This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json) Hash identifier: JrHeKdss935RSO4Enoxh9MSGQnqBuJvROx1TjCmqHFE= Subject key identifier: 70:20:39:66:9F:CD:40:1A:90:CE:98:21:D0:F7:6C:B8:26:77:6E:2D Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Certificate serial: 019B4B4D02BE177A2C612551CD83FC8A7881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft Manifest number: 0BE2 Signing time: Tue 23 Dec 2025 13:01:36 +0000 Manifest this update: Tue 23 Dec 2025 13:01:36 +0000 Manifest next update: Wed 24 Dec 2025 13:01:36 +0000 Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=) 2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=) 3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: si+leU2mgsMJPwu+KlV5norWY+MKnkjXkEzdc4Vb5z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4d:02:be:17:7a:2c:61:25:51:cd:83:fc:8a:78:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Validity Not Before: Dec 23 13:01:36 2025 GMT Not After : Dec 24 13:01:36 2025 GMT Subject: CN=702039669fcd401a90ce9821d0f76cb826776e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:b8:b4:b9:b5:6b:dd:d8:02:e2:3f:53:12: 14:14:e0:8c:10:37:7a:9c:eb:5c:19:6e:50:8d:2e: 2b:d6:7d:44:40:45:7c:32:6f:64:37:81:7e:3a:aa: e9:1b:a9:98:40:20:8c:5d:0b:27:c9:a7:c6:cb:5c: ef:ed:42:a8:8b:a8:a4:f7:de:6f:5b:69:3e:7b:78: 08:92:0f:90:db:c4:c5:b0:db:f3:4e:70:ee:85:0b: 6c:fe:39:a6:13:79:bb:97:0d:28:d7:49:a6:01:04: 3f:5c:5b:e3:40:84:6d:d6:4d:b4:af:25:84:00:33: 86:4d:b7:c5:cb:88:17:d4:58:b4:b8:c8:c7:4e:1f: c2:dc:86:a6:f5:81:52:a2:af:d4:59:e2:1a:88:f2: c7:97:23:f8:aa:c0:bf:9e:bc:15:21:22:e6:74:be: 81:52:26:55:6d:2d:a0:e1:8b:0f:d4:11:58:b6:77: b4:00:cc:b5:9b:c6:ae:4b:2d:27:3b:5a:e1:3c:5a: 7f:58:55:c9:0e:91:04:04:55:9a:6b:f8:2d:c3:16: 3a:f5:93:7d:24:96:53:dc:76:aa:2a:e6:86:a7:56: e3:70:fd:be:6b:2b:0f:3a:3c:25:43:96:6e:c9:ac: 72:a6:5b:cc:b1:76:22:8f:4f:c7:6c:d3:52:fa:2f: 20:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:39:66:9F:CD:40:1A:90:CE:98:21:D0:F7:6C:B8:26:77:6E:2D X509v3 Authority Key Identifier: keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b3:d2:cc:19:5a:1f:84:b8:af:cd:16:f8:4b:57:eb:0c:ef: 22:f9:7e:51:22:cc:c2:47:23:1f:ad:cc:fc:c5:e1:bb:75:9d: f6:56:20:d4:d2:74:c4:5f:fc:4a:df:ce:7d:f8:68:da:71:94: 6a:69:1d:67:1f:83:9c:93:89:7b:16:1d:68:ac:10:74:f3:58: ae:42:f0:8a:fe:de:e7:10:b2:2b:cd:df:9f:57:d3:1d:05:26: 80:59:4f:e5:27:e2:c2:f2:36:05:9b:03:54:9a:9f:cd:cb:7c: b6:f5:2f:d7:20:de:db:1d:bf:f6:21:7d:67:80:83:a4:93:0f: 82:da:41:b3:c3:87:c1:81:37:1c:9f:89:42:fd:45:3f:66:ba: b5:e5:17:97:da:dc:4a:e9:c6:90:d1:16:bc:d1:59:06:1f:b7: ca:35:e5:d6:cb:e9:a0:16:2d:6e:ef:af:d2:b4:f1:99:10:66: 08:7b:75:06:4b:04:60:40:b2:9c:03:32:f0:db:89:be:3d:98: 10:f4:4f:60:ad:20:7b:4b:72:a7:e8:7e:6c:69:60:04:2e:5e: ac:a2:7d:bf:fa:44:81:f9:87:9f:e8:35:9a:36:78:15:db:f5: f7:3b:bc:91:fd:d7:8d:a3:ce:ed:7b:35:4d:14:e9:ea:69:65: 81:82:34:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTQK+F3osYSVRzYP8iniBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk ZWJiMGYwHhcNMjUxMjIzMTMwMTM2WhcNMjUxMjI0MTMwMTM2WjAzMTEwLwYDVQQD Eyg3MDIwMzk2NjlmY2Q0MDFhOTBjZTk4MjFkMGY3NmNiODI2Nzc2ZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GS4tLm1a93YAuI/UxIUFOCMEDd6 nOtcGW5QjS4r1n1EQEV8Mm9kN4F+OqrpG6mYQCCMXQsnyafGy1zv7UKoi6ik995v W2k+e3gIkg+Q28TFsNvzTnDuhQts/jmmE3m7lw0o10mmAQQ/XFvjQIRt1k20ryWE ADOGTbfFy4gX1Fi0uMjHTh/C3Iam9YFSoq/UWeIaiPLHlyP4qsC/nrwVISLmdL6B UiZVbS2g4YsP1BFYtne0AMy1m8auSy0nO1rhPFp/WFXJDpEEBFWaa/gtwxY69ZN9 JJZT3HaqKuaGp1bjcP2+aysPOjwlQ5ZuyaxyplvMsXYij0/HbNNS+i8ghwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAgOWafzUAakM6YIdD3bLgmd24tMB8GA1UdIwQY MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLPSzBla H4S4r80W+EtX6wzvIvl+USLMwkcjH63M/MXhu3Wd9lYg1NJ0xF/8St/Offho2nGU amkdZx+DnJOJexYdaKwQdPNYrkLwiv7e5xCyK83fn1fTHQUmgFlP5SfiwvI2BZsD VJqfzct8tvUv1yDe2x2/9iF9Z4CDpJMPgtpBs8OHwYE3HJ+JQv1FP2a6teUXl9rc SunGkNEWvNFZBh+3yjXl1svpoBYtbu+v0rTxmRBmCHt1BksEYECynAMy8NuJvj2Y EPRPYK0ge0typ+h+bGlgBC5erKJ9v/pEgfmHn+g1mjZ4Fdv19zu8kf3XjaPO7Xs1 TRTp6mllgYI0/A== -----END CERTIFICATE-----Generated at Tue Dec 23 22:44:22 2025 by rpki-client