This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json) Hash identifier: EmgIQMKpqoQyE/rbzlJ95eXA+knQVKJXgwtosIV/z+M= Subject key identifier: 37:00:2C:38:89:CC:C4:E4:A7:DC:F5:D2:5D:E3:78:D3:49:EC:19:6D Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Certificate serial: 019B1FF46DF96E5CF406E57A857F59B9A28E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft Manifest number: 049A Signing time: Mon 15 Dec 2025 03:01:11 +0000 Manifest this update: Mon 15 Dec 2025 03:01:11 +0000 Manifest next update: Tue 16 Dec 2025 03:01:11 +0000 Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=) 2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=) 3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: ngSWNBSh2tmSoPjx+2DQiSbDEDDOjpE6IOqzvUotI84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:6d:f9:6e:5c:f4:06:e5:7a:85:7f:59:b9:a2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Validity Not Before: Dec 15 03:01:11 2025 GMT Not After : Dec 16 03:01:11 2025 GMT Subject: CN=37002c3889ccc4e4a7dcf5d25de378d349ec196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:6e:e1:e1:a0:1c:cd:4b:e5:88:69:fe:a2: 35:cc:be:9a:ed:db:c7:dc:87:91:bf:d2:67:33:fe: 2a:45:34:d3:c7:bf:0b:00:26:c8:07:d1:2a:48:5e: 71:7d:50:5f:dd:93:02:6c:7c:4a:2c:af:35:96:9c: 93:1c:45:44:bb:2c:32:b5:97:08:5e:43:35:a7:ea: 5c:f8:a1:1b:36:bc:2d:68:18:f6:0a:a7:71:17:fa: 3d:42:ba:80:0f:97:c2:4c:ca:0f:d2:29:c6:5a:16: 86:8f:d0:d4:d4:09:a4:3d:00:e5:bc:60:25:60:f5: 26:83:c9:6f:a6:56:14:07:9c:9c:73:e0:8a:6f:e2: 12:9b:a6:09:65:88:08:b2:43:11:6d:4c:a1:7e:90: e2:95:94:ef:11:fd:0b:b6:ef:93:e2:37:ab:df:0e: 56:55:ef:aa:d4:97:81:dd:4a:05:44:ae:02:a5:c9: f0:70:a1:51:67:07:12:b0:52:52:4a:b1:99:b8:7a: 59:aa:ea:48:f2:35:fa:35:06:02:a3:b1:f5:3e:69: e6:18:13:82:c8:bc:aa:59:80:dc:ae:8b:4c:d2:93: 43:0d:33:c0:ad:9c:6f:cc:0c:9f:22:b3:4b:5c:3f: 4f:7d:ed:32:98:51:f7:2b:ab:c7:35:8d:ff:9c:dd: d6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:00:2C:38:89:CC:C4:E4:A7:DC:F5:D2:5D:E3:78:D3:49:EC:19:6D X509v3 Authority Key Identifier: keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bb:00:93:44:6f:e9:3a:38:7d:c2:2a:34:45:84:fe:f4:ac: be:d2:0a:56:69:7c:31:aa:7b:ed:c5:00:8d:d3:9d:74:37:54: 2b:19:b4:55:d6:36:56:8d:4e:ca:b3:25:f0:27:29:8c:b1:26: b0:41:9a:06:e5:de:b7:d1:93:58:71:00:e2:79:33:cd:80:0e: 22:f2:6c:c4:c2:9d:70:ee:56:61:bd:3b:73:2a:98:4f:c6:94: 95:9e:7f:69:e2:1e:a8:91:fc:dd:72:b8:07:80:7f:64:9f:07: 4d:9e:55:87:ac:8d:1f:59:ec:f6:39:df:0f:67:4e:16:9d:12: c6:e3:ca:b2:06:4b:c8:96:80:c9:6b:f3:b3:38:6b:3b:9c:2b: 7d:17:5e:3e:0c:51:75:7d:f0:e6:6c:2d:e8:05:b9:f4:c5:05: b0:63:e3:27:09:5e:a6:96:17:fb:b1:8d:8e:09:32:45:7b:4c: c3:36:d7:d7:0f:b0:c5:da:ad:b8:92:65:cf:d4:f2:b7:5b:7b: 6f:e1:e8:77:a0:7f:2f:3a:07:04:01:33:40:b9:a8:e9:ff:5f: 29:b9:2e:71:65:e6:b2:0c:d1:0b:65:46:46:2b:2a:0e:5f:99: 68:3b:53:74:7a:69:02:21:6b:a7:94:95:a2:d9:4d:b1:ab:61: b7:99:52:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9G35blz0BuV6hX9ZuaKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll NWQ0ZTIwHhcNMjUxMjE1MDMwMTExWhcNMjUxMjE2MDMwMTExWjAzMTEwLwYDVQQD EygzNzAwMmMzODg5Y2NjNGU0YTdkY2Y1ZDI1ZGUzNzhkMzQ5ZWMxOTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mVu4eGgHM1L5Yhp/qI1zL6a7dvH 3IeRv9JnM/4qRTTTx78LACbIB9EqSF5xfVBf3ZMCbHxKLK81lpyTHEVEuywytZcI XkM1p+pc+KEbNrwtaBj2CqdxF/o9QrqAD5fCTMoP0inGWhaGj9DU1AmkPQDlvGAl YPUmg8lvplYUB5ycc+CKb+ISm6YJZYgIskMRbUyhfpDilZTvEf0Ltu+T4jer3w5W Ve+q1JeB3UoFRK4CpcnwcKFRZwcSsFJSSrGZuHpZqupI8jX6NQYCo7H1PmnmGBOC yLyqWYDcrotM0pNDDTPArZxvzAyfIrNLXD9Pfe0ymFH3K6vHNY3/nN3WDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcALDiJzMTkp9z10l3jeNNJ7BltMB8GA1UdIwQY MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLsAk0Rv 6To4fcIqNEWE/vSsvtIKVml8Map77cUAjdOddDdUKxm0VdY2Vo1OyrMl8CcpjLEm sEGaBuXet9GTWHEA4nkzzYAOIvJsxMKdcO5WYb07cyqYT8aUlZ5/aeIeqJH83XK4 B4B/ZJ8HTZ5Vh6yNH1ns9jnfD2dOFp0SxuPKsgZLyJaAyWvzszhrO5wrfRdePgxR dX3w5mwt6AW59MUFsGPjJwleppYX+7GNjgkyRXtMwzbX1w+wxdqtuJJlz9Tyt1t7 b+Hod6B/LzoHBAEzQLmo6f9fKbkucWXmsgzRC2VGRisqDl+ZaDtTdHppAiFrp5SV otlNsatht5lSxQ== -----END CERTIFICATE-----Generated at Mon Dec 15 08:34:39 2025 by rpki-client