This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json) Hash identifier: Y79AxUR8BIpQD0TfIgZpEmh3yndKh7RK5ySK2ZA7O2o= Subject key identifier: 03:27:D4:3E:EF:8E:86:51:A6:E9:D1:36:56:A9:94:E7:54:84:E1:28 Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Certificate serial: 019B262D19A86CD9F5509FC192A936DAE857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft Manifest number: 048A Signing time: Tue 16 Dec 2025 08:00:48 +0000 Manifest this update: Tue 16 Dec 2025 08:00:48 +0000 Manifest next update: Wed 17 Dec 2025 08:00:48 +0000 Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: s7/wIfsj1nxLb1/iJ1xCz/kU0BnY6JFE9c4c+f9vM/0=) 2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:19:a8:6c:d9:f5:50:9f:c1:92:a9:36:da:e8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Validity Not Before: Dec 16 08:00:48 2025 GMT Not After : Dec 17 08:00:48 2025 GMT Subject: CN=0327d43eef8e8651a6e9d13656a994e75484e128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:17:ce:4f:16:79:9a:49:1b:14:3b:d4:03: d7:15:35:2b:ea:8e:b3:5a:c7:d1:45:d1:1c:1b:d0: b0:ea:e9:35:e3:7a:93:cd:f9:43:4b:e1:16:09:d6: da:24:ac:5f:a1:3f:77:f2:a5:14:f3:be:5c:4e:e1: 71:23:59:ac:2f:8c:b1:1e:a8:85:f9:be:8e:90:f7: 48:73:c2:3f:03:46:21:36:c5:c5:88:98:36:47:6b: ab:53:ce:d9:50:ed:91:8e:e3:17:e1:d6:4a:3c:80: e6:02:d2:a8:85:51:fd:ba:4a:67:e9:b1:d9:56:37: 8c:d8:bd:3f:66:10:4d:56:f9:55:fb:d6:dc:d2:bf: 61:e5:32:bb:a4:fd:31:34:9a:3f:b6:22:de:81:66: 36:d4:e9:4d:12:fd:8e:87:ff:93:31:17:f3:3f:4a: 60:c2:5c:0e:a3:72:e9:71:29:93:da:15:85:4a:cc: f8:00:2f:2b:61:16:2c:be:fb:ac:b4:8e:9b:79:25: 1f:b1:21:2b:54:e9:87:db:ac:a2:d3:d5:16:a2:73: 43:d7:22:96:61:71:55:7b:1c:9c:98:c9:6c:b3:2d: b5:a2:80:c9:1b:7f:75:05:bc:e5:28:b5:d7:36:ca: 30:c9:92:1b:c6:fb:e5:b9:21:30:40:78:20:c2:5d: c7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:D4:3E:EF:8E:86:51:A6:E9:D1:36:56:A9:94:E7:54:84:E1:28 X509v3 Authority Key Identifier: keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a7:26:01:52:bf:11:d3:52:87:21:5e:d8:0d:d3:1d:d6:77: e1:40:d6:4f:fa:32:ce:d7:d8:2a:d5:9a:1a:fb:ee:f3:72:9b: b1:d8:50:82:5d:cc:35:46:80:26:20:47:50:45:98:d9:90:9c: d2:98:8a:08:c6:07:da:0c:2c:76:6b:f9:ec:50:03:48:a5:84: 11:0f:54:05:ba:d8:09:dd:04:f6:25:33:90:aa:54:3e:e9:0b: 8d:c6:23:19:a7:1a:3d:10:c4:0c:6f:0b:2e:68:af:96:77:19: 4f:69:71:8e:a2:f7:e2:54:59:44:e2:87:f7:ba:aa:e2:23:f5: 5d:e0:52:8c:11:cb:a7:54:6f:a5:19:57:56:ee:72:29:5f:a2: 3c:42:24:1d:09:28:0c:48:fe:2c:62:cc:33:de:52:20:d7:f2: d4:7c:cd:c7:80:b2:f4:fe:6d:4d:bc:e3:33:8a:3a:2a:bb:e7: 13:bd:6d:88:6c:b8:44:4e:53:9f:82:49:5f:64:9f:c8:b5:a4: c7:10:9f:0a:a5:33:7f:7b:0b:88:2d:b0:b8:01:82:5a:fc:db: 7f:f7:be:2d:4a:61:b2:eb:37:87:92:85:53:78:34:1c:38:43: 94:2c:5d:0a:b4:1f:36:b1:07:2e:f8:ef:49:88:56:ef:8b:12: f2:ec:c4:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLRmobNn1UJ/Bkqk22uhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2 N2VlZmEwHhcNMjUxMjE2MDgwMDQ4WhcNMjUxMjE3MDgwMDQ4WjAzMTEwLwYDVQQD EygwMzI3ZDQzZWVmOGU4NjUxYTZlOWQxMzY1NmE5OTRlNzU0ODRlMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDwXzk8WeZpJGxQ71APXFTUr6o6z WsfRRdEcG9Cw6uk143qTzflDS+EWCdbaJKxfoT938qUU875cTuFxI1msL4yxHqiF +b6OkPdIc8I/A0YhNsXFiJg2R2urU87ZUO2RjuMX4dZKPIDmAtKohVH9ukpn6bHZ VjeM2L0/ZhBNVvlV+9bc0r9h5TK7pP0xNJo/tiLegWY21OlNEv2Oh/+TMRfzP0pg wlwOo3LpcSmT2hWFSsz4AC8rYRYsvvustI6beSUfsSErVOmH26yi09UWonND1yKW YXFVexycmMlssy21ooDJG391BbzlKLXXNsowyZIbxvvluSEwQHggwl3HEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMn1D7vjoZRpunRNlaplOdUhOEoMB8GA1UdIwQY MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4 LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6cmAVK/ EdNShyFe2A3THdZ34UDWT/oyztfYKtWaGvvu83KbsdhQgl3MNUaAJiBHUEWY2ZCc 0piKCMYH2gwsdmv57FADSKWEEQ9UBbrYCd0E9iUzkKpUPukLjcYjGacaPRDEDG8L LmivlncZT2lxjqL34lRZROKH97qq4iP1XeBSjBHLp1RvpRlXVu5yKV+iPEIkHQko DEj+LGLMM95SINfy1HzNx4Cy9P5tTbzjM4o6KrvnE71tiGy4RE5Tn4JJX2SfyLWk xxCfCqUzf3sLiC2wuAGCWvzbf/e+LUphsus3h5KFU3g0HDhDlCxdCrQfNrEHLvjv SYhW74sS8uzEWw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:30:48 2025 by rpki-client