This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft File: _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json) Hash identifier: vVVRJs+YcnJ2u7ZW7m9ppOwwAjqRgQ5CAd07tqRqL+4= Subject key identifier: 81:2D:79:89:50:AD:EC:13:0B:F2:4D:B9:25:7F:8B:EF:52:EE:4A:3A Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82 Certificate issuer: /CN=ff32d6463621b13f78e530d144feac023e1e4582 Certificate serial: 019B0F37313B416B7C08F48E94AABD1A438C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft Manifest number: 0563 Signing time: Thu 11 Dec 2025 21:00:33 +0000 Manifest this update: Thu 11 Dec 2025 21:00:33 +0000 Manifest next update: Fri 12 Dec 2025 21:00:33 +0000 Files and hashes: 1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: Oyj49f9cxwTtOax1vTYdgFlG8c+e/CRgzg993NAezmw=) 2: bFqAr18-DoQ6dVM9w_6gb9zQnTA.roa (hash: CuuNkCn7ATc07S7puEJg/6wk+lxa5wMurXD4UWOiLPU=) 3: ktlX3SLAF-YNCTgumZIXLbUnbdQ.roa (hash: zK0y4Hfa+Cd7i8O+iE+DO6cd+9VnESfA1kHZCk8+iwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:31:3b:41:6b:7c:08:f4:8e:94:aa:bd:1a:43:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582 Validity Not Before: Dec 11 21:00:33 2025 GMT Not After : Dec 12 21:00:33 2025 GMT Subject: CN=812d798950adec130bf24db9257f8bef52ee4a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:69:b6:af:56:e9:94:64:90:bf:18:bb:78: f8:7e:64:f6:42:91:6c:eb:32:b7:22:4a:cc:91:55: e6:73:b6:3e:33:b5:18:7c:87:0a:be:b5:51:43:cf: e9:3d:4d:af:7b:7b:b8:97:ec:0f:15:8a:84:7e:8e: dd:69:cb:e7:06:3a:9d:31:31:fa:b5:96:67:62:2f: 49:ff:0b:93:ef:92:76:25:97:50:65:8e:5d:ca:09: d9:ee:5f:e3:0c:07:59:a8:68:19:93:d5:90:35:11: fa:26:fa:dd:16:50:02:06:06:a3:0b:f2:41:95:93: 5b:62:e9:b2:d9:19:46:f7:4d:1f:25:bd:35:2c:37: 09:0a:0c:89:0f:d8:7e:df:2f:71:f6:fe:ea:65:a8: 06:35:cc:66:5e:cb:fc:93:99:70:31:ca:1c:24:67: 9f:74:8b:74:df:20:91:bc:50:c9:fc:fa:f8:20:3b: 26:fa:d1:2b:70:f6:36:71:04:c8:b3:fe:35:02:ee: e9:4a:68:f1:d1:fb:04:f4:32:c1:71:1f:68:cd:9d: 74:68:90:da:3a:70:a5:a5:56:00:6f:92:6f:d7:fa: fa:f4:a0:e2:89:1d:08:9f:ed:a9:0f:ff:3a:46:87: 24:3f:95:4e:83:ad:36:89:36:e0:21:6d:b8:26:76: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2D:79:89:50:AD:EC:13:0B:F2:4D:B9:25:7F:8B:EF:52:EE:4A:3A X509v3 Authority Key Identifier: keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1d:d6:33:a6:ed:72:68:72:3a:2a:6e:4e:42:fb:fd:7a:30: 03:ea:eb:c0:96:e9:c3:7c:92:ff:cc:5d:b4:36:79:54:e0:2a: 40:75:58:63:5b:0d:df:e5:2f:d7:30:51:11:5a:6d:66:eb:10: bc:93:43:31:c8:65:21:b0:5f:86:4d:f9:bd:b9:43:0a:12:2d: aa:6e:12:9e:9e:45:87:d2:e1:7c:dd:03:9e:0b:67:03:39:b2: 52:f9:be:7e:d1:e2:c4:3b:98:e1:fe:f0:c5:5a:f9:38:72:f4: 05:7a:11:ca:2b:48:f7:14:fa:f0:4a:df:81:db:66:1f:fa:c2: 30:f9:6d:6c:ed:b8:c8:1e:c9:0a:a2:6d:2b:94:74:73:e0:72: 60:77:e4:27:9e:3f:06:23:dd:4f:a3:40:0b:ba:68:7d:f7:78: b6:96:ea:37:42:19:e1:1d:de:de:6d:df:1e:af:a0:14:c6:ef: 8a:3b:4f:9e:6d:e2:8a:b7:85:67:f2:aa:8e:bf:a8:c9:7a:97: d4:14:29:ae:61:14:0a:39:4c:cb:47:ad:88:3d:b5:6e:4b:0b: e4:52:02:50:69:4c:8f:70:2e:ec:99:10:92:5f:2d:5f:94:ef: 28:65:40:b8:59:0e:90:e1:4d:60:c3:ed:10:01:d0:6a:68:fb: 75:5f:50:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzE7QWt8CPSOlKq9GkOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzJkNjQ2MzYyMWIxM2Y3OGU1MzBkMTQ0ZmVhYzAyM2Ux ZTQ1ODIwHhcNMjUxMjExMjEwMDMzWhcNMjUxMjEyMjEwMDMzWjAzMTEwLwYDVQQD Eyg4MTJkNzk4OTUwYWRlYzEzMGJmMjRkYjkyNTdmOGJlZjUyZWU0YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp5ptq9W6ZRkkL8Yu3j4fmT2QpFs 6zK3IkrMkVXmc7Y+M7UYfIcKvrVRQ8/pPU2ve3u4l+wPFYqEfo7dacvnBjqdMTH6 tZZnYi9J/wuT75J2JZdQZY5dygnZ7l/jDAdZqGgZk9WQNRH6JvrdFlACBgajC/JB lZNbYumy2RlG900fJb01LDcJCgyJD9h+3y9x9v7qZagGNcxmXsv8k5lwMcocJGef dIt03yCRvFDJ/Pr4IDsm+tErcPY2cQTIs/41Au7pSmjx0fsE9DLBcR9ozZ10aJDa OnClpVYAb5Jv1/r69KDiiR0In+2pD/86RockP5VOg602iTbgIW24JnbocwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEteYlQrewTC/JNuSV/i+9S7ko6MB8GA1UdIwQY MBaAFP8y1kY2IbE/eOUw0UT+rAI+HkWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgt MmIwMGVhMzI5MzdiLzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mOTY5MDAtY2YxNy00MWY1LWFlMjgtMmIwMGVhMzI5Mzdi LzEvX3pMV1JqWWhzVDk0NVREUlJQNnNBajRlUllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR3WM6bt cmhyOipuTkL7/XowA+rrwJbpw3yS/8xdtDZ5VOAqQHVYY1sN3+Uv1zBREVptZusQ vJNDMchlIbBfhk35vblDChItqm4Snp5Fh9LhfN0DngtnAzmyUvm+ftHixDuY4f7w xVr5OHL0BXoRyitI9xT68ErfgdtmH/rCMPltbO24yB7JCqJtK5R0c+ByYHfkJ54/ BiPdT6NAC7poffd4tpbqN0IZ4R3e3m3fHq+gFMbvijtPnm3iireFZ/Kqjr+oyXqX 1BQprmEUCjlMy0etiD21bksL5FICUGlMj3Au7JkQkl8tX5TvKGVAuFkOkOFNYMPt EAHQamj7dV9QCQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:57:39 2025 by rpki-client