This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json) Hash identifier: h8fdiWokro5/BMxOlu9tHjLgyN7mIt+gK29bapbPvhg= Subject key identifier: 60:EA:CE:30:F1:2D:A9:F0:87:A7:BA:95:E8:2A:7A:4B:89:DB:FA:AC Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Certificate serial: 019B2061DA25AC32BA804158E96645C07746 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 05:00:42 +0000 Manifest this update: Mon 15 Dec 2025 05:00:42 +0000 Manifest next update: Tue 16 Dec 2025 05:00:42 +0000 Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=) 2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: EuqfFrB6cLkz0Wd5TZlJb6bQVqwK2NoSmR1/hXsIqw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:61:da:25:ac:32:ba:80:41:58:e9:66:45:c0:77:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Validity Not Before: Dec 15 05:00:42 2025 GMT Not After : Dec 16 05:00:42 2025 GMT Subject: CN=60eace30f12da9f087a7ba95e82a7a4b89dbfaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:32:3f:74:47:1a:51:88:83:d7:5d:26:58: 3e:2e:f5:a0:6e:bc:2c:cc:e1:04:94:3f:51:7f:08: d2:27:21:9d:58:e5:78:90:f3:34:ac:8a:3c:76:da: b0:c2:93:20:8a:a6:d4:ee:2f:0b:b7:c4:db:1b:ae: c7:d4:65:41:5c:68:7a:2e:49:7d:d1:5f:6d:5e:37: 6a:36:9e:85:19:49:05:d3:aa:c5:ac:8b:b7:61:42: 35:29:45:9a:f1:91:82:d4:e5:b0:ab:e5:cb:11:99: b9:6f:98:a3:bf:4c:50:42:17:fa:b2:46:ca:47:b0: 24:0c:43:4f:d2:1e:e8:f8:5d:db:5a:5a:6a:7e:4c: d7:a3:14:9e:b8:e6:90:40:dc:64:de:37:53:c5:64: 02:48:94:42:b2:e8:52:45:e5:c8:a4:45:2d:73:44: da:fc:a4:3d:65:87:64:81:3c:7d:bd:e0:92:4c:25: 66:c9:62:09:9f:9c:67:29:09:53:83:7d:7c:f0:dd: c7:22:3f:8e:31:cc:3c:24:24:9b:1d:06:fa:1f:1b: e3:23:ca:cf:a3:a6:76:14:29:02:2b:32:79:15:72: 87:51:68:0f:8d:02:12:c8:e5:3d:02:9f:23:b6:ea: 7e:c0:1d:6c:6d:c8:4c:f6:7c:42:05:26:78:17:c6: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EA:CE:30:F1:2D:A9:F0:87:A7:BA:95:E8:2A:7A:4B:89:DB:FA:AC X509v3 Authority Key Identifier: keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:55:e5:8f:db:eb:c8:e4:39:66:83:87:8b:b9:f4:39:93:e6: 3a:bc:77:3b:2e:f3:fa:36:0f:7e:e3:a4:ab:fa:85:3e:0c:8f: 5d:3b:41:b5:10:af:42:b3:00:8c:5c:fb:6d:6a:5f:a2:59:dc: 06:86:51:32:61:11:ff:1c:f6:07:e8:6a:bf:46:3c:fc:b4:34: 17:80:71:23:d1:a1:ce:32:be:50:d8:78:c5:70:b1:4a:19:1f: 89:d0:90:65:51:20:3b:9f:d9:7e:eb:d7:90:bb:40:0c:74:a0: d5:be:a3:cd:4e:f6:0f:f2:79:e8:04:bd:6d:96:79:58:a5:b7: c8:d6:61:69:62:46:78:2e:e4:24:e1:99:1c:eb:b3:77:6b:f7: 9e:3d:c9:01:4b:a2:4c:7f:66:58:0b:f5:68:24:9c:ec:76:91: 3a:2d:d6:bf:2f:4d:e4:9f:01:00:98:23:c0:07:11:66:33:bf: 27:c1:e8:58:98:dd:3e:56:34:2e:02:8d:b4:7b:d4:0e:9d:57: b2:b2:85:ec:90:96:0d:ca:b9:35:65:95:30:34:9b:7b:08:1e: 85:9e:35:74:bd:48:80:05:09:5c:60:18:c6:39:ba:0c:da:02: 71:c5:93:27:bb:62:42:21:f4:6a:b8:68:7b:44:bc:8e:7d:b3: 3e:8b:21:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYdolrDK6gEFY6WZFwHdGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk YWNhMGEwHhcNMjUxMjE1MDUwMDQyWhcNMjUxMjE2MDUwMDQyWjAzMTEwLwYDVQQD Eyg2MGVhY2UzMGYxMmRhOWYwODdhN2JhOTVlODJhN2E0Yjg5ZGJmYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukyP3RHGlGIg9ddJlg+LvWgbrws zOEElD9RfwjSJyGdWOV4kPM0rIo8dtqwwpMgiqbU7i8Lt8TbG67H1GVBXGh6Lkl9 0V9tXjdqNp6FGUkF06rFrIu3YUI1KUWa8ZGC1OWwq+XLEZm5b5ijv0xQQhf6skbK R7AkDENP0h7o+F3bWlpqfkzXoxSeuOaQQNxk3jdTxWQCSJRCsuhSReXIpEUtc0Ta /KQ9ZYdkgTx9veCSTCVmyWIJn5xnKQlTg3188N3HIj+OMcw8JCSbHQb6HxvjI8rP o6Z2FCkCKzJ5FXKHUWgPjQISyOU9Ap8jtup+wB1sbchM9nxCBSZ4F8ZxRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDqzjDxLanwh6e6legqekuJ2/qsMB8GA1UdIwQY MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt OWY1YjJlYjQ5MmEwLzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlXlj9vr yOQ5ZoOHi7n0OZPmOrx3Oy7z+jYPfuOkq/qFPgyPXTtBtRCvQrMAjFz7bWpfolnc BoZRMmER/xz2B+hqv0Y8/LQ0F4BxI9GhzjK+UNh4xXCxShkfidCQZVEgO5/ZfuvX kLtADHSg1b6jzU72D/J56AS9bZZ5WKW3yNZhaWJGeC7kJOGZHOuzd2v3nj3JAUui TH9mWAv1aCSc7HaROi3Wvy9N5J8BAJgjwAcRZjO/J8HoWJjdPlY0LgKNtHvUDp1X srKF7JCWDcq5NWWVMDSbewgehZ41dL1IgAUJXGAYxjm6DNoCccWTJ7tiQiH0arho e0S8jn2zPoshsw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:55 2025 by rpki-client