This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json) Hash identifier: TnrcOlkl/VIxYyFgKJXBfgEoEaO+lPWGEARsQCMA944= Subject key identifier: 81:0A:FF:EB:A3:65:3F:41:ED:95:13:C3:A8:99:C8:79:06:7C:C4:26 Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Certificate serial: 019B3EDAA0693473057D5964A82EAC1C06F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft Manifest number: 065F Signing time: Sun 21 Dec 2025 03:01:13 +0000 Manifest this update: Sun 21 Dec 2025 03:01:13 +0000 Manifest next update: Mon 22 Dec 2025 03:01:13 +0000 Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=) 2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: nbkiY9Eb5OobyyKRimk0LiXcMkwal3+8oATHIoljF60=) 3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a0:69:34:73:05:7d:59:64:a8:2e:ac:1c:06:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0 Validity Not Before: Dec 21 03:01:13 2025 GMT Not After : Dec 22 03:01:13 2025 GMT Subject: CN=810affeba3653f41ed9513c3a899c879067cc426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:bc:cf:5b:76:8e:9a:e5:4d:3e:a7:a2:8e: 3e:1e:a6:0f:4c:44:4f:fb:7d:72:62:2a:53:1f:2d: 37:47:e6:52:d0:49:f8:b8:21:86:37:1b:a8:40:7f: 3d:c4:c2:01:60:69:2c:b8:d5:16:c7:18:35:b4:2c: 5c:d5:26:b0:0e:64:a3:bd:1e:4a:33:57:71:ae:e1: ce:50:5d:de:0f:fc:98:04:b3:3c:4d:e0:8c:7b:22: 62:6e:00:f4:48:7d:0e:56:df:cf:df:f2:46:4d:ef: f1:3d:20:c7:eb:2d:85:01:80:ff:fb:ac:8c:71:9f: 80:96:72:84:d1:48:dc:b0:35:f0:75:e2:c7:57:61: 0b:95:bc:a4:70:bf:3d:58:98:a9:8d:21:0d:f1:1f: e3:c7:08:a9:77:8c:c0:51:ec:e6:8c:17:97:ad:1f: cd:bf:7b:3a:98:8e:49:03:89:bf:61:c4:ba:29:bf: 5f:70:09:9a:74:e4:b6:d6:51:a2:fd:db:33:5f:a8: 42:aa:c3:3c:5e:e2:98:b7:c9:a0:91:48:81:2e:05: 17:e2:b2:d2:b8:df:19:52:ee:c1:4f:a4:c5:6c:95: 81:62:98:a1:6a:ba:4a:6a:8f:1b:fa:97:f6:5f:71: c2:63:7e:67:c4:d6:d7:c5:32:ac:74:50:93:bb:ba: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:FF:EB:A3:65:3F:41:ED:95:13:C3:A8:99:C8:79:06:7C:C4:26 X509v3 Authority Key Identifier: keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ef:77:d2:ab:c2:fe:0f:3f:c3:ae:30:79:d2:fe:68:b6:e2: 5b:e8:28:58:4b:61:3d:7c:52:55:af:92:d2:67:8c:c9:3c:3e: 2a:e8:d4:f6:90:03:a2:b5:05:0e:82:c1:a2:9b:e2:cf:7c:a7: 17:0c:da:c7:fb:30:40:67:05:c2:91:f3:3a:0f:26:e4:e5:f0: 55:89:4b:c7:48:01:ff:8a:6e:95:57:6b:77:ae:b1:e3:a3:2c: 85:f6:5e:c4:20:5d:fc:9a:42:57:12:97:4f:21:21:91:68:ab: 96:5a:1f:19:f1:14:88:68:42:be:a8:84:da:47:ad:c1:ba:1f: 25:e9:cf:11:3d:8e:2e:88:ed:52:a6:ef:5a:91:68:d0:41:34: ac:d2:ff:55:2c:b8:73:fd:19:16:98:af:1f:1c:fb:62:cc:78: 31:50:cd:2c:3d:a0:d0:bb:b3:7b:02:dc:97:f8:59:4f:31:54: a6:54:c0:28:59:4d:6e:de:34:57:15:57:a8:60:85:9e:8f:7f: 06:32:5a:fb:25:ce:19:8d:17:9d:02:e3:6e:5a:42:bb:f5:a7: 0a:34:f8:a9:7d:d3:85:71:59:d6:15:7e:b5:a3:37:92:a6:f0: df:eb:75:52:97:4d:e6:e1:f1:52:88:43:b0:44:2e:83:af:99: 04:2b:d1:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qBpNHMFfVlkqC6sHAb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl NWE4ZDAwHhcNMjUxMjIxMDMwMTEzWhcNMjUxMjIyMDMwMTEzWjAzMTEwLwYDVQQD Eyg4MTBhZmZlYmEzNjUzZjQxZWQ5NTEzYzNhODk5Yzg3OTA2N2NjNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsa8z1t2jprlTT6noo4+HqYPTERP +31yYipTHy03R+ZS0En4uCGGNxuoQH89xMIBYGksuNUWxxg1tCxc1SawDmSjvR5K M1dxruHOUF3eD/yYBLM8TeCMeyJibgD0SH0OVt/P3/JGTe/xPSDH6y2FAYD/+6yM cZ+AlnKE0UjcsDXwdeLHV2ELlbykcL89WJipjSEN8R/jxwipd4zAUezmjBeXrR/N v3s6mI5JA4m/YcS6Kb9fcAmadOS21lGi/dszX6hCqsM8XuKYt8mgkUiBLgUX4rLS uN8ZUu7BT6TFbJWBYpiharpKao8b+pf2X3HCY35nxNbXxTKsdFCTu7pllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEK/+ujZT9B7ZUTw6iZyHkGfMQmMB8GA1UdIwQY MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+930qvC /g8/w64wedL+aLbiW+goWEthPXxSVa+S0meMyTw+KujU9pADorUFDoLBopviz3yn Fwzax/swQGcFwpHzOg8m5OXwVYlLx0gB/4pulVdrd66x46MshfZexCBd/JpCVxKX TyEhkWirllofGfEUiGhCvqiE2ketwbofJenPET2OLojtUqbvWpFo0EE0rNL/VSy4 c/0ZFpivHxz7Ysx4MVDNLD2g0LuzewLcl/hZTzFUplTAKFlNbt40VxVXqGCFno9/ BjJa+yXOGY0XnQLjblpCu/WnCjT4qX3ThXFZ1hV+taM3kqbw3+t1UpdN5uHxUohD sEQug6+ZBCvReg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:15 2025 by rpki-client