This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json) Hash identifier: Je65kk2AoKOEL5jHWcPEJZprXsjwEZXcXl5mMl6hXJk= Subject key identifier: 24:3C:FA:C5:21:F9:A1:A8:F5:56:0C:A7:31:04:EC:A6:3E:D9:9E:BF Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549 Certificate serial: 019B22873C480F1162067C4DC359D793F012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft Manifest number: 06FD Signing time: Mon 15 Dec 2025 15:00:46 +0000 Manifest this update: Mon 15 Dec 2025 15:00:46 +0000 Manifest next update: Tue 16 Dec 2025 15:00:46 +0000 Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: um24kokpyhQvv6e+Gq57xa7kTRNMs1pQTMF2UBqQfCY=) 2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:3c:48:0f:11:62:06:7c:4d:c3:59:d7:93:f0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e30c179cd42a8641583234501b18eff2515549 Validity Not Before: Dec 15 15:00:46 2025 GMT Not After : Dec 16 15:00:46 2025 GMT Subject: CN=243cfac521f9a1a8f5560ca73104eca63ed99ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:ee:fb:2b:34:79:db:2d:2e:8f:d9:c0:cb: db:1d:4a:77:d8:57:66:e2:8b:dc:cf:cc:26:ad:1e: 7e:95:95:7e:a8:11:26:38:28:ba:5d:c5:e8:e4:b7: bd:48:6c:37:0e:76:34:b6:4c:d5:ec:30:df:d5:79: b0:30:29:98:02:0d:51:32:b6:51:15:35:41:2a:69: 6e:1f:b8:a3:48:31:4a:ea:d3:b6:6a:99:3c:2f:ea: 73:ef:0b:de:a5:38:2c:8a:f3:bd:e1:97:84:aa:b0: 35:22:65:4d:5b:60:e4:84:56:2b:83:8b:36:75:9a: f8:cd:92:16:1f:f5:05:47:8c:89:77:77:11:17:12: 37:2a:65:1e:af:13:70:9a:06:85:92:05:5a:a0:48: 04:3b:d8:09:d4:03:67:ce:ec:b5:66:77:35:41:9f: 87:25:18:31:a5:13:92:75:02:9d:05:b0:e8:b1:c1: fd:3f:b5:6c:46:ee:98:55:69:c1:13:43:ce:55:71: 75:a6:1c:5d:f4:49:a6:97:29:c3:27:1c:5b:0e:19: d7:4e:ac:71:8f:8c:e7:dd:87:a8:5b:4e:07:6b:93: 92:f5:2c:28:99:75:62:f0:78:6c:5a:fa:ee:df:a1: 0d:55:31:34:a8:61:ea:88:99:05:8c:f6:bc:c4:50: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:FA:C5:21:F9:A1:A8:F5:56:0C:A7:31:04:EC:A6:3E:D9:9E:BF X509v3 Authority Key Identifier: keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:52:b6:e4:08:93:6b:30:68:3e:54:fd:34:37:78:10:30:e4: 40:54:79:41:0f:97:d7:7b:e0:0f:e7:fb:e0:12:25:e7:6a:48: c0:31:e0:e8:84:57:3b:e5:ba:02:12:4b:95:46:5a:86:3f:fc: 32:6a:6d:94:65:93:52:40:f8:6f:7f:2b:48:14:4a:b0:77:00: 5e:ab:8f:83:31:cf:f1:cb:7b:a0:07:cc:e7:8a:41:35:65:ac: 89:ff:36:45:62:0a:e9:af:b7:d8:3b:b1:c7:d7:c5:0b:43:91: 81:90:2f:de:54:57:4e:92:4b:76:38:9f:1b:f9:4f:9f:f3:bf: 3c:0b:42:fc:0f:69:2a:0d:69:11:3f:64:78:4a:68:e1:41:e9: 8e:ee:2d:af:7c:7b:f8:1c:6d:89:5d:93:e2:31:3d:c8:36:b7: a8:95:10:f3:62:0c:86:87:12:21:6a:65:bc:02:80:f9:8e:cb: 51:38:25:b1:52:2f:0e:0c:b9:cf:71:68:34:4c:2c:cc:69:e2: 65:3a:0e:a2:7c:98:29:01:30:3b:43:0b:14:d1:04:22:76:60: 7b:36:69:72:fc:ea:47:6f:b8:0a:1c:11:95:4e:17:ac:41:cb: be:f5:14:3e:38:76:7f:36:bb:81:39:c0:27:82:a6:fd:b6:f4: 1b:14:cd:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsihzxIDxFiBnxNw1nXk/ASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1 MTU1NDkwHhcNMjUxMjE1MTUwMDQ2WhcNMjUxMjE2MTUwMDQ2WjAzMTEwLwYDVQQD EygyNDNjZmFjNTIxZjlhMWE4ZjU1NjBjYTczMTA0ZWNhNjNlZDk5ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMju+ys0edstLo/ZwMvbHUp32Fdm 4ovcz8wmrR5+lZV+qBEmOCi6XcXo5Le9SGw3DnY0tkzV7DDf1XmwMCmYAg1RMrZR FTVBKmluH7ijSDFK6tO2apk8L+pz7wvepTgsivO94ZeEqrA1ImVNW2DkhFYrg4s2 dZr4zZIWH/UFR4yJd3cRFxI3KmUerxNwmgaFkgVaoEgEO9gJ1ANnzuy1Znc1QZ+H JRgxpROSdQKdBbDoscH9P7VsRu6YVWnBE0POVXF1phxd9EmmlynDJxxbDhnXTqxx j4zn3YeoW04Ha5OS9SwomXVi8HhsWvru36ENVTE0qGHqiJkFjPa8xFBCSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ8+sUh+aGo9VYMpzEE7KY+2Z6/MB8GA1UdIwQY MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0 LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVK25AiT azBoPlT9NDd4EDDkQFR5QQ+X13vgD+f74BIl52pIwDHg6IRXO+W6AhJLlUZahj/8 MmptlGWTUkD4b38rSBRKsHcAXquPgzHP8ct7oAfM54pBNWWsif82RWIK6a+32Dux x9fFC0ORgZAv3lRXTpJLdjifG/lPn/O/PAtC/A9pKg1pET9keEpo4UHpju4tr3x7 +BxtiV2T4jE9yDa3qJUQ82IMhocSIWplvAKA+Y7LUTglsVIvDgy5z3FoNEwszGni ZToOonyYKQEwO0MLFNEEInZgezZpcvzqR2+4ChwRlU4XrEHLvvUUPjh2fza7gTnA J4Km/bb0GxTNGA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:36:52 2025 by rpki-client