This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json) Hash identifier: r5QoBpNqCDpOGWmRBqMwHBroeV4pRS4HTSYatD2VnSU= Subject key identifier: BC:94:6B:04:E1:C7:0F:44:44:18:AE:DA:F1:6B:EA:C3:61:D8:48:9D Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12 Certificate serial: 019B3EA39EE753B7B2B62D36632A8E77A0FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft Manifest number: 0C98 Signing time: Sun 21 Dec 2025 02:01:09 +0000 Manifest this update: Sun 21 Dec 2025 02:01:09 +0000 Manifest next update: Mon 22 Dec 2025 02:01:09 +0000 Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: 5v0Rwi6PUfraAnv5uQBBuia2GKO+op+DrGhkUNw2zC0=) 2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=) 3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9e:e7:53:b7:b2:b6:2d:36:63:2a:8e:77:a0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12 Validity Not Before: Dec 21 02:01:09 2025 GMT Not After : Dec 22 02:01:09 2025 GMT Subject: CN=bc946b04e1c70f444418aedaf16beac361d8489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:f5:3c:08:d8:cb:1e:ef:25:5e:ba:00:c3: df:14:80:ad:80:48:e6:e2:c6:6a:f9:ed:07:3b:34: c3:5b:68:3a:46:4b:ae:7d:32:2b:f0:67:b0:02:52: ad:4b:7d:0d:20:fc:5f:f9:84:12:e9:3c:90:a7:ca: a7:3d:d5:58:91:b2:f3:11:24:49:38:0f:25:9d:ee: 08:80:06:58:5d:e9:64:37:eb:df:b7:90:4b:c3:c2: a1:6f:0e:8b:e9:eb:a0:86:74:27:32:e8:67:3a:51: 85:6b:d5:0d:4c:8b:31:ce:23:14:58:09:b3:08:e9: 14:de:c9:1a:d9:18:12:70:38:e7:68:cc:5c:27:21: c9:f1:c5:f9:c7:05:12:ed:3a:62:67:99:58:f8:a6: 48:96:0c:5f:b6:3f:38:84:8a:ed:7a:f7:a2:e4:4c: 44:05:ed:4d:24:13:e1:ea:f0:2c:57:48:9d:0b:30: 30:2f:18:38:c7:fd:da:53:1d:77:4a:84:6f:06:92: b3:30:a5:90:5d:24:21:6c:0e:d2:e5:97:1e:de:f1: e1:12:e9:2e:0d:d3:da:c9:fe:ce:c4:ca:8e:6a:17: d0:23:91:c3:05:0e:c2:f5:eb:07:70:33:54:cf:f4: 72:7c:3f:93:6f:11:9e:88:7b:e4:11:e8:30:f8:4b: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:6B:04:E1:C7:0F:44:44:18:AE:DA:F1:6B:EA:C3:61:D8:48:9D X509v3 Authority Key Identifier: keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e8:96:5f:6f:cc:46:21:a4:c5:63:f2:f6:1a:23:46:8e:66: 71:eb:2b:e3:e2:7e:46:ce:83:88:22:a2:32:ae:d3:dc:af:d2: d0:ac:19:33:8c:45:27:ba:34:73:3e:a3:0d:0a:b0:02:5f:72: df:af:8c:ea:8a:62:c1:be:27:34:15:20:5c:67:64:65:50:b2: 56:f1:c3:1f:05:29:98:ad:cb:42:b9:b6:8d:2d:a7:2b:57:82: f7:7b:00:7d:43:3e:94:59:91:e1:92:a1:45:5a:03:fb:7b:cb: a3:8a:9a:d9:32:2a:d1:a6:cb:d9:1b:39:0c:c6:9e:aa:b4:3d: 2e:52:96:82:3f:d2:7d:1d:3e:19:1b:71:ff:54:5d:9b:62:95: e2:e6:48:65:4f:cc:a0:2d:74:ec:46:24:32:be:9c:be:86:d0: d0:56:41:c2:af:47:44:a8:ea:72:59:30:80:f5:53:d0:92:de: d1:d7:73:c4:aa:b8:b2:2a:98:33:f4:6b:7a:a4:86:ce:02:41: 86:6a:7c:00:92:2d:a8:ee:fa:7f:15:7b:1e:3e:ab:37:7d:9c: ce:30:13:59:fd:80:a2:ee:0e:1c:51:db:78:7f:93:42:c6:5e: 27:d0:62:b4:78:c8:d2:07:ea:fe:96:a6:a9:dd:38:51:96:67: e9:fe:58:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o57nU7eyti02YyqOd6D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2 NjlmMTIwHhcNMjUxMjIxMDIwMTA5WhcNMjUxMjIyMDIwMTA5WjAzMTEwLwYDVQQD EyhiYzk0NmIwNGUxYzcwZjQ0NDQxOGFlZGFmMTZiZWFjMzYxZDg0ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOj1PAjYyx7vJV66AMPfFICtgEjm 4sZq+e0HOzTDW2g6RkuufTIr8GewAlKtS30NIPxf+YQS6TyQp8qnPdVYkbLzESRJ OA8lne4IgAZYXelkN+vft5BLw8Khbw6L6eughnQnMuhnOlGFa9UNTIsxziMUWAmz COkU3ska2RgScDjnaMxcJyHJ8cX5xwUS7TpiZ5lY+KZIlgxftj84hIrtevei5ExE Be1NJBPh6vAsV0idCzAwLxg4x/3aUx13SoRvBpKzMKWQXSQhbA7S5Zce3vHhEuku DdPayf7OxMqOahfQI5HDBQ7C9esHcDNUz/RyfD+TbxGeiHvkEegw+Et7awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyUawThxw9ERBiu2vFr6sNh2EidMB8GA1UdIwQY MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+iWX2/M RiGkxWPy9hojRo5mcesr4+J+Rs6DiCKiMq7T3K/S0KwZM4xFJ7o0cz6jDQqwAl9y 36+M6opiwb4nNBUgXGdkZVCyVvHDHwUpmK3LQrm2jS2nK1eC93sAfUM+lFmR4ZKh RVoD+3vLo4qa2TIq0abL2Rs5DMaeqrQ9LlKWgj/SfR0+GRtx/1Rdm2KV4uZIZU/M oC107EYkMr6cvobQ0FZBwq9HRKjqclkwgPVT0JLe0ddzxKq4siqYM/RreqSGzgJB hmp8AJItqO76fxV7Hj6rN32czjATWf2Aou4OHFHbeH+TQsZeJ9BitHjI0gfq/pam qd04UZZn6f5YoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:36 2025 by rpki-client