This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json) Hash identifier: fIc9rvRyI825qlUt0bhav6hsmFQmOU3JJaWVbPrrtoQ= Subject key identifier: B3:B4:00:27:D3:EE:0A:F6:81:12:2A:F1:C0:F5:49:8E:D1:A3:F1:A6 Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019B16155EEA6F0C17E31DD0EF0A5E5438EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft Manifest number: 17BF Signing time: Sat 13 Dec 2025 05:00:57 +0000 Manifest this update: Sat 13 Dec 2025 05:00:57 +0000 Manifest next update: Sun 14 Dec 2025 05:00:57 +0000 Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=) 2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=) 3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=) 4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: GE6+kK5+4c0zSgckCICqoHxCzpdnW0D+9l3xDcVuAzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:15:5e:ea:6f:0c:17:e3:1d:d0:ef:0a:5e:54:38:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Dec 13 05:00:57 2025 GMT Not After : Dec 14 05:00:57 2025 GMT Subject: CN=b3b40027d3ee0af681122af1c0f5498ed1a3f1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:98:12:52:3f:42:1f:5b:7b:0c:f5:dc:0f: 06:9e:2f:7a:8f:35:be:5b:e5:1e:57:1b:26:9e:d1: df:48:bf:0c:67:ab:ce:78:08:0c:f0:2e:3f:b6:b9: e1:7d:df:21:b7:44:32:d6:05:a9:7b:a3:f4:57:41: 33:b8:b3:5a:d5:30:f2:a5:8e:af:85:c8:54:49:63: 4f:cb:72:46:9a:ee:a3:a7:a6:ce:26:1c:ea:64:e8: 02:04:2e:ad:72:3f:ef:39:a2:c5:cd:b7:62:a7:f6: 5b:83:43:3c:e4:8e:24:fd:cc:b0:d6:93:13:af:55: a1:2b:e4:a9:9f:58:5d:45:d1:71:ea:70:06:d3:ed: df:46:90:b0:81:1c:d5:f2:1f:fb:bc:7f:1d:71:31: 5b:21:71:67:a0:e4:d2:6a:14:2b:4a:6b:da:14:88: 0d:35:07:3e:63:4f:bc:80:90:b8:6d:c7:1e:b8:af: a6:92:16:12:da:6d:8d:ff:a1:59:f3:80:9e:f9:c5: d2:4e:70:1c:56:0a:06:56:e7:e3:d9:e7:21:1e:95: 59:b8:27:21:91:ca:6a:77:26:fb:43:a8:aa:09:0a: 86:d4:5d:b1:53:ef:04:f6:8e:ec:f5:16:50:09:3e: 42:1b:bb:93:3d:0d:07:74:7e:a1:cb:47:b4:cc:36: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B4:00:27:D3:EE:0A:F6:81:12:2A:F1:C0:F5:49:8E:D1:A3:F1:A6 X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:27:81:fd:c4:47:a0:57:06:24:c3:f3:9d:8f:26:da:e4:45: 14:01:23:95:f1:a9:d8:3a:02:90:95:cd:2a:59:f9:bb:4a:79: af:c0:17:b2:b4:08:fe:b9:25:8c:01:61:56:33:bf:ba:31:46: 17:28:25:ec:6a:a8:8d:e8:e7:8b:1b:39:3d:71:8f:94:a5:61: 74:41:29:1e:67:88:dc:fd:b7:4f:15:89:f7:d0:9f:de:f0:fb: 2f:a7:12:09:ac:00:1d:ef:54:4d:02:b8:27:89:2b:df:ba:7f: bd:b9:cb:39:11:3b:ed:ce:07:7a:e3:b0:23:77:3c:5e:26:1b: a4:a9:31:1e:c3:10:53:f8:5e:61:4f:aa:cd:ea:df:30:e3:ba: 0b:18:b6:dc:61:37:75:a5:80:15:07:22:61:ec:04:ff:5a:47: c8:51:e5:72:bb:cc:94:be:71:d7:63:99:61:36:f8:62:f6:f9: 0b:e9:00:3c:45:80:1a:92:79:67:53:49:08:04:46:71:82:9c: 72:34:6c:de:05:13:a6:35:31:88:33:ee:42:eb:ed:26:8f:fb: 3d:e1:b8:0f:6c:cc:52:91:7d:ec:dd:4e:69:65:b6:0e:61:70: df:b9:5e:0d:f3:19:12:12:c2:c5:37:90:e0:9f:c7:42:f7:85: e2:75:d2:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWFV7qbwwX4x3Q7wpeVDjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjUxMjEzMDUwMDU3WhcNMjUxMjE0MDUwMDU3WjAzMTEwLwYDVQQD EyhiM2I0MDAyN2QzZWUwYWY2ODExMjJhZjFjMGY1NDk4ZWQxYTNmMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAyYElI/Qh9bewz13A8Gni96jzW+ W+UeVxsmntHfSL8MZ6vOeAgM8C4/trnhfd8ht0Qy1gWpe6P0V0EzuLNa1TDypY6v hchUSWNPy3JGmu6jp6bOJhzqZOgCBC6tcj/vOaLFzbdip/Zbg0M85I4k/cyw1pMT r1WhK+Spn1hdRdFx6nAG0+3fRpCwgRzV8h/7vH8dcTFbIXFnoOTSahQrSmvaFIgN NQc+Y0+8gJC4bcceuK+mkhYS2m2N/6FZ84Ce+cXSTnAcVgoGVufj2echHpVZuCch kcpqdyb7Q6iqCQqG1F2xU+8E9o7s9RZQCT5CG7uTPQ0HdH6hy0e0zDZaRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO0ACfT7gr2gRIq8cD1SY7Ro/GmMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEieB/cRH oFcGJMPznY8m2uRFFAEjlfGp2DoCkJXNKln5u0p5r8AXsrQI/rkljAFhVjO/ujFG Fygl7Gqojejnixs5PXGPlKVhdEEpHmeI3P23TxWJ99Cf3vD7L6cSCawAHe9UTQK4 J4kr37p/vbnLORE77c4HeuOwI3c8XiYbpKkxHsMQU/heYU+qzerfMOO6Cxi23GE3 daWAFQciYewE/1pHyFHlcrvMlL5x12OZYTb4Yvb5C+kAPEWAGpJ5Z1NJCARGcYKc cjRs3gUTpjUxiDPuQuvtJo/7PeG4D2zMUpF97N1OaWW2DmFw37leDfMZEhLCxTeQ 4J/HQveF4nXS1g== -----END CERTIFICATE-----Generated at Sat Dec 13 12:49:46 2025 by rpki-client