This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json) Hash identifier: FycwELPQRhh3tcmmlrlyDSDmzxf9ngWFokJwwZpWgVw= Subject key identifier: 85:6F:66:1D:3C:B6:DD:21:8B:80:B5:C8:7B:43:36:68:AB:AB:40:BA Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019B378F48BACFF8EFFEE12B1383CF8AD0C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft Manifest number: 15A7 Signing time: Fri 19 Dec 2025 17:01:35 +0000 Manifest this update: Fri 19 Dec 2025 17:01:35 +0000 Manifest next update: Sat 20 Dec 2025 17:01:35 +0000 Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=) 2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=) 3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=) 4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: uWJ6SiWWzaI7Sfel2klm+PbBaK1fpERg+MDna/qlumI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:48:ba:cf:f8:ef:fe:e1:2b:13:83:cf:8a:d0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Dec 19 17:01:35 2025 GMT Not After : Dec 20 17:01:35 2025 GMT Subject: CN=856f661d3cb6dd218b80b5c87b433668abab40ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:06:8d:d5:56:35:3f:ce:c6:42:7a:62:bd: 1f:5c:74:dc:d9:6b:1a:43:db:3a:71:ad:1a:79:4f: 02:be:b5:33:eb:8d:b8:fa:6a:68:b5:c0:33:a3:2a: ab:f8:d7:b2:7b:91:94:76:12:3b:58:de:11:07:18: 25:12:47:34:ee:5e:bd:42:0b:34:dc:26:58:b3:91: 49:ce:d0:4d:39:ff:f4:d7:9c:05:bb:f9:f2:0f:31: be:33:60:7e:55:10:bf:e0:f2:e4:c0:02:07:81:ac: 7c:db:86:f6:5b:4a:32:a2:3b:b1:7b:5d:05:75:a5: d2:ac:6c:01:f8:63:97:92:01:2c:70:ee:a1:6f:99: 57:0e:4a:c2:5f:82:1a:b8:43:47:a1:2b:a3:5b:07: 7e:e1:c5:66:6d:35:17:1b:a8:6d:97:fd:b0:c0:21: 52:56:71:02:ad:51:87:df:8c:0c:27:1f:50:2a:23: 51:90:0b:b6:9a:63:31:95:27:9d:76:b4:02:d7:45: a2:bb:d5:70:e8:cc:73:ce:3f:2c:1c:5e:23:1f:bc: aa:eb:96:b1:6d:ea:2f:e0:61:82:60:72:21:fc:8c: 6e:99:63:a4:1e:37:5e:f9:10:ca:e6:57:dd:d2:07: 9b:98:c1:3f:4f:9b:60:96:0b:22:11:39:31:74:7a: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:66:1D:3C:B6:DD:21:8B:80:B5:C8:7B:43:36:68:AB:AB:40:BA X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4e:26:c6:31:4e:26:a8:b5:0a:9f:84:ef:ae:a4:48:72:1c: 61:ea:56:8b:6f:1b:67:4f:2f:bd:8b:a6:94:cf:e7:5f:95:7f: b2:cd:78:71:72:68:f1:db:c2:4a:d7:80:e8:6b:15:46:58:e5: 79:66:53:fc:3d:41:84:cc:a6:46:ff:36:69:17:80:34:dc:96: 1c:d2:00:c8:28:41:96:2e:2e:e6:03:d0:57:a4:90:16:d7:9d: 59:29:c9:e1:50:24:ae:62:9e:cb:4d:d5:12:e6:f5:76:e6:c4: 25:f4:85:1c:a2:b8:26:df:e6:42:74:e8:4e:04:bd:ae:4b:1f: c3:c8:e7:8a:c3:c1:4c:65:f1:bc:c9:b1:2d:70:3e:be:ec:ff: 35:52:98:b7:da:19:8a:34:e4:1d:a0:08:a9:72:77:22:ff:32: 3b:cb:d6:c5:c2:92:1f:e9:df:dd:fe:5c:fc:39:94:f6:f0:c9: da:85:26:da:ac:8a:44:17:ab:af:43:48:3f:11:7c:28:27:12: 9e:1b:06:c7:d7:42:3a:b5:dc:3c:85:58:a4:c9:55:11:cf:5b: c6:d7:1d:1b:c9:b8:44:2c:ec:7d:ad:21:39:e4:d1:92:b1:52: c4:e9:af:e1:ed:69:2b:5f:06:a8:09:33:24:5f:a5:d9:0d:11: 3d:33:bb:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3j0i6z/jv/uErE4PPitDHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjUxMjE5MTcwMTM1WhcNMjUxMjIwMTcwMTM1WjAzMTEwLwYDVQQD Eyg4NTZmNjYxZDNjYjZkZDIxOGI4MGI1Yzg3YjQzMzY2OGFiYWI0MGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2IGjdVWNT/OxkJ6Yr0fXHTc2Wsa Q9s6ca0aeU8CvrUz6424+mpotcAzoyqr+Neye5GUdhI7WN4RBxglEkc07l69Qgs0 3CZYs5FJztBNOf/015wFu/nyDzG+M2B+VRC/4PLkwAIHgax824b2W0oyojuxe10F daXSrGwB+GOXkgEscO6hb5lXDkrCX4IauENHoSujWwd+4cVmbTUXG6htl/2wwCFS VnECrVGH34wMJx9QKiNRkAu2mmMxlSeddrQC10Wiu9Vw6Mxzzj8sHF4jH7yq65ax beov4GGCYHIh/IxumWOkHjde+RDK5lfd0gebmME/T5tglgsiETkxdHoGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVvZh08tt0hi4C1yHtDNmirq0C6MB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALk4mxjFO Jqi1Cp+E766kSHIcYepWi28bZ08vvYumlM/nX5V/ss14cXJo8dvCSteA6GsVRljl eWZT/D1BhMymRv82aReANNyWHNIAyChBli4u5gPQV6SQFtedWSnJ4VAkrmKey03V Eub1dubEJfSFHKK4Jt/mQnToTgS9rksfw8jnisPBTGXxvMmxLXA+vuz/NVKYt9oZ ijTkHaAIqXJ3Iv8yO8vWxcKSH+nf3f5c/DmU9vDJ2oUm2qyKRBerr0NIPxF8KCcS nhsGx9dCOrXcPIVYpMlVEc9bxtcdG8m4RCzsfa0hOeTRkrFSxOmv4e1pK18GqAkz JF+l2Q0RPTO7Hg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:42 2025 by rpki-client