This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json) Hash identifier: 16AovP2932Vzo28HCBtI5Pxw1oNrGjGKj5jt3/cSXwY= Subject key identifier: 22:5F:27:3E:A8:1F:04:6F:DD:74:42:50:24:B2:96:6E:30:91:16:7D Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Certificate serial: 019B3C7DFF452963C19F134C45F74510D2A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:00:48 +0000 Manifest this update: Sat 20 Dec 2025 16:00:48 +0000 Manifest next update: Sun 21 Dec 2025 16:00:48 +0000 Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=) 2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: ckx1I11cFS+gJoYsmC8D3ubQPKCeph9IzjO47GV4K+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:ff:45:29:63:c1:9f:13:4c:45:f7:45:10:d2:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Validity Not Before: Dec 20 16:00:48 2025 GMT Not After : Dec 21 16:00:48 2025 GMT Subject: CN=225f273ea81f046fdd74425024b2966e3091167d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:88:37:e5:a7:74:4f:f2:07:3a:57:84:09: ad:c7:18:d2:b9:88:48:30:46:26:c4:76:20:4c:d8: fe:84:d1:6a:77:2d:15:b9:c8:3a:42:6e:a6:b4:2c: 2d:b0:d8:35:dc:ad:e2:c4:26:69:7f:dd:d8:57:51: 34:91:ab:78:d2:a2:6a:b5:5a:da:3a:16:8a:58:df: 49:b8:85:8b:af:e0:ad:4d:19:c6:d9:f6:28:7e:4c: 73:f3:7b:04:e4:51:05:77:99:4b:4f:30:41:66:ad: 4d:19:0e:a2:58:ef:b7:37:5b:44:d0:90:98:0b:df: a5:b7:3b:f5:eb:d9:c2:28:3d:91:fc:10:0c:55:ed: 4b:fb:dc:53:6f:8d:a5:98:7a:e6:05:3d:9e:ed:f4: e7:11:f8:76:71:5e:18:c5:d2:92:62:7b:fa:4e:ce: 92:05:90:aa:76:99:03:68:5f:38:b6:dd:79:5f:b7: 09:23:81:be:9e:2b:b6:35:77:f5:ce:08:b3:0c:39: 71:0e:0d:9f:0d:9d:0e:05:55:6a:7b:44:fd:e8:16: 2f:90:b5:ab:5f:0d:19:2e:87:36:33:d0:70:2e:5f: 62:7d:e8:7b:00:e8:1f:8a:bc:36:11:e3:de:38:41: a1:89:cd:40:a0:b5:3c:d6:64:07:3b:47:bb:a1:5c: 77:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5F:27:3E:A8:1F:04:6F:DD:74:42:50:24:B2:96:6E:30:91:16:7D X509v3 Authority Key Identifier: keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e4:88:b4:1c:35:f6:4c:6d:fa:8d:7c:c6:a1:f9:1f:51:b5: c1:06:90:8d:d1:82:6c:95:42:68:55:ef:be:72:22:fe:cb:28: 68:a2:d4:22:49:71:24:a1:3f:b2:11:4e:d0:87:f6:fc:3d:ff: 72:97:2b:04:9e:c5:24:f4:c6:11:55:ac:0b:d6:f2:5e:81:d9: a7:95:c4:0f:e1:1d:af:f2:6b:4d:a7:71:07:b8:d2:5a:3b:8f: 41:6b:90:4a:43:a0:37:ba:5c:6e:4c:fa:3c:65:c0:aa:81:e5: b7:5d:fa:6e:7a:c2:90:45:f1:ec:33:1e:a3:05:5d:de:fd:c1: a4:18:3f:33:94:f3:b2:bf:cc:44:7a:99:e2:ed:e4:5a:91:98: 1b:36:a5:f2:d7:f9:38:8d:9c:02:7a:73:49:05:42:85:c0:84: 92:c9:93:3a:9c:67:02:24:2b:bc:16:f6:8c:57:6c:b1:de:22: a0:2a:7a:41:75:6a:5e:20:a3:01:70:ba:fa:5b:46:a7:a2:e2: 1f:85:03:ea:e3:c9:30:ea:3b:c5:6a:c9:dc:b3:f0:42:03:a2: 3f:48:12:0a:97:3c:48:99:c4:3c:6a:69:56:54:d6:dc:f2:7b: d4:2a:09:f4:38:9c:5d:19:55:6f:cc:20:bd:05:65:56:bb:2f: ec:b9:4e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ff9FKWPBnxNMRfdFENKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjUxYTI1ZDJmMzkyMjUyNGE2YTY5YjFkN2Q2MWNkM2Nj MmE4ZGEwHhcNMjUxMjIwMTYwMDQ4WhcNMjUxMjIxMTYwMDQ4WjAzMTEwLwYDVQQD EygyMjVmMjczZWE4MWYwNDZmZGQ3NDQyNTAyNGIyOTY2ZTMwOTExNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigCIN+WndE/yBzpXhAmtxxjSuYhI MEYmxHYgTNj+hNFqdy0Vucg6Qm6mtCwtsNg13K3ixCZpf93YV1E0kat40qJqtVra OhaKWN9JuIWLr+CtTRnG2fYofkxz83sE5FEFd5lLTzBBZq1NGQ6iWO+3N1tE0JCY C9+ltzv169nCKD2R/BAMVe1L+9xTb42lmHrmBT2e7fTnEfh2cV4YxdKSYnv6Ts6S BZCqdpkDaF84tt15X7cJI4G+niu2NXf1zgizDDlxDg2fDZ0OBVVqe0T96BYvkLWr Xw0ZLoc2M9BwLl9ifeh7AOgfirw2EePeOEGhic1AoLU81mQHO0e7oVx3BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJfJz6oHwRv3XRCUCSylm4wkRZ9MB8GA1UdIwQY MBaAFGf1GiXS85IlJKammx19Yc08wqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYt NTYyNmI1NGQxYTIxLzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYtNTYyNmI1NGQxYTIx LzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeSItBw1 9kxt+o18xqH5H1G1wQaQjdGCbJVCaFXvvnIi/ssoaKLUIklxJKE/shFO0If2/D3/ cpcrBJ7FJPTGEVWsC9byXoHZp5XED+Edr/JrTadxB7jSWjuPQWuQSkOgN7pcbkz6 PGXAqoHlt136bnrCkEXx7DMeowVd3v3BpBg/M5Tzsr/MRHqZ4u3kWpGYGzal8tf5 OI2cAnpzSQVChcCEksmTOpxnAiQrvBb2jFdssd4ioCp6QXVqXiCjAXC6+ltGp6Li H4UD6uPJMOo7xWrJ3LPwQgOiP0gSCpc8SJnEPGppVlTW3PJ71CoJ9DicXRlVb8wg vQVlVrsv7LlOcQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:08:33 2025 by rpki-client