This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json) Hash identifier: GIxKGBET0Q9TrlCclTvxnZ7upO2Yjt8MEAW0uerEtic= Subject key identifier: 8E:28:16:9C:B2:0F:FE:5B:6F:A1:C6:29:35:7D:9A:3D:6C:54:D8:9F Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019B4ADF09DB8BECA6AC51E196FDF962117A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft Manifest number: 15B1 Signing time: Tue 23 Dec 2025 11:01:29 +0000 Manifest this update: Tue 23 Dec 2025 11:01:29 +0000 Manifest next update: Wed 24 Dec 2025 11:01:29 +0000 Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=) 2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=) 3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=) 4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: TZAvhMzPRPaf38E7JvDPqO5fushAfX6eWqLdAPCPP2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:09:db:8b:ec:a6:ac:51:e1:96:fd:f9:62:11:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Dec 23 11:01:29 2025 GMT Not After : Dec 24 11:01:29 2025 GMT Subject: CN=8e28169cb20ffe5b6fa1c629357d9a3d6c54d89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:78:44:5b:3b:db:c5:52:b0:79:1c:f1:d9: fe:00:80:9f:e1:d8:48:1c:86:a7:70:2b:c0:16:86: d5:4e:8a:0f:73:73:f9:8d:79:c9:0c:94:98:ed:47: 4e:83:9e:67:83:7d:6b:4f:9e:12:50:70:b6:8f:44: 2f:56:12:53:0c:95:cd:30:e1:59:b0:ae:d2:ad:b8: 45:07:d8:1d:1a:9e:8f:81:3c:87:a8:27:37:ed:5b: 3a:ec:88:e2:12:f9:4b:48:7a:40:89:d3:b4:d8:8e: de:0d:90:d1:3d:ef:15:75:dd:ff:bd:69:68:37:2f: 33:e7:17:9d:bb:28:e4:67:14:44:9b:0b:e6:9a:eb: 68:82:a9:40:23:3d:bf:7e:de:e8:9d:72:95:01:7e: db:ab:cb:b5:e1:b9:a3:5e:b2:8e:a5:c4:14:02:9f: b5:f0:4b:f9:61:db:5f:59:76:a6:06:56:85:f6:a2: 2c:a1:43:c4:69:d8:9e:43:4f:aa:0c:b7:86:36:26: 89:e8:43:c1:3c:fb:79:d3:40:f6:b0:ac:ef:e9:e5: e4:c6:4b:62:a5:93:f1:48:d3:09:25:2d:05:39:aa: 8c:f0:0b:c0:ee:c8:45:93:0f:16:a8:dd:61:40:e1: 15:db:e8:65:95:b8:32:e0:1c:88:a5:2e:ed:2f:42: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:16:9C:B2:0F:FE:5B:6F:A1:C6:29:35:7D:9A:3D:6C:54:D8:9F X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e0:39:cd:4f:a6:bb:86:af:67:ee:3b:81:7b:02:2e:c9:a7: a1:69:9a:02:d9:b5:7e:df:76:e9:cc:99:09:b5:29:9a:2f:79: bb:9c:63:2e:e9:c8:23:e0:2d:fe:8c:a9:e5:99:e7:f1:3c:bd: bb:bb:43:11:bb:86:c5:f8:ef:f1:88:30:9a:f0:3b:35:a2:cf: 32:bb:a5:e7:bd:c8:8a:a2:77:de:cf:ba:45:de:cc:86:74:e3: 74:95:6b:f5:4c:32:55:5f:42:67:7b:09:3b:e4:f2:cf:11:a1: af:e2:6b:44:53:6f:46:90:7d:35:eb:6a:f1:3d:bc:81:a2:a7: f6:69:34:a0:a7:ed:b7:1f:de:6f:35:e2:2f:c9:5d:a2:ea:ad: 33:2b:5f:5c:78:4d:fd:c0:57:fc:a4:b8:1b:49:de:e6:0d:f5: ba:dc:35:68:6e:7c:52:ac:4f:39:9a:69:8d:80:ea:cc:6f:57: 8a:78:7e:25:d8:81:f8:d1:f6:4d:cc:8a:30:08:ce:6a:75:8f: d3:d2:bd:8d:11:f6:83:7e:68:44:68:75:c8:3d:1e:b7:e5:0e: 2c:9f:36:80:1a:82:e9:27:d8:90:22:4c:72:94:0a:bd:a3:9c: 03:3e:4f:d9:48:a5:65:08:51:fe:ab:e6:e5:12:6b:c4:59:e8: c3:3b:d7:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3wnbi+ymrFHhlv35YhF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjUxMjIzMTEwMTI5WhcNMjUxMjI0MTEwMTI5WjAzMTEwLwYDVQQD Eyg4ZTI4MTY5Y2IyMGZmZTViNmZhMWM2MjkzNTdkOWEzZDZjNTRkODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/J4RFs728VSsHkc8dn+AICf4dhI HIancCvAFobVTooPc3P5jXnJDJSY7UdOg55ng31rT54SUHC2j0QvVhJTDJXNMOFZ sK7SrbhFB9gdGp6PgTyHqCc37Vs67IjiEvlLSHpAidO02I7eDZDRPe8Vdd3/vWlo Ny8z5xeduyjkZxREmwvmmutogqlAIz2/ft7onXKVAX7bq8u14bmjXrKOpcQUAp+1 8Ev5YdtfWXamBlaF9qIsoUPEadieQ0+qDLeGNiaJ6EPBPPt500D2sKzv6eXkxkti pZPxSNMJJS0FOaqM8AvA7shFkw8WqN1hQOEV2+hllbgy4ByIpS7tL0IttQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4oFpyyD/5bb6HGKTV9mj1sVNifMB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuA5zU+m u4avZ+47gXsCLsmnoWmaAtm1ft926cyZCbUpmi95u5xjLunII+At/oyp5Znn8Ty9 u7tDEbuGxfjv8YgwmvA7NaLPMrul573IiqJ33s+6Rd7MhnTjdJVr9UwyVV9CZ3sJ O+TyzxGhr+JrRFNvRpB9Netq8T28gaKn9mk0oKfttx/ebzXiL8ldouqtMytfXHhN /cBX/KS4G0ne5g31utw1aG58UqxPOZppjYDqzG9Xinh+JdiB+NH2TcyKMAjOanWP 09K9jRH2g35oRGh1yD0et+UOLJ82gBqC6SfYkCJMcpQKvaOcAz5P2UilZQhR/qvm 5RJrxFnowzvXcQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:02 2025 by rpki-client