijsiyOe4vt2WbLKHaDPWm7NnRSaDwL6Fwojp4= Subject key identifier: 46:7D:F7:0D:F4:01:E2:89:81:4C:E1:5B:A4:EA:83:C7:1A:D7:CA:58 Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Certificate serial: 019B3344B541D71A4B235D90B3AA23B405E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft Manifest number: 0659 Signing time: Thu 18 Dec 2025 21:01:39 +0000 Manifest this update: Thu 18 Dec 2025 21:01:39 +0000 Manifest next update: Fri 19 Dec 2025 21:01:39 +0000 Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=) 2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: 8Rv5qrYNSoEfxq+fPygpy3Du4Njyc4isvbbjnj9tZWM=) 3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b5:41:d7:1a:4b:23:5d:90:b3:aa:23:b4:05:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Validity Not Before: Dec 18 21:01:39 2025 GMT Not After : Dec 19 21:01:39 2025 GMT Subject: CN=467df70df401e289814ce15ba4ea83c71ad7ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:e3:9e:e9:5b:05:17:6b:f6:26:03:9b:32: 23:f7:3d:fd:6b:33:54:ca:be:d4:b1:ed:a4:44:3a: 55:92:f4:57:80:c7:6d:86:85:7e:4b:98:6c:15:b5: 38:a5:39:19:ae:cc:38:47:12:0b:26:2e:7d:9b:dc: ed:f1:8e:bb:4e:27:18:1a:b4:7c:74:b6:bf:1a:c2: 85:5c:32:ec:4f:69:6a:84:a9:5e:ab:f7:dd:03:54: 16:37:fd:cc:91:b2:47:f7:05:fe:fd:00:b2:1d:36: c2:85:6d:12:9c:f7:7f:28:14:7c:51:7a:fe:1c:49: f9:30:65:94:ed:eb:b9:b5:d2:a5:c7:ae:37:c1:36: 14:06:36:08:3e:13:9d:c8:76:38:71:fb:0c:66:bf: 3b:9c:ad:bd:ac:0a:72:13:62:09:2c:1f:91:64:fc: ff:2a:94:bf:9a:15:97:17:12:c2:ff:6d:d8:9d:d1: be:9f:19:bf:c8:4d:a8:29:33:95:dc:80:7c:14:9c: 36:14:b1:cf:dd:53:cb:34:8a:9e:3e:1b:f8:89:0a: 8c:ee:29:77:77:43:64:a0:37:f8:87:cf:3f:39:27: 76:cc:39:5c:f3:c0:41:28:4f:f4:5d:92:2d:b7:04: 74:b0:f3:b6:9c:2a:ba:d1:85:b0:61:fd:61:ef:08: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7D:F7:0D:F4:01:E2:89:81:4C:E1:5B:A4:EA:83:C7:1A:D7:CA:58 X509v3 Authority Key Identifier: keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0a:c7:33:c8:cb:d6:c2:36:31:b2:cb:00:8e:de:96:50:c9: 01:16:a6:54:c9:62:ea:65:e6:df:92:d6:ea:66:13:80:d6:39: 7b:e7:e6:62:80:26:e6:54:66:b4:c9:78:68:ed:67:8d:fe:bc: a5:19:ab:c5:37:83:e0:6a:94:53:eb:e7:1c:02:c0:e1:d5:0a: c3:60:9a:f4:0f:a0:a3:6e:05:e4:c2:85:39:94:ab:40:9c:ed: 16:66:9b:f2:81:10:00:81:3a:b1:2a:10:7e:5f:b7:65:46:41: 92:dd:68:19:e6:af:b4:a0:26:85:b2:5b:06:bc:4f:b1:5b:95: 0c:b2:9a:0d:e1:67:e2:67:12:ea:e6:07:45:49:6b:bb:fb:c8: 34:e1:6b:30:50:34:5b:63:44:1e:cb:09:54:49:13:ef:4f:1e: 8d:30:15:c6:9b:ea:cc:9b:6b:5d:f4:7c:18:71:6d:11:e9:22: 42:4c:bd:47:26:a5:69:0d:8b:19:46:83:71:b7:3b:80:ee:eb: 0d:31:76:d3:56:93:4e:be:fd:70:39:d7:af:dd:d5:ba:01:26: b4:2e:d6:80:70:fb:78:8b:f1:f6:a4:28:9d:71:67:47:c4:27: dd:b0:e7:81:d9:db:40:9b:ef:0d:73:95:da:a6:ab:f7:56:9b: af:ca:a3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLVB1xpLI12Qs6ojtAXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl NWE4ZDAwHhcNMjUxMjE4MjEwMTM5WhcNMjUxMjE5MjEwMTM5WjAzMTEwLwYDVQQD Eyg0NjdkZjcwZGY0MDFlMjg5ODE0Y2UxNWJhNGVhODNjNzFhZDdjYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDzjnulbBRdr9iYDmzIj9z39azNU yr7Use2kRDpVkvRXgMdthoV+S5hsFbU4pTkZrsw4RxILJi59m9zt8Y67TicYGrR8 dLa/GsKFXDLsT2lqhKleq/fdA1QWN/3MkbJH9wX+/QCyHTbChW0SnPd/KBR8UXr+ HEn5MGWU7eu5tdKlx643wTYUBjYIPhOdyHY4cfsMZr87nK29rApyE2IJLB+RZPz/ KpS/mhWXFxLC/23YndG+nxm/yE2oKTOV3IB8FJw2FLHP3VPLNIqePhv4iQqM7il3 d0NkoDf4h88/OSd2zDlc88BBKE/0XZIttwR0sPO2nCq60YWwYf1h7whDSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZ99w30AeKJgUzhW6Tqg8ca18pYMB8GA1UdIwQY MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwrHM8jL 1sI2MbLLAI7ellDJARamVMli6mXm35LW6mYTgNY5e+fmYoAm5lRmtMl4aO1njf68 pRmrxTeD4GqUU+vnHALA4dUKw2Ca9A+go24F5MKFOZSrQJztFmab8oEQAIE6sSoQ fl+3ZUZBkt1oGeavtKAmhbJbBrxPsVuVDLKaDeFn4mcS6uYHRUlru/vINOFrMFA0 W2NEHssJVEkT708ejTAVxpvqzJtrXfR8GHFtEekiQky9RyalaQ2LGUaDcbc7gO7r DTF201aTTr79cDnXr93VugEmtC7WgHD7eIvx9qQonXFnR8Qn3bDngdnbQJvvDXOV 2qar91abr8qj7g== -----END CERTIFICATE-----Generated at Fri Dec 19 02:01:52 2025 by rpki-client