This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json) Hash identifier: uZ4we0WTDUwWFDNzzeC3mZwG6kHZ6ya+nJLaoTjlP1c= Subject key identifier: E3:86:84:BD:45:2D:D1:7C:84:9F:C5:07:F6:3B:5C:43:C0:7D:B1:32 Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019B22BE896581B9EFE1444C1C2BDAF752A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft Manifest number: 0F2C Signing time: Mon 15 Dec 2025 16:01:10 +0000 Manifest this update: Mon 15 Dec 2025 16:01:10 +0000 Manifest next update: Tue 16 Dec 2025 16:01:10 +0000 Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=) 2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=) 3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: PPxGqlru7JI4MI6P+3lHtFijbG7BNRBrS3NlovLMEus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:89:65:81:b9:ef:e1:44:4c:1c:2b:da:f7:52:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Dec 15 16:01:10 2025 GMT Not After : Dec 16 16:01:10 2025 GMT Subject: CN=e38684bd452dd17c849fc507f63b5c43c07db132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d6:0d:5b:39:a2:6d:aa:be:80:32:b9:ec:68: ba:2a:73:43:0d:0d:e8:af:e9:d3:13:9c:50:d9:19: 31:9e:6b:e8:c4:df:2f:fe:a8:a4:87:73:f6:a5:f6: 66:0f:62:6a:98:e6:85:a2:a5:07:78:fe:fc:26:ae: 35:66:04:3a:3c:0e:c0:eb:e3:89:37:ca:7c:7a:4a: 0a:cc:34:34:eb:b3:b1:dd:ca:fc:8c:3b:23:38:ff: b0:b7:6b:c4:0b:6c:8f:4f:27:83:9b:4a:a4:95:b9: cd:f2:a8:2e:9c:ff:c9:90:c2:46:48:94:62:5f:14: 31:40:6d:2e:70:20:48:59:cf:cd:f5:55:bf:44:64: ed:4c:bb:67:4c:9a:e7:e5:52:24:4e:5d:8f:a1:b2: e1:82:8b:8d:5f:1e:86:12:e2:89:9a:2b:d9:a7:2e: 54:a1:44:29:57:8f:10:fd:55:64:83:6c:cd:00:b1: f2:e8:ad:43:6f:07:d1:cb:ec:79:91:0e:99:27:1b: 58:07:35:6e:98:f5:4d:07:95:6b:1b:00:d9:30:5a: 56:59:e8:13:f1:a1:eb:10:08:9f:f9:5c:c8:b5:ef: c5:37:99:b3:6d:2f:aa:60:64:1d:62:ac:74:56:f0: 19:90:be:03:b0:b7:20:f7:58:4c:6a:da:0c:74:51: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:84:BD:45:2D:D1:7C:84:9F:C5:07:F6:3B:5C:43:C0:7D:B1:32 X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:68:a1:0a:76:a6:95:f6:ed:02:e6:d7:ea:a5:f1:2e:5f:df: 26:f3:a6:dc:fc:62:b0:72:12:e4:1b:8b:f1:78:f9:bd:62:02: 3a:60:73:0b:ad:ba:f7:9a:09:66:ce:0a:8f:23:04:07:99:4c: 92:1e:ec:fe:44:01:79:5e:d1:7f:4c:fe:f4:c8:29:ae:b3:6a: eb:60:83:9c:72:3f:c8:3d:05:fe:85:6a:d5:26:b3:76:eb:88: 77:81:83:a1:d0:15:0e:b6:55:4d:d0:6e:b3:de:17:f5:8a:c4: a1:5d:da:1d:32:e4:53:63:2c:e8:aa:8b:42:18:02:63:4f:de: 28:46:18:97:f1:27:7d:4f:7e:53:4b:e7:c2:5d:f1:7e:7e:d6: 36:6e:50:ed:dd:05:95:fc:c4:19:2c:e8:c4:65:83:51:79:9f: d4:bb:7b:f0:23:c9:26:22:00:d5:a2:50:d2:35:a4:2a:c0:e4: 1e:79:1f:cc:b8:f6:57:f1:1b:0d:98:46:74:66:df:c6:eb:02: 29:3c:80:c3:f1:07:5b:5c:7a:6f:fd:6d:ea:8f:d2:15:af:98: 97:d5:4d:70:4b:f1:d2:b7:ec:9e:57:aa:c1:80:98:08:36:d5: fd:97:c1:76:f6:10:14:dc:d0:7e:82:29:57:47:c9:43:08:39: 7b:85:ac:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivollgbnv4URMHCva91KoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjUxMjE1MTYwMTEwWhcNMjUxMjE2MTYwMTEwWjAzMTEwLwYDVQQD EyhlMzg2ODRiZDQ1MmRkMTdjODQ5ZmM1MDdmNjNiNWM0M2MwN2RiMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tYNWzmibaq+gDK57Gi6KnNDDQ3o r+nTE5xQ2RkxnmvoxN8v/qikh3P2pfZmD2JqmOaFoqUHeP78Jq41ZgQ6PA7A6+OJ N8p8ekoKzDQ067Ox3cr8jDsjOP+wt2vEC2yPTyeDm0qklbnN8qgunP/JkMJGSJRi XxQxQG0ucCBIWc/N9VW/RGTtTLtnTJrn5VIkTl2PobLhgouNXx6GEuKJmivZpy5U oUQpV48Q/VVkg2zNALHy6K1DbwfRy+x5kQ6ZJxtYBzVumPVNB5VrGwDZMFpWWegT 8aHrEAif+VzIte/FN5mzbS+qYGQdYqx0VvAZkL4DsLcg91hMatoMdFGAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOGhL1FLdF8hJ/FB/Y7XEPAfbEyMB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2ihCnam lfbtAubX6qXxLl/fJvOm3PxisHIS5BuL8Xj5vWICOmBzC62695oJZs4KjyMEB5lM kh7s/kQBeV7Rf0z+9MgprrNq62CDnHI/yD0F/oVq1SazduuId4GDodAVDrZVTdBu s94X9YrEoV3aHTLkU2Ms6KqLQhgCY0/eKEYYl/EnfU9+U0vnwl3xfn7WNm5Q7d0F lfzEGSzoxGWDUXmf1Lt78CPJJiIA1aJQ0jWkKsDkHnkfzLj2V/EbDZhGdGbfxusC KTyAw/EHW1x6b/1t6o/SFa+Yl9VNcEvx0rfsnleqwYCYCDbV/ZfBdvYQFNzQfoIp V0fJQwg5e4WstQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:58:01 2025 by rpki-client