This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json) Hash identifier: /qpbU3Mrgdic2iRiNarnKsyvnSLbbjh1P+OK8uj2MuU= Subject key identifier: B4:98:7B:1B:0F:25:3C:6B:8D:E5:2E:4E:A8:EE:49:4C:39:BF:BE:05 Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Certificate serial: 019B342010846AD7DE7E23724FB14D5AF79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft Manifest number: 0BD6 Signing time: Fri 19 Dec 2025 01:01:15 +0000 Manifest this update: Fri 19 Dec 2025 01:01:15 +0000 Manifest next update: Sat 20 Dec 2025 01:01:15 +0000 Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=) 2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=) 3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: 9uNT7MO0GC1UFtXRGJyoc/ZQqyQ6Cs+n3M6CXAbxqBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:10:84:6a:d7:de:7e:23:72:4f:b1:4d:5a:f7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Validity Not Before: Dec 19 01:01:15 2025 GMT Not After : Dec 20 01:01:15 2025 GMT Subject: CN=b4987b1b0f253c6b8de52e4ea8ee494c39bfbe05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:8e:c9:1b:cf:90:26:79:3a:c9:f4:37:9b: 6f:9e:6e:d2:bd:1d:c6:5c:bc:2a:5d:c0:03:df:87: 85:6a:44:3c:51:8f:fe:5f:26:19:5d:96:22:6f:3f: 1d:0a:8b:28:3e:6d:6f:64:0b:9f:d5:11:df:e8:35: f9:f0:3e:b0:7f:b7:d2:49:cb:ea:04:94:dc:c4:57: 81:45:ed:f3:26:05:00:3b:7a:ba:8a:55:62:12:fb: 41:8d:08:9c:63:3e:3f:58:01:03:db:63:d2:a9:8e: 45:07:69:f0:7e:ad:00:20:de:43:78:8c:1f:38:56: 2e:e1:02:f4:6e:29:f1:cc:00:0c:9f:89:cb:d1:bf: ec:43:82:50:29:5e:64:39:c1:d2:bf:7b:1f:0e:31: 0d:c8:01:3f:8d:d8:c6:38:51:29:69:ed:f6:b2:b1: 22:3c:5c:4f:08:c8:7c:f0:a9:90:66:ef:cf:fb:48: 42:61:4f:4e:34:82:5e:45:d8:9c:67:ab:d8:f6:57: bb:41:d4:61:c1:df:88:5b:db:0b:e3:90:ca:7e:ef: 55:5f:a4:71:95:b9:d1:7d:ce:08:25:a8:a5:bf:a5: 37:59:e7:db:18:21:7a:6d:ad:6e:0f:ef:cf:dc:7e: 37:b5:3f:7b:30:9d:44:56:b0:07:35:fc:fd:ab:f0: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:98:7B:1B:0F:25:3C:6B:8D:E5:2E:4E:A8:EE:49:4C:39:BF:BE:05 X509v3 Authority Key Identifier: keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1c:51:00:23:d6:0d:62:b6:b5:2c:5b:17:45:a9:d4:1b:16: ce:97:76:59:1f:35:86:7c:19:9b:e0:99:23:bf:78:d9:95:12: 87:51:8d:68:32:79:36:86:fd:d0:6d:90:7f:c5:8b:ec:f9:43: 64:5e:cb:3f:b5:09:6b:e9:0d:50:57:cd:a5:49:74:71:d0:af: 8d:65:0d:06:6f:07:7b:d2:61:8b:ae:32:ae:63:9e:61:2c:b7: 30:98:ba:29:03:3f:34:3f:4c:22:93:bf:53:18:49:58:a6:29: 17:48:a6:21:74:87:a8:c6:3f:e0:8d:7c:e3:a3:36:42:1a:de: 89:19:63:95:a5:d1:5d:46:1b:34:c0:7c:4c:92:2f:5e:ff:36: c3:bd:92:06:d1:57:e2:0b:d3:af:52:1e:33:7b:9c:16:37:d6: f6:f1:ec:74:a7:3e:d4:85:63:8b:2c:93:be:01:b8:2f:01:b2: 99:45:66:ec:5e:fd:51:57:c9:27:4d:bb:95:63:7a:74:5d:12: d0:6b:09:45:36:9d:b0:e2:11:35:fe:c3:c8:52:0d:89:48:31: 87:48:86:5d:3c:48:b5:c0:6c:de:6f:de:28:c8:07:6c:84:54: b5:40:5f:c7:6a:b0:fa:20:26:e7:05:3b:52:c8:25:d4:c6:12: 6f:2c:80:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBCEatfefiNyT7FNWvebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk ZWJiMGYwHhcNMjUxMjE5MDEwMTE1WhcNMjUxMjIwMDEwMTE1WjAzMTEwLwYDVQQD EyhiNDk4N2IxYjBmMjUzYzZiOGRlNTJlNGVhOGVlNDk0YzM5YmZiZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaWOyRvPkCZ5Osn0N5tvnm7SvR3G XLwqXcAD34eFakQ8UY/+XyYZXZYibz8dCosoPm1vZAuf1RHf6DX58D6wf7fSScvq BJTcxFeBRe3zJgUAO3q6ilViEvtBjQicYz4/WAED22PSqY5FB2nwfq0AIN5DeIwf OFYu4QL0binxzAAMn4nL0b/sQ4JQKV5kOcHSv3sfDjENyAE/jdjGOFEpae32srEi PFxPCMh88KmQZu/P+0hCYU9ONIJeRdicZ6vY9le7QdRhwd+IW9sL45DKfu9VX6Rx lbnRfc4IJailv6U3WefbGCF6ba1uD+/P3H43tT97MJ1EVrAHNfz9q/AIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSYexsPJTxrjeUuTqjuSUw5v74FMB8GA1UdIwQY MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBxRACPW DWK2tSxbF0Wp1BsWzpd2WR81hnwZm+CZI7942ZUSh1GNaDJ5Nob90G2Qf8WL7PlD ZF7LP7UJa+kNUFfNpUl0cdCvjWUNBm8He9Jhi64yrmOeYSy3MJi6KQM/ND9MIpO/ UxhJWKYpF0imIXSHqMY/4I1846M2QhreiRljlaXRXUYbNMB8TJIvXv82w72SBtFX 4gvTr1IeM3ucFjfW9vHsdKc+1IVjiyyTvgG4LwGymUVm7F79UVfJJ027lWN6dF0S 0GsJRTadsOIRNf7DyFINiUgxh0iGXTxItcBs3m/eKMgHbIRUtUBfx2qw+iAm5wU7 Usgl1MYSbyyAuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:12:47 2025 by rpki-client