This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json) Hash identifier: zHQVSNgfCLUTLdyBQmnKoDx2H0d4IYA3A3bSHg8C/YQ= Subject key identifier: 64:74:B6:72:A7:59:24:E4:D1:27:35:58:12:E7:D6:A8:EC:F5:B7:51 Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Certificate serial: 019B42EEA5D25A78D6DBFABF32ACCEB97C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft Manifest number: 0E71 Signing time: Sun 21 Dec 2025 22:01:34 +0000 Manifest this update: Sun 21 Dec 2025 22:01:34 +0000 Manifest next update: Mon 22 Dec 2025 22:01:34 +0000 Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: 7IBFb055eEx/qg5ppVipcV6YB0NcR+fh+mXRvNoRUt0=) 2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:a5:d2:5a:78:d6:db:fa:bf:32:ac:ce:b9:7c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50 Validity Not Before: Dec 21 22:01:34 2025 GMT Not After : Dec 22 22:01:34 2025 GMT Subject: CN=6474b672a75924e4d127355812e7d6a8ecf5b751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:11:f4:75:65:cf:84:fb:20:37:be:bb:2e:f4: a8:5d:99:71:e1:4c:6d:b2:fb:75:5b:a3:7c:1c:da: 2f:23:3e:fe:3b:2a:03:9b:7a:36:42:2e:e0:6f:96: 60:27:9c:6d:ff:59:ed:7b:f8:f3:88:7f:81:5c:f5: ed:5c:50:a1:18:7e:42:6b:b7:64:36:38:41:2f:b6: e2:72:5c:93:b1:41:12:24:a8:66:f2:81:7d:e3:b2: ea:3d:97:d9:92:b3:e2:d7:2d:77:6c:12:6c:00:4e: 68:ae:80:73:e1:2c:8d:60:5a:4a:1e:f3:4d:a3:d9: 3b:ca:f2:37:c7:cc:96:b7:86:90:cc:c4:fc:96:72: 46:16:ee:33:f1:95:2f:a0:bc:d3:73:45:02:53:d9: 2a:8f:3e:a1:d6:98:c6:fc:2c:67:14:98:ed:16:17: 3e:d3:3e:69:a2:23:e5:97:6c:a5:18:6b:75:08:52: 3f:02:b6:64:a4:7c:5a:ef:13:44:b0:c8:04:b9:7a: 03:8c:0d:78:48:ba:a4:34:02:f9:17:a8:81:27:91: d1:41:b2:36:fe:1f:87:4d:62:dd:46:c5:29:02:f7: 62:3b:07:c0:47:f5:18:5f:a3:90:b3:f5:08:f2:f8: b5:a4:13:e7:ea:38:7a:97:f9:44:c4:aa:e8:60:73: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:B6:72:A7:59:24:E4:D1:27:35:58:12:E7:D6:A8:EC:F5:B7:51 X509v3 Authority Key Identifier: keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0b:c5:c3:6e:9a:9a:6b:54:d8:30:d2:2d:a7:22:b7:ec:f2: 07:14:e5:db:94:51:e1:ad:65:fa:dd:b6:16:2b:ee:f3:c2:c0: 94:53:7a:dd:49:bd:ef:46:84:ad:6c:8b:e8:b6:08:12:4e:ee: cf:f2:64:c2:54:ef:4b:4d:a1:4c:af:9f:fc:0c:a9:18:1f:03: 1f:4f:45:fb:56:14:46:5a:4f:cf:05:53:3f:25:d1:e8:85:9d: af:9f:52:dd:73:36:1d:9f:8a:bd:f6:89:34:ad:db:e8:cf:29: 0e:19:a4:84:b4:16:5e:2a:26:c7:67:05:42:3a:31:12:57:bf: 1a:1f:f8:28:6e:5f:88:ac:37:a7:e3:0d:ad:d4:ba:34:56:97: f6:8d:c7:d5:e2:30:c8:28:1f:f0:6a:d6:63:5f:95:cb:40:42: de:97:1d:c2:6f:47:33:e3:30:a7:0e:7d:bf:9b:00:67:6a:61: 9b:05:3e:13:38:aa:fc:05:5d:09:e0:04:35:5b:f3:5a:e8:55: 3a:52:b2:86:c3:dc:11:8c:6e:fe:18:57:e9:2a:cd:3f:59:bb: 71:1f:9e:0c:9a:f1:ba:35:74:8b:fc:2c:fb:14:93:60:50:51: d9:15:9b:16:23:14:18:6e:52:bf:9b:81:c9:a8:72:12:b0:77: 5b:54:08:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7qXSWnjW2/q/MqzOuXxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1 ZDNmNTAwHhcNMjUxMjIxMjIwMTM0WhcNMjUxMjIyMjIwMTM0WjAzMTEwLwYDVQQD Eyg2NDc0YjY3MmE3NTkyNGU0ZDEyNzM1NTgxMmU3ZDZhOGVjZjViNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRH0dWXPhPsgN767LvSoXZlx4Uxt svt1W6N8HNovIz7+OyoDm3o2Qi7gb5ZgJ5xt/1nte/jziH+BXPXtXFChGH5Ca7dk NjhBL7biclyTsUESJKhm8oF947LqPZfZkrPi1y13bBJsAE5oroBz4SyNYFpKHvNN o9k7yvI3x8yWt4aQzMT8lnJGFu4z8ZUvoLzTc0UCU9kqjz6h1pjG/CxnFJjtFhc+ 0z5poiPll2ylGGt1CFI/ArZkpHxa7xNEsMgEuXoDjA14SLqkNAL5F6iBJ5HRQbI2 /h+HTWLdRsUpAvdiOwfAR/UYX6OQs/UI8vi1pBPn6jh6l/lExKroYHOZfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR0tnKnWSTk0Sc1WBLn1qjs9bdRMB8GA1UdIwQY MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwvFw26a mmtU2DDSLacit+zyBxTl25RR4a1l+t22Fivu88LAlFN63Um970aErWyL6LYIEk7u z/JkwlTvS02hTK+f/AypGB8DH09F+1YURlpPzwVTPyXR6IWdr59S3XM2HZ+KvfaJ NK3b6M8pDhmkhLQWXiomx2cFQjoxEle/Gh/4KG5fiKw3p+MNrdS6NFaX9o3H1eIw yCgf8GrWY1+Vy0BC3pcdwm9HM+Mwpw59v5sAZ2phmwU+Eziq/AVdCeAENVvzWuhV OlKyhsPcEYxu/hhX6SrNP1m7cR+eDJrxujV0i/ws+xSTYFBR2RWbFiMUGG5Sv5uB yahyErB3W1QInA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:32 2025 by rpki-client