This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json) Hash identifier: W8Lcc4S3gvAc/WhTpXu7Ds7jx0X3AgdJi+T/DjDF0qQ= Subject key identifier: B6:1A:F2:12:CD:79:8A:65:BE:31:4E:78:3C:9E:2F:B2:90:62:55:A9 Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549 Certificate serial: 019B71B5505BEBB365D58DFAE608E35D6EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft Manifest number: 0726 Signing time: Wed 31 Dec 2025 00:01:06 +0000 Manifest this update: Wed 31 Dec 2025 00:01:06 +0000 Manifest next update: Thu 01 Jan 2026 00:01:06 +0000 Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: bvzKB0jTfEBb68S85F6wHzbRwtfx92jU00G3woRt5xA=) 2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:50:5b:eb:b3:65:d5:8d:fa:e6:08:e3:5d:6e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e30c179cd42a8641583234501b18eff2515549 Validity Not Before: Dec 31 00:01:06 2025 GMT Not After : Jan 1 00:01:06 2026 GMT Subject: CN=b61af212cd798a65be314e783c9e2fb2906255a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fa:4c:49:c7:f5:f6:99:51:a8:08:8d:1b:a2: ed:5d:5d:45:e7:db:3d:57:26:3e:f7:ee:b0:0f:b1: 3a:1d:fe:4a:9a:0f:0d:a3:a6:95:bf:5a:1e:46:83: 98:cb:88:ab:3c:7a:2a:48:4a:f6:01:be:bf:21:89: de:dc:61:8e:2b:cd:41:fa:ed:cb:92:9d:c7:7b:ed: 75:87:69:0a:9c:6c:1f:a3:72:3e:3e:2f:99:5c:ac: 92:19:34:75:40:00:d6:e1:0f:83:4a:61:5b:38:24: 11:21:1d:b9:67:83:a6:50:88:19:1f:c6:50:21:7d: 43:6d:60:01:c4:ea:93:f2:88:ab:a1:9c:66:c4:4c: 0d:af:22:b3:06:08:4b:b2:50:a9:8d:1f:06:17:2d: 66:e9:1e:96:50:e2:e2:c8:dd:a0:a8:ca:55:14:8f: c6:10:c3:8b:51:c7:b6:85:8a:73:0d:93:ed:44:53: a4:eb:66:70:58:25:58:22:9a:98:5a:84:9d:09:39: c7:18:26:f6:c5:e7:0e:1c:50:af:74:08:89:3a:f7: 1a:44:57:48:2e:6a:16:03:7b:70:3c:fb:19:b8:f5: 90:29:58:03:00:b9:63:be:66:13:3f:b8:7b:27:2c: 4c:0f:26:a5:ab:9e:bd:e5:77:a8:fc:88:4e:62:e9: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:F2:12:CD:79:8A:65:BE:31:4E:78:3C:9E:2F:B2:90:62:55:A9 X509v3 Authority Key Identifier: keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:0f:4a:7b:02:99:f7:83:2f:aa:a3:33:c2:18:c4:59:34:a1: 99:e9:8b:ab:f9:4c:c8:6a:39:cf:62:2d:f8:4d:e3:90:ed:d9: b8:c8:ff:25:77:df:78:37:59:80:f8:69:c4:54:07:5d:ab:8e: cb:f9:ad:95:96:ed:ae:d2:d9:dc:a6:ff:db:6c:b3:eb:69:a2: cb:e8:ca:cb:a7:5f:52:e2:7b:67:75:5c:aa:d1:f4:96:95:a5: c6:54:a6:49:1f:8a:df:7d:f1:88:28:ea:bb:8e:70:fe:25:7d: 9a:37:a8:1b:b2:17:da:b4:87:cd:e8:9d:6a:f8:83:bf:22:c0: f5:9b:ca:a6:f5:a5:2a:1a:03:12:8e:ea:d2:50:03:05:70:12: 61:c6:aa:d6:40:ef:02:6f:1c:fe:97:68:c4:f4:ec:ab:9a:4c: 49:01:b1:6a:e6:9b:26:1c:c7:66:2e:dd:c4:3e:0b:16:8d:74: 3c:e0:93:1c:33:40:78:81:c7:cd:48:c6:ad:91:8f:10:05:b4: 5e:5c:f3:f7:ac:30:2d:d4:e5:39:b3:23:99:be:10:64:3b:d2: 2d:71:52:1f:23:4d:56:42:70:48:4b:5f:02:ce:55:93:a1:4e: 43:d4:1d:9c:6d:fe:ac:38:79:d5:13:5a:74:a1:c3:50:8d:21: 93:dd:a4:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtVBb67Nl1Y365gjjXW7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1 MTU1NDkwHhcNMjUxMjMxMDAwMTA2WhcNMjYwMTAxMDAwMTA2WjAzMTEwLwYDVQQD EyhiNjFhZjIxMmNkNzk4YTY1YmUzMTRlNzgzYzllMmZiMjkwNjI1NWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/pMScf19plRqAiNG6LtXV1F59s9 VyY+9+6wD7E6Hf5Kmg8No6aVv1oeRoOYy4irPHoqSEr2Ab6/IYne3GGOK81B+u3L kp3He+11h2kKnGwfo3I+Pi+ZXKySGTR1QADW4Q+DSmFbOCQRIR25Z4OmUIgZH8ZQ IX1DbWABxOqT8oiroZxmxEwNryKzBghLslCpjR8GFy1m6R6WUOLiyN2gqMpVFI/G EMOLUce2hYpzDZPtRFOk62ZwWCVYIpqYWoSdCTnHGCb2xecOHFCvdAiJOvcaRFdI LmoWA3twPPsZuPWQKVgDALljvmYTP7h7JyxMDyalq5695Xeo/IhOYunQ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYa8hLNeYplvjFOeDyeL7KQYlWpMB8GA1UdIwQY MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0 LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFw9KewKZ 94MvqqMzwhjEWTShmemLq/lMyGo5z2It+E3jkO3ZuMj/JXffeDdZgPhpxFQHXauO y/mtlZbtrtLZ3Kb/22yz62miy+jKy6dfUuJ7Z3VcqtH0lpWlxlSmSR+K333xiCjq u45w/iV9mjeoG7IX2rSHzeidaviDvyLA9ZvKpvWlKhoDEo7q0lADBXASYcaq1kDv Am8c/pdoxPTsq5pMSQGxauabJhzHZi7dxD4LFo10POCTHDNAeIHHzUjGrZGPEAW0 Xlzz96wwLdTlObMjmb4QZDvSLXFSHyNNVkJwSEtfAs5Vk6FOQ9QdnG3+rDh51RNa dKHDUI0hk92kJQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:25 2025 by rpki-client