This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json) Hash identifier: cmGYPUCTdDLSrxqR3fwe7/LrGiO3aS4ul7YEQpRAMYc= Subject key identifier: BF:B5:0D:BE:AC:7E:58:BF:95:56:C5:96:A5:61:60:FF:AE:3F:06:F5 Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B6CFC5F2998912D7AAF3ABF313C43C21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft Manifest number: 0CB0 Signing time: Tue 30 Dec 2025 02:00:37 +0000 Manifest this update: Tue 30 Dec 2025 02:00:37 +0000 Manifest next update: Wed 31 Dec 2025 02:00:37 +0000 Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: w0JMy0ieoAhnBiqb8zdXVA4dClOnEfWBxBM9eppwW5s=) 2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=) 3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:5f:29:98:91:2d:7a:af:3a:bf:31:3c:43:c2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Dec 30 02:00:37 2025 GMT Not After : Dec 31 02:00:37 2025 GMT Subject: CN=bfb50dbeac7e58bf9556c596a56160ffae3f06f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:10:0e:d0:3d:98:8a:27:d9:e1:01:96:f7: 82:67:57:83:f5:72:12:6e:e0:2d:60:ab:06:81:09: 3f:19:17:2b:b9:ae:e6:3b:a1:ae:be:e6:dd:b2:20: a7:af:c1:8a:d7:d0:b1:0d:01:28:8d:9b:b1:98:e0: b1:99:01:91:21:53:b6:26:d8:73:ab:00:cd:b3:1b: c0:55:4d:96:aa:7f:ef:3c:a8:e8:1a:0a:c4:95:d9: c7:23:ff:7a:63:3b:b6:05:d0:c5:f3:d6:a0:ef:b3: fd:d7:3f:ad:e9:59:52:6c:44:3f:3c:ff:c1:3b:8d: 6e:e6:5c:74:96:ad:81:68:7f:1f:1c:32:14:e1:f8: ad:94:fa:a1:0c:ff:8c:62:f6:35:bc:ac:8a:93:46: 3e:d4:cb:b8:cb:18:1d:2c:d4:b3:c2:4d:39:9b:c1: e6:e3:dc:d7:c1:cb:69:bc:94:95:84:9a:4e:ff:e3: 1f:75:df:8a:7a:30:7c:c0:77:ae:03:fb:07:d3:5a: 8d:0d:db:dd:a3:5a:27:37:47:fd:19:38:ae:7d:96: af:0b:26:e7:29:62:c5:a9:fa:1c:f7:3e:b9:cd:f4: a5:34:0c:d4:7e:ec:50:de:fc:4a:57:76:f5:d3:7c: ec:f7:9c:6a:53:2b:de:73:28:ad:05:f8:cc:9a:8a: 7f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B5:0D:BE:AC:7E:58:BF:95:56:C5:96:A5:61:60:FF:AE:3F:06:F5 X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6f:c8:05:9f:6b:f0:26:35:0d:86:59:a8:89:e7:cb:30:a0: 50:55:6e:aa:8a:a1:ff:da:19:98:a4:6e:2a:1b:db:8d:49:f4: 0b:e8:48:5f:0a:ac:4f:bd:c1:9c:b3:1a:bd:74:27:d7:cd:ae: 45:12:51:d4:b5:e3:96:7b:bf:03:48:f8:18:f5:e2:ed:b0:51: e5:39:ca:23:43:b5:7c:23:c8:28:6f:dd:d8:62:0d:de:92:19: ae:93:c2:41:6c:47:15:99:a7:09:8d:b6:eb:b9:e8:74:ee:fe: 88:c8:15:6b:65:6f:49:31:aa:c1:b6:07:57:a5:35:ee:bd:93: 7a:50:91:90:4e:f2:94:5b:04:f1:f5:7c:99:a0:a8:e4:da:29: 70:b7:7c:1a:a1:12:be:fd:c9:32:93:17:46:49:2f:d2:8f:27: 41:fe:94:ac:80:88:28:c0:71:66:d3:c5:2d:e2:0b:64:2e:38: e1:35:75:dc:dd:61:68:39:60:b0:7b:b9:57:73:cc:4e:a4:a8: dc:2c:01:d0:5c:04:10:3a:57:93:8b:12:08:d4:1a:3e:d3:64: 79:02:03:26:82:42:b9:2f:b5:ab:6c:80:3f:bc:f8:4e:db:13: b1:56:af:ac:ab:73:af:d4:79:ae:a3:ca:e1:8d:0a:51:05:f4: b0:ff:d4:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/F8pmJEteq86vzE8Q8IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjUxMjMwMDIwMDM3WhcNMjUxMjMxMDIwMDM3WjAzMTEwLwYDVQQD EyhiZmI1MGRiZWFjN2U1OGJmOTU1NmM1OTZhNTYxNjBmZmFlM2YwNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmngQDtA9mIon2eEBlveCZ1eD9XIS buAtYKsGgQk/GRcrua7mO6GuvubdsiCnr8GK19CxDQEojZuxmOCxmQGRIVO2Jthz qwDNsxvAVU2Wqn/vPKjoGgrEldnHI/96Yzu2BdDF89ag77P91z+t6VlSbEQ/PP/B O41u5lx0lq2BaH8fHDIU4fitlPqhDP+MYvY1vKyKk0Y+1Mu4yxgdLNSzwk05m8Hm 49zXwctpvJSVhJpO/+Mfdd+KejB8wHeuA/sH01qNDdvdo1onN0f9GTiufZavCybn KWLFqfoc9z65zfSlNAzUfuxQ3vxKV3b103zs95xqUyvecyitBfjMmop/swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+1Db6sfli/lVbFlqVhYP+uPwb1MB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW/IBZ9r 8CY1DYZZqInnyzCgUFVuqoqh/9oZmKRuKhvbjUn0C+hIXwqsT73BnLMavXQn182u RRJR1LXjlnu/A0j4GPXi7bBR5TnKI0O1fCPIKG/d2GIN3pIZrpPCQWxHFZmnCY22 67nodO7+iMgVa2VvSTGqwbYHV6U17r2TelCRkE7ylFsE8fV8maCo5NopcLd8GqES vv3JMpMXRkkv0o8nQf6UrICIKMBxZtPFLeILZC444TV13N1haDlgsHu5V3PMTqSo 3CwB0FwEEDpXk4sSCNQaPtNkeQIDJoJCuS+1q2yAP7z4TtsTsVavrKtzr9R5rqPK 4Y0KUQX0sP/Umw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:50 2025 by rpki-client