This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json) Hash identifier: 7EjIGNSZu7t7MWJAY76v208wKcxODnHnyCIYo4YpJK8= Subject key identifier: EA:39:A8:27:2C:12:7C:EE:26:66:18:A9:78:4B:1F:45:FB:23:26:7E Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019B6AD8886F8F42D6D75DB7425577C38A80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft Manifest number: 1010 Signing time: Mon 29 Dec 2025 16:02:14 +0000 Manifest this update: Mon 29 Dec 2025 16:02:14 +0000 Manifest next update: Tue 30 Dec 2025 16:02:14 +0000 Files and hashes: 1: _11pVetKcRxH5Mux6SQ0q_W6nko.roa (hash: xth5tm0U+e+fq0ZH4yXPggFQaHKD6f3c94qC+hf+z3U=) 2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: SeYnqcHOOz/kAIPA5ka5g0n2Q5lCSp2V+7iVuh6MrVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:88:6f:8f:42:d6:d7:5d:b7:42:55:77:c3:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Dec 29 16:02:14 2025 GMT Not After : Dec 30 16:02:14 2025 GMT Subject: CN=ea39a8272c127cee266618a9784b1f45fb23267e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e4:1b:6c:28:e9:87:d8:0e:60:10:20:8e:f8: a0:7b:55:6d:88:10:1c:b8:7f:70:04:2c:65:dd:3b: 02:71:b2:34:f0:77:80:15:fd:bb:1d:3d:a7:25:0b: 66:2b:ff:af:a8:24:3c:3f:1a:bc:bc:f3:e0:a6:c5: 39:3f:13:91:a6:78:5b:27:c9:72:fb:a3:74:98:b5: e5:95:a3:2d:09:68:ad:e6:da:9d:72:c0:4d:41:66: a1:09:d6:cb:20:44:9a:d1:b9:71:ac:4b:a3:bf:ef: 5c:b1:2b:ab:9b:6b:02:07:5b:f0:ec:00:8d:d2:be: ea:ee:11:7a:50:63:0d:84:57:c4:86:9c:1f:f3:4f: 34:2c:f7:1b:87:c8:bc:33:8d:9f:0e:5e:cc:e6:3e: e6:1b:7d:f0:30:1b:96:c6:fb:3b:e0:52:e5:11:08: c9:ba:4d:12:50:11:10:58:04:eb:64:54:0a:a5:9f: f2:89:34:e3:4e:4b:33:fc:5a:a3:a3:1a:d1:23:70: ef:ee:1e:74:c3:01:03:c1:71:5f:5b:1d:c6:13:53: 23:1d:46:13:be:53:4b:44:d5:39:e0:0b:6c:6c:41: a9:f6:60:65:4e:b6:4d:b4:81:93:9a:20:a0:bc:cc: c8:89:01:46:e2:a5:3a:88:a4:7f:af:9f:21:2f:9a: 8c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:39:A8:27:2C:12:7C:EE:26:66:18:A9:78:4B:1F:45:FB:23:26:7E X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0e:ff:3d:24:26:ef:9a:8a:25:91:91:a1:a4:bc:17:78:8c: 08:63:18:3c:7f:96:f0:db:18:cd:b2:67:b4:07:02:ec:7c:5e: b3:8f:48:b0:24:b9:fa:c2:77:18:9a:6e:8a:55:ca:e8:f4:fa: ed:cf:76:fa:c8:08:54:6b:98:7a:10:f6:7f:e8:16:85:13:8a: 23:51:1a:15:2d:f4:30:7a:dc:ce:88:2d:df:c3:71:9a:67:ea: d6:e9:b7:0d:90:bb:e4:0b:8c:ba:d5:be:11:68:a9:5c:14:30: e9:39:a1:f8:3d:20:a0:db:a2:06:7f:32:23:60:7e:13:b6:48: 0c:93:de:0f:0b:7d:04:0b:84:46:fc:58:a7:8f:0e:f4:6e:af: bc:0f:d7:ce:9c:82:21:cb:e0:59:b8:0a:9c:06:a3:6f:9c:7e: 59:61:23:b8:63:4e:e2:f1:ef:91:f2:a0:49:c2:50:26:f2:6c: 27:f1:75:51:08:02:87:85:6a:3c:ba:7f:af:1a:04:10:07:23: 6f:9d:8e:bc:1f:37:cb:00:64:5e:1e:b2:e8:ec:80:4d:bb:a0: 5f:f1:7a:7d:d0:4c:40:7b:5e:15:5e:82:80:8a:13:41:83:2f: 10:1c:2f:1b:bb:49:d7:a4:c3:1f:e4:30:50:65:f0:5d:96:40: f3:99:7a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2Ihvj0LW1123QlV3w4qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjUxMjI5MTYwMjE0WhcNMjUxMjMwMTYwMjE0WjAzMTEwLwYDVQQD EyhlYTM5YTgyNzJjMTI3Y2VlMjY2NjE4YTk3ODRiMWY0NWZiMjMyNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+QbbCjph9gOYBAgjvige1VtiBAc uH9wBCxl3TsCcbI08HeAFf27HT2nJQtmK/+vqCQ8Pxq8vPPgpsU5PxORpnhbJ8ly +6N0mLXllaMtCWit5tqdcsBNQWahCdbLIESa0blxrEujv+9csSurm2sCB1vw7ACN 0r7q7hF6UGMNhFfEhpwf8080LPcbh8i8M42fDl7M5j7mG33wMBuWxvs74FLlEQjJ uk0SUBEQWATrZFQKpZ/yiTTjTksz/FqjoxrRI3Dv7h50wwEDwXFfWx3GE1MjHUYT vlNLRNU54AtsbEGp9mBlTrZNtIGTmiCgvMzIiQFG4qU6iKR/r58hL5qMOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo5qCcsEnzuJmYYqXhLH0X7IyZ+MB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJg7/PSQm 75qKJZGRoaS8F3iMCGMYPH+W8NsYzbJntAcC7Hxes49IsCS5+sJ3GJpuilXK6PT6 7c92+sgIVGuYehD2f+gWhROKI1EaFS30MHrczogt38Nxmmfq1um3DZC75AuMutW+ EWipXBQw6Tmh+D0goNuiBn8yI2B+E7ZIDJPeDwt9BAuERvxYp48O9G6vvA/XzpyC IcvgWbgKnAajb5x+WWEjuGNO4vHvkfKgScJQJvJsJ/F1UQgCh4VqPLp/rxoEEAcj b52OvB83ywBkXh6y6OyATbugX/F6fdBMQHteFV6CgIoTQYMvEBwvG7tJ16TDH+Qw UGXwXZZA85l6Xw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:44 2025 by rpki-client