This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json) Hash identifier: 47Mey/adLTBTUtjtwS5wssCkcYNMvg/RX7oKo5Ew16M= Subject key identifier: 74:79:8C:39:9A:BE:97:75:D8:CC:0E:0C:D4:7C:4D:EF:57:F9:B8:4F Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Certificate serial: 019B4325118817BC03D39DC3F7B9FAA84DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft Manifest number: 0E27 Signing time: Sun 21 Dec 2025 23:01:01 +0000 Manifest this update: Sun 21 Dec 2025 23:01:01 +0000 Manifest next update: Mon 22 Dec 2025 23:01:01 +0000 Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=) 2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=) 3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: JQ0CUPgfhcUVNhiPwjgc+BjRQA0okdFVE9cnR2a9+Bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:11:88:17:bc:03:d3:9d:c3:f7:b9:fa:a8:4d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Validity Not Before: Dec 21 23:01:01 2025 GMT Not After : Dec 22 23:01:01 2025 GMT Subject: CN=74798c399abe9775d8cc0e0cd47c4def57f9b84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:31:64:de:4a:d0:31:12:bc:31:ce:b4:95: 05:74:38:1d:ff:d4:74:9a:f9:a9:86:10:e1:b7:96: 1c:61:3d:62:c0:76:f3:06:b4:2c:1d:d7:89:cf:66: c5:de:09:b0:41:80:9d:ac:5f:21:5c:fd:b3:d7:39: 95:ea:2a:bf:94:cd:df:bf:65:6c:d9:c9:61:6a:b6: 68:26:1c:b6:8d:d9:b0:1a:16:ed:78:c0:06:7f:29: f2:26:ec:10:fb:86:52:99:8c:01:39:15:09:e9:5b: b6:6e:29:d0:61:6c:18:8a:38:83:78:08:49:05:35: 63:62:fc:7b:79:76:6a:a9:ed:55:77:6d:65:c9:e7: 2f:6f:fc:7b:6c:56:4f:fc:2d:20:75:90:ef:1b:2b: 7d:11:07:fb:5c:d8:65:98:ad:38:51:d2:66:c2:7d: e2:10:d6:9b:13:e0:80:f2:3b:5a:6e:2d:cd:2b:f2: e8:16:17:42:43:f4:61:ce:c9:94:1c:c1:c0:83:14: 7c:43:e8:59:31:36:9f:35:fd:87:5c:99:6a:bd:f9: d8:e5:55:8d:2a:1d:df:c0:0e:bd:36:68:b2:9e:aa: 88:cf:42:a8:34:53:94:c8:8f:30:cd:a4:1a:9c:fe: 45:87:e5:f2:a7:10:d1:6a:31:ed:2e:02:d9:0a:ca: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:79:8C:39:9A:BE:97:75:D8:CC:0E:0C:D4:7C:4D:EF:57:F9:B8:4F X509v3 Authority Key Identifier: keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:c5:80:c7:39:b3:51:e7:b7:79:a3:75:cf:4e:b9:6e:7c:43: da:c5:5f:fd:b0:bd:95:92:60:dd:26:af:88:9b:a7:de:ff:07: 59:a6:6f:7a:2b:59:90:ca:2a:71:8c:3c:e0:52:fc:94:72:22: 86:98:eb:ee:49:b5:d7:66:f0:c1:f0:3e:cf:d5:c4:fd:d8:f9: c5:7f:c5:e5:83:f7:ff:e7:8f:77:11:78:8d:1b:74:ce:67:e3: db:bd:f4:9b:13:b4:ec:50:21:61:30:8e:a0:7b:af:fb:bf:3f: ca:21:89:e1:ce:14:fd:d5:63:de:f8:97:1f:d8:c8:3a:cf:f9: 6b:33:a0:6e:b4:d6:aa:50:c7:a5:a6:27:c1:ce:b0:03:f1:53: 13:5b:e4:c5:63:e5:79:17:47:75:e8:34:96:8f:b9:2f:a6:33: ee:4b:e0:8c:30:d8:64:dd:6d:d5:91:26:ba:d2:ba:61:21:55: a1:6c:0c:13:d1:47:85:68:10:a1:01:76:10:5d:23:14:8d:a7: f1:fc:06:d8:78:30:7c:3a:a1:6e:c5:94:ba:92:dd:00:89:7f: 4d:72:13:22:b9:c8:24:1b:d4:87:44:ea:d6:7b:09:58:c0:ef: c5:27:45:75:9d:37:8b:98:fa:3b:99:33:4f:be:21:88:82:35: 6e:1c:1d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRGIF7wD053D97n6qE3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi Y2JkMjgwHhcNMjUxMjIxMjMwMTAxWhcNMjUxMjIyMjMwMTAxWjAzMTEwLwYDVQQD Eyg3NDc5OGMzOTlhYmU5Nzc1ZDhjYzBlMGNkNDdjNGRlZjU3ZjliODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPkxZN5K0DESvDHOtJUFdDgd/9R0 mvmphhDht5YcYT1iwHbzBrQsHdeJz2bF3gmwQYCdrF8hXP2z1zmV6iq/lM3fv2Vs 2clharZoJhy2jdmwGhbteMAGfynyJuwQ+4ZSmYwBORUJ6Vu2binQYWwYijiDeAhJ BTVjYvx7eXZqqe1Vd21lyecvb/x7bFZP/C0gdZDvGyt9EQf7XNhlmK04UdJmwn3i ENabE+CA8jtabi3NK/LoFhdCQ/RhzsmUHMHAgxR8Q+hZMTafNf2HXJlqvfnY5VWN Kh3fwA69NmiynqqIz0KoNFOUyI8wzaQanP5Fh+XypxDRajHtLgLZCsoG9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR5jDmavpd12MwODNR8Te9X+bhPMB8GA1UdIwQY MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt NmU3NTYxNTM1YmJkLzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMWAxzmz Uee3eaN1z065bnxD2sVf/bC9lZJg3SaviJun3v8HWaZveitZkMoqcYw84FL8lHIi hpjr7km112bwwfA+z9XE/dj5xX/F5YP3/+ePdxF4jRt0zmfj2730mxO07FAhYTCO oHuv+78/yiGJ4c4U/dVj3viXH9jIOs/5azOgbrTWqlDHpaYnwc6wA/FTE1vkxWPl eRdHdeg0lo+5L6Yz7kvgjDDYZN1t1ZEmutK6YSFVoWwME9FHhWgQoQF2EF0jFI2n 8fwG2HgwfDqhbsWUupLdAIl/TXITIrnIJBvUh0Tq1nsJWMDvxSdFdZ03i5j6O5kz T74hiII1bhwdVA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:02:14 2025 by rpki-client