This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json) Hash identifier: Vetwg3edf0ZgOh1ESrC88yJW6C/KIuEsBnLnVV7jnas= Subject key identifier: A7:54:3F:B5:47:DA:60:66:4B:10:DE:08:D1:1A:47:6C:9E:D3:D1:B1 Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Certificate serial: 019B35A01E2B5AD164A5BB2C9971D42CD0CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft Manifest number: 0E20 Signing time: Fri 19 Dec 2025 08:00:44 +0000 Manifest this update: Fri 19 Dec 2025 08:00:44 +0000 Manifest next update: Sat 20 Dec 2025 08:00:44 +0000 Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=) 2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=) 3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: 2fss2fbi3AgLnWnLfUVZh3NGDjquP5zI1qfEi2Cm188=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:1e:2b:5a:d1:64:a5:bb:2c:99:71:d4:2c:d0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28 Validity Not Before: Dec 19 08:00:44 2025 GMT Not After : Dec 20 08:00:44 2025 GMT Subject: CN=a7543fb547da60664b10de08d11a476c9ed3d1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:fb:3c:e3:95:a7:f7:a4:f3:28:1e:a5:e2: 66:92:f2:51:56:7b:9e:1b:2b:05:2b:1f:36:0e:2e: b3:a5:64:19:19:1b:62:bd:42:00:16:6f:7a:2f:0e: 15:36:79:3b:6b:f7:5b:9e:78:17:ae:93:29:6e:70: 5d:16:33:ea:09:56:b5:8a:33:27:0b:e2:a2:ee:55: 45:61:8e:c6:13:1e:05:d3:e9:9c:7d:ce:e3:40:3f: 9c:67:d0:88:ce:4e:f6:dc:45:fc:49:81:4c:33:8b: b9:7d:7e:65:cd:76:29:7a:20:86:c4:ee:62:c0:fc: f0:b2:fd:56:69:7e:ef:16:b2:ef:2a:94:a9:13:fd: 07:21:aa:6c:88:a6:bc:38:c5:76:9d:f8:44:43:32: 54:64:96:79:bf:55:10:d5:eb:ef:3f:e7:97:93:46: 1c:17:b2:f7:8b:e0:f2:af:26:6d:c9:9b:a2:19:46: 84:a1:e3:83:de:13:3b:c1:8b:1d:c6:98:90:19:f0: f7:f5:9a:61:68:c2:7f:e4:26:59:03:ad:2d:92:2f: d9:21:23:8b:46:dd:63:aa:69:a9:7e:da:c1:03:f2: 3c:52:b6:c9:dd:db:16:3b:e2:5a:1b:0c:46:36:46: b9:d5:45:01:8e:ee:c5:22:c8:cb:ac:0a:97:27:87: 4c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:54:3F:B5:47:DA:60:66:4B:10:DE:08:D1:1A:47:6C:9E:D3:D1:B1 X509v3 Authority Key Identifier: keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:25:39:c0:bc:dc:18:4b:03:0d:55:d4:33:4a:ce:b5:b5:07: fa:5c:12:8a:28:98:a2:d6:67:68:bd:33:1a:9b:4f:bc:a5:fa: 11:8c:3c:80:7e:4f:d2:e8:01:c3:bf:82:37:35:f8:77:d2:f6: af:26:7f:fa:42:81:09:6e:ba:52:6a:a3:db:9d:54:aa:9a:a7: 97:ce:ac:73:44:c6:34:cb:0f:57:65:ee:d8:f8:35:bb:f8:2b: 02:14:20:7a:00:0c:50:57:dd:14:9a:ae:1b:d4:18:f7:8b:bf: 05:e2:f9:2c:b5:d6:94:22:b9:9b:1a:5f:ce:42:36:d1:bc:af: 6d:63:61:52:e3:84:2c:b6:80:61:c3:38:54:30:2b:8f:ff:c7: e4:03:05:3d:61:02:c3:29:df:92:23:12:64:99:a7:75:b9:c8: 6e:8a:1b:93:ad:77:43:8f:3b:ae:59:09:dc:d5:bb:34:d7:1e: 8c:2a:cd:1b:72:aa:a9:76:33:89:a7:1f:c1:27:67:e7:ab:68: 4a:49:42:ac:c0:87:62:f0:5e:38:92:ac:04:7c:a9:f6:6a:b0: 65:e7:2f:08:7c:ad:06:eb:21:7f:7a:dc:6a:d5:56:45:a1:47: bb:2d:f1:90:5a:ca:8e:ba:85:96:d6:17:a0:18:0d:07:e4:ce: 6d:ff:6f:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oB4rWtFkpbssmXHULNDOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi Y2JkMjgwHhcNMjUxMjE5MDgwMDQ0WhcNMjUxMjIwMDgwMDQ0WjAzMTEwLwYDVQQD EyhhNzU0M2ZiNTQ3ZGE2MDY2NGIxMGRlMDhkMTFhNDc2YzllZDNkMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUr7POOVp/ek8ygepeJmkvJRVnue GysFKx82Di6zpWQZGRtivUIAFm96Lw4VNnk7a/dbnngXrpMpbnBdFjPqCVa1ijMn C+Ki7lVFYY7GEx4F0+mcfc7jQD+cZ9CIzk723EX8SYFMM4u5fX5lzXYpeiCGxO5i wPzwsv1WaX7vFrLvKpSpE/0HIapsiKa8OMV2nfhEQzJUZJZ5v1UQ1evvP+eXk0Yc F7L3i+DyryZtyZuiGUaEoeOD3hM7wYsdxpiQGfD39ZphaMJ/5CZZA60tki/ZISOL Rt1jqmmpftrBA/I8UrbJ3dsWO+JaGwxGNka51UUBju7FIsjLrAqXJ4dMYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdUP7VH2mBmSxDeCNEaR2ye09GxMB8GA1UdIwQY MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt NmU3NTYxNTM1YmJkLzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyU5wLzc GEsDDVXUM0rOtbUH+lwSiiiYotZnaL0zGptPvKX6EYw8gH5P0ugBw7+CNzX4d9L2 ryZ/+kKBCW66Umqj251Uqpqnl86sc0TGNMsPV2Xu2Pg1u/grAhQgegAMUFfdFJqu G9QY94u/BeL5LLXWlCK5mxpfzkI20byvbWNhUuOELLaAYcM4VDArj//H5AMFPWEC wynfkiMSZJmndbnIboobk613Q487rlkJ3NW7NNcejCrNG3KqqXYziacfwSdn56to SklCrMCHYvBeOJKsBHyp9mqwZecvCHytBushf3rcatVWRaFHuy3xkFrKjrqFltYX oBgNB+TObf9vKQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:26:15 2025 by rpki-client