This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json) Hash identifier: KNj6zGIFwuFC477SJ2Sssiu/BKe2wuk/iV4Vt/RqzxU= Subject key identifier: 85:25:AC:20:8A:0F:68:2F:A8:53:2F:56:64:E2:CF:AE:3B:4F:9E:BA Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Certificate serial: 019B225064A4425519C5AE95CAA0644579A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft Manifest number: 178E Signing time: Mon 15 Dec 2025 14:00:52 +0000 Manifest this update: Mon 15 Dec 2025 14:00:52 +0000 Manifest next update: Tue 16 Dec 2025 14:00:52 +0000 Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=) 2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=) 3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: xFvt/z4LeLwz56Y9MHWoKaGxU420+wE+EGH2iDYYRhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:64:a4:42:55:19:c5:ae:95:ca:a0:64:45:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Validity Not Before: Dec 15 14:00:52 2025 GMT Not After : Dec 16 14:00:52 2025 GMT Subject: CN=8525ac208a0f682fa8532f5664e2cfae3b4f9eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:bc:c7:5f:ae:7a:6b:4a:4f:2a:5f:19:a1: e5:12:38:7e:54:0c:b3:1e:0f:f2:63:e4:a3:10:87: 71:eb:0b:e3:ef:1f:db:45:f3:c9:ba:2f:3f:2e:7b: 6f:ec:96:da:88:22:c0:1b:87:5b:ed:c0:8c:8b:97: 07:ec:24:73:ed:1d:38:b8:37:11:d7:7a:e6:de:97: 73:ee:a3:87:40:01:75:b9:52:ac:f1:a8:05:40:6e: 8b:ee:69:8f:b6:0e:4e:af:7a:01:29:8f:c5:c8:e6: fe:3f:f7:97:b3:d7:1c:a1:cc:c9:01:d3:a1:c2:7d: c7:48:b7:6d:ff:76:5b:98:51:aa:0e:49:62:a3:bc: 8e:18:d1:76:44:e1:5d:02:84:3c:14:33:fb:29:2a: 49:2a:be:8c:45:42:23:80:70:b9:a6:aa:b0:13:ea: 12:6a:5d:37:81:cc:31:99:7e:ef:6d:77:ec:cb:20: 1b:1e:a5:84:fd:54:d7:05:a8:5c:f3:9e:8b:c1:6c: 78:75:51:78:f1:ec:19:82:ba:e4:c0:a4:e1:84:7d: 9c:68:c8:77:83:13:ef:26:36:b1:4a:7f:5c:73:74: b6:57:14:fb:c9:ed:f8:ca:50:03:cc:32:ea:34:8b: 69:f5:df:c2:ba:27:28:8c:fe:0d:76:12:07:34:c3: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:AC:20:8A:0F:68:2F:A8:53:2F:56:64:E2:CF:AE:3B:4F:9E:BA X509v3 Authority Key Identifier: keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0d:09:19:37:a7:0b:54:32:4c:b1:65:11:42:eb:65:90:aa: c7:33:c1:34:8f:26:e1:5b:bb:06:a5:6c:9f:f9:ce:33:fd:e7: bb:e7:48:36:be:0d:33:62:f3:66:77:16:a1:44:6d:1e:e7:fe: ea:de:e1:d0:3a:1f:df:a6:85:7a:0d:fd:51:73:c3:d7:50:17: 88:c8:af:29:01:cf:cf:53:a7:80:13:8c:79:a7:c8:22:12:18: e4:35:71:03:47:df:9f:f1:d0:d6:0c:fc:da:48:4c:3b:39:1f: a6:0b:0d:0a:13:86:d3:d5:aa:5a:a3:87:b1:40:33:b5:10:1d: c8:6e:35:52:85:f9:2e:5f:6e:82:cf:40:f4:d3:76:e8:30:b4: 8d:8b:2d:dc:61:78:c2:38:0a:f0:6f:6e:53:b8:77:62:29:82: 1f:1b:5b:c4:18:63:8b:e5:6f:6e:ad:1b:1e:f5:9b:a4:25:97: c9:05:eb:32:77:f3:26:af:04:75:f6:30:ba:0c:cd:3a:d7:f5: 46:a1:54:14:ae:ec:51:72:97:e3:57:25:28:04:0a:ba:32:a4: 29:5a:35:2f:c9:be:c1:7e:fe:25:7a:f0:df:ba:77:d6:93:17: 64:17:8c:c1:e7:b7:d0:61:ed:12:24:a2:13:93:3a:0b:af:e2: 7c:d2:5e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUGSkQlUZxa6VyqBkRXmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx ZWQ3YmYwHhcNMjUxMjE1MTQwMDUyWhcNMjUxMjE2MTQwMDUyWjAzMTEwLwYDVQQD Eyg4NTI1YWMyMDhhMGY2ODJmYTg1MzJmNTY2NGUyY2ZhZTNiNGY5ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom28x1+uemtKTypfGaHlEjh+VAyz Hg/yY+SjEIdx6wvj7x/bRfPJui8/Lntv7JbaiCLAG4db7cCMi5cH7CRz7R04uDcR 13rm3pdz7qOHQAF1uVKs8agFQG6L7mmPtg5Or3oBKY/FyOb+P/eXs9ccoczJAdOh wn3HSLdt/3ZbmFGqDklio7yOGNF2ROFdAoQ8FDP7KSpJKr6MRUIjgHC5pqqwE+oS al03gcwxmX7vbXfsyyAbHqWE/VTXBahc856LwWx4dVF48ewZgrrkwKThhH2caMh3 gxPvJjaxSn9cc3S2VxT7ye34ylADzDLqNItp9d/CuicojP4NdhIHNMPLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUlrCCKD2gvqFMvVmTiz647T566MB8GA1UdIwQY MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It YTI5Y2U3ZGExMGZkLzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkw0JGTen C1QyTLFlEULrZZCqxzPBNI8m4Vu7BqVsn/nOM/3nu+dINr4NM2LzZncWoURtHuf+ 6t7h0Dof36aFeg39UXPD11AXiMivKQHPz1OngBOMeafIIhIY5DVxA0ffn/HQ1gz8 2khMOzkfpgsNChOG09WqWqOHsUAztRAdyG41UoX5Ll9ugs9A9NN26DC0jYst3GF4 wjgK8G9uU7h3YimCHxtbxBhji+Vvbq0bHvWbpCWXyQXrMnfzJq8EdfYwugzNOtf1 RqFUFK7sUXKX41clKAQKujKkKVo1L8m+wX7+JXrw37p31pMXZBeMwee30GHtEiSi E5M6C6/ifNJeQA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:04:08 2025 by rpki-client