This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json) Hash identifier: vBZI9f84W6efHwXx4wtVfWLuizQYoUafBXTTwvlFaOI= Subject key identifier: A9:ED:64:EA:AB:99:74:AC:61:59:58:88:2B:1D:31:A2:BD:B2:A5:14 Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Certificate serial: 019B5A88A8911621C33D5C4010E4BC782044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 12:01:04 +0000 Manifest this update: Fri 26 Dec 2025 12:01:04 +0000 Manifest next update: Sat 27 Dec 2025 12:01:04 +0000 Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=) 2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: hevXMOP/4WOD3xY2LEU0fz67lCkLicE2j6Jd4mOdfAg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a8:91:16:21:c3:3d:5c:40:10:e4:bc:78:20:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Validity Not Before: Dec 26 12:01:04 2025 GMT Not After : Dec 27 12:01:04 2025 GMT Subject: CN=a9ed64eaab9974ac615958882b1d31a2bdb2a514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:48:b6:a1:f3:c6:78:df:31:f6:28:22:ae: 10:14:3e:f4:1b:a0:19:6e:c2:2a:3a:41:ed:67:60: 7a:f0:9d:48:87:75:74:ec:f0:5f:c3:af:3b:f4:43: 1b:e7:3d:9d:0f:e5:b6:90:97:7f:4d:c7:4e:9c:43: 6c:a5:39:01:02:b0:e0:80:b3:da:c5:38:e2:f4:73: a4:ff:38:a2:8b:4d:c5:e2:e5:e3:09:da:5c:b2:42: fb:93:54:a8:21:98:c5:4d:79:e4:d5:3d:07:c4:72: 86:f6:84:89:f6:35:09:93:cb:2f:b4:b8:36:7b:92: ba:b7:e8:0a:dd:6c:50:c3:18:2f:d1:aa:d8:c1:9a: 51:3c:d5:90:26:f2:ae:05:fa:f2:f8:03:13:a8:e0: 1a:ae:ba:b1:df:8a:bd:3f:2c:e5:10:1f:e5:53:c7: ff:bf:1a:d9:54:89:de:3f:32:4e:01:24:01:8d:fd: e2:f5:af:2c:a3:25:3d:df:82:40:50:6e:7c:db:2a: 4f:c2:4c:20:bf:d6:f8:32:62:2e:fb:b9:9e:00:1f: bd:13:97:da:40:34:d5:a1:85:85:e5:e0:77:68:bf: 74:6f:e7:e2:6e:39:bc:28:8d:39:fc:6d:34:a3:78: 5a:18:8c:95:45:60:62:7f:a7:3c:18:0a:cd:f6:6f: 68:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:ED:64:EA:AB:99:74:AC:61:59:58:88:2B:1D:31:A2:BD:B2:A5:14 X509v3 Authority Key Identifier: keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a6:26:52:6b:c9:e9:5c:37:32:af:9b:a2:3e:55:20:89:cd: bc:24:69:8b:11:a3:6c:ec:7b:97:e4:6e:f0:e3:27:ce:bc:c8: 93:1f:c4:b9:5c:d5:db:03:2a:ac:e0:63:ea:86:df:24:6c:78: c2:e6:7f:b4:51:58:c3:04:62:a3:cd:11:bc:04:b4:2d:f2:13: 8c:23:29:85:3e:a8:58:9a:d5:01:3b:41:de:b6:4e:82:1f:23: 43:19:d4:af:5c:5b:a8:5a:a2:09:4c:cc:82:df:ec:a0:82:55: f9:ed:08:7e:cf:52:9e:92:07:dc:1c:78:8f:be:0e:be:f0:27: e2:dc:69:8d:c9:1d:a1:0d:e0:5a:3b:e4:9d:bd:22:30:b9:b2: ff:e8:8b:84:3c:e0:96:4c:f8:55:62:d0:20:5b:f4:ff:1e:b5: 4b:e2:f7:7d:34:77:c5:e6:08:d9:6c:5a:51:7b:63:3a:c9:2d: ed:61:ef:33:6c:27:d2:c5:fd:98:fe:ff:74:d8:72:ea:67:d9: fa:ff:ea:fe:d0:36:a8:97:4b:2a:01:32:a6:7e:3a:a1:e6:f7: 31:15:54:53:f4:13:ae:ed:3b:dc:94:ac:3d:9e:a4:fd:ab:57: ef:1e:41:0c:bb:92:f9:e4:8e:28:fa:ac:61:25:ee:0b:6e:76: e5:59:b1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKiRFiHDPVxAEOS8eCBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDE1Y2JhMjJlMzMxYWRhOTFmZjRkYzY2ODhlNWZhMGFm NDU3NjkwHhcNMjUxMjI2MTIwMTA0WhcNMjUxMjI3MTIwMTA0WjAzMTEwLwYDVQQD EyhhOWVkNjRlYWFiOTk3NGFjNjE1OTU4ODgyYjFkMzFhMmJkYjJhNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0JItqHzxnjfMfYoIq4QFD70G6AZ bsIqOkHtZ2B68J1Ih3V07PBfw6879EMb5z2dD+W2kJd/TcdOnENspTkBArDggLPa xTji9HOk/ziii03F4uXjCdpcskL7k1SoIZjFTXnk1T0HxHKG9oSJ9jUJk8svtLg2 e5K6t+gK3WxQwxgv0arYwZpRPNWQJvKuBfry+AMTqOAarrqx34q9PyzlEB/lU8f/ vxrZVInePzJOASQBjf3i9a8soyU934JAUG582ypPwkwgv9b4MmIu+7meAB+9E5fa QDTVoYWF5eB3aL90b+fibjm8KI05/G00o3haGIyVRWBif6c8GArN9m9oPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKntZOqrmXSsYVlYiCsdMaK9sqUUMB8GA1UdIwQY MBaAFGdBXLoi4zGtqR/03GaI5foK9FdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDIt NjY2NDNlMDY2M2RmLzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDItNjY2NDNlMDY2M2Rm LzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKYmUmvJ 6Vw3Mq+boj5VIInNvCRpixGjbOx7l+Ru8OMnzrzIkx/EuVzV2wMqrOBj6obfJGx4 wuZ/tFFYwwRio80RvAS0LfITjCMphT6oWJrVATtB3rZOgh8jQxnUr1xbqFqiCUzM gt/soIJV+e0Ifs9SnpIH3Bx4j74OvvAn4txpjckdoQ3gWjvknb0iMLmy/+iLhDzg lkz4VWLQIFv0/x61S+L3fTR3xeYI2WxaUXtjOskt7WHvM2wn0sX9mP7/dNhy6mfZ +v/q/tA2qJdLKgEypn46oeb3MRVUU/QTru073JSsPZ6k/atX7x5BDLuS+eSOKPqs YSXuC2525VmxyQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:26 2025 by rpki-client