This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json) Hash identifier: FnijMZ4cScb2GB6uMzC2XVjZoCNyxAT5sT/a5nQOwRo= Subject key identifier: D5:BA:C5:F0:9C:65:C2:8C:B4:4E:A8:B8:26:7C:A5:14:ED:BA:F0:C7 Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681 Certificate serial: 019B39EB6D143379ABF214B8FEFF10216CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft Manifest number: 10C9 Signing time: Sat 20 Dec 2025 04:01:28 +0000 Manifest this update: Sat 20 Dec 2025 04:01:28 +0000 Manifest next update: Sun 21 Dec 2025 04:01:28 +0000 Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=) 2: Jn6x2QCk2FqoSF1EyiUYV8JzSk0.roa (hash: U8WrE9TGTdUjZFCB6O02ti+OPe0fB0Uw0kiiaV4z4N0=) 3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 22qi1azuzQPCWEI7KKfREImADqzWOwe4zJxUeJv3eVk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:6d:14:33:79:ab:f2:14:b8:fe:ff:10:21:6c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681 Validity Not Before: Dec 20 04:01:28 2025 GMT Not After : Dec 21 04:01:28 2025 GMT Subject: CN=d5bac5f09c65c28cb44ea8b8267ca514edbaf0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:d4:7d:ed:8e:bc:19:6f:ec:7d:6a:c3:22: 9a:ea:bc:58:fc:17:ca:0b:56:e6:61:59:ef:a9:9a: 88:8b:52:b3:fa:bf:e6:60:57:b5:00:89:3f:2e:db: 30:69:32:6d:97:f7:2f:e0:4a:ac:eb:25:c0:2b:20: 77:10:d9:28:f9:49:0d:c7:5a:ab:31:70:ce:c2:22: 37:66:45:77:de:32:9c:22:e4:96:e5:b0:af:30:e8: 1d:0a:f9:b9:a0:b5:30:30:94:7f:2e:ae:40:a4:3b: 26:a5:f2:62:4a:c4:5a:d9:22:9e:1e:a6:39:c4:14: 53:dc:ed:08:91:ad:7c:b4:bb:c6:dd:48:75:67:9d: a2:26:7b:86:f2:8f:e7:0a:b0:26:19:c5:3c:d4:f2: aa:71:4e:87:c6:e1:33:44:ad:46:f5:5a:a9:00:b4: dd:f3:4a:e6:bf:40:a7:41:d6:b8:e4:91:18:bf:8c: d4:b4:20:69:8c:a4:03:e5:df:7d:1a:1f:22:98:a3: 90:c9:05:66:18:97:20:f8:f5:8f:87:3a:68:c1:94: a7:e0:4f:38:aa:d8:7d:13:b6:27:43:32:9e:98:54: 08:b9:d7:45:9c:4f:ee:31:4b:10:46:24:d0:92:76: 46:d2:31:eb:7f:d7:64:b0:7c:a8:71:30:07:d3:0d: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BA:C5:F0:9C:65:C2:8C:B4:4E:A8:B8:26:7C:A5:14:ED:BA:F0:C7 X509v3 Authority Key Identifier: keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:12:16:d6:81:07:bb:d9:ca:47:e6:e3:95:32:3d:9d:cd:9b: ad:24:a0:e6:74:f7:52:36:54:28:08:3c:7c:2c:18:2d:2f:82: cf:c7:2e:75:80:c0:5f:78:16:14:29:69:cf:3d:3c:66:0e:d3: a0:96:5a:80:07:ea:4d:d4:12:24:37:66:fa:cb:b1:c1:be:9d: 37:b3:75:e3:a5:cd:14:59:aa:af:7a:3c:6c:ea:94:16:1b:c0: 5d:3a:d0:ed:1d:5d:50:62:81:56:9c:f6:0d:9a:d9:7b:eb:40: 57:f8:ec:7a:6a:94:55:fb:da:a8:2c:48:b0:73:52:42:6b:1b: 29:3a:5e:ff:84:e8:17:76:d6:c3:c1:6f:b5:11:93:55:4f:d4: 81:54:9a:2e:99:c9:23:56:16:51:b4:86:01:21:71:38:39:5a: fd:ba:66:6b:30:4d:02:a7:d6:e7:96:4d:f5:ad:d8:5a:03:c7: ca:e7:23:e0:36:5f:a3:d9:f0:51:c0:e6:66:46:0b:95:9b:2f: 98:d9:99:9f:7c:57:d7:88:7d:aa:0b:e1:94:81:23:89:27:d1: 8f:54:e8:e0:ca:5a:ad:48:00:58:84:63:bb:de:91:b1:d3:3f: 08:7d:ed:97:04:9a:69:e9:22:2b:0b:31:d7:ca:dd:73:2e:51: b4:1a:d8:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5620UM3mr8hS4/v8QIWzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy NDg2ODEwHhcNMjUxMjIwMDQwMTI4WhcNMjUxMjIxMDQwMTI4WjAzMTEwLwYDVQQD EyhkNWJhYzVmMDljNjVjMjhjYjQ0ZWE4YjgyNjdjYTUxNGVkYmFmMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3TUfe2OvBlv7H1qwyKa6rxY/BfK C1bmYVnvqZqIi1Kz+r/mYFe1AIk/LtswaTJtl/cv4Eqs6yXAKyB3ENko+UkNx1qr MXDOwiI3ZkV33jKcIuSW5bCvMOgdCvm5oLUwMJR/Lq5ApDsmpfJiSsRa2SKeHqY5 xBRT3O0Ika18tLvG3Uh1Z52iJnuG8o/nCrAmGcU81PKqcU6HxuEzRK1G9VqpALTd 80rmv0CnQda45JEYv4zUtCBpjKQD5d99Gh8imKOQyQVmGJcg+PWPhzpowZSn4E84 qth9E7YnQzKemFQIuddFnE/uMUsQRiTQknZG0jHrf9dksHyocTAH0w3m5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW6xfCcZcKMtE6ouCZ8pRTtuvDHMB8GA1UdIwQY MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3 LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBIW1oEH u9nKR+bjlTI9nc2brSSg5nT3UjZUKAg8fCwYLS+Cz8cudYDAX3gWFClpzz08Zg7T oJZagAfqTdQSJDdm+suxwb6dN7N146XNFFmqr3o8bOqUFhvAXTrQ7R1dUGKBVpz2 DZrZe+tAV/jsemqUVfvaqCxIsHNSQmsbKTpe/4ToF3bWw8FvtRGTVU/UgVSaLpnJ I1YWUbSGASFxODla/bpmazBNAqfW55ZN9a3YWgPHyucj4DZfo9nwUcDmZkYLlZsv mNmZn3xX14h9qgvhlIEjiSfRj1To4MparUgAWIRju96RsdM/CH3tlwSaaekiKwsx 18rdcy5RtBrYzA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:11 2025 by rpki-client