This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json) Hash identifier: 4KUhXu5vU7/++kTkUNWnM9SaEQMmKZ1/CQGp4tx32wI= Subject key identifier: DE:66:EE:DF:05:BB:AC:F0:E8:6B:1F:40:64:AC:A6:43:07:F7:99:1E Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Certificate serial: 019B3BD9D2F59F5AF6AFBE5353C64A116427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft Manifest number: 0F39 Signing time: Sat 20 Dec 2025 13:01:29 +0000 Manifest this update: Sat 20 Dec 2025 13:01:29 +0000 Manifest next update: Sun 21 Dec 2025 13:01:29 +0000 Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=) 2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=) 3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: /HaxGkie4MsHV0pXnAbs0GS4DpUY+clVdY10MgZ1uk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:d2:f5:9f:5a:f6:af:be:53:53:c6:4a:11:64:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4 Validity Not Before: Dec 20 13:01:29 2025 GMT Not After : Dec 21 13:01:29 2025 GMT Subject: CN=de66eedf05bbacf0e86b1f4064aca64307f7991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:5c:f4:d8:f4:07:27:fa:5b:62:c2:37:d4: f9:ad:97:9b:39:53:05:67:bb:f3:92:2e:23:cf:b5: 34:d0:a4:f6:b1:12:5d:6c:4e:5e:b8:b2:ed:43:c7: ef:0b:a6:8b:f1:76:30:60:63:e0:fb:88:b6:64:72: 7b:84:6a:ec:f2:0f:d6:d8:c2:ac:24:5b:cb:3d:8e: b4:ab:9d:49:de:5b:1c:09:b4:f8:41:68:ef:2c:a1: 76:5d:c8:86:9a:e0:d8:65:4d:de:7b:79:be:c0:cd: 1d:e3:ff:fc:d0:08:2b:6d:51:10:cc:32:55:c9:bb: d2:18:a4:43:65:9e:ae:b6:68:13:8f:18:1f:ab:a9: d0:6f:23:02:54:68:5a:98:73:c7:81:2b:37:f9:0a: a3:27:6f:1b:82:e3:fb:34:09:65:17:28:9c:19:d9: 1c:ec:62:c1:52:22:8e:de:7c:b9:8e:eb:ff:48:11: 04:36:57:7d:35:89:de:ee:f7:08:13:f4:07:de:c1: be:54:b8:3a:f6:05:dd:c2:b8:2e:2d:f0:0f:3d:98: 3c:d2:45:cc:40:67:9c:8a:2d:b6:b7:87:63:a8:9f: e8:52:23:84:a8:7d:c5:95:ce:e8:79:b7:18:e9:c2: be:33:e9:92:f7:4f:e0:82:e4:23:6a:81:b2:3a:59: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:EE:DF:05:BB:AC:F0:E8:6B:1F:40:64:AC:A6:43:07:F7:99:1E X509v3 Authority Key Identifier: keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ff:f2:3e:2b:31:0e:f1:73:76:8a:b0:bb:de:90:a1:a4:fa: 29:e0:48:c8:86:e4:d5:f2:42:2c:32:f5:06:d3:93:43:a8:44: 1c:20:52:fd:c4:7a:63:ae:aa:b3:e6:00:25:bc:76:84:40:a7: c3:53:3f:8b:d2:03:41:d1:55:83:85:7d:61:7a:c6:c5:60:a0: 36:59:31:2a:8d:09:12:e4:c3:58:2c:56:7b:7e:f6:07:c4:51: e4:54:94:a8:a7:ba:de:ed:c4:99:64:25:68:20:2c:85:b5:32: f8:f8:f9:de:c7:73:11:d6:95:ab:e8:b9:51:68:fa:ad:e4:fd: a8:f8:70:4f:0d:60:57:dc:d0:cf:cc:2b:2d:d9:42:a8:78:b8: 7c:16:09:e5:46:54:2b:c3:65:a7:df:14:c8:e7:cd:04:59:b9: cd:81:d3:92:88:61:2a:4f:a7:02:7a:d4:d6:43:2f:56:07:e2: 5f:fb:73:0e:e1:16:7b:48:84:b1:2b:25:1d:5a:cb:07:a2:1e: 9a:85:9b:a9:45:ca:6a:6a:13:b4:8d:e4:cb:37:5b:ee:20:60: 5f:02:4e:0d:e7:56:61:ad:a8:c2:dd:db:07:2f:e8:43:e3:97: a1:ec:95:aa:3c:05:4c:5d:13:8e:b5:cc:c2:60:91:f6:86:8e: ba:49:ac:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72dL1n1r2r75TU8ZKEWQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4 NzExZDQwHhcNMjUxMjIwMTMwMTI5WhcNMjUxMjIxMTMwMTI5WjAzMTEwLwYDVQQD EyhkZTY2ZWVkZjA1YmJhY2YwZTg2YjFmNDA2NGFjYTY0MzA3Zjc5OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0clc9Nj0Byf6W2LCN9T5rZebOVMF Z7vzki4jz7U00KT2sRJdbE5euLLtQ8fvC6aL8XYwYGPg+4i2ZHJ7hGrs8g/W2MKs JFvLPY60q51J3lscCbT4QWjvLKF2XciGmuDYZU3ee3m+wM0d4//80AgrbVEQzDJV ybvSGKRDZZ6utmgTjxgfq6nQbyMCVGhamHPHgSs3+QqjJ28bguP7NAllFyicGdkc 7GLBUiKO3ny5juv/SBEENld9NYne7vcIE/QH3sG+VLg69gXdwrguLfAPPZg80kXM QGecii22t4djqJ/oUiOEqH3Flc7oebcY6cK+M+mS90/gguQjaoGyOlm10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5m7t8Fu6zw6GsfQGSspkMH95keMB8GA1UdIwQY MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP/yPisx DvFzdoqwu96QoaT6KeBIyIbk1fJCLDL1BtOTQ6hEHCBS/cR6Y66qs+YAJbx2hECn w1M/i9IDQdFVg4V9YXrGxWCgNlkxKo0JEuTDWCxWe372B8RR5FSUqKe63u3EmWQl aCAshbUy+Pj53sdzEdaVq+i5UWj6reT9qPhwTw1gV9zQz8wrLdlCqHi4fBYJ5UZU K8Nlp98UyOfNBFm5zYHTkohhKk+nAnrU1kMvVgfiX/tzDuEWe0iEsSslHVrLB6Ie moWbqUXKamoTtI3kyzdb7iBgXwJODedWYa2owt3bBy/oQ+OXoeyVqjwFTF0TjrXM wmCR9oaOukmsnA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:53:30 2025 by rpki-client