This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: EU/li4L9U8dXxz2rdvIXNSLT51LA2fJaoD7Q+YgPyP8= Subject key identifier: 9F:8A:A9:19:D3:E7:B9:0E:EC:C7:41:01:FB:B9:53:F9:65:DA:15:0F Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B0DEDD85C679D546A13C401F1EBC9F447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 17BE Signing time: Thu 11 Dec 2025 15:00:49 +0000 Manifest this update: Thu 11 Dec 2025 15:00:49 +0000 Manifest next update: Fri 12 Dec 2025 15:00:49 +0000 Files and hashes: 1: 1vFOcaV-RCbQJU5U1jfBjA6Lh3c.roa (hash: pWuu+zg+bbGYo2d0ALNCvIhHLHhkpqmwV0rFp7DDPAE=) 2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=) 3: N9M4-uBsVSV0SDeBeFhJV33pKhI.roa (hash: rpXq7ZRUtk8pnp7AGas+RN5ZHe+/QOPdXfZKY9hXSbU=) 4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: tEkEE++aMVyWxjlPYWcU6d4u/nxDgpAuiUapUBIi/gU=) 7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 8: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 9: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 10: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 11: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 12: jmqRsuy9qQkUPeQ372m1KVmUm0Y.roa (hash: z9nO7OrTD7V+7NYFDciSzCdGUenMxnQfYKHhLdiznOo=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:d8:5c:67:9d:54:6a:13:c4:01:f1:eb:c9:f4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Dec 11 15:00:49 2025 GMT Not After : Dec 12 15:00:49 2025 GMT Subject: CN=9f8aa919d3e7b90eecc74101fbb953f965da150f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:b3:1f:e0:08:5a:d0:11:5c:23:da:e2:55: e1:06:06:b4:a9:5c:ba:44:d8:06:71:29:ae:ee:df: ea:f9:8e:10:25:71:77:d0:84:c0:09:8d:00:65:a0: 77:d9:e7:37:7f:00:d9:39:9e:db:74:65:ef:2c:1f: 81:d4:6f:01:6b:e6:29:a4:85:24:de:aa:de:1c:39: 42:cf:bf:7b:d1:01:fd:8d:85:e9:a0:b3:33:1b:65: 6c:81:38:8e:0d:92:b5:df:a7:b6:41:ec:33:c3:ca: 86:e5:7f:45:c9:af:67:27:e4:9f:48:e8:c5:38:fc: ca:19:24:a7:e1:a3:0b:50:14:7b:a6:ab:ac:84:8a: 2b:86:18:ad:56:24:9c:0c:a2:23:e2:f7:a4:a1:57: 57:70:3a:1d:de:f1:e3:2c:29:00:5d:11:bd:c7:ee: 4b:f9:c7:f4:14:4e:d4:20:bc:6e:b0:62:0f:ef:7f: fe:57:01:47:de:d7:cd:60:4e:c9:1c:62:53:72:62: 9d:0a:0f:9d:0c:47:33:17:2a:12:0f:a4:bf:e8:f1: 7b:e9:58:9b:20:85:be:6e:db:11:bd:94:05:2f:c3: 4d:64:ee:c0:08:85:4d:fa:47:7b:9e:40:a7:c9:78: 5d:35:2e:70:1f:1a:b4:85:7e:22:3b:91:a6:83:b4: b9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8A:A9:19:D3:E7:B9:0E:EC:C7:41:01:FB:B9:53:F9:65:DA:15:0F X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:21:4d:98:cb:aa:2c:97:e7:ba:74:dc:b7:2c:28:ff:78:2d: a2:6f:6f:a5:fa:29:ed:a4:6b:af:66:89:98:00:11:42:9b:94: 2b:f3:95:63:e5:2d:9c:3f:96:d1:16:a7:df:23:dd:ac:c8:21: c5:ad:22:8c:2b:f0:ad:8a:ac:7e:4d:57:4d:63:ba:06:67:d4: 54:95:38:9b:e7:cd:c9:a1:cd:03:4b:7e:15:77:1a:34:4f:aa: a6:ce:23:11:e7:13:7a:1f:ab:f4:7d:b9:82:3e:c7:b5:30:db: 4e:51:13:eb:c3:8d:34:ba:61:aa:3d:8c:12:09:05:b2:1e:1f: a6:00:2e:ad:63:2d:a0:ed:da:e1:de:f0:52:34:7c:0b:36:30: 7d:57:08:79:77:05:e5:91:34:71:7b:1b:93:32:07:00:45:81: 96:7a:3f:c5:76:cf:75:39:87:a4:c8:a1:fc:86:31:89:d0:b5: 60:0a:aa:5c:01:02:8c:34:4b:02:c5:2b:44:72:11:59:d1:49: ce:54:ec:0d:f8:85:e5:25:3b:cc:a7:2b:15:a8:a2:fc:08:69: 1b:51:4b:1d:f2:37:7e:4c:af:1b:e6:da:f8:cb:93:10:3b:28: b1:5e:0a:d6:b0:12:62:cc:5a:60:98:85:7b:f7:69:c7:ed:e5: c2:12:20:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7dhcZ51UahPEAfHryfRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUxMjExMTUwMDQ5WhcNMjUxMjEyMTUwMDQ5WjAzMTEwLwYDVQQD Eyg5ZjhhYTkxOWQzZTdiOTBlZWNjNzQxMDFmYmI5NTNmOTY1ZGExNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsCzH+AIWtARXCPa4lXhBga0qVy6 RNgGcSmu7t/q+Y4QJXF30ITACY0AZaB32ec3fwDZOZ7bdGXvLB+B1G8Ba+YppIUk 3qreHDlCz7970QH9jYXpoLMzG2VsgTiODZK136e2Qewzw8qG5X9Fya9nJ+SfSOjF OPzKGSSn4aMLUBR7pqushIorhhitViScDKIj4vekoVdXcDod3vHjLCkAXRG9x+5L +cf0FE7UILxusGIP73/+VwFH3tfNYE7JHGJTcmKdCg+dDEczFyoSD6S/6PF76Vib IIW+btsRvZQFL8NNZO7ACIVN+kd7nkCnyXhdNS5wHxq0hX4iO5Gmg7S5DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+KqRnT57kO7MdBAfu5U/ll2hUPMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyFNmMuq LJfnunTctywo/3gtom9vpfop7aRrr2aJmAARQpuUK/OVY+UtnD+W0Ran3yPdrMgh xa0ijCvwrYqsfk1XTWO6BmfUVJU4m+fNyaHNA0t+FXcaNE+qps4jEecTeh+r9H25 gj7HtTDbTlET68ONNLphqj2MEgkFsh4fpgAurWMtoO3a4d7wUjR8CzYwfVcIeXcF 5ZE0cXsbkzIHAEWBlno/xXbPdTmHpMih/IYxidC1YAqqXAECjDRLAsUrRHIRWdFJ zlTsDfiF5SU7zKcrFaii/AhpG1FLHfI3fkyvG+ba+MuTEDsosV4K1rASYsxaYJiF e/dpx+3lwhIgPA== -----END CERTIFICATE-----Generated at Thu Dec 11 19:01:29 2025 by rpki-client