This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json) Hash identifier: 0xC0mGsv7PLBX70pk5SiibcIdYF1X6VC76rz70X3pWM= Subject key identifier: 9D:1B:D3:8F:A5:4E:F0:95:87:D7:6A:9C:69:40:48:31:BF:27:37:DE Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90 Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790 Certificate serial: 019B41000369BE45127222666D642C4B568E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft Manifest number: 0E80 Signing time: Sun 21 Dec 2025 13:01:18 +0000 Manifest this update: Sun 21 Dec 2025 13:01:18 +0000 Manifest next update: Mon 22 Dec 2025 13:01:18 +0000 Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=) 2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=) 3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: PcblM1qH1oW55i5GQO0U2hSVltt5YW5Ym0/D+2f38DU=) 4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:03:69:be:45:12:72:22:66:6d:64:2c:4b:56:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790 Validity Not Before: Dec 21 13:01:18 2025 GMT Not After : Dec 22 13:01:18 2025 GMT Subject: CN=9d1bd38fa54ef09587d76a9c69404831bf2737de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:9b:3f:2b:19:ca:cb:5d:1b:18:2f:7e:75: db:35:23:e3:3f:53:01:dc:b7:d9:50:66:b0:ec:ac: b0:04:5b:44:f5:0e:72:12:32:67:08:e9:b9:fe:bd: a1:3b:72:06:81:d6:42:ef:18:55:c2:a1:32:db:99: 68:fc:09:63:7c:e1:25:be:1d:34:6b:f8:df:70:38: 02:6c:11:9f:a8:ce:f8:60:da:8f:7d:a5:39:b0:4f: 20:c6:76:e1:c6:a7:5c:38:68:b1:93:e7:a6:49:3d: 0b:18:d0:45:a7:ec:09:e9:0d:34:4c:5d:49:26:58: 92:5a:30:18:fe:75:16:cf:79:bf:c1:03:e9:14:ee: 97:5f:43:45:1f:05:bf:a7:bf:c2:ec:d5:25:61:49: b0:5a:34:d5:13:59:71:47:e2:57:bb:b7:44:56:fe: 13:92:5a:9d:17:fd:53:2d:9e:27:57:a3:18:6c:e6: d2:b0:cb:ee:72:cc:30:9a:0a:7e:eb:75:ff:d6:d3: ad:a8:6f:f8:e3:ea:ef:bd:96:76:f8:7d:a4:4f:28: 27:9c:4e:eb:48:23:67:e2:fe:e0:6b:29:9d:b0:dc: dd:4d:99:4a:de:7a:df:66:af:a6:81:02:69:c9:c4: 94:6c:66:06:2d:c8:75:6d:b8:4f:1b:47:a0:17:9f: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1B:D3:8F:A5:4E:F0:95:87:D7:6A:9C:69:40:48:31:BF:27:37:DE X509v3 Authority Key Identifier: keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ea:bd:7f:39:4e:0a:bb:83:17:79:d4:df:f6:d0:7b:f4:3c: 2f:4c:4b:1c:5d:cc:47:e2:66:88:f5:8d:07:eb:f0:54:75:3b: bf:b3:bf:19:39:d8:3f:d2:23:ef:58:59:89:37:78:57:c0:90: 27:8a:85:3b:f0:31:e6:2d:09:f4:ba:a2:27:dc:e3:d0:6a:a8: 5b:ce:85:9b:b5:7f:27:73:56:77:7f:e4:a8:26:77:87:4e:74: 61:5c:71:0d:cf:e2:15:e3:4f:8e:55:9d:54:bf:cc:41:94:a9: 58:6a:d0:dd:3c:de:22:b1:7b:f0:ae:e7:9b:c6:06:9e:3b:56: 82:32:81:a6:c6:f5:0d:45:67:22:b2:cb:a2:90:d5:35:bb:66: 45:36:cb:b0:ba:96:bf:35:eb:0d:04:f9:b7:35:d7:f3:58:2f: 23:e6:5f:9e:55:34:90:1e:ed:d6:e5:3d:32:f0:f8:2c:25:23: 9a:5c:5a:f3:b5:24:61:c2:18:0b:95:46:bf:d2:bd:f1:d6:14: 54:04:6b:19:c3:9c:da:63:61:f7:0d:99:38:3f:ed:51:01:66: de:86:8a:15:e5:74:7e:31:ce:8e:6d:49:a3:ad:9c:95:5a:d4: 23:98:03:f9:89:0a:a8:0f:92:66:d6:94:6d:02:92:7e:d1:32: ea:13:54:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAANpvkUSciJmbWQsS1aOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk N2E3OTAwHhcNMjUxMjIxMTMwMTE4WhcNMjUxMjIyMTMwMTE4WjAzMTEwLwYDVQQD Eyg5ZDFiZDM4ZmE1NGVmMDk1ODdkNzZhOWM2OTQwNDgzMWJmMjczN2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JObPysZystdGxgvfnXbNSPjP1MB 3LfZUGaw7KywBFtE9Q5yEjJnCOm5/r2hO3IGgdZC7xhVwqEy25lo/AljfOElvh00 a/jfcDgCbBGfqM74YNqPfaU5sE8gxnbhxqdcOGixk+emST0LGNBFp+wJ6Q00TF1J JliSWjAY/nUWz3m/wQPpFO6XX0NFHwW/p7/C7NUlYUmwWjTVE1lxR+JXu7dEVv4T klqdF/1TLZ4nV6MYbObSsMvucswwmgp+63X/1tOtqG/44+rvvZZ2+H2kTygnnE7r SCNn4v7gaymdsNzdTZlK3nrfZq+mgQJpycSUbGYGLch1bbhPG0egF5/giwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0b04+lTvCVh9dqnGlASDG/JzfeMB8GA1UdIwQY MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt Yjc5NTUyZTcwMGM1LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1 LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuq9fzlO CruDF3nU3/bQe/Q8L0xLHF3MR+JmiPWNB+vwVHU7v7O/GTnYP9Ij71hZiTd4V8CQ J4qFO/Ax5i0J9LqiJ9zj0GqoW86Fm7V/J3NWd3/kqCZ3h050YVxxDc/iFeNPjlWd VL/MQZSpWGrQ3TzeIrF78K7nm8YGnjtWgjKBpsb1DUVnIrLLopDVNbtmRTbLsLqW vzXrDQT5tzXX81gvI+ZfnlU0kB7t1uU9MvD4LCUjmlxa87UkYcIYC5VGv9K98dYU VARrGcOc2mNh9w2ZOD/tUQFm3oaKFeV0fjHOjm1Jo62clVrUI5gD+YkKqA+SZtaU bQKSftEy6hNUeQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:53:55 2025 by rpki-client