This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json) Hash identifier: FCWNtPRuIZMKTJBYIZdJOxTq8gHGZFEVg9ZY0VUhvuM= Subject key identifier: 22:4A:D0:EE:5F:75:B4:79:A3:07:A5:D0:9A:DA:7E:61:C5:E6:DD:A3 Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B0E92CC80EC1F6ACF0CCD554ECCE8EAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft Manifest number: 0EE6 Signing time: Thu 11 Dec 2025 18:01:00 +0000 Manifest this update: Thu 11 Dec 2025 18:01:00 +0000 Manifest next update: Fri 12 Dec 2025 18:01:00 +0000 Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=) 2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=) 3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: iSnelCHEJAF8xoiauVr4IPa6VnvQOJhgJB6Na6qVx+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:cc:80:ec:1f:6a:cf:0c:cd:55:4e:cc:e8:ea:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Dec 11 18:01:00 2025 GMT Not After : Dec 12 18:01:00 2025 GMT Subject: CN=224ad0ee5f75b479a307a5d09ada7e61c5e6dda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:68:15:21:a2:c8:95:4f:1a:de:82:16:22:ef: c1:dc:1d:38:7b:99:14:6c:34:db:24:7e:8a:77:1e: 05:aa:17:3a:0d:2b:a8:fa:9c:47:0d:26:09:3f:41: 6f:6a:d0:a6:79:22:90:fa:bd:1f:3c:f9:11:52:8f: c9:c1:3e:b6:6f:51:f8:f3:b2:7c:48:24:e3:7b:05: 11:fe:80:3d:a0:30:b2:e9:bc:32:c0:0b:6a:c8:38: a7:0e:64:6f:f7:fe:be:7e:d9:29:6c:c8:2e:fb:64: 3d:86:b4:25:5d:62:de:97:7b:23:56:50:e4:28:55: 4f:68:fe:26:b4:bb:5f:2a:dd:0b:74:e1:9d:9a:ca: 8a:b9:a1:90:0a:a2:1e:6d:cf:94:01:8f:69:b8:b0: 94:da:00:c8:4d:e3:8a:72:86:47:8f:67:12:3a:8d: 64:f7:05:53:05:64:3d:f3:a1:f7:54:d5:39:a1:e0: e7:d8:35:c8:f3:39:c0:24:51:bf:49:2b:f8:3f:a5: 52:2c:46:09:ec:36:6a:16:ea:e3:8e:29:57:f4:c5: 71:b8:50:aa:27:4c:2b:1e:b3:14:e2:8a:c6:06:58: 39:f5:80:bf:ba:52:65:b2:fd:dc:71:69:0d:b2:f0: e7:1c:de:c2:49:42:12:fc:1a:79:d5:6d:a6:ed:44: 81:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:D0:EE:5F:75:B4:79:A3:07:A5:D0:9A:DA:7E:61:C5:E6:DD:A3 X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:0a:45:ce:8d:91:dc:c9:bd:85:b2:75:bd:b6:dd:b9:8c: 01:b0:52:bf:0f:fa:29:6f:34:e8:15:dd:37:49:4a:55:2b:a5: b2:26:1f:e6:3e:82:84:74:a0:a1:b6:80:88:b3:63:d4:a0:75: e1:23:d9:ce:d2:f4:74:4b:60:76:49:4d:fe:db:6f:f2:2c:ed: 7b:95:ec:9c:ac:62:02:3b:fa:b2:d3:8c:01:ed:a2:1b:af:4c: 3e:60:30:8c:ed:e1:83:fb:d7:1a:f5:14:fe:18:c1:04:07:d5: 9a:f9:0e:c4:b7:f3:0a:8a:6d:78:db:1b:3f:61:d4:4e:3b:45: 15:b2:24:03:fe:fe:e1:82:41:0c:0a:ac:ba:1c:28:66:77:38: bf:ee:90:c5:e6:8e:03:d3:4d:cd:6f:b6:b5:98:ff:ef:dd:d7: e6:15:08:df:5e:e1:37:3a:8f:ac:6d:5f:e8:ba:b5:6f:72:77: bd:12:44:4d:d1:e7:a3:fd:e5:f6:0c:35:9f:47:33:a8:87:f4: 2f:5f:29:17:bb:e5:09:bf:5b:ea:b6:8e:ef:a5:dc:e5:cd:50: 39:6e:05:29:ec:a9:0c:bb:f3:ff:a8:41:74:7f:d5:7a:c6:66: ee:1d:cb:b3:a7:5e:34:be:01:26:96:d7:e1:81:0c:67:ca:05: 80:ed:2f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOksyA7B9qzwzNVU7M6OrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjUxMjExMTgwMTAwWhcNMjUxMjEyMTgwMTAwWjAzMTEwLwYDVQQD EygyMjRhZDBlZTVmNzViNDc5YTMwN2E1ZDA5YWRhN2U2MWM1ZTZkZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WgVIaLIlU8a3oIWIu/B3B04e5kU bDTbJH6Kdx4Fqhc6DSuo+pxHDSYJP0FvatCmeSKQ+r0fPPkRUo/JwT62b1H487J8 SCTjewUR/oA9oDCy6bwywAtqyDinDmRv9/6+ftkpbMgu+2Q9hrQlXWLel3sjVlDk KFVPaP4mtLtfKt0LdOGdmsqKuaGQCqIebc+UAY9puLCU2gDITeOKcoZHj2cSOo1k 9wVTBWQ986H3VNU5oeDn2DXI8znAJFG/SSv4P6VSLEYJ7DZqFurjjilX9MVxuFCq J0wrHrMU4orGBlg59YC/ulJlsv3ccWkNsvDnHN7CSUIS/Bp51W2m7USBqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJK0O5fdbR5owel0JrafmHF5t2jMB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0cKRc6N kdzJvYWydb223bmMAbBSvw/6KW806BXdN0lKVSulsiYf5j6ChHSgobaAiLNj1KB1 4SPZztL0dEtgdklN/ttv8izte5XsnKxiAjv6stOMAe2iG69MPmAwjO3hg/vXGvUU /hjBBAfVmvkOxLfzCopteNsbP2HUTjtFFbIkA/7+4YJBDAqsuhwoZnc4v+6QxeaO A9NNzW+2tZj/793X5hUI317hNzqPrG1f6Lq1b3J3vRJETdHno/3l9gw1n0czqIf0 L18pF7vlCb9b6raO76Xc5c1QOW4FKeypDLvz/6hBdH/VesZm7h3Ls6deNL4BJpbX 4YEMZ8oFgO0vcw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:58:41 2025 by rpki-client