This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json) Hash identifier: jC0N2pUU5C7uVYrcSqd9rQi9/XtGej6LvRkneM6DbBg= Subject key identifier: 36:85:CD:08:11:A7:D4:58:DF:54:5B:E5:06:F6:D2:6E:1F:87:F2:9A Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Certificate serial: 019B16833A96C930AB20ECF0EAC70C19BCD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 07:00:57 +0000 Manifest this update: Sat 13 Dec 2025 07:00:57 +0000 Manifest next update: Sun 14 Dec 2025 07:00:57 +0000 Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=) 2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: SSeOHCSybXXbK5rlh/5Q51B/ALFsmcgWoxczGtWDSws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:83:3a:96:c9:30:ab:20:ec:f0:ea:c7:0c:19:bc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Validity Not Before: Dec 13 07:00:57 2025 GMT Not After : Dec 14 07:00:57 2025 GMT Subject: CN=3685cd0811a7d458df545be506f6d26e1f87f29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:83:45:22:32:68:f0:11:75:81:d3:6d:83:ac: 5b:f7:9d:26:81:2a:bf:4d:89:7e:d9:56:5b:f2:5c: 54:54:d2:c2:30:b9:70:f9:e8:85:39:82:27:07:21: 6e:8c:ef:69:ce:09:1d:13:61:46:0f:53:e7:7f:e4: b4:84:fc:fc:f8:e6:9c:d5:8e:c3:5d:07:26:1b:3e: c3:10:58:34:d7:50:2c:27:65:3d:2a:88:04:28:cb: 55:c7:13:ee:68:27:b6:d6:74:ac:1b:59:16:37:27: fa:95:03:66:b3:66:28:cb:af:9a:9c:cc:51:3a:7f: 5b:c5:93:0e:ff:d7:fd:cf:8d:35:aa:7a:31:49:71: 6e:7d:6c:10:a1:b8:c6:92:0a:f3:f8:fe:f5:a9:a1: b3:25:d6:b6:6f:23:fc:76:2e:c8:50:36:59:34:6d: 1b:24:75:26:9f:d8:9c:0c:c5:7c:ba:99:6c:d9:13: ea:f0:d7:da:cc:b6:a3:81:f8:22:ec:7e:db:db:f2: 70:9a:47:e8:5c:9e:b8:8c:24:e9:0c:68:31:fb:60: 5c:76:5e:eb:d0:2e:37:b9:08:bb:82:37:21:a5:74: d6:13:6d:4d:90:86:a2:26:0c:a5:5f:19:2d:71:76: 18:20:32:bf:90:b4:b9:d8:be:84:58:5e:47:f3:ae: ee:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:CD:08:11:A7:D4:58:DF:54:5B:E5:06:F6:D2:6E:1F:87:F2:9A X509v3 Authority Key Identifier: keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:10:61:c3:52:8e:64:cd:94:cc:0a:a0:ee:ef:48:75:aa:7c: 5d:6b:1e:d3:98:7b:b5:3e:09:7b:a0:db:59:fb:f0:6d:0d:a2: 86:c6:54:5e:21:eb:7e:8a:96:d7:c1:03:32:9a:f4:f4:80:17: ea:ec:0b:9e:82:9f:5d:81:96:9a:96:c7:cb:24:6f:e3:fa:8b: 20:10:25:62:af:38:35:da:6a:1f:a3:bb:c5:7d:02:30:cb:f0: d3:ef:da:88:8d:4e:76:84:12:cd:14:3d:88:f4:ea:b0:ff:5b: 1b:02:5c:4b:06:ae:5c:ba:95:42:99:3d:73:eb:f5:02:72:03: 30:de:91:dc:93:4c:ea:1c:2f:1a:d5:4b:bb:ca:d9:62:3f:48: d5:d2:39:be:6a:16:2a:3b:17:ed:a5:39:4c:40:88:30:e2:fa: 1f:10:29:79:2e:89:93:b8:d0:34:1a:09:bb:01:8f:50:7f:9b: 5a:ca:7a:17:c4:65:e7:9a:81:15:64:4b:e1:58:fd:84:45:63: 65:c4:2e:8e:ee:27:9d:cc:cf:2e:9d:df:fb:71:b7:92:d3:21: 05:88:f2:08:c7:4a:a9:80:1e:86:95:e2:5d:af:f8:2c:8b:03: 75:78:ce:b7:4c:79:1c:33:bc:65:18:34:90:f9:09:79:20:bc: ed:5e:a6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWgzqWyTCrIOzw6scMGbzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl N2Y3NTcwHhcNMjUxMjEzMDcwMDU3WhcNMjUxMjE0MDcwMDU3WjAzMTEwLwYDVQQD EygzNjg1Y2QwODExYTdkNDU4ZGY1NDViZTUwNmY2ZDI2ZTFmODdmMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4NFIjJo8BF1gdNtg6xb950mgSq/ TYl+2VZb8lxUVNLCMLlw+eiFOYInByFujO9pzgkdE2FGD1Pnf+S0hPz8+Oac1Y7D XQcmGz7DEFg011AsJ2U9KogEKMtVxxPuaCe21nSsG1kWNyf6lQNms2Yoy6+anMxR On9bxZMO/9f9z401qnoxSXFufWwQobjGkgrz+P71qaGzJda2byP8di7IUDZZNG0b JHUmn9icDMV8upls2RPq8NfazLajgfgi7H7b2/JwmkfoXJ64jCTpDGgx+2Bcdl7r 0C43uQi7gjchpXTWE21NkIaiJgylXxktcXYYIDK/kLS52L6EWF5H867u9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaFzQgRp9RY31Rb5Qb20m4fh/KaMB8GA1UdIwQY MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERBhw1KO ZM2UzAqg7u9Idap8XWse05h7tT4Je6DbWfvwbQ2ihsZUXiHrfoqW18EDMpr09IAX 6uwLnoKfXYGWmpbHyyRv4/qLIBAlYq84NdpqH6O7xX0CMMvw0+/aiI1OdoQSzRQ9 iPTqsP9bGwJcSwauXLqVQpk9c+v1AnIDMN6R3JNM6hwvGtVLu8rZYj9I1dI5vmoW KjsX7aU5TECIMOL6HxApeS6Jk7jQNBoJuwGPUH+bWsp6F8Rl55qBFWRL4Vj9hEVj ZcQuju4nnczPLp3f+3G3ktMhBYjyCMdKqYAehpXiXa/4LIsDdXjOt0x5HDO8ZRg0 kPkJeSC87V6mvQ== -----END CERTIFICATE-----Generated at Sat Dec 13 12:06:40 2025 by rpki-client