This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json) Hash identifier: 5z5CaWYQ6DjN30cBhjOpfcy+NjkJwzkg/SR6QgppfXk= Subject key identifier: 01:DB:94:51:62:81:69:CC:88:95:3A:5A:B2:88:47:14:CB:8F:C0:0A Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a Certificate serial: 019B4100090183E7C06B8D2FBEC13CE81876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft Manifest number: 07F3 Signing time: Sun 21 Dec 2025 13:01:19 +0000 Manifest this update: Sun 21 Dec 2025 13:01:19 +0000 Manifest next update: Mon 22 Dec 2025 13:01:19 +0000 Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=) 2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: crdxb4qoUwvS2Zzm4+w/6DLvH3isU3IMWO3fPhalvQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:09:01:83:e7:c0:6b:8d:2f:be:c1:3c:e8:18:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a Validity Not Before: Dec 21 13:01:19 2025 GMT Not After : Dec 22 13:01:19 2025 GMT Subject: CN=01db9451628169cc88953a5ab2884714cb8fc00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:66:81:bf:df:a9:05:93:f8:2a:db:cc:a9: fb:9e:b8:ea:3f:a4:db:14:d2:b4:79:df:78:05:bc: 66:a4:64:59:70:27:31:8e:36:6c:1f:a1:cb:b1:2e: bf:02:21:21:aa:44:84:e0:0d:a8:9e:45:bc:d2:bd: c5:a6:db:8a:0a:d3:90:48:fe:75:8e:b1:95:3f:f7: bf:16:f8:c1:86:68:7f:12:85:13:39:bb:74:40:de: cc:2e:09:04:3b:7c:04:e8:83:75:b0:99:34:21:30: b5:a0:3b:50:aa:ae:8e:16:86:0e:d4:e5:0b:f7:6a: f5:15:4e:cd:09:3f:cb:f2:7d:8f:80:94:b8:70:84: e1:48:0c:19:0b:52:3a:e9:1b:07:fd:84:c2:13:13: 76:fd:a5:97:f2:ad:8d:5f:cc:4d:e0:1c:10:c0:d6: 16:95:24:d4:17:10:bf:2f:b2:bc:3a:b9:72:a9:88: e5:04:da:26:f1:ae:1e:80:04:3d:94:fa:69:8c:68: a0:5a:99:91:f6:58:f7:61:a8:b4:f8:e6:f0:92:14: 2f:bc:4b:2c:bb:a5:29:e3:0c:57:46:4a:93:d7:f1: 97:99:9c:2e:48:d5:8e:49:bd:cc:6f:38:9e:aa:74: 8e:ad:69:b1:84:9e:36:06:39:ed:08:ee:24:94:68: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DB:94:51:62:81:69:CC:88:95:3A:5A:B2:88:47:14:CB:8F:C0:0A X509v3 Authority Key Identifier: keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bd:fc:9c:7b:87:8c:0d:40:28:d5:24:56:fc:2a:86:5a:cd: c4:2b:73:99:9c:58:50:23:75:4a:66:bf:f7:ee:af:20:b4:c4: 51:4e:ee:02:3e:72:33:68:cc:d1:75:56:f1:bc:ed:51:b6:dc: f6:bb:27:79:e6:f0:fd:1b:e1:5c:34:57:98:eb:7d:99:db:91: c6:2e:bb:4c:ef:15:40:82:75:8e:55:63:02:43:b3:11:f8:d5: 4d:aa:0b:63:c9:d5:42:ec:ed:ab:63:7d:57:1b:1c:f1:1e:f7: 4c:c5:f0:fa:8a:c6:4a:4f:db:9f:39:31:d4:b8:d6:c8:4d:eb: 17:e9:40:c5:47:db:ef:e8:4e:0b:82:9e:13:1e:13:d6:e1:3b: e5:3a:d2:5b:30:ea:6a:28:94:d5:3b:c5:00:fd:9f:fd:80:2a: 18:e7:dc:d6:ce:d6:82:3a:2e:1a:82:5b:c0:10:7f:12:68:df: ca:e2:6e:d4:1d:9b:ef:70:de:87:da:ac:d0:57:9c:84:42:dc: 63:96:80:02:e7:17:e2:6e:6a:bf:e5:fe:8b:f7:ad:83:f5:ea: 97:1f:81:6e:06:23:74:0c:34:e3:0e:e0:14:4b:62:fd:f9:cb: b7:00:03:d1:6c:aa:37:cc:c0:03:8e:3d:fc:6b:c8:f6:f2:48: f2:91:cb:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAAkBg+fAa40vvsE86Bh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1 NGM1OWEwHhcNMjUxMjIxMTMwMTE5WhcNMjUxMjIyMTMwMTE5WjAzMTEwLwYDVQQD EygwMWRiOTQ1MTYyODE2OWNjODg5NTNhNWFiMjg4NDcxNGNiOGZjMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1xmgb/fqQWT+CrbzKn7nrjqP6Tb FNK0ed94BbxmpGRZcCcxjjZsH6HLsS6/AiEhqkSE4A2onkW80r3FptuKCtOQSP51 jrGVP/e/FvjBhmh/EoUTObt0QN7MLgkEO3wE6IN1sJk0ITC1oDtQqq6OFoYO1OUL 92r1FU7NCT/L8n2PgJS4cIThSAwZC1I66RsH/YTCExN2/aWX8q2NX8xN4BwQwNYW lSTUFxC/L7K8OrlyqYjlBNom8a4egAQ9lPppjGigWpmR9lj3Yai0+ObwkhQvvEss u6Up4wxXRkqT1/GXmZwuSNWOSb3MbzieqnSOrWmxhJ42BjntCO4klGjGBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHblFFigWnMiJU6WrKIRxTLj8AKMB8GA1UdIwQY MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL38nHuH jA1AKNUkVvwqhlrNxCtzmZxYUCN1Sma/9+6vILTEUU7uAj5yM2jM0XVW8bztUbbc 9rsneebw/RvhXDRXmOt9mduRxi67TO8VQIJ1jlVjAkOzEfjVTaoLY8nVQuztq2N9 Vxsc8R73TMXw+orGSk/bnzkx1LjWyE3rF+lAxUfb7+hOC4KeEx4T1uE75TrSWzDq aiiU1TvFAP2f/YAqGOfc1s7WgjouGoJbwBB/EmjfyuJu1B2b73Deh9qs0FechELc Y5aAAucX4m5qv+X+i/etg/Xqlx+BbgYjdAw04w7gFEti/fnLtwAD0WyqN8zAA449 /GvI9vJI8pHLbw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:44:59 2025 by rpki-client