This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json) Hash identifier: hhKNauFaLvvVMI5+PO0SQLtJyULdXHfnLplVP9stSZ8= Subject key identifier: 65:78:60:A9:F9:DF:28:65:18:2F:F9:AD:9E:8A:CE:5D:0A:BA:69:21 Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019B1B3B9DFE5B9AA07EAEDF24FC47442A0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft Manifest number: 1000 Signing time: Sun 14 Dec 2025 05:00:50 +0000 Manifest this update: Sun 14 Dec 2025 05:00:50 +0000 Manifest next update: Mon 15 Dec 2025 05:00:50 +0000 Files and hashes: 1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=) 2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=) 3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=) 4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: tTCbtcHlv/Jl4Mb6YpLb+305/R1Rf+LjF/wwEUkBKlA=) 5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=) 6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=) 7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:9d:fe:5b:9a:a0:7e:ae:df:24:fc:47:44:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Dec 14 05:00:50 2025 GMT Not After : Dec 15 05:00:50 2025 GMT Subject: CN=657860a9f9df2865182ff9ad9e8ace5d0aba6921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b7:81:55:98:81:84:ab:c4:e6:db:9a:d5:0a: 3f:49:88:ed:a9:d2:ee:5c:51:a0:03:aa:11:6a:d7: b5:be:f7:e8:32:57:c9:18:2f:1c:8f:82:2f:54:4e: b7:7c:ae:08:64:f1:72:ba:87:d8:a4:0c:16:c9:3b: c7:11:7a:de:40:e9:c8:ec:70:de:96:75:96:fa:89: 8e:86:54:cb:89:a1:0e:04:02:54:d7:f3:8d:ad:e3: 45:4b:9a:27:bc:43:68:24:e7:90:28:f1:75:3d:17: 20:84:d3:f9:a8:a0:b5:1a:cb:6d:71:0b:bb:42:0e: b6:bb:1d:7a:94:64:bd:e7:75:f9:29:e4:37:57:d1: 45:43:eb:5a:71:d3:3c:d9:fe:d9:46:e6:b9:1b:e8: b9:b3:28:d0:1b:ef:3d:5b:1b:2e:15:c3:b6:04:53: 19:c9:16:a7:b7:61:49:12:c0:44:d0:49:46:12:33: da:f6:c0:d4:6a:16:d1:b0:14:42:49:f4:ae:92:47: a8:99:bd:9f:ef:57:bd:8c:02:15:7b:1d:ef:2c:b1: c4:56:b9:43:8b:35:13:3e:87:1e:05:c4:3a:1d:36: 1e:f4:84:de:39:32:1a:90:88:f6:67:4f:e9:22:55: 10:f9:a6:4d:a3:b3:b6:30:23:7f:4c:a9:26:7e:58: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:78:60:A9:F9:DF:28:65:18:2F:F9:AD:9E:8A:CE:5D:0A:BA:69:21 X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b4:13:63:65:07:b9:2f:42:ef:31:2c:62:ab:09:a6:20:8a: 91:af:38:5e:42:b6:45:58:62:36:1f:02:74:da:32:11:0d:17: cf:b1:95:19:6d:77:82:3c:8b:d0:fe:4f:91:c4:c3:cd:dd:2c: b3:dc:54:a8:de:71:59:bb:9c:05:32:e0:69:b8:75:78:de:ae: 23:06:5b:f4:53:ab:3a:79:5d:37:f0:55:ae:e4:98:a2:0b:85: 9b:2d:0d:86:76:f9:86:1b:35:1d:95:08:50:e6:77:0b:b1:5c: 84:12:1b:61:56:60:cf:79:41:9f:a1:c9:83:dd:89:f8:54:2d: e0:6c:f4:4f:7a:3d:7a:06:51:90:3b:a2:2b:02:b3:f9:97:ee: 5b:f8:f5:73:aa:63:9c:ad:91:d0:c7:41:b9:fb:36:b3:4b:9c: af:02:e3:f4:1a:c6:4b:dd:01:c5:8f:72:3c:85:5d:62:62:68: 3c:6c:cf:48:58:61:d3:f6:13:20:9a:b9:dc:dd:59:13:c8:05: 0a:98:da:50:68:8f:5f:0b:a0:90:7f:da:58:54:ab:cf:4c:5e: 54:ef:ba:64:3c:2e:eb:1d:24:4c:6b:cc:0b:be:3e:46:c4:b7: 68:b9:57:90:ba:15:e8:a8:01:45:bd:39:b3:5b:57:be:b5:22: d6:9d:ca:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO53+W5qgfq7fJPxHRCoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjUxMjE0MDUwMDUwWhcNMjUxMjE1MDUwMDUwWjAzMTEwLwYDVQQD Eyg2NTc4NjBhOWY5ZGYyODY1MTgyZmY5YWQ5ZThhY2U1ZDBhYmE2OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7eBVZiBhKvE5tua1Qo/SYjtqdLu XFGgA6oRate1vvfoMlfJGC8cj4IvVE63fK4IZPFyuofYpAwWyTvHEXreQOnI7HDe lnWW+omOhlTLiaEOBAJU1/ONreNFS5onvENoJOeQKPF1PRcghNP5qKC1GsttcQu7 Qg62ux16lGS953X5KeQ3V9FFQ+tacdM82f7ZRua5G+i5syjQG+89WxsuFcO2BFMZ yRant2FJEsBE0ElGEjPa9sDUahbRsBRCSfSukkeomb2f71e9jAIVex3vLLHEVrlD izUTPoceBcQ6HTYe9ITeOTIakIj2Z0/pIlUQ+aZNo7O2MCN/TKkmflhwcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV4YKn53yhlGC/5rZ6Kzl0KumkhMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbQTY2UH uS9C7zEsYqsJpiCKka84XkK2RVhiNh8CdNoyEQ0Xz7GVGW13gjyL0P5PkcTDzd0s s9xUqN5xWbucBTLgabh1eN6uIwZb9FOrOnldN/BVruSYoguFmy0Nhnb5hhs1HZUI UOZ3C7FchBIbYVZgz3lBn6HJg92J+FQt4Gz0T3o9egZRkDuiKwKz+ZfuW/j1c6pj nK2R0MdBufs2s0ucrwLj9BrGS90BxY9yPIVdYmJoPGzPSFhh0/YTIJq53N1ZE8gF CpjaUGiPXwugkH/aWFSrz0xeVO+6ZDwu6x0kTGvMC74+RsS3aLlXkLoV6KgBRb05 s1tXvrUi1p3KWQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:54 2025 by rpki-client