This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json) Hash identifier: xSB8ETipb7aTQy3zqtJKZb1Ol5rmAB33KBRo68SykEM= Subject key identifier: B6:DB:4F:FA:9F:8C:68:A4:A8:6D:08:2C:6B:93:42:19:6E:38:D0:E0 Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8 Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8 Certificate serial: 019B0F00C1D99930D30E817372C679D2BDBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft Manifest number: 066B Signing time: Thu 11 Dec 2025 20:01:06 +0000 Manifest this update: Thu 11 Dec 2025 20:01:06 +0000 Manifest next update: Fri 12 Dec 2025 20:01:06 +0000 Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=) 2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: 2XB7fqsdkqqmW62yQiqfsRTg2e+x1HQsRSoT71lEIOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c1:d9:99:30:d3:0e:81:73:72:c6:79:d2:bd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8 Validity Not Before: Dec 11 20:01:06 2025 GMT Not After : Dec 12 20:01:06 2025 GMT Subject: CN=b6db4ffa9f8c68a4a86d082c6b9342196e38d0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:6c:54:3f:38:78:82:ef:fd:49:70:3a:ee: 0f:a4:14:18:b0:c2:14:fb:a6:ab:9c:32:b2:fc:fe: d9:6f:b2:30:2b:d4:ed:ef:14:02:4a:59:68:e1:35: 21:9c:af:2a:e2:8a:cf:15:4c:3b:25:94:b1:f8:b1: 26:d4:d5:d9:61:85:d3:fc:3b:08:08:4d:aa:73:1f: b1:31:1e:23:8e:a1:66:eb:b0:58:e8:6c:fa:b6:3c: 3f:46:09:b4:27:58:a0:72:e9:06:d1:62:f3:68:c1: 7f:e0:6e:ef:ef:99:bf:8d:71:b2:e6:ac:18:3f:d1: 05:ba:c3:65:47:bb:18:b9:e0:37:45:61:fa:c9:39: 48:32:97:93:d4:ed:5a:dd:02:07:3f:9f:f7:6d:28: 45:7e:c9:be:31:d6:58:03:70:d9:6a:80:64:02:2b: 2a:7e:0b:86:ce:e0:88:fd:d5:a6:fe:c6:e3:f7:93: 27:1a:2f:84:a7:73:f6:6a:16:73:6e:4f:35:7e:62: c0:a9:19:39:98:1b:e0:d3:6a:ec:ce:e4:df:1c:4d: d8:bc:e6:42:85:b3:85:69:9f:2f:0c:7d:03:c7:c6: 2b:b2:3f:03:89:93:7b:a7:88:25:a6:c2:51:d4:30: b4:23:3e:b3:9b:b0:f0:6f:c1:c5:3d:bd:2b:ef:30: a6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DB:4F:FA:9F:8C:68:A4:A8:6D:08:2C:6B:93:42:19:6E:38:D0:E0 X509v3 Authority Key Identifier: keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b2:c9:ad:24:3d:7b:c2:bd:bb:ca:ed:40:ff:64:ec:d6:e9: 13:cb:77:4c:43:1d:ea:80:35:3d:55:e0:15:dd:ed:03:59:96: ab:e1:65:52:26:af:23:b1:59:4c:b3:c3:cc:dd:ec:0b:2e:8e: e7:62:6d:d5:ca:95:ae:0d:b5:28:43:a7:c0:98:c6:43:f3:c4: 5b:64:32:59:de:47:74:2e:9e:3e:8c:4d:48:a9:aa:5a:d4:15: 9d:19:33:25:98:a2:3f:b8:73:97:b3:99:0d:08:f7:b6:ab:6a: 12:09:ff:93:74:d3:8f:23:7e:fa:a0:f8:6f:d7:b2:39:d4:1e: de:d3:52:bd:0d:c7:47:b6:de:d6:0c:9c:51:73:d3:c3:42:62: 40:fe:38:6c:81:ab:5f:bd:aa:0b:f7:1d:47:a2:25:74:c7:2e: 10:c8:3e:03:c0:b0:c6:84:fe:c1:43:24:a8:f3:c9:16:ff:ec: eb:b6:f8:11:62:bf:4a:2e:6f:f1:27:fa:5b:64:da:ef:c0:47: f2:6f:69:6a:c1:fa:9b:8c:d2:42:d5:2c:b4:78:1e:d6:e4:17: 8a:eb:bc:51:7f:02:b0:88:d4:a9:9d:77:40:2a:5f:b4:9a:1a: 18:12:d2:e9:6c:07:bd:e3:b6:8f:0e:66:2b:01:89:39:62:b2: 0f:b9:26:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMHZmTDTDoFzcsZ50r2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3 ZmQwZDgwHhcNMjUxMjExMjAwMTA2WhcNMjUxMjEyMjAwMTA2WjAzMTEwLwYDVQQD EyhiNmRiNGZmYTlmOGM2OGE0YTg2ZDA4MmM2YjkzNDIxOTZlMzhkMGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ5sVD84eILv/UlwOu4PpBQYsMIU +6arnDKy/P7Zb7IwK9Tt7xQCSllo4TUhnK8q4orPFUw7JZSx+LEm1NXZYYXT/DsI CE2qcx+xMR4jjqFm67BY6Gz6tjw/Rgm0J1igcukG0WLzaMF/4G7v75m/jXGy5qwY P9EFusNlR7sYueA3RWH6yTlIMpeT1O1a3QIHP5/3bShFfsm+MdZYA3DZaoBkAisq fguGzuCI/dWm/sbj95MnGi+Ep3P2ahZzbk81fmLAqRk5mBvg02rszuTfHE3YvOZC hbOFaZ8vDH0Dx8Yrsj8DiZN7p4glpsJR1DC0Iz6zm7Dwb8HFPb0r7zCmTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbbT/qfjGikqG0ILGuTQhluONDgMB8GA1UdIwQY MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1 LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7LJrSQ9 e8K9u8rtQP9k7NbpE8t3TEMd6oA1PVXgFd3tA1mWq+FlUiavI7FZTLPDzN3sCy6O 52Jt1cqVrg21KEOnwJjGQ/PEW2QyWd5HdC6ePoxNSKmqWtQVnRkzJZiiP7hzl7OZ DQj3tqtqEgn/k3TTjyN++qD4b9eyOdQe3tNSvQ3HR7be1gycUXPTw0JiQP44bIGr X72qC/cdR6IldMcuEMg+A8CwxoT+wUMkqPPJFv/s67b4EWK/Si5v8Sf6W2Ta78BH 8m9pasH6m4zSQtUstHge1uQXiuu8UX8CsIjUqZ13QCpftJoaGBLS6WwHveO2jw5m KwGJOWKyD7kmbg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:54:31 2025 by rpki-client