This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json) Hash identifier: i8bThA/O7FUzAfr7/h7PPyRhIXWq2KnGAVwKZRPskUE= Subject key identifier: 2F:CC:73:84:46:0D:57:8A:B0:28:45:03:A4:E8:BF:F6:C8:2E:B2:90 Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3 Certificate serial: 019B4FCF2A0DBD5BEF9C6E0414623E3D0E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft Manifest number: 0328 Signing time: Wed 24 Dec 2025 10:02:15 +0000 Manifest this update: Wed 24 Dec 2025 10:02:15 +0000 Manifest next update: Thu 25 Dec 2025 10:02:15 +0000 Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=) 2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: AyLaVZccy29YSZLJKYsh/aLEfamAgmrdnfO65JoYE6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:2a:0d:bd:5b:ef:9c:6e:04:14:62:3e:3d:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3 Validity Not Before: Dec 24 10:02:15 2025 GMT Not After : Dec 25 10:02:15 2025 GMT Subject: CN=2fcc7384460d578ab0284503a4e8bff6c82eb290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:d0:b2:d8:4a:05:74:2f:fa:d2:b8:80:20: b8:e4:e8:76:c4:33:39:f7:9e:72:3e:64:f8:3f:73: 4a:3c:2f:33:78:a0:ab:da:20:eb:51:b4:08:a7:d0: 3e:14:a2:2a:48:83:45:80:e0:b9:99:df:b7:c5:b3: 6b:d9:ba:28:9c:96:75:b6:82:bf:ea:70:85:91:24: 03:ff:c8:3f:b2:12:f6:e9:4b:34:4c:9d:7c:98:e8: cb:07:e6:ad:0e:9a:c5:7f:3d:e9:7d:7c:f7:99:07: d0:39:97:c8:13:43:6e:3c:3a:ab:af:18:36:d6:99: 87:d4:1c:26:cf:65:06:5b:40:cd:dc:73:f6:7e:28: e2:e3:5c:40:aa:9d:0d:e6:8d:58:b6:84:32:59:a8: a1:df:23:cd:96:08:9f:b4:34:c6:5d:72:11:7c:98: 97:99:24:0d:f2:93:ea:9b:2c:21:9d:3b:0a:02:74: 87:ba:9f:96:f9:0a:00:05:ea:81:28:54:a5:37:b4: d0:a9:63:a4:bb:f7:54:37:51:05:50:ef:13:c4:c2: 0d:ce:3a:30:60:a0:bd:43:9f:5e:87:4d:da:cb:c3: c2:f0:b2:b2:28:9c:69:e0:99:7c:22:18:fa:32:3a: d9:2b:1f:39:77:a4:03:2b:99:5a:e1:81:37:be:36: b1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CC:73:84:46:0D:57:8A:B0:28:45:03:A4:E8:BF:F6:C8:2E:B2:90 X509v3 Authority Key Identifier: keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:14:48:53:6e:7f:1e:04:6c:22:d8:02:76:f5:9c:00:55:4c: 6e:0c:c7:88:3f:22:98:64:47:8d:57:cf:55:5c:08:20:82:cc: 7a:ff:17:e8:ab:a9:1e:4c:e8:01:8d:04:b4:96:18:a1:21:42: 21:c4:5d:65:f0:9b:65:9c:ad:e8:c0:22:7d:70:98:c2:c7:8a: a8:04:c4:55:6f:d6:7e:9f:c6:33:ab:db:e3:51:f5:70:f6:2c: 15:a8:15:30:59:ad:23:10:8f:71:80:70:47:af:7a:42:b6:39: 5c:a4:b8:49:ce:58:f5:c3:10:ad:52:e5:8c:63:24:41:28:f3: 6c:04:69:25:82:1b:9e:4e:d8:74:d3:2f:53:93:e5:2a:8b:2b: 37:51:ba:13:cf:90:9e:69:2e:4d:10:98:ee:8b:01:11:cb:65: 4e:22:58:83:35:2f:b5:dd:e6:e5:9d:49:30:54:3e:0a:28:04: 01:73:c6:f1:64:5f:bf:46:ab:19:f2:af:23:9a:ad:32:e6:86: 80:73:82:fa:4b:4c:50:b1:93:3b:52:5d:fe:df:aa:52:e3:cf: 1f:fc:7a:3a:9a:ff:76:24:01:ea:3e:f9:fb:8f:42:f2:ac:01: 03:4f:ec:63:b5:15:ea:0d:4e:76:17:40:9b:10:dd:f2:c6:10: 06:c1:3a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzyoNvVvvnG4EFGI+PQ4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj NTQ1YzMwHhcNMjUxMjI0MTAwMjE1WhcNMjUxMjI1MTAwMjE1WjAzMTEwLwYDVQQD EygyZmNjNzM4NDQ2MGQ1NzhhYjAyODQ1MDNhNGU4YmZmNmM4MmViMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsErQsthKBXQv+tK4gCC45Oh2xDM5 955yPmT4P3NKPC8zeKCr2iDrUbQIp9A+FKIqSINFgOC5md+3xbNr2boonJZ1toK/ 6nCFkSQD/8g/shL26Us0TJ18mOjLB+atDprFfz3pfXz3mQfQOZfIE0NuPDqrrxg2 1pmH1Bwmz2UGW0DN3HP2fiji41xAqp0N5o1YtoQyWaih3yPNlgiftDTGXXIRfJiX mSQN8pPqmywhnTsKAnSHup+W+QoABeqBKFSlN7TQqWOku/dUN1EFUO8TxMINzjow YKC9Q59eh03ay8PC8LKyKJxp4Jl8Ihj6MjrZKx85d6QDK5la4YE3vjaxJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/Mc4RGDVeKsChFA6Tov/bILrKQMB8GA1UdIwQY MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxRIU25/ HgRsItgCdvWcAFVMbgzHiD8imGRHjVfPVVwIIILMev8X6KupHkzoAY0EtJYYoSFC IcRdZfCbZZyt6MAifXCYwseKqATEVW/Wfp/GM6vb41H1cPYsFagVMFmtIxCPcYBw R696QrY5XKS4Sc5Y9cMQrVLljGMkQSjzbARpJYIbnk7YdNMvU5PlKosrN1G6E8+Q nmkuTRCY7osBEctlTiJYgzUvtd3m5Z1JMFQ+CigEAXPG8WRfv0arGfKvI5qtMuaG gHOC+ktMULGTO1Jd/t+qUuPPH/x6Opr/diQB6j75+49C8qwBA0/sY7UV6g1OdhdA mxDd8sYQBsE61w== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:06 2025 by rpki-client