This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json) Hash identifier: MAxHZYqXpWNJMdCBaNkGv4nqBw8b1QbTL8xxpBxeKtA= Subject key identifier: A8:28:99:4B:DA:44:4A:74:0A:53:05:5D:51:11:3A:25:02:1F:A2:C1 Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4 Certificate serial: 019B10810C6A215D736DE6BEC656AA2AAC6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 03:00:51 +0000 Manifest this update: Fri 12 Dec 2025 03:00:51 +0000 Manifest next update: Sat 13 Dec 2025 03:00:51 +0000 Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=) 2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: 3T4XFvuYr61k8uDOy904vNaN+jXqOBL/HZbCYlvO2Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:0c:6a:21:5d:73:6d:e6:be:c6:56:aa:2a:ac:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4 Validity Not Before: Dec 12 03:00:51 2025 GMT Not After : Dec 13 03:00:51 2025 GMT Subject: CN=a828994bda444a740a53055d51113a25021fa2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:92:0f:03:43:14:76:59:4c:7d:c1:d8:c2: dc:36:25:f1:e1:62:75:b3:4d:e0:6d:70:a5:8f:7c: 63:02:b9:cf:52:a9:32:a1:9f:c9:3f:9e:d4:83:11: b2:d1:f6:87:31:64:a1:df:95:5d:91:f6:5e:70:49: dc:0d:42:03:48:7e:98:a2:96:f4:b0:99:c4:60:06: 38:77:16:7c:ac:27:7a:fa:8f:22:a4:3f:4e:6c:3c: 3f:da:64:d9:c8:1b:6a:ca:88:08:96:a9:2e:e1:5a: db:c5:40:98:e4:2b:eb:e3:1a:d1:79:5e:a6:f1:cb: 13:32:91:c8:a2:3a:8b:89:5f:d4:74:47:7a:ce:f6: 46:eb:63:fe:da:cc:d6:54:ae:05:b5:97:b4:d2:33: 63:e9:2d:e7:43:ac:65:5b:78:c4:ef:50:7e:b2:cb: bb:20:bf:98:01:e5:bb:78:f1:c9:e3:94:b8:f7:aa: 17:ea:6d:98:76:1b:68:af:3c:a1:29:4e:46:76:07: 94:93:c2:08:e1:98:ac:12:a3:44:94:ff:65:1c:40: e0:93:81:d4:39:ea:6a:41:1c:88:c5:45:51:93:ce: c3:80:46:09:d5:2f:e3:f0:98:e5:81:dd:f9:fa:2b: 8f:7c:7e:0e:82:50:d6:65:78:7a:72:40:49:af:e3: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:28:99:4B:DA:44:4A:74:0A:53:05:5D:51:11:3A:25:02:1F:A2:C1 X509v3 Authority Key Identifier: keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a6:92:f7:d2:72:4b:e4:4f:c9:26:31:62:1d:30:68:8b:3e: f9:b0:7b:b3:a7:73:41:3d:d4:0f:6b:ba:7f:2e:2c:4f:8a:cc: b8:71:31:9e:ff:72:48:53:88:ec:32:fd:92:e1:8e:4d:6d:84: a2:5c:d5:0b:84:58:fc:80:3b:bc:d6:81:4b:f2:76:17:88:5e: 4b:67:2b:28:8d:b9:6d:3f:d1:10:8c:0f:d3:60:bc:49:4f:a9: 39:b2:20:b2:86:e5:22:ed:17:39:00:15:6b:36:42:e2:58:2b: 16:76:cf:61:8a:33:2a:ee:70:dd:2d:a0:02:0e:5b:9f:e7:90: 17:c8:f0:b1:84:de:62:f3:09:3f:a6:c3:54:cc:ac:6d:6a:e4: 12:be:70:38:15:99:c3:14:38:8b:ea:3f:97:96:0a:dc:d1:52: a1:11:51:fc:66:a5:bc:5d:b8:a2:b8:04:9d:a4:54:4e:4d:d4: d0:f4:df:00:fa:ae:ef:4c:e5:b2:a1:16:01:43:4c:5f:26:e1: 38:f5:23:e8:c2:e1:8c:7b:42:31:bb:36:cb:ba:cb:06:8b:de: 1a:23:40:58:bc:02:0f:32:dd:30:8c:45:b0:4c:9b:84:35:2e: 57:50:31:2f:b7:f5:02:d4:ee:d0:b0:46:f2:ad:9b:e5:59:0f: 63:14:65:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgQxqIV1zbea+xlaqKqxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDE2NzgxYmNhNjRjMmIyMzY0MzRlZGVmZmU2ZTQ1MmU3 MTYyZDQwHhcNMjUxMjEyMDMwMDUxWhcNMjUxMjEzMDMwMDUxWjAzMTEwLwYDVQQD EyhhODI4OTk0YmRhNDQ0YTc0MGE1MzA1NWQ1MTExM2EyNTAyMWZhMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrqSDwNDFHZZTH3B2MLcNiXx4WJ1 s03gbXClj3xjArnPUqkyoZ/JP57UgxGy0faHMWSh35VdkfZecEncDUIDSH6Yopb0 sJnEYAY4dxZ8rCd6+o8ipD9ObDw/2mTZyBtqyogIlqku4VrbxUCY5Cvr4xrReV6m 8csTMpHIojqLiV/UdEd6zvZG62P+2szWVK4FtZe00jNj6S3nQ6xlW3jE71B+ssu7 IL+YAeW7ePHJ45S496oX6m2YdhtorzyhKU5GdgeUk8II4ZisEqNElP9lHEDgk4HU OepqQRyIxUVRk87DgEYJ1S/j8Jjlgd35+iuPfH4OglDWZXh6ckBJr+MIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgomUvaREp0ClMFXVEROiUCH6LBMB8GA1UdIwQY MBaAFGfRZ4G8pkwrI2Q07e/+bkUucWLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEt YWQ1OTU1N2UyOGMyLzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEtYWQ1OTU1N2UyOGMy LzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaaS99Jy S+RPySYxYh0waIs++bB7s6dzQT3UD2u6fy4sT4rMuHExnv9ySFOI7DL9kuGOTW2E olzVC4RY/IA7vNaBS/J2F4heS2crKI25bT/REIwP02C8SU+pObIgsoblIu0XOQAV azZC4lgrFnbPYYozKu5w3S2gAg5bn+eQF8jwsYTeYvMJP6bDVMysbWrkEr5wOBWZ wxQ4i+o/l5YK3NFSoRFR/GalvF24orgEnaRUTk3U0PTfAPqu70zlsqEWAUNMXybh OPUj6MLhjHtCMbs2y7rLBoveGiNAWLwCDzLdMIxFsEybhDUuV1AxL7f1AtTu0LBG 8q2b5VkPYxRlqg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:12:30 2025 by rpki-client