This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json) Hash identifier: EMZzDMVrdI9LXWZVqxIIWN3wz71XbTJBzduD/cEdv0w= Subject key identifier: 5A:B0:E2:F7:EF:A6:2F:A1:8E:D0:0E:24:6B:64:73:2A:46:97:35:AD Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019AEE99E61DDD0D6C951C3DEE1685164412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft Manifest number: 077F Signing time: Fri 05 Dec 2025 13:00:54 +0000 Manifest this update: Fri 05 Dec 2025 13:00:54 +0000 Manifest next update: Sat 06 Dec 2025 13:00:54 +0000 Files and hashes: 1: F6K0AMhDCsB1GOhZwP1LAvBxn-U.roa (hash: 1fDwwlAjSpOtIIFVkTnVEbqYyBXnYG415TFYdUrUKtg=) 2: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=) 3: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=) 4: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=) 5: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=) 6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: kd3r9oSHoV8ec++vgPl+PAHtsiQP7SYwPusZfDKgdxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:99:e6:1d:dd:0d:6c:95:1c:3d:ee:16:85:16:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Dec 5 13:00:54 2025 GMT Not After : Dec 6 13:00:54 2025 GMT Subject: CN=5ab0e2f7efa62fa18ed00e246b64732a469735ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bc:5c:ad:14:9b:22:f3:88:fa:11:38:25:94: d3:72:38:8c:c2:a4:3c:86:84:e0:c2:3a:d2:88:08: b1:0a:00:a3:62:b0:9d:2b:58:68:04:b5:61:a1:74: 77:85:53:60:9c:af:63:cc:8e:2a:f9:81:07:fd:05: 2e:2f:66:37:e2:34:57:6a:0a:fa:f4:1b:ca:50:90: b7:77:ac:cf:cb:28:89:a8:a4:bc:48:1e:85:07:d0: 17:b5:ba:17:c5:cd:66:f4:7e:88:15:61:99:77:56: e9:9f:2c:30:02:a5:3d:37:74:4f:aa:5f:e6:0f:b5: 3b:db:c9:4a:ba:9a:ec:77:c3:98:9b:60:34:37:98: e1:ea:6a:12:5e:64:5f:81:58:63:3f:d6:4f:5e:20: 6d:b0:cb:4f:23:76:6e:95:84:c4:5e:b0:67:5c:4d: 32:22:1c:1a:f5:51:63:7f:0f:fb:6e:6f:3f:8d:8e: 4f:99:5a:e6:e5:57:43:39:b9:8c:6a:3b:51:a6:c1: 66:43:69:b7:4b:3c:47:65:4d:87:76:eb:ae:e7:21: 06:5d:1a:9b:be:3e:8d:eb:52:7d:65:20:e6:5e:ff: ea:0a:97:e0:16:b5:80:50:5e:08:f8:a0:bc:8f:b9: 59:53:64:f9:1f:8b:65:88:47:2a:19:70:ab:f0:32: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:E2:F7:EF:A6:2F:A1:8E:D0:0E:24:6B:64:73:2A:46:97:35:AD X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:96:2d:0b:99:55:4f:55:7d:a9:12:e0:01:de:0b:e0:9b:11: af:ea:fe:b5:22:ed:5e:da:c5:29:ec:88:a4:e8:48:8d:88:b2: 59:56:2d:7c:6d:77:b3:7b:43:6a:49:db:cc:13:b1:de:be:c0: 31:82:e4:98:1a:d4:a6:56:2a:bc:55:c8:58:cf:96:6d:c1:d6: ad:c4:dc:48:55:5b:0d:01:9f:57:af:f2:72:a8:52:ae:38:4a: 90:ab:0f:d6:a1:38:c0:c2:15:3b:08:26:61:96:c0:36:14:30: ef:b5:b8:a2:b2:64:cb:01:25:41:7f:e0:a0:71:cc:bc:51:4f: 07:c7:f6:37:c3:55:59:2e:ae:b4:b9:58:24:8f:8f:b3:5b:24: 63:1e:1d:1f:dc:e1:4b:89:0f:a0:02:3e:7e:1d:e4:5b:07:70: 04:08:1c:67:f3:da:84:a8:f0:9e:a6:42:89:73:94:fa:f6:fb: f8:70:ab:d0:80:a6:52:6a:fe:f6:05:43:be:22:53:3b:29:51: 9f:f3:32:48:b2:28:cd:79:dd:aa:0e:2c:58:5a:bf:df:7b:b7: 55:74:ed:92:c1:b0:06:59:29:da:b9:18:8b:64:6f:35:2e:41: 93:7a:c5:69:fd:19:1d:3b:5c:a2:f7:bd:49:78:d2:53:09:8e: 67:03:76:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumeYd3Q1slRw97haFFkQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjUxMjA1MTMwMDU0WhcNMjUxMjA2MTMwMDU0WjAzMTEwLwYDVQQD Eyg1YWIwZTJmN2VmYTYyZmExOGVkMDBlMjQ2YjY0NzMyYTQ2OTczNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bxcrRSbIvOI+hE4JZTTcjiMwqQ8 hoTgwjrSiAixCgCjYrCdK1hoBLVhoXR3hVNgnK9jzI4q+YEH/QUuL2Y34jRXagr6 9BvKUJC3d6zPyyiJqKS8SB6FB9AXtboXxc1m9H6IFWGZd1bpnywwAqU9N3RPql/m D7U728lKuprsd8OYm2A0N5jh6moSXmRfgVhjP9ZPXiBtsMtPI3ZulYTEXrBnXE0y Ihwa9VFjfw/7bm8/jY5PmVrm5VdDObmMajtRpsFmQ2m3SzxHZU2Hduuu5yEGXRqb vj6N61J9ZSDmXv/qCpfgFrWAUF4I+KC8j7lZU2T5H4tliEcqGXCr8DJIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqw4vfvpi+hjtAOJGtkcypGlzWtMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5YtC5lV T1V9qRLgAd4L4JsRr+r+tSLtXtrFKeyIpOhIjYiyWVYtfG13s3tDaknbzBOx3r7A MYLkmBrUplYqvFXIWM+WbcHWrcTcSFVbDQGfV6/ycqhSrjhKkKsP1qE4wMIVOwgm YZbANhQw77W4orJkywElQX/goHHMvFFPB8f2N8NVWS6utLlYJI+Ps1skYx4dH9zh S4kPoAI+fh3kWwdwBAgcZ/PahKjwnqZCiXOU+vb7+HCr0ICmUmr+9gVDviJTOylR n/MySLIozXndqg4sWFq/33u3VXTtksGwBlkp2rkYi2RvNS5Bk3rFaf0ZHTtcove9 SXjSUwmOZwN2Kg== -----END CERTIFICATE-----Generated at Fri Dec 5 23:03:59 2025 by rpki-client