This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json) Hash identifier: 9HZQorvt2PY9IBNqcE/12nZkaXhgatnEOeKu2yPFCtk= Subject key identifier: 1B:60:80:38:CE:D6:90:E8:E7:71:07:B3:34:F0:D5:6C:C6:FC:B7:11 Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Certificate serial: 019B202B3EF8C1353225C3BDD8E61A464EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft Manifest number: 0E5F Signing time: Mon 15 Dec 2025 04:01:03 +0000 Manifest this update: Mon 15 Dec 2025 04:01:03 +0000 Manifest next update: Tue 16 Dec 2025 04:01:03 +0000 Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: tP3IgS6njnbCvRN/WVGcoG4XBrLq1nQevhlrDnP8BJQ=) 2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:3e:f8:c1:35:32:25:c3:bd:d8:e6:1a:46:4e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Validity Not Before: Dec 15 04:01:03 2025 GMT Not After : Dec 16 04:01:03 2025 GMT Subject: CN=1b608038ced690e8e77107b334f0d56cc6fcb711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:4d:14:d3:cb:10:cc:dc:de:e9:48:3b:2e: 0e:18:c4:2c:e9:38:8a:41:49:21:5a:d8:66:f9:9c: 3b:ff:ff:6f:d5:c9:a0:89:a0:ba:f6:1d:16:33:7c: ed:b3:2a:f5:c9:31:53:24:e4:55:30:b7:01:7e:0d: c0:46:5e:1e:0b:e2:36:95:d1:2c:11:50:54:05:2d: 82:74:da:36:d9:08:86:6e:f1:f7:64:c5:30:c7:bf: 3c:a8:2e:22:c0:e8:df:2a:a0:b7:07:3d:e3:31:f9: 72:5a:b7:d7:b7:a8:ec:5a:2e:ba:2f:1b:1d:a8:7e: 6d:38:39:10:af:0a:4b:0a:3c:01:99:1f:b9:7c:cb: 50:3e:be:1e:56:d6:7f:a6:0c:aa:ba:4f:54:73:25: 3d:23:bc:f7:37:c3:c5:93:80:99:d0:bc:a3:fe:89: ca:f6:b3:ce:1b:64:9d:1c:94:be:13:a9:35:82:8c: 3b:20:e4:87:46:59:9c:26:84:7c:8e:ec:40:e1:dc: 5d:d1:3d:ad:df:e9:bf:42:63:b3:69:71:1d:6d:28: d5:75:da:77:4b:ae:06:e2:4a:7a:5f:d8:06:3d:74: 49:21:c0:0a:da:1e:78:13:ed:74:14:85:36:41:61: b5:7c:5c:27:1f:4e:67:ff:37:d2:42:6b:51:f2:a2: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:60:80:38:CE:D6:90:E8:E7:71:07:B3:34:F0:D5:6C:C6:FC:B7:11 X509v3 Authority Key Identifier: keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:47:3f:a2:cc:71:55:f3:7c:fe:09:59:16:07:a7:70:41:a1: 96:8a:3a:c1:f6:b3:e0:da:0c:d8:51:9d:5f:d4:61:e2:15:8e: 1b:38:cd:0d:ef:1c:08:fd:44:c2:7b:02:7a:f8:0b:0d:19:9b: 3f:08:35:3d:34:70:96:df:b8:76:11:28:7b:7b:0f:f8:1c:ff: fd:b2:d7:57:a4:a5:42:e4:fd:21:df:22:20:35:8b:90:2b:21: 03:9d:ff:db:9e:a6:4e:04:9c:f6:c5:9a:93:3f:38:c4:6b:77: bf:97:c7:e3:b9:c9:ab:e6:7a:4a:31:05:7c:ab:b5:2d:45:08: f4:3c:11:67:18:c1:77:b9:f6:98:e3:b4:2a:c9:ef:a2:36:6a: 05:5f:0c:4c:1d:09:6b:97:3a:eb:3f:f9:a6:e6:94:c9:a7:64: da:18:a2:9f:9b:a0:ed:81:e9:f5:ec:c3:f7:46:4a:13:65:81: 92:95:23:ba:34:2d:42:d6:2d:0e:c6:bb:bd:4f:c1:5a:ca:c7: 6e:6e:bc:25:dd:25:e2:01:c2:01:f4:d4:48:33:76:bb:ff:c8: 0d:63:97:d4:a3:b9:b9:56:02:67:ce:ba:70:1d:28:ba:00:c0: 39:6c:d1:62:f3:bb:6f:73:fa:a6:b5:e4:70:32:1a:2d:f4:66: c4:e1:e8:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKz74wTUyJcO92OYaRk6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1 ZDNmNTAwHhcNMjUxMjE1MDQwMTAzWhcNMjUxMjE2MDQwMTAzWjAzMTEwLwYDVQQD EygxYjYwODAzOGNlZDY5MGU4ZTc3MTA3YjMzNGYwZDU2Y2M2ZmNiNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroxNFNPLEMzc3ulIOy4OGMQs6TiK QUkhWthm+Zw7//9v1cmgiaC69h0WM3ztsyr1yTFTJORVMLcBfg3ARl4eC+I2ldEs EVBUBS2CdNo22QiGbvH3ZMUwx788qC4iwOjfKqC3Bz3jMflyWrfXt6jsWi66Lxsd qH5tODkQrwpLCjwBmR+5fMtQPr4eVtZ/pgyquk9UcyU9I7z3N8PFk4CZ0Lyj/onK 9rPOG2SdHJS+E6k1gow7IOSHRlmcJoR8juxA4dxd0T2t3+m/QmOzaXEdbSjVddp3 S64G4kp6X9gGPXRJIcAK2h54E+10FIU2QWG1fFwnH05n/zfSQmtR8qIwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtggDjO1pDo53EHszTw1WzG/LcRMB8GA1UdIwQY MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx0c/osxx VfN8/glZFgencEGhloo6wfaz4NoM2FGdX9Rh4hWOGzjNDe8cCP1EwnsCevgLDRmb Pwg1PTRwlt+4dhEoe3sP+Bz//bLXV6SlQuT9Id8iIDWLkCshA53/256mTgSc9sWa kz84xGt3v5fH47nJq+Z6SjEFfKu1LUUI9DwRZxjBd7n2mOO0KsnvojZqBV8MTB0J a5c66z/5puaUyadk2hiin5ug7YHp9ezD90ZKE2WBkpUjujQtQtYtDsa7vU/BWsrH bm68Jd0l4gHCAfTUSDN2u//IDWOX1KO5uVYCZ866cB0ougDAOWzRYvO7b3P6prXk cDIaLfRmxOHoPw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:27 2025 by rpki-client