This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json) Hash identifier: s3aDqxQ/n9WdBCc5y2uwvOeH0KveNTKdtJ8cHC7f0S8= Subject key identifier: 81:3B:0C:C6:F9:16:6C:A7:D9:04:93:36:FE:D6:C5:95:B5:BB:C6:4B Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019B5976E4EBE5831B72120D96A99BE85E78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft Manifest number: 1007 Signing time: Fri 26 Dec 2025 07:02:02 +0000 Manifest this update: Fri 26 Dec 2025 07:02:02 +0000 Manifest next update: Sat 27 Dec 2025 07:02:02 +0000 Files and hashes: 1: _11pVetKcRxH5Mux6SQ0q_W6nko.roa (hash: xth5tm0U+e+fq0ZH4yXPggFQaHKD6f3c94qC+hf+z3U=) 2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: mzuiDPAU7wQ4TetRfKWpOEK6U2n6oeLGPGINdWoRavQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e4:eb:e5:83:1b:72:12:0d:96:a9:9b:e8:5e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Dec 26 07:02:02 2025 GMT Not After : Dec 27 07:02:02 2025 GMT Subject: CN=813b0cc6f9166ca7d9049336fed6c595b5bbc64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:06:b8:17:40:75:9e:0c:8f:20:c5:92:6b:3d: ae:7c:d5:39:58:c0:c7:ad:72:2d:22:71:e1:e4:34: 39:6c:06:62:22:53:b5:12:08:68:e1:7a:0d:c3:94: 56:dd:1e:31:7c:09:cd:a2:73:db:7d:58:37:20:00: 21:ea:5b:20:d2:ff:f4:fb:c9:3b:02:56:6d:47:52: 8a:12:26:6d:18:c6:07:1d:e4:34:ce:c4:48:53:7b: 8c:71:dd:85:38:6a:95:3d:2b:50:f2:eb:67:9e:6e: 06:76:b5:f6:a9:13:00:9e:fe:04:00:da:13:20:cf: cc:a7:8d:81:12:44:f4:68:a1:d4:6a:9c:13:94:5f: 1a:45:1f:42:00:50:a6:1b:39:f7:b1:01:c0:94:f6: 81:42:87:ea:da:ee:ac:c2:79:d4:68:82:40:d6:0b: fd:f5:2d:b8:9b:67:99:82:d2:4e:56:a1:8c:5b:3f: 99:68:76:ed:63:af:16:76:26:c2:ae:51:e8:2b:31: a7:7a:f9:08:31:bb:36:bc:30:a3:6c:25:6e:56:4c: 93:9a:73:9a:5d:6d:19:2a:4f:03:23:17:b6:4c:6a: 51:ff:b1:b4:d3:bc:8e:bb:b0:7f:89:7d:2b:16:84: 38:2d:5e:b3:f8:06:ec:e4:1e:39:22:26:ac:37:d0: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:0C:C6:F9:16:6C:A7:D9:04:93:36:FE:D6:C5:95:B5:BB:C6:4B X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:31:14:79:88:fe:d6:88:02:be:fe:43:46:2f:15:1a:cd:7b: d7:e6:ab:55:a8:df:73:e3:05:81:02:47:fc:0d:74:1e:f6:70: 42:46:80:0c:a6:2e:c7:13:14:78:b1:f6:93:af:2c:d7:55:ad: a4:ca:c6:68:3e:db:ef:50:c5:54:11:6e:92:77:0e:b8:18:42: 55:a4:b5:3d:47:65:93:94:c8:16:ca:cc:52:5f:6a:6c:70:f5: 42:03:0c:53:f6:06:16:6b:bb:e5:bf:05:84:06:44:3a:d1:ab: df:71:44:9b:8b:bf:ca:68:cc:89:03:b7:f1:e2:11:f9:0c:a6: 81:6b:f2:69:a7:cd:71:db:05:84:4f:41:f3:4e:14:5d:18:da: 65:35:d1:63:79:c4:b0:3a:0d:6d:2b:3e:00:0e:85:ba:5a:6c: b0:0e:79:cc:14:b9:81:fd:f9:9a:f4:de:79:6a:84:0f:ff:92: e8:a1:c5:41:38:49:5f:95:85:fb:35:b2:c3:c5:95:e7:c8:7c: 5a:37:1f:33:bc:3c:ec:ff:5d:0f:86:ad:b3:06:e4:99:29:c4: e9:33:2b:40:6b:c1:5a:96:86:0b:c4:47:68:69:bc:e2:cc:f8: 32:f5:52:aa:87:68:1e:38:d0:2d:53:fe:d6:30:88:45:88:96: c6:4b:61:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduTr5YMbchINlqmb6F54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjUxMjI2MDcwMjAyWhcNMjUxMjI3MDcwMjAyWjAzMTEwLwYDVQQD Eyg4MTNiMGNjNmY5MTY2Y2E3ZDkwNDkzMzZmZWQ2YzU5NWI1YmJjNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwa4F0B1ngyPIMWSaz2ufNU5WMDH rXItInHh5DQ5bAZiIlO1Egho4XoNw5RW3R4xfAnNonPbfVg3IAAh6lsg0v/0+8k7 AlZtR1KKEiZtGMYHHeQ0zsRIU3uMcd2FOGqVPStQ8utnnm4GdrX2qRMAnv4EANoT IM/Mp42BEkT0aKHUapwTlF8aRR9CAFCmGzn3sQHAlPaBQofq2u6swnnUaIJA1gv9 9S24m2eZgtJOVqGMWz+ZaHbtY68WdibCrlHoKzGnevkIMbs2vDCjbCVuVkyTmnOa XW0ZKk8DIxe2TGpR/7G007yOu7B/iX0rFoQ4LV6z+Abs5B45IiasN9A2vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE7DMb5Fmyn2QSTNv7WxZW1u8ZLMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDEUeYj+ 1ogCvv5DRi8VGs171+arVajfc+MFgQJH/A10HvZwQkaADKYuxxMUeLH2k68s11Wt pMrGaD7b71DFVBFukncOuBhCVaS1PUdlk5TIFsrMUl9qbHD1QgMMU/YGFmu75b8F hAZEOtGr33FEm4u/ymjMiQO38eIR+QymgWvyaafNcdsFhE9B804UXRjaZTXRY3nE sDoNbSs+AA6FulpssA55zBS5gf35mvTeeWqED/+S6KHFQThJX5WF+zWyw8WV58h8 WjcfM7w87P9dD4atswbkmSnE6TMrQGvBWpaGC8RHaGm84sz4MvVSqodoHjjQLVP+ 1jCIRYiWxkthhQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client