This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json) Hash identifier: J6ORlKOq4pILq/VOlFJH67AJsXHqw+2pSzP2FKBBeAk= Subject key identifier: 1F:AA:4A:4E:E1:B6:D7:73:D9:AD:D7:05:BD:93:7B:01:15:25:91:9B Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac Certificate serial: 019B522A7BD8DED389E969F53E15BFA3911C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft Manifest number: 04AC Signing time: Wed 24 Dec 2025 21:01:14 +0000 Manifest this update: Wed 24 Dec 2025 21:01:14 +0000 Manifest next update: Thu 25 Dec 2025 21:01:14 +0000 Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=) 2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: U1vettXUoMuVO7fnRwuwj9FClB5pRyljBDEjx1zhI9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:7b:d8:de:d3:89:e9:69:f5:3e:15:bf:a3:91:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac Validity Not Before: Dec 24 21:01:14 2025 GMT Not After : Dec 25 21:01:14 2025 GMT Subject: CN=1faa4a4ee1b6d773d9add705bd937b011525919b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:f7:2a:5e:d7:ec:68:f7:97:db:e4:d3:c3: a3:e0:14:5b:05:68:7f:c2:1d:83:3c:16:9b:3c:57: ef:20:a6:bf:d7:7a:02:2e:ff:5d:90:11:b4:0a:be: 6d:e3:e0:ad:ee:b2:1c:8b:23:23:0a:a3:c9:2e:0b: c4:96:9b:c9:d5:49:35:7e:0c:03:1d:8b:ff:11:b2: 28:d6:3a:70:9c:6b:72:44:d1:57:cd:58:df:d1:a8: 76:cf:c4:a9:cd:5a:a0:49:a4:f3:74:05:2f:0f:d8: d4:69:fa:ef:80:71:b9:10:ad:2d:2c:e4:5e:e8:57: 23:3f:55:a2:15:63:99:2c:16:04:5b:b7:99:70:a0: 29:5d:bb:05:1b:ad:17:7e:e5:8a:96:09:3d:e5:ea: 6a:c0:dd:7b:59:2a:83:a2:0e:5a:51:72:e9:8d:c5: d5:2d:b2:9e:c1:dc:4e:bc:a5:af:63:5f:ee:dc:ee: 51:7e:0f:32:19:32:ea:b2:23:73:c1:48:47:94:44: c3:ad:61:cf:d9:0b:76:89:22:e8:57:68:90:32:6d: 77:62:41:e5:db:33:0e:5c:37:31:2d:ca:c2:0b:76: b6:42:76:2c:7f:51:6a:46:dd:f9:11:d9:45:5b:bc: ad:a0:82:e1:fd:fa:07:df:c0:87:96:cc:42:3b:63: dc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AA:4A:4E:E1:B6:D7:73:D9:AD:D7:05:BD:93:7B:01:15:25:91:9B X509v3 Authority Key Identifier: keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:5b:c6:3a:f3:1f:af:f2:1c:23:be:d4:86:af:e6:5e:82:5d: 0a:9f:2a:c5:74:f3:53:02:4b:aa:d3:6d:26:e2:5b:63:aa:eb: 04:94:4f:01:ee:d6:65:04:23:01:16:de:fb:b5:94:d3:73:0e: 9c:e3:8a:b5:50:04:bd:54:88:19:25:18:11:07:da:cd:eb:25: 99:ae:b5:96:0b:1a:e7:d0:a5:6d:9f:68:62:6f:b6:99:17:bd: 65:d4:af:ca:6d:38:92:fa:41:ca:c2:f1:a7:51:38:b0:9d:3a: 1f:ca:86:36:d9:f0:78:3d:41:1a:2c:68:22:f8:11:e7:f2:26: 34:16:cd:38:79:6c:3c:a0:0d:29:f2:03:6b:ec:f9:3e:c9:40: 4f:93:b4:bf:35:9e:6a:73:95:b3:f1:5e:4b:21:70:ff:b5:c5: 01:97:07:a0:3f:70:08:ef:d6:6e:79:b6:4a:44:02:82:2b:b8: 5a:7a:c7:df:3f:87:8b:a8:7d:61:32:fe:53:7b:41:cd:92:04: 9b:84:fa:31:3c:21:0f:07:41:13:7c:0d:95:75:05:92:49:ba: a1:4d:e3:83:f7:b7:b2:c0:0d:d3:80:67:89:c1:1c:ee:4f:57: 1f:81:72:fa:28:2c:79:87:ab:85:f8:be:93:63:7f:28:aa:92: d2:f8:de:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKnvY3tOJ6Wn1PhW/o5EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1 Mzc0YWMwHhcNMjUxMjI0MjEwMTE0WhcNMjUxMjI1MjEwMTE0WjAzMTEwLwYDVQQD EygxZmFhNGE0ZWUxYjZkNzczZDlhZGQ3MDViZDkzN2IwMTE1MjU5MTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cr3Kl7X7Gj3l9vk08Oj4BRbBWh/ wh2DPBabPFfvIKa/13oCLv9dkBG0Cr5t4+Ct7rIciyMjCqPJLgvElpvJ1Uk1fgwD HYv/EbIo1jpwnGtyRNFXzVjf0ah2z8SpzVqgSaTzdAUvD9jUafrvgHG5EK0tLORe 6FcjP1WiFWOZLBYEW7eZcKApXbsFG60XfuWKlgk95epqwN17WSqDog5aUXLpjcXV LbKewdxOvKWvY1/u3O5Rfg8yGTLqsiNzwUhHlETDrWHP2Qt2iSLoV2iQMm13YkHl 2zMOXDcxLcrCC3a2QnYsf1FqRt35EdlFW7ytoILh/foH38CHlsxCO2Pc+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+qSk7httdz2a3XBb2TewEVJZGbMB8GA1UdIwQY MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFvGOvMf r/IcI77Uhq/mXoJdCp8qxXTzUwJLqtNtJuJbY6rrBJRPAe7WZQQjARbe+7WU03MO nOOKtVAEvVSIGSUYEQfazeslma61lgsa59ClbZ9oYm+2mRe9ZdSvym04kvpBysLx p1E4sJ06H8qGNtnweD1BGixoIvgR5/ImNBbNOHlsPKANKfIDa+z5PslAT5O0vzWe anOVs/FeSyFw/7XFAZcHoD9wCO/Wbnm2SkQCgiu4WnrH3z+Hi6h9YTL+U3tBzZIE m4T6MTwhDwdBE3wNlXUFkkm6oU3jg/e3ssAN04BnicEc7k9XH4Fy+igseYerhfi+ k2N/KKqS0vjeIw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:57:25 2025 by rpki-client