This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json) Hash identifier: ikiMPawBv29+jKH5ot1QcQxj1O+KSYHBsyN6076tM+8= Subject key identifier: 50:87:4F:67:54:8E:B6:9C:67:A4:58:9A:79:2C:D8:5D:9A:49:8F:F3 Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1 Certificate serial: 019B6CFC23B78D9F032B043C815D17CE8599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft Manifest number: 036C Signing time: Tue 30 Dec 2025 02:00:22 +0000 Manifest this update: Tue 30 Dec 2025 02:00:22 +0000 Manifest next update: Wed 31 Dec 2025 02:00:22 +0000 Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=) 2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: jDRCBuWmBHh1x6qvBrJEVpKhDy+AcwnUVxmdB7hwjC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:23:b7:8d:9f:03:2b:04:3c:81:5d:17:ce:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1 Validity Not Before: Dec 30 02:00:22 2025 GMT Not After : Dec 31 02:00:22 2025 GMT Subject: CN=50874f67548eb69c67a4589a792cd85d9a498ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:13:41:bf:1f:91:c1:27:a4:ac:fd:73:5b:5c: 88:c7:76:d5:33:3a:15:2a:40:0b:b9:21:a8:f5:5d: 85:0f:cc:f4:a8:f4:c0:93:75:84:45:6c:84:a1:4e: 81:dc:d5:5b:c6:c2:81:c5:f4:3d:d0:98:1b:57:b5: 37:fd:bb:f0:1d:95:f3:ca:29:ad:e6:1b:c6:01:b7: 44:74:03:31:49:0d:54:8f:a3:a9:09:58:2a:3d:87: ee:3f:f0:90:32:f4:03:4b:cc:c3:f2:d8:fa:af:2d: 39:67:ea:d5:58:0f:2d:be:2a:54:42:a3:07:db:64: 97:42:f5:ba:bc:48:5d:ee:30:c1:93:df:14:8b:be: b8:71:41:20:84:e7:f7:e4:59:ab:3c:9e:1f:9c:58: 71:d9:15:d3:38:61:c3:b9:97:2c:f6:29:79:dd:75: f7:1b:20:22:88:d3:9d:e9:20:0e:de:de:08:95:09: 79:68:b9:40:96:f1:34:7e:cd:4f:ed:7b:9a:a5:8d: 3f:0f:b2:f9:ba:52:44:eb:05:27:6c:fe:47:59:1c: fa:72:e8:90:ac:25:78:ce:bf:89:2d:82:e3:b6:38: dc:bd:c4:09:72:c6:7b:7e:68:31:27:80:32:6a:0e: 86:48:21:2f:cb:1a:91:1d:cc:d7:c0:f2:eb:6e:e6: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:87:4F:67:54:8E:B6:9C:67:A4:58:9A:79:2C:D8:5D:9A:49:8F:F3 X509v3 Authority Key Identifier: keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:70:66:85:8e:33:90:2e:17:67:00:83:1b:99:92:42:95:ef: f9:d5:df:e4:b9:8e:d2:7d:0d:65:78:7d:66:75:21:bb:27:cf: 68:54:ed:e1:a7:8d:cd:54:2d:2b:18:7f:09:75:72:ef:47:dd: b0:99:4f:72:fa:8a:97:61:cd:67:45:ac:0d:92:d7:3e:a2:bb: 86:13:3b:0e:a8:76:2d:d7:ef:2b:70:38:27:1b:55:9f:4b:f8: cc:6b:30:20:7a:ba:10:5f:0d:27:b0:53:7a:5a:97:ba:f8:fb: a6:2d:c2:b7:ce:1f:88:7a:00:87:08:ed:67:52:f2:45:ad:35: de:c7:93:8a:c0:82:a2:81:1e:36:f3:88:07:86:43:2f:d2:13: c4:5f:a6:90:b1:d7:18:69:36:d9:46:ea:ab:9f:f0:b3:85:54: c6:cd:7e:dd:1e:61:4d:a8:f9:81:e7:29:61:6f:af:70:6c:e3: 1e:a9:16:fe:30:28:5a:fe:cd:95:70:01:d5:5b:96:92:46:50: ce:25:1e:91:73:a3:50:de:dd:19:f1:75:07:70:58:da:96:2e: 7d:b7:b8:e6:31:65:0a:2c:96:c4:5b:49:f2:99:a5:30:da:d6: 2b:46:ca:8a:0a:f5:87:37:d1:b2:45:94:f4:bd:a2:69:28:38: ea:56:fa:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/CO3jZ8DKwQ8gV0XzoWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0 ZDIxYjEwHhcNMjUxMjMwMDIwMDIyWhcNMjUxMjMxMDIwMDIyWjAzMTEwLwYDVQQD Eyg1MDg3NGY2NzU0OGViNjljNjdhNDU4OWE3OTJjZDg1ZDlhNDk4ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hNBvx+RwSekrP1zW1yIx3bVMzoV KkALuSGo9V2FD8z0qPTAk3WERWyEoU6B3NVbxsKBxfQ90JgbV7U3/bvwHZXzyimt 5hvGAbdEdAMxSQ1Uj6OpCVgqPYfuP/CQMvQDS8zD8tj6ry05Z+rVWA8tvipUQqMH 22SXQvW6vEhd7jDBk98Ui764cUEghOf35FmrPJ4fnFhx2RXTOGHDuZcs9il53XX3 GyAiiNOd6SAO3t4IlQl5aLlAlvE0fs1P7XuapY0/D7L5ulJE6wUnbP5HWRz6cuiQ rCV4zr+JLYLjtjjcvcQJcsZ7fmgxJ4Ayag6GSCEvyxqRHczXwPLrbuaPFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCHT2dUjracZ6RYmnks2F2aSY/zMB8GA1UdIwQY MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinBmhY4z kC4XZwCDG5mSQpXv+dXf5LmO0n0NZXh9ZnUhuyfPaFTt4aeNzVQtKxh/CXVy70fd sJlPcvqKl2HNZ0WsDZLXPqK7hhM7Dqh2LdfvK3A4JxtVn0v4zGswIHq6EF8NJ7BT elqXuvj7pi3Ct84fiHoAhwjtZ1LyRa013seTisCCooEeNvOIB4ZDL9ITxF+mkLHX GGk22Ubqq5/ws4VUxs1+3R5hTaj5gecpYW+vcGzjHqkW/jAoWv7NlXAB1VuWkkZQ ziUekXOjUN7dGfF1B3BY2pYufbe45jFlCiyWxFtJ8pmlMNrWK0bKigr1hzfRskWU 9L2iaSg46lb60A== -----END CERTIFICATE-----Generated at Tue Dec 30 04:56:41 2025 by rpki-client