This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json) Hash identifier: cEkyftnjJdxu/7QmFmjO8oYrJN4EB2V7mVh7gTI/iXQ= Subject key identifier: A9:A2:CA:83:C7:42:2E:80:51:12:45:B3:BD:85:8B:35:A2:9D:3E:3A Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Certificate serial: 019B2364131CE333D4076C961CC23F919E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 19:01:59 +0000 Manifest this update: Mon 15 Dec 2025 19:01:59 +0000 Manifest next update: Tue 16 Dec 2025 19:01:59 +0000 Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=) 2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: Gd7omkd4jOLGR7HwVzwYeqDFQWSSm7lhh/ZIuwWLGZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:13:1c:e3:33:d4:07:6c:96:1c:c2:3f:91:9e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Validity Not Before: Dec 15 19:01:59 2025 GMT Not After : Dec 16 19:01:59 2025 GMT Subject: CN=a9a2ca83c7422e80511245b3bd858b35a29d3e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:bf:8e:b3:6f:5a:5a:22:02:bf:78:bb:c5: 5c:1c:21:23:f0:10:aa:37:d0:6c:04:e4:87:8c:0f: 35:9c:90:df:3e:dd:d7:10:ac:c4:c3:fb:35:49:48: 66:d5:9d:8c:6b:ec:61:3c:ad:b1:19:cf:6a:1d:57: 03:3f:74:d8:2b:7e:17:ab:16:f0:f7:21:18:fb:ca: 88:63:cf:b6:98:52:ff:2c:24:0b:c4:1a:fb:23:54: ce:92:da:35:3b:eb:fc:a8:9d:34:91:98:3c:22:30: 14:0c:1c:b6:dd:b7:2a:48:65:ae:ac:d1:0c:70:96: 63:4a:71:e3:ec:6a:ac:64:b1:f3:64:ce:da:32:3f: 15:db:1b:72:13:bc:3b:e1:cf:7e:1c:df:31:14:fe: 5a:f1:8e:94:a0:0f:65:b4:15:55:5e:45:6a:05:32: 10:7b:9d:e8:8b:0c:61:14:e2:40:b8:71:8c:dc:71: 28:a6:f3:78:68:b4:52:d6:40:01:38:08:c4:cb:87: c0:88:e9:4e:ea:e3:62:86:d0:df:7e:5d:a3:39:5b: db:10:68:ce:b7:da:5e:63:97:11:61:72:99:9c:3e: 93:9b:01:c5:aa:aa:2b:02:8c:2d:f6:66:90:a7:36: 00:e0:42:5b:b9:60:6d:18:f3:4c:6d:81:0a:73:76: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A2:CA:83:C7:42:2E:80:51:12:45:B3:BD:85:8B:35:A2:9D:3E:3A X509v3 Authority Key Identifier: keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:cb:c6:51:11:3e:eb:16:83:78:6f:11:1f:d5:eb:cb:e3:c0: 7d:93:7f:79:82:ca:c0:92:8d:92:a0:19:1b:11:dd:f4:b1:f9: 00:9b:34:37:b6:17:30:f7:fa:67:75:5e:e8:4e:b5:f3:16:ec: 9a:17:6f:71:91:26:33:45:dc:f2:c0:ab:9e:40:ed:62:9f:1c: bc:1a:42:93:b0:ee:c7:60:b6:28:28:f2:32:d2:83:0b:6d:a8: b5:00:e4:2c:f8:5b:92:e7:e4:33:21:d7:c4:41:62:6e:19:41: 20:a0:b2:d6:5c:e3:4c:be:b8:3b:e7:a9:7f:88:0a:95:65:45: d8:66:fe:b4:07:5e:60:0f:9f:77:7c:7f:82:af:0e:06:24:3a: 97:87:8b:f5:c3:95:7b:a6:9c:63:ef:2f:79:91:f9:fb:9a:93: 63:76:e7:a3:bc:5c:58:b1:c9:1f:a8:06:f6:a2:38:3a:05:70: d9:66:e8:93:9d:1f:ca:9f:93:b9:08:d9:b2:ce:cf:d4:5f:f5: 2d:65:25:ed:48:c8:40:69:e6:7f:b8:91:14:bf:7d:e8:99:90: 6b:03:f9:d7:8b:34:a7:9e:13:80:ec:5e:a9:37:02:a8:1b:b2: e1:b9:f4:ed:68:78:b8:8d:d0:9b:2f:f6:06:a6:10:b0:df:dc: 85:a0:74:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZBMc4zPUB2yWHMI/kZ6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjUxYTI1ZDJmMzkyMjUyNGE2YTY5YjFkN2Q2MWNkM2Nj MmE4ZGEwHhcNMjUxMjE1MTkwMTU5WhcNMjUxMjE2MTkwMTU5WjAzMTEwLwYDVQQD EyhhOWEyY2E4M2M3NDIyZTgwNTExMjQ1YjNiZDg1OGIzNWEyOWQzZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovG/jrNvWloiAr94u8VcHCEj8BCq N9BsBOSHjA81nJDfPt3XEKzEw/s1SUhm1Z2Ma+xhPK2xGc9qHVcDP3TYK34Xqxbw 9yEY+8qIY8+2mFL/LCQLxBr7I1TOkto1O+v8qJ00kZg8IjAUDBy23bcqSGWurNEM cJZjSnHj7GqsZLHzZM7aMj8V2xtyE7w74c9+HN8xFP5a8Y6UoA9ltBVVXkVqBTIQ e53oiwxhFOJAuHGM3HEopvN4aLRS1kABOAjEy4fAiOlO6uNihtDffl2jOVvbEGjO t9peY5cRYXKZnD6TmwHFqqorAowt9maQpzYA4EJbuWBtGPNMbYEKc3YANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmiyoPHQi6AURJFs72FizWinT46MB8GA1UdIwQY MBaAFGf1GiXS85IlJKammx19Yc08wqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYt NTYyNmI1NGQxYTIxLzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYtNTYyNmI1NGQxYTIx LzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicvGURE+ 6xaDeG8RH9Xry+PAfZN/eYLKwJKNkqAZGxHd9LH5AJs0N7YXMPf6Z3Ve6E618xbs mhdvcZEmM0Xc8sCrnkDtYp8cvBpCk7Dux2C2KCjyMtKDC22otQDkLPhbkufkMyHX xEFibhlBIKCy1lzjTL64O+epf4gKlWVF2Gb+tAdeYA+fd3x/gq8OBiQ6l4eL9cOV e6acY+8veZH5+5qTY3bno7xcWLHJH6gG9qI4OgVw2Wbok50fyp+TuQjZss7P1F/1 LWUl7UjIQGnmf7iRFL996JmQawP514s0p54TgOxeqTcCqBuy4bn07Wh4uI3Qmy/2 BqYQsN/chaB0QQ== -----END CERTIFICATE-----Generated at Mon Dec 15 21:39:17 2025 by rpki-client