This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json) Hash identifier: 23Sk1Hw4qIkjZ3rCoF9nuboA39alqDgK8QxRp2f7RbA= Subject key identifier: AC:34:F3:E4:48:58:32:A1:0E:72:22:3B:59:29:2B:B6:B1:C5:62:C5 Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Certificate serial: 019B38A1BE0727248578600DF52737B1CE93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft Manifest number: 02C7 Signing time: Fri 19 Dec 2025 22:01:22 +0000 Manifest this update: Fri 19 Dec 2025 22:01:22 +0000 Manifest next update: Sat 20 Dec 2025 22:01:22 +0000 Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=) 2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=) 3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: Bkn3TfjJaWKPB4VJU4u5zgjyMFLpNkk1ChuGU63RxNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:be:07:27:24:85:78:60:0d:f5:27:37:b1:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Validity Not Before: Dec 19 22:01:22 2025 GMT Not After : Dec 20 22:01:22 2025 GMT Subject: CN=ac34f3e4485832a10e72223b59292bb6b1c562c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a8:c6:70:77:2e:0a:e5:76:ca:50:f6:86:39: 32:43:0a:5c:2a:a5:1e:00:95:81:71:cd:97:71:d3: 01:1d:fd:58:04:86:08:0b:79:58:7d:8d:4a:eb:a0: 5b:09:2f:17:c3:20:91:48:5b:28:e4:63:b7:2c:c0: 55:90:56:f9:7f:fb:53:3a:fa:61:88:93:86:f2:6f: dd:bc:10:d6:bc:b2:60:f1:6c:be:83:90:41:e9:36: 3a:57:29:a6:81:7c:be:08:2c:a2:b6:dc:98:78:47: f5:12:fb:ec:40:96:18:98:a5:eb:13:84:5b:53:79: de:e5:4d:0e:08:71:74:ae:a5:b8:13:e4:d1:c6:1a: 8c:e7:7e:5b:ba:f6:c7:cd:a6:02:21:34:b9:ba:92: a5:4a:38:b4:d3:e4:8d:42:1b:b5:81:36:66:ef:6d: 05:2c:14:6b:2b:83:d3:82:1e:d5:27:e7:bd:fc:1e: 5d:82:bf:39:26:35:1b:e9:4a:0c:fb:9a:51:fe:c7: eb:47:27:7c:4b:6f:a4:f8:60:01:4d:7f:d3:bf:cd: ce:b9:4a:d5:d5:f8:16:81:68:d6:19:67:07:ce:fb: c1:d5:e5:e2:5f:ba:01:a9:a0:03:52:3e:29:a2:2a: f1:fc:c9:d9:1b:3e:bc:b8:a1:45:15:94:d6:b4:04: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:F3:E4:48:58:32:A1:0E:72:22:3B:59:29:2B:B6:B1:C5:62:C5 X509v3 Authority Key Identifier: keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:8a:10:d2:11:b5:5c:cd:06:ef:f4:1d:ce:f2:9b:eb:44: 0e:67:95:dc:45:0f:d9:63:eb:d6:b8:a6:21:fc:8c:56:e9:be: 38:ce:f2:59:21:5c:55:4a:5f:cb:0f:ec:85:90:dc:78:47:40: 8e:03:65:45:c2:75:24:58:45:3b:db:c9:50:bd:f9:43:61:c9: aa:41:2b:28:eb:c9:89:4e:15:07:d9:9c:35:57:88:50:e1:b9: 87:50:37:44:e3:c0:5b:b5:71:28:72:0a:1e:4c:02:61:b6:3f: d6:3c:fa:2f:ce:4d:fa:77:7e:9f:e3:a0:07:7f:0b:53:7f:38: be:b7:be:b2:da:f3:bd:64:2c:a3:32:d7:05:4e:2e:b5:dc:75: 0f:11:01:a6:41:3e:85:eb:06:a2:72:90:5b:7e:e5:7b:fb:a1: 7d:05:10:db:e1:e3:c2:c6:a6:81:df:be:ac:62:93:54:c3:9b: 82:44:f5:ae:57:16:40:d0:ca:fa:7a:18:35:8c:15:af:49:42: 2b:c2:6f:9b:72:ed:f4:15:00:dd:b4:25:8c:9a:be:c6:b4:32: eb:d7:a9:75:2a:48:d6:ee:d7:8e:8f:55:84:d7:c7:f4:7f:ee: 01:dd:b7:12:a9:0c:d7:b3:d1:84:a7:f0:19:be:82:6e:c1:bc: 9d:cd:60:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ob4HJySFeGAN9Sc3sc6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz NDEzMjYwHhcNMjUxMjE5MjIwMTIyWhcNMjUxMjIwMjIwMTIyWjAzMTEwLwYDVQQD EyhhYzM0ZjNlNDQ4NTgzMmExMGU3MjIyM2I1OTI5MmJiNmIxYzU2MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqjGcHcuCuV2ylD2hjkyQwpcKqUe AJWBcc2XcdMBHf1YBIYIC3lYfY1K66BbCS8XwyCRSFso5GO3LMBVkFb5f/tTOvph iJOG8m/dvBDWvLJg8Wy+g5BB6TY6VymmgXy+CCyittyYeEf1EvvsQJYYmKXrE4Rb U3ne5U0OCHF0rqW4E+TRxhqM535buvbHzaYCITS5upKlSji00+SNQhu1gTZm720F LBRrK4PTgh7VJ+e9/B5dgr85JjUb6UoM+5pR/sfrRyd8S2+k+GABTX/Tv83OuUrV 1fgWgWjWGWcHzvvB1eXiX7oBqaADUj4poirx/MnZGz68uKFFFZTWtATOVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw08+RIWDKhDnIiO1kpK7axxWLFMB8GA1UdIwQY MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt+KENIR tVzNBu/0Hc7ym+tEDmeV3EUP2WPr1rimIfyMVum+OM7yWSFcVUpfyw/shZDceEdA jgNlRcJ1JFhFO9vJUL35Q2HJqkErKOvJiU4VB9mcNVeIUOG5h1A3ROPAW7VxKHIK HkwCYbY/1jz6L85N+nd+n+OgB38LU384vre+strzvWQsozLXBU4utdx1DxEBpkE+ hesGonKQW37le/uhfQUQ2+Hjwsamgd++rGKTVMObgkT1rlcWQNDK+noYNYwVr0lC K8Jvm3Lt9BUA3bQljJq+xrQy69epdSpI1u7Xjo9VhNfH9H/uAd23EqkM17PRhKfw Gb6CbsG8nc1glA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:13 2025 by rpki-client