This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft File: Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json) Hash identifier: zx7R8aVT7v6N3l/T7rFBmZkR3DUWb15aZLCDfQW4XfA= Subject key identifier: 5C:39:13:42:92:69:A0:8C:59:E1:4A:8D:1D:63:5A:11:29:77:25:57 Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Certificate serial: 019B3FECADCE585CA575220267E01A3B7C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft Manifest number: 1013 Signing time: Sun 21 Dec 2025 08:00:34 +0000 Manifest this update: Sun 21 Dec 2025 08:00:34 +0000 Manifest next update: Mon 22 Dec 2025 08:00:34 +0000 Files and hashes: 1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=) 2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=) 3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=) 4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: hmBVqNQEh19Er/U3BoKHEvB3dcPPuBAGxIaYBm76ejM=) 5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=) 6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=) 7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ad:ce:58:5c:a5:75:22:02:67:e0:1a:3b:7c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00 Validity Not Before: Dec 21 08:00:34 2025 GMT Not After : Dec 22 08:00:34 2025 GMT Subject: CN=5c3913429269a08c59e14a8d1d635a1129772557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:d8:47:ff:01:42:e8:b1:ce:5c:cd:66:3a: 5a:16:8f:18:8a:7c:04:b2:ed:c5:ed:6a:d2:d4:62: fc:f1:0f:a0:ae:d7:63:93:a3:b6:cf:40:0e:96:e7: cc:10:b2:2a:91:0f:96:53:0a:9e:ff:8a:f1:74:f2: 0e:55:af:f9:68:12:ce:61:32:02:13:3a:29:4b:ca: 60:46:7f:a6:cd:c2:2b:da:c6:a6:78:07:b1:c2:56: 19:c5:51:b0:9f:c5:ef:33:a1:34:d7:92:e0:b0:a0: 78:d0:26:fc:e6:b0:c4:e3:38:9b:16:ce:46:af:74: b6:42:61:3d:93:9d:d4:d0:c8:7e:dc:db:53:0b:cf: 07:56:42:2f:a6:6c:65:84:5f:89:9a:f8:1d:e4:ba: 13:9d:ee:57:12:b7:cb:b6:93:33:b1:9b:1f:70:98: 5b:30:48:c4:3f:5e:ac:67:8a:f1:ce:ac:96:27:8e: 86:fe:70:ff:64:56:14:6d:60:99:eb:a7:27:07:70: 09:54:0b:08:f5:20:e6:b1:d0:01:cd:7d:5a:24:e9: ba:5b:62:f6:e3:5e:61:91:0f:80:97:5d:39:82:1d: b4:57:e4:c9:1c:40:97:ad:28:f2:1f:55:83:f3:bf: c0:9e:5e:e2:dd:58:cf:3d:a5:65:30:af:1b:3c:fc: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:39:13:42:92:69:A0:8C:59:E1:4A:8D:1D:63:5A:11:29:77:25:57 X509v3 Authority Key Identifier: keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:00:41:d6:a7:5d:7e:bb:ec:3c:17:8e:a5:29:83:34:01:75: f3:fa:00:f9:31:c6:0d:96:82:ac:0a:8c:f7:68:f9:1a:75:1c: 31:3a:e2:0a:ad:12:27:83:c0:76:1e:61:d0:3f:f2:69:9a:f9: dd:29:56:a8:ee:5c:84:d4:47:5d:dd:5e:6c:df:3d:8a:f1:2b: c1:86:83:f5:81:83:63:1d:cb:d4:70:1f:de:6c:b8:0b:2d:33: 81:87:60:78:76:a7:57:45:1f:3a:4e:f4:a0:5c:64:5d:4b:79: 52:99:f9:58:cc:cc:89:c5:d5:6f:ee:2c:ea:71:eb:ec:aa:fe: 0b:0c:12:cc:df:d5:aa:e2:6c:af:42:14:88:f3:53:e0:e4:d4: 92:77:59:61:67:2d:8d:d5:3f:b1:fa:50:e1:44:68:05:2e:57: 7b:bf:de:5a:dd:39:f2:b9:e2:c3:df:6a:2e:a7:52:ab:29:3e: 89:3a:d0:9f:76:6d:22:1b:66:57:a5:c4:b0:7c:b7:17:b6:7f: 84:23:9d:de:2a:44:c9:38:f8:ac:99:51:09:cd:8c:8d:a1:48: 6c:43:7f:14:96:95:cc:73:dc:3c:74:86:c6:b7:06:a1:01:7d: 3d:7a:f1:d2:8d:7b:ba:97:36:5f:92:03:33:c7:6c:40:57:d1: c1:52:b0:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7K3OWFyldSICZ+AaO3xJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh YjRmMDAwHhcNMjUxMjIxMDgwMDM0WhcNMjUxMjIyMDgwMDM0WjAzMTEwLwYDVQQD Eyg1YzM5MTM0MjkyNjlhMDhjNTllMTRhOGQxZDYzNWExMTI5NzcyNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse3YR/8BQuixzlzNZjpaFo8YinwE su3F7WrS1GL88Q+grtdjk6O2z0AOlufMELIqkQ+WUwqe/4rxdPIOVa/5aBLOYTIC EzopS8pgRn+mzcIr2sameAexwlYZxVGwn8XvM6E015LgsKB40Cb85rDE4zibFs5G r3S2QmE9k53U0Mh+3NtTC88HVkIvpmxlhF+Jmvgd5LoTne5XErfLtpMzsZsfcJhb MEjEP16sZ4rxzqyWJ46G/nD/ZFYUbWCZ66cnB3AJVAsI9SDmsdABzX1aJOm6W2L2 415hkQ+Al105gh20V+TJHECXrSjyH1WD87/Anl7i3VjPPaVlMK8bPPzG2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw5E0KSaaCMWeFKjR1jWhEpdyVXMB8GA1UdIwQY MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct MDM3NWE5YzMyYjAwLzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsABB1qdd frvsPBeOpSmDNAF18/oA+THGDZaCrAqM92j5GnUcMTriCq0SJ4PAdh5h0D/yaZr5 3SlWqO5chNRHXd1ebN89ivErwYaD9YGDYx3L1HAf3my4Cy0zgYdgeHanV0UfOk70 oFxkXUt5Upn5WMzMicXVb+4s6nHr7Kr+CwwSzN/VquJsr0IUiPNT4OTUkndZYWct jdU/sfpQ4URoBS5Xe7/eWt058rniw99qLqdSqyk+iTrQn3ZtIhtmV6XEsHy3F7Z/ hCOd3ipEyTj4rJlRCc2MjaFIbEN/FJaVzHPcPHSGxrcGoQF9PXrx0o17upc2X5ID M8dsQFfRwVKwMg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:04 2025 by rpki-client