This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json) Hash identifier: w/mCb9b4QPI+snAIJfmIWC4yrhuR9CJy/bW1xyihCto= Subject key identifier: 11:92:51:83:36:47:EC:D6:13:09:7D:F9:23:C2:71:9A:8E:93:B3:68 Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681 Certificate serial: 019B0F6EF9EE2B166515CFCEE7C52FD9B431 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft Manifest number: 10B3 Signing time: Thu 11 Dec 2025 22:01:29 +0000 Manifest this update: Thu 11 Dec 2025 22:01:29 +0000 Manifest next update: Fri 12 Dec 2025 22:01:29 +0000 Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=) 2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=) 3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: NGHili3z4V3SYSDiHJGHCFuaFT1VZW8dOYkzGMP4W+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:f9:ee:2b:16:65:15:cf:ce:e7:c5:2f:d9:b4:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681 Validity Not Before: Dec 11 22:01:29 2025 GMT Not After : Dec 12 22:01:29 2025 GMT Subject: CN=119251833647ecd613097df923c2719a8e93b368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:27:5c:60:09:66:a3:ec:24:7e:93:ac:23: 9b:76:3d:7c:92:e5:03:cc:36:96:37:20:02:16:57: ca:9a:e3:67:4f:5c:07:e3:89:2c:4d:69:ea:e6:a9: 85:61:c6:ae:9c:9f:31:d0:e8:e5:e0:69:b6:54:63: b4:e1:51:90:4a:0b:81:b6:7a:4d:3c:da:39:c6:c8: cc:d2:51:cf:f5:2a:68:7b:69:72:91:39:73:c6:86: a1:ca:bc:8f:b2:62:6c:29:2a:9e:c7:b8:3a:d7:29: 0e:f2:a0:63:92:06:b4:bc:e2:b5:6c:4b:50:cd:17: 6d:73:69:45:a6:d8:a3:2a:2b:10:d7:dc:ec:41:f7: 58:0a:02:cc:35:09:bf:ab:39:d1:8f:fc:2a:6a:d1: 1a:7c:09:42:57:70:5a:d7:a2:e4:7c:9c:ba:cc:71: 6b:10:62:41:7b:7b:6c:82:28:ed:69:93:04:69:df: 0f:0d:5f:46:f9:41:9b:ea:ab:1a:1c:dc:20:f3:f6: 39:bf:d8:15:5f:5f:15:3e:71:bb:3e:20:ee:cc:43: b3:46:cb:77:67:7a:2e:6b:8b:4e:8f:e1:e1:45:25: 74:e2:92:85:98:07:38:c6:30:c2:c5:04:08:01:19: 3b:10:cd:5f:c6:07:7d:cd:86:ba:ee:f6:cf:d9:f9: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:92:51:83:36:47:EC:D6:13:09:7D:F9:23:C2:71:9A:8E:93:B3:68 X509v3 Authority Key Identifier: keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:20:1f:bc:48:ff:cf:8f:d5:5b:bf:4b:4c:0c:77:d5:77:98: 63:16:45:44:1e:5e:16:f1:cb:75:d4:14:c1:75:ba:74:da:a4: cb:f2:a8:71:2e:48:53:89:af:d0:a1:2d:6a:f6:4b:7f:b9:73: b2:cb:42:bf:5f:37:49:bb:6b:bd:f5:97:cc:ee:1f:8c:e1:45: c3:bb:05:99:1d:ae:2d:e1:c6:1e:d2:eb:2b:a3:4c:51:18:69: 3f:7a:c6:88:fc:1f:f1:d4:44:ee:14:2c:13:4f:a7:a3:75:5e: 2d:8c:0c:8d:df:42:25:7a:29:f3:70:04:f0:c6:e0:de:fa:c8: 3f:9d:37:be:9a:00:94:06:ba:ef:7d:14:5f:78:3c:5e:e5:2d: 76:89:11:20:c4:2a:14:92:d0:d9:39:a5:dd:13:7a:5e:cc:52: 66:fe:4b:63:35:ca:4c:3c:2a:92:c8:77:9a:f8:1c:aa:2e:0c: ed:e0:f4:aa:18:da:0b:b0:34:aa:65:6a:fc:4d:c2:27:5c:67: c3:d9:9e:e2:f9:98:e9:24:2b:51:5b:38:d0:b3:40:73:96:0d: 23:2e:70:7f:82:06:9e:49:ae:76:89:09:3a:ac:bb:e4:75:d2: be:3a:a0:2c:19:01:4d:9c:9a:fb:49:e4:f9:cd:6f:50:6c:8b: 98:09:2b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbvnuKxZlFc/O58Uv2bQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy NDg2ODEwHhcNMjUxMjExMjIwMTI5WhcNMjUxMjEyMjIwMTI5WjAzMTEwLwYDVQQD EygxMTkyNTE4MzM2NDdlY2Q2MTMwOTdkZjkyM2MyNzE5YThlOTNiMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D8nXGAJZqPsJH6TrCObdj18kuUD zDaWNyACFlfKmuNnT1wH44ksTWnq5qmFYcaunJ8x0Ojl4Gm2VGO04VGQSguBtnpN PNo5xsjM0lHP9Spoe2lykTlzxoahyryPsmJsKSqex7g61ykO8qBjkga0vOK1bEtQ zRdtc2lFptijKisQ19zsQfdYCgLMNQm/qznRj/wqatEafAlCV3Ba16LkfJy6zHFr EGJBe3tsgijtaZMEad8PDV9G+UGb6qsaHNwg8/Y5v9gVX18VPnG7PiDuzEOzRst3 Z3oua4tOj+HhRSV04pKFmAc4xjDCxQQIARk7EM1fxgd9zYa67vbP2fmPUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGSUYM2R+zWEwl9+SPCcZqOk7NoMB8GA1UdIwQY MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3 LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSAfvEj/ z4/VW79LTAx31XeYYxZFRB5eFvHLddQUwXW6dNqky/KocS5IU4mv0KEtavZLf7lz sstCv183SbtrvfWXzO4fjOFFw7sFmR2uLeHGHtLrK6NMURhpP3rGiPwf8dRE7hQs E0+no3VeLYwMjd9CJXop83AE8Mbg3vrIP503vpoAlAa6730UX3g8XuUtdokRIMQq FJLQ2Tml3RN6XsxSZv5LYzXKTDwqksh3mvgcqi4M7eD0qhjaC7A0qmVq/E3CJ1xn w9me4vmY6SQrUVs40LNAc5YNIy5wf4IGnkmudokJOqy75HXSvjqgLBkBTZya+0nk +c1vUGyLmAkrhw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:53:54 2025 by rpki-client