This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json) Hash identifier: adPIqVs4cpK2KXNRmqIrK+5j1qxokteHd+FF7rPY3oE= Subject key identifier: F3:C6:A3:6F:4E:3B:CA:32:5B:9B:41:5D:B1:BD:5B:BB:33:4F:1E:4E Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Certificate serial: 019B40C8F2F5F91EB9D42367DBC90875FFFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft Manifest number: 04AB Signing time: Sun 21 Dec 2025 12:01:09 +0000 Manifest this update: Sun 21 Dec 2025 12:01:09 +0000 Manifest next update: Mon 22 Dec 2025 12:01:09 +0000 Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=) 2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=) 3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 1TPrh/DikpgqSPydWjDLA0D5EGy2jgnmU7It5/7h+a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:f2:f5:f9:1e:b9:d4:23:67:db:c9:08:75:ff:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2 Validity Not Before: Dec 21 12:01:09 2025 GMT Not After : Dec 22 12:01:09 2025 GMT Subject: CN=f3c6a36f4e3bca325b9b415db1bd5bbb334f1e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6d:2d:92:fc:08:98:a4:e2:d5:01:ca:c8:0c: e9:2f:93:05:b3:da:79:65:a8:65:9f:0a:01:8d:38: 01:30:f2:22:9a:d5:2c:f4:b4:2a:7d:aa:a2:84:71: 14:0f:b2:b0:0a:96:dc:b9:95:4a:59:bf:4d:10:9f: ee:96:46:d0:0d:2d:bb:be:69:a8:67:13:81:98:3e: f6:32:76:eb:08:32:c9:9c:99:e9:b2:a3:c8:1b:ca: f6:b6:48:6e:4d:a5:bf:c7:10:4e:38:41:4e:53:17: 64:07:29:53:b3:bb:cd:cf:a9:a5:85:19:12:19:77: c7:2f:12:cf:cb:64:b6:bf:d9:50:ff:1e:d2:03:b7: 56:ca:01:d2:89:4d:b2:d4:62:11:ee:58:d2:c6:00: 6d:ca:c8:58:8e:1e:63:b1:2a:8e:e2:b6:c4:a2:74: 62:92:6f:96:ac:cb:61:84:b3:e2:8c:70:4f:e7:78: f0:6d:9d:d7:3a:22:01:05:e3:fa:3e:7b:ca:a8:cb: 3a:2f:ff:a9:ab:e3:a7:da:9b:bd:52:86:71:f5:c6: bc:70:15:1b:e5:57:a3:5a:47:c5:96:a4:a0:f3:7d: b4:8c:3e:67:f3:23:28:4d:99:de:72:ed:4c:52:35: c4:cd:a8:46:47:ac:e9:b0:36:49:72:e8:ca:24:1d: cc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:A3:6F:4E:3B:CA:32:5B:9B:41:5D:B1:BD:5B:BB:33:4F:1E:4E X509v3 Authority Key Identifier: keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7f:cc:95:c4:a4:c1:f7:5b:d4:1d:df:fe:be:08:65:6b:c5: fb:ef:83:eb:c8:a5:84:35:1f:2b:db:7c:e3:28:ec:c5:1d:e6: c6:7c:4a:0c:43:fd:21:1e:45:96:bf:61:5c:f6:21:8f:b2:e2: b3:63:72:be:06:c3:b1:62:fd:14:47:37:9c:20:2e:7c:22:e6: fb:e6:13:4d:63:bd:98:3e:d8:b6:dd:81:2d:6f:4e:32:05:48: f1:f6:d3:1b:f0:38:fa:28:7f:0d:c2:a7:d6:d7:a6:b9:fd:b4: f6:57:c8:0d:78:1d:06:cb:85:8f:9d:c0:ea:aa:40:f1:cf:64: 9e:a4:ac:9f:0e:59:a2:8a:90:a3:41:e9:5b:2d:b3:99:a6:83: 63:42:66:e0:60:cb:14:a4:9f:ec:b7:0a:af:3a:56:8d:b1:13: ec:48:24:34:0f:c7:35:a2:41:b9:49:2e:03:a5:3a:43:f2:8f: f6:05:d1:ca:9b:d4:78:56:73:ad:05:77:dd:b1:e5:31:b6:cd: 91:e2:9f:50:a2:3b:22:3f:25:75:bb:af:f0:f2:da:a7:61:83: 3f:37:32:b6:ca:cc:31:3d:00:6c:54:b7:ca:8d:1b:7d:84:da: 4e:82:b9:22:3d:8e:53:15:31:92:59:c4:a1:c1:e0:a8:69:84: 4e:7a:9e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyPL1+R651CNn28kIdf/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll NWQ0ZTIwHhcNMjUxMjIxMTIwMTA5WhcNMjUxMjIyMTIwMTA5WjAzMTEwLwYDVQQD EyhmM2M2YTM2ZjRlM2JjYTMyNWI5YjQxNWRiMWJkNWJiYjMzNGYxZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW0tkvwImKTi1QHKyAzpL5MFs9p5 ZahlnwoBjTgBMPIimtUs9LQqfaqihHEUD7KwCpbcuZVKWb9NEJ/ulkbQDS27vmmo ZxOBmD72MnbrCDLJnJnpsqPIG8r2tkhuTaW/xxBOOEFOUxdkBylTs7vNz6mlhRkS GXfHLxLPy2S2v9lQ/x7SA7dWygHSiU2y1GIR7ljSxgBtyshYjh5jsSqO4rbEonRi km+WrMthhLPijHBP53jwbZ3XOiIBBeP6PnvKqMs6L/+pq+On2pu9UoZx9ca8cBUb 5VejWkfFlqSg8320jD5n8yMoTZnecu1MUjXEzahGR6zpsDZJcujKJB3M8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPGo29OO8oyW5tBXbG9W7szTx5OMB8GA1UdIwQY MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfX/MlcSk wfdb1B3f/r4IZWvF+++D68ilhDUfK9t84yjsxR3mxnxKDEP9IR5Flr9hXPYhj7Li s2NyvgbDsWL9FEc3nCAufCLm++YTTWO9mD7Ytt2BLW9OMgVI8fbTG/A4+ih/DcKn 1temuf209lfIDXgdBsuFj53A6qpA8c9knqSsnw5ZooqQo0HpWy2zmaaDY0Jm4GDL FKSf7LcKrzpWjbET7EgkNA/HNaJBuUkuA6U6Q/KP9gXRypvUeFZzrQV33bHlMbbN keKfUKI7Ij8ldbuv8PLap2GDPzcytsrMMT0AbFS3yo0bfYTaToK5Ij2OUxUxklnE ocHgqGmETnqe3w== -----END CERTIFICATE-----Generated at Sun Dec 21 13:22:54 2025 by rpki-client