This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json) Hash identifier: aP8NRSTiY1/Gdn6Noj5kXOBhy62/9M2TUJEpmgGthAg= Subject key identifier: 25:35:10:86:0C:66:17:BD:03:0A:E1:F6:C2:C3:0E:87:46:EA:B9:C1 Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B5D897F9D62C6617EEB8937ACDE449071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft Manifest number: 0CA8 Signing time: Sat 27 Dec 2025 02:00:50 +0000 Manifest this update: Sat 27 Dec 2025 02:00:50 +0000 Manifest next update: Sun 28 Dec 2025 02:00:50 +0000 Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: FAuGN9m37ResYvHlC9HrpFbMSXAI7DT+X0Hhtrkd4go=) 2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=) 3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:7f:9d:62:c6:61:7e:eb:89:37:ac:de:44:90:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Dec 27 02:00:50 2025 GMT Not After : Dec 28 02:00:50 2025 GMT Subject: CN=253510860c6617bd030ae1f6c2c30e8746eab9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d1:b5:ee:04:68:90:8e:27:55:16:89:1b:55: e5:76:83:80:4e:fa:15:10:d5:35:93:a0:01:50:6f: 19:13:da:8d:b2:65:3b:2d:2f:9a:f2:fb:31:75:87: c4:c0:fc:e3:af:31:72:d5:88:28:16:3a:c3:6c:a2: 45:f9:78:ef:f8:41:5f:af:02:bc:f3:7e:15:d9:b9: c0:44:8e:b7:12:19:67:c5:15:98:71:34:ff:5f:c3: cd:cf:e8:25:18:8c:51:27:df:43:72:2b:09:96:c9: 0b:6c:05:27:be:fd:06:e8:1c:da:f7:b7:1d:d2:16: 77:f0:f0:95:9b:2d:96:d7:d6:7c:e0:f0:37:ad:fb: 7f:d5:43:bd:f0:8e:be:b3:f2:70:03:ec:f6:d7:dd: ea:0c:55:06:8b:46:51:a2:97:87:0a:82:a3:d0:d4: 2a:0c:7e:33:d5:78:99:35:0c:13:59:48:7c:8c:b9: 22:2a:b1:c6:5b:0c:03:5d:dd:31:53:38:77:d4:b6: 2a:02:05:0a:78:87:b5:bd:01:69:ad:a1:80:80:b3: f0:6b:1a:41:17:b5:f8:90:68:eb:ec:63:a4:38:18: f3:a2:eb:5c:ec:b2:98:49:1d:3e:d2:ba:3f:e1:5b: c0:b2:17:09:e2:11:28:03:45:55:ae:ea:19:b8:94: ad:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:35:10:86:0C:66:17:BD:03:0A:E1:F6:C2:C3:0E:87:46:EA:B9:C1 X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7e:c9:01:05:9c:b7:b5:a8:15:b3:55:53:52:3b:15:6b:07: cd:66:2d:be:85:87:9b:33:b8:fd:f1:b8:31:c2:95:c0:a5:aa: 59:f1:3c:4d:d0:5d:0c:02:94:62:a7:09:1e:cd:2e:ea:3f:fa: e1:8f:06:75:e5:0c:d1:c9:4f:28:82:6f:42:d9:bf:30:0b:fb: 86:c7:07:f5:b9:e6:24:cc:09:64:eb:1c:fd:e2:68:c4:12:f3: 60:f2:75:cd:1e:98:35:13:59:0d:ba:33:93:c3:a1:b4:73:b8: b4:32:53:38:2c:a0:9b:3a:f1:80:58:e4:85:4d:ba:bd:7e:57: 5f:b1:0b:64:2b:5f:fe:68:4a:0c:0c:8e:3b:26:03:5b:7a:8f: 12:05:67:d9:66:3e:c8:e7:00:15:50:92:ed:e9:c0:34:8b:a1: e1:c6:f2:3f:18:5f:61:41:f4:3a:44:54:a5:f0:6e:b4:05:b8: 4b:4e:61:b6:7d:93:56:03:4f:50:4a:24:68:b0:0a:b1:85:66: b6:61:16:3d:6d:d0:bd:61:fd:9c:66:5b:af:09:6d:1a:09:4e: bc:ca:01:16:34:73:9c:2a:e9:f4:88:f7:5a:91:67:a4:36:c9: 76:1a:d7:3b:26:0e:99:27:6c:d2:83:e1:17:68:b5:c0:0f:58: 77:8f:b6:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiX+dYsZhfuuJN6zeRJBxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjUxMjI3MDIwMDUwWhcNMjUxMjI4MDIwMDUwWjAzMTEwLwYDVQQD EygyNTM1MTA4NjBjNjYxN2JkMDMwYWUxZjZjMmMzMGU4NzQ2ZWFiOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNG17gRokI4nVRaJG1XldoOATvoV ENU1k6ABUG8ZE9qNsmU7LS+a8vsxdYfEwPzjrzFy1YgoFjrDbKJF+Xjv+EFfrwK8 834V2bnARI63EhlnxRWYcTT/X8PNz+glGIxRJ99DcisJlskLbAUnvv0G6Bza97cd 0hZ38PCVmy2W19Z84PA3rft/1UO98I6+s/JwA+z2193qDFUGi0ZRopeHCoKj0NQq DH4z1XiZNQwTWUh8jLkiKrHGWwwDXd0xUzh31LYqAgUKeIe1vQFpraGAgLPwaxpB F7X4kGjr7GOkOBjzoutc7LKYSR0+0ro/4VvAshcJ4hEoA0VVruoZuJStxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU1EIYMZhe9Awrh9sLDDodG6rnBMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn7JAQWc t7WoFbNVU1I7FWsHzWYtvoWHmzO4/fG4McKVwKWqWfE8TdBdDAKUYqcJHs0u6j/6 4Y8GdeUM0clPKIJvQtm/MAv7hscH9bnmJMwJZOsc/eJoxBLzYPJ1zR6YNRNZDboz k8OhtHO4tDJTOCygmzrxgFjkhU26vX5XX7ELZCtf/mhKDAyOOyYDW3qPEgVn2WY+ yOcAFVCS7enANIuh4cbyPxhfYUH0OkRUpfButAW4S05htn2TVgNPUEokaLAKsYVm tmEWPW3QvWH9nGZbrwltGglOvMoBFjRznCrp9Ij3WpFnpDbJdhrXOyYOmSds0oPh F2i1wA9Yd4+2AQ== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:27 2025 by rpki-client