This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json) Hash identifier: bX68qxzi9508/cx6oahhSgfeoagqTFHQydaGDiH4sb8= Subject key identifier: EF:01:16:98:DE:D7:41:A4:0F:40:6C:55:DB:B4:94:5F:BB:7D:90:86 Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Certificate serial: 019B32D7F49E4E9997190A59A43517543F53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 19:02:52 +0000 Manifest this update: Thu 18 Dec 2025 19:02:52 +0000 Manifest next update: Fri 19 Dec 2025 19:02:52 +0000 Files and hashes: 1: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: zSQmxMEe8wmqSeTauu5T3eyHkpns7e+kjQT+zGC4avo=) 2: hb6ryi0zlarGbicwA660cAdO1uU.roa (hash: npI6mlOfecW2btMEPci2EHiqJhnGF4s0rXnIs0wQ4wY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f4:9e:4e:99:97:19:0a:59:a4:35:17:54:3f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa Validity Not Before: Dec 18 19:02:52 2025 GMT Not After : Dec 19 19:02:52 2025 GMT Subject: CN=ef011698ded741a40f406c55dbb4945fbb7d9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:74:1b:30:98:e2:2f:29:e1:6b:0e:23:5d:67: a3:77:85:44:c8:5b:b4:eb:86:98:b7:32:1b:1a:84: 05:e5:1a:25:e0:a0:0a:20:a8:cb:78:bc:bf:4e:2b: 6c:9c:f3:a2:b3:bf:a5:d7:47:19:0a:51:85:0e:1d: 8c:bb:8b:bb:aa:7e:d0:5f:61:2a:78:9c:6e:87:21: 90:e7:74:00:09:fa:81:51:95:8f:cc:ec:56:f2:df: c4:5a:03:bc:06:55:19:d2:84:f0:a6:1d:cf:4e:59: 6a:3f:7d:42:7f:34:69:29:52:7e:f0:9a:6e:9c:5f: 87:e5:71:e3:bb:c6:4b:fb:24:d2:17:68:1c:21:15: 62:92:55:d1:bd:5d:fe:ce:63:29:26:d8:68:b4:3b: e1:54:93:53:a7:98:c0:d9:09:1c:0f:89:84:81:08: e3:9c:0b:40:73:51:bd:e3:6d:0c:98:16:1e:0d:07: 86:8e:cb:7f:ef:07:c6:fc:05:2d:a7:52:5c:58:68: ab:7d:ce:47:25:da:bc:a8:4c:51:a7:e5:32:59:41: 75:5c:1d:60:6e:92:d8:03:be:26:14:09:7f:97:65: 1e:5c:53:70:db:1f:74:df:65:d9:48:0f:f8:14:05: d3:e6:6d:2e:4c:e6:54:b9:0d:78:e4:d2:be:02:49: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:01:16:98:DE:D7:41:A4:0F:40:6C:55:DB:B4:94:5F:BB:7D:90:86 X509v3 Authority Key Identifier: keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:84:c3:39:c2:3a:d2:1d:dc:d0:6a:17:1e:2a:fc:40:6b:ee: c9:b2:af:6b:00:a0:9c:6a:61:44:ac:dc:69:8a:87:41:c5:35: 5a:f7:b5:3a:a8:6c:75:e6:75:53:cc:8f:93:00:70:e8:4b:d3: 2b:1d:71:c9:6e:9a:8a:cb:a4:a9:f7:ca:73:81:ab:10:52:3b: ee:33:fe:a1:64:e6:24:15:ba:4f:56:c9:ea:d5:b3:50:16:ae: 43:d8:4f:bc:70:b8:e6:a9:4c:d5:b7:33:a2:cb:db:cd:94:1c: 7b:b5:be:fe:f8:fd:69:44:65:78:8b:9c:e0:5b:07:fd:6b:0d: db:92:4c:2a:b6:d8:c8:96:31:04:c8:19:b1:8c:43:5d:0e:ca: a5:86:6e:0d:ea:06:a1:b6:fd:e6:e7:06:8c:b2:fc:96:5d:80: 81:6d:66:eb:4d:d5:40:a6:bb:94:33:1a:f9:3c:9c:38:c3:6d: 05:55:76:65:d7:c8:c5:a4:e4:de:22:ee:e7:8b:d9:2c:f6:96: 93:dc:c2:22:f9:4f:ff:b7:ec:77:04:5f:f1:bf:5a:ad:19:3f: 6c:7b:48:7e:7c:37:b6:d6:f6:3e:a3:58:de:64:a6:34:03:8c: f9:c9:c2:5a:3b:a5:2c:c4:8d:fa:b7:26:21:75:dc:3b:b3:e7: 36:fb:79:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/SeTpmXGQpZpDUXVD9TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl MjlkZmEwHhcNMjUxMjE4MTkwMjUyWhcNMjUxMjE5MTkwMjUyWjAzMTEwLwYDVQQD EyhlZjAxMTY5OGRlZDc0MWE0MGY0MDZjNTVkYmI0OTQ1ZmJiN2Q5MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHQbMJjiLynhaw4jXWejd4VEyFu0 64aYtzIbGoQF5Rol4KAKIKjLeLy/TitsnPOis7+l10cZClGFDh2Mu4u7qn7QX2Eq eJxuhyGQ53QACfqBUZWPzOxW8t/EWgO8BlUZ0oTwph3PTllqP31CfzRpKVJ+8Jpu nF+H5XHju8ZL+yTSF2gcIRViklXRvV3+zmMpJthotDvhVJNTp5jA2QkcD4mEgQjj nAtAc1G9420MmBYeDQeGjst/7wfG/AUtp1JcWGirfc5HJdq8qExRp+UyWUF1XB1g bpLYA74mFAl/l2UeXFNw2x9032XZSA/4FAXT5m0uTOZUuQ145NK+AklUFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8BFpje10GkD0BsVdu0lF+7fZCGMB8GA1UdIwQY MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt MjIyOWNkODNmM2U1LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1 LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4TDOcI6 0h3c0GoXHir8QGvuybKvawCgnGphRKzcaYqHQcU1Wve1OqhsdeZ1U8yPkwBw6EvT Kx1xyW6aisukqffKc4GrEFI77jP+oWTmJBW6T1bJ6tWzUBauQ9hPvHC45qlM1bcz osvbzZQce7W+/vj9aURleIuc4FsH/WsN25JMKrbYyJYxBMgZsYxDXQ7KpYZuDeoG obb95ucGjLL8ll2AgW1m603VQKa7lDMa+TycOMNtBVV2ZdfIxaTk3iLu54vZLPaW k9zCIvlP/7fsdwRf8b9arRk/bHtIfnw3ttb2PqNY3mSmNAOM+cnCWjulLMSN+rcm IXXcO7PnNvt5Ww== -----END CERTIFICATE-----Generated at Fri Dec 19 00:55:13 2025 by rpki-client