This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json) Hash identifier: Wj6meGFV9+I9UCPFBlt3EGIkHVDsEU/xgPxsTO18/aM= Subject key identifier: A7:19:4D:36:26:A5:D0:56:B6:FE:F9:69:6E:FA:9E:02:0E:10:DC:AE Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Certificate serial: 019B484B875730683323FB304FC3DE9784BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft Manifest number: 17D9 Signing time: Mon 22 Dec 2025 23:01:07 +0000 Manifest this update: Mon 22 Dec 2025 23:01:07 +0000 Manifest next update: Tue 23 Dec 2025 23:01:07 +0000 Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=) 2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=) 3: utu4HG5Q_7wmUAMYqV-VoOkOlAU.asa (hash: GWkYlaZN+/4nG13OOIg1vJsZ8EIkcdYZl1pQv3olPHk=) 4: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: yvouYU2dqR7C3L6IkDMyq4FeFsc/Xa30Km+jKSqOsCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:87:57:30:68:33:23:fb:30:4f:c3:de:97:84:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b Validity Not Before: Dec 22 23:01:07 2025 GMT Not After : Dec 23 23:01:07 2025 GMT Subject: CN=a7194d3626a5d056b6fef9696efa9e020e10dcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:7a:2f:17:18:01:03:62:40:a7:b2:7f:9e: 56:56:5f:7b:87:f9:28:d6:c1:4e:fe:e8:11:31:44: 66:7c:bd:1a:26:f3:3d:9c:d2:b8:86:a5:80:f7:69: 0d:05:4d:d8:7e:9a:31:36:87:b4:cc:0e:24:37:35: a9:87:27:7c:55:8b:d1:27:91:0e:05:54:5b:fd:78: 6e:b0:a8:61:a8:0d:01:04:83:24:8a:7d:07:ee:15: 8f:25:a9:a7:ce:16:5f:5a:73:d3:3d:32:7e:67:65: ba:47:2d:b8:a9:e3:f4:f0:48:17:64:f5:d8:48:fa: 14:d7:71:8b:2c:53:f9:1a:d4:40:6a:a6:b7:91:2d: 44:bc:0b:5f:29:2c:21:f0:b5:f8:10:5c:5b:1a:6a: fa:41:c5:d6:ab:e9:ae:48:9c:06:31:c8:d6:3f:5a: dd:51:bb:6a:ec:6a:80:39:72:eb:40:8a:cb:55:38: 94:0e:f4:d9:49:9b:19:37:a4:97:4f:20:34:07:f0: cc:88:57:15:62:af:5e:54:30:6f:8b:29:da:8e:c9: c5:b6:e4:c2:1e:9a:92:ad:d4:ba:72:b6:79:66:2a: 41:b0:28:a8:ec:dd:99:f2:c3:89:31:e3:32:fa:6e: 00:f4:24:b9:9f:49:18:b4:48:6f:fa:97:da:fe:da: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:4D:36:26:A5:D0:56:B6:FE:F9:69:6E:FA:9E:02:0E:10:DC:AE X509v3 Authority Key Identifier: keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7f:6c:75:8b:40:94:61:d0:2d:db:70:e6:6c:3e:6c:7a:38: 4f:fa:b0:12:aa:9b:da:68:ae:e9:11:ad:2d:e4:5e:5b:ba:dd: 7a:b7:b5:44:d6:df:f7:21:42:ea:e8:2d:a4:38:04:69:61:2a: b0:3d:c8:d0:e0:52:fd:7e:52:b9:08:c7:8b:f8:d2:78:0a:ca: 53:b3:64:96:1b:6a:21:24:c7:d3:32:f3:8f:3b:a0:cb:45:1f: 2a:9c:50:92:8f:58:91:df:8d:82:d7:1c:a6:d9:8a:6e:40:2a: fd:ce:cb:5b:ba:49:04:7e:19:24:c4:27:66:81:1c:66:00:33: 88:fd:68:83:a9:b2:1f:64:85:f0:5b:70:be:cc:c3:51:cf:0b: 11:e4:22:f6:7d:24:62:11:65:0a:10:d2:31:ac:79:de:d1:2a: 46:5a:91:9a:ba:6e:6d:d3:fc:fb:85:e1:d2:a1:7e:e6:87:c2: ca:98:fe:6c:0d:9a:93:cf:74:49:76:60:7e:1e:b4:89:2b:aa: 7a:cf:38:12:c1:da:9f:dd:44:b0:95:72:33:61:09:ac:9d:ed: a6:ff:fc:ae:b5:91:b1:dc:af:74:61:7b:b1:bd:b1:60:13:64: 18:85:8c:e1:f4:3f:d1:24:19:cd:45:cd:80:71:d2:6a:f7:55: c3:ec:d2:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS4dXMGgzI/swT8Pel4S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi Yzc1M2IwHhcNMjUxMjIyMjMwMTA3WhcNMjUxMjIzMjMwMTA3WjAzMTEwLwYDVQQD EyhhNzE5NGQzNjI2YTVkMDU2YjZmZWY5Njk2ZWZhOWUwMjBlMTBkY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvd6LxcYAQNiQKeyf55WVl97h/ko 1sFO/ugRMURmfL0aJvM9nNK4hqWA92kNBU3YfpoxNoe0zA4kNzWphyd8VYvRJ5EO BVRb/XhusKhhqA0BBIMkin0H7hWPJamnzhZfWnPTPTJ+Z2W6Ry24qeP08EgXZPXY SPoU13GLLFP5GtRAaqa3kS1EvAtfKSwh8LX4EFxbGmr6QcXWq+muSJwGMcjWP1rd Ubtq7GqAOXLrQIrLVTiUDvTZSZsZN6SXTyA0B/DMiFcVYq9eVDBviynajsnFtuTC HpqSrdS6crZ5ZipBsCio7N2Z8sOJMeMy+m4A9CS5n0kYtEhv+pfa/tpnfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcZTTYmpdBWtv75aW76ngIOENyuMB8GA1UdIwQY MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO39sdYtA lGHQLdtw5mw+bHo4T/qwEqqb2miu6RGtLeReW7rdere1RNbf9yFC6ugtpDgEaWEq sD3I0OBS/X5SuQjHi/jSeArKU7NklhtqISTH0zLzjzugy0UfKpxQko9Ykd+Ngtcc ptmKbkAq/c7LW7pJBH4ZJMQnZoEcZgAziP1og6myH2SF8FtwvszDUc8LEeQi9n0k YhFlChDSMax53tEqRlqRmrpubdP8+4Xh0qF+5ofCypj+bA2ak890SXZgfh60iSuq es84EsHan91EsJVyM2EJrJ3tpv/8rrWRsdyvdGF7sb2xYBNkGIWM4fQ/0SQZzUXN gHHSavdVw+zSmw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:08 2025 by rpki-client