This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json) Hash identifier: KKjlj87FXATogJizOWb/gO1g3NiQfWfG60+dv+/Sy7g= Subject key identifier: 91:83:CE:A5:6A:84:80:3B:6A:88:C1:9C:66:5F:26:1C:40:52:32:A3 Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843 Certificate serial: 019B5B6535979610EB818972A861561CA31B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft Manifest number: 038D Signing time: Fri 26 Dec 2025 16:01:58 +0000 Manifest this update: Fri 26 Dec 2025 16:01:58 +0000 Manifest next update: Sat 27 Dec 2025 16:01:58 +0000 Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=) 2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: DZ3uovdMloZ6YlzCmeem4JSr8J2cez2k53+2IYRHn9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:35:97:96:10:eb:81:89:72:a8:61:56:1c:a3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843 Validity Not Before: Dec 26 16:01:58 2025 GMT Not After : Dec 27 16:01:58 2025 GMT Subject: CN=9183cea56a84803b6a88c19c665f261c405232a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:f7:17:76:58:5f:25:d3:42:98:c3:00:a1: 2d:d8:c9:d0:48:d8:b5:e6:a7:ff:cf:2a:24:83:e4: 5f:74:18:9a:60:df:bc:2c:dc:ef:bb:3a:8e:a6:46: 6f:59:17:ff:31:02:ce:fa:34:11:1e:80:4b:1b:bc: 78:a6:b1:0b:35:e6:f9:95:ef:3f:d6:2e:8c:1f:45: 7f:51:5d:7b:6a:15:41:f1:6a:d2:f5:1f:a0:37:73: 93:81:d9:2d:5d:38:1d:ef:e4:bd:c9:9d:3b:da:bf: 7f:03:9e:da:f1:17:1e:ac:8c:8b:30:a2:95:b5:2f: 05:97:01:1c:3d:8d:ae:82:96:d2:bc:68:47:99:c0: 4f:3f:f0:42:f2:4d:52:37:bb:69:70:09:e5:cc:bf: 7d:2c:d2:43:b8:72:94:1f:7f:22:35:e2:73:ea:57: 99:63:e3:34:d6:ed:c2:ff:49:d1:33:d8:2e:ed:24: a5:a8:0b:41:63:e6:d2:ea:b0:75:04:bf:8c:0a:13: a7:ac:74:61:85:e9:25:0c:a9:c9:9e:f2:a8:d7:d0: 36:9c:25:74:91:c7:1f:97:51:84:61:88:66:38:68: 08:40:e6:16:66:41:56:11:38:1a:9c:9d:bb:a9:ff: 16:03:83:d0:d5:c6:a8:55:d6:b2:31:39:bb:80:34: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:83:CE:A5:6A:84:80:3B:6A:88:C1:9C:66:5F:26:1C:40:52:32:A3 X509v3 Authority Key Identifier: keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cd:76:7f:16:4b:1d:1f:01:0c:e8:f1:6d:a9:59:1f:13:ab: 28:63:f4:bd:04:74:ce:c3:1c:41:26:2c:85:58:20:ab:f5:c2: 81:78:72:62:62:ce:b3:4f:95:de:db:9b:97:d5:0f:49:40:76: 73:9d:a9:38:b8:1a:85:80:14:48:8d:13:b3:84:c7:fd:95:f6: d7:13:8f:56:b0:59:08:ed:4a:39:fd:c4:ad:ae:04:b1:a9:ae: d2:74:83:81:bc:94:32:ce:44:6e:44:cb:04:9b:f1:f6:18:8c: 35:78:1c:b4:a2:b0:09:51:8c:db:87:8d:a9:76:f0:d4:0a:33: 6f:ec:4d:8a:e7:e9:36:1b:ba:82:c6:b0:41:94:73:f7:10:b2: 43:16:25:1e:9a:ad:f2:fa:80:6d:5e:c2:f3:78:02:16:63:c2: fd:ea:c2:75:3f:0b:3b:f4:1e:87:1d:91:01:ba:00:75:7d:fe: e1:b1:c5:66:88:44:37:d0:a8:ef:e7:83:70:63:e8:ee:39:a5: 59:d5:7a:7d:76:ac:e2:9c:e4:3f:f8:e9:13:c0:f6:4d:85:40: f8:60:15:98:1f:f2:1a:97:e0:bc:38:bd:5c:a5:6f:47:f9:89: 90:86:d8:75:b1:ee:60:db:57:96:54:c5:31:5e:22:03:29:21: ff:cb:d7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZTWXlhDrgYlyqGFWHKMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj NDE4NDMwHhcNMjUxMjI2MTYwMTU4WhcNMjUxMjI3MTYwMTU4WjAzMTEwLwYDVQQD Eyg5MTgzY2VhNTZhODQ4MDNiNmE4OGMxOWM2NjVmMjYxYzQwNTIzMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDr3F3ZYXyXTQpjDAKEt2MnQSNi1 5qf/zyokg+RfdBiaYN+8LNzvuzqOpkZvWRf/MQLO+jQRHoBLG7x4prELNeb5le8/ 1i6MH0V/UV17ahVB8WrS9R+gN3OTgdktXTgd7+S9yZ072r9/A57a8RcerIyLMKKV tS8FlwEcPY2ugpbSvGhHmcBPP/BC8k1SN7tpcAnlzL99LNJDuHKUH38iNeJz6leZ Y+M01u3C/0nRM9gu7SSlqAtBY+bS6rB1BL+MChOnrHRhheklDKnJnvKo19A2nCV0 kccfl1GEYYhmOGgIQOYWZkFWETganJ27qf8WA4PQ1caoVdayMTm7gDTErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGDzqVqhIA7aojBnGZfJhxAUjKjMB8GA1UdIwQY MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaM12fxZL HR8BDOjxbalZHxOrKGP0vQR0zsMcQSYshVggq/XCgXhyYmLOs0+V3tubl9UPSUB2 c52pOLgahYAUSI0Ts4TH/ZX21xOPVrBZCO1KOf3Era4Esamu0nSDgbyUMs5EbkTL BJvx9hiMNXgctKKwCVGM24eNqXbw1Aozb+xNiufpNhu6gsawQZRz9xCyQxYlHpqt 8vqAbV7C83gCFmPC/erCdT8LO/Qehx2RAboAdX3+4bHFZohEN9Co7+eDcGPo7jml WdV6fXas4pzkP/jpE8D2TYVA+GAVmB/yGpfgvDi9XKVvR/mJkIbYdbHuYNtXllTF MV4iAykh/8vX1w== -----END CERTIFICATE-----Generated at Fri Dec 26 22:45:37 2025 by rpki-client