This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json) Hash identifier: 3JN14SUwEKCDCN/6+XQADUla1NA2wOrHEMGy6/2JJa0= Subject key identifier: D1:FC:BA:3B:3A:4E:8D:09:EA:60:B7:F9:D0:A7:8F:71:7C:AC:2D:F9 Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d Certificate serial: 019B5976F3DC784E974AA761E8EDBAAEE564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft Manifest number: 12A2 Signing time: Fri 26 Dec 2025 07:02:06 +0000 Manifest this update: Fri 26 Dec 2025 07:02:06 +0000 Manifest next update: Sat 27 Dec 2025 07:02:06 +0000 Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: ruV9GsY403wC8NpQCX7MTcYGZYpGlJG7AufC6RH66mg=) 2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f3:dc:78:4e:97:4a:a7:61:e8:ed:ba:ae:e5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d Validity Not Before: Dec 26 07:02:06 2025 GMT Not After : Dec 27 07:02:06 2025 GMT Subject: CN=d1fcba3b3a4e8d09ea60b7f9d0a78f717cac2df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c6:1e:96:11:10:b5:28:a0:b3:8f:fe:18:2d: d9:81:b8:9c:50:6b:53:a2:83:4d:1c:4c:b2:f1:f8: 9e:28:ce:4f:05:b5:49:47:92:8b:9d:30:9d:6f:36: 8f:d8:f9:d4:4e:79:4b:96:a9:65:dd:73:8d:92:72: f6:be:cf:17:95:57:7e:49:bd:6e:65:85:87:c7:e6: cf:53:f2:e4:32:17:af:09:a3:35:87:e0:94:f2:4a: 61:fe:da:f7:82:e9:13:7a:2d:b6:b3:49:65:c2:aa: 86:2f:de:99:8d:47:75:50:5c:d3:43:eb:1c:25:b2: 04:88:55:66:b6:7c:1a:72:3f:f5:b6:38:5c:db:ab: 99:2b:29:a9:a9:3e:ec:c4:cf:e2:1d:d0:29:43:a7: 5d:62:9d:d3:fe:3c:b4:73:a8:76:54:2e:01:cd:cf: 24:98:66:7a:2b:cc:2f:72:83:c2:23:29:40:1c:86: 84:5b:d4:fc:3c:25:af:c5:fa:ed:e6:0d:df:6d:f6: 45:09:81:10:d8:b6:62:e8:38:e6:3c:14:de:f1:e4: 45:f4:9d:8b:bf:d2:41:83:dc:77:a2:36:76:ba:a5: 30:6b:3f:52:47:fc:78:03:1a:c3:fb:3e:18:39:fb: f0:b4:10:3f:d6:2c:08:60:e2:a9:60:ba:8b:d7:f3: 6b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:BA:3B:3A:4E:8D:09:EA:60:B7:F9:D0:A7:8F:71:7C:AC:2D:F9 X509v3 Authority Key Identifier: keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:aa:08:7b:9c:7f:74:bf:23:c7:ec:7c:83:f7:51:ba:44:34: 81:a4:37:aa:c2:4d:83:ac:d3:5d:e9:3f:2a:58:ce:a4:95:f7: 04:98:3b:e5:9d:02:cf:e1:49:ff:49:68:b1:0e:34:68:9a:ab: 5d:80:38:d2:5a:08:9e:59:a4:af:0b:76:b3:9c:f1:30:40:60: 36:f4:53:08:9d:90:4b:02:35:11:bd:28:1d:35:4e:cd:8c:c4: fb:c8:b5:09:ce:86:49:95:92:af:2d:45:13:1d:89:aa:65:ca: 8c:a3:64:04:38:a6:8c:ed:d5:21:e8:09:5c:d3:d7:2a:65:31: 70:e8:ad:ed:ac:d0:94:1f:36:62:d0:03:01:fd:2a:bf:be:28: 0a:a0:7b:53:52:49:9f:2c:dd:01:fa:a1:7b:11:2f:41:e4:f8: 22:99:91:3e:b4:8a:61:b3:02:92:d0:b9:f2:7d:7f:ab:14:55: 21:f8:10:a6:dc:7e:a1:0e:3f:8a:65:ee:c1:68:c4:5b:43:2e: e6:0d:18:a5:75:7a:61:d8:be:2b:5a:49:13:91:e3:8b:65:c7: 96:dc:ed:42:36:bb:f5:ec:09:c7:85:fd:29:2c:b9:cc:fa:0e: 05:38:06:b4:d8:9d:80:ef:b5:14:d3:d3:d4:fb:48:76:7b:9f: 22:13:77:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvPceE6XSqdh6O26ruVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj YjRjOGQwHhcNMjUxMjI2MDcwMjA2WhcNMjUxMjI3MDcwMjA2WjAzMTEwLwYDVQQD EyhkMWZjYmEzYjNhNGU4ZDA5ZWE2MGI3ZjlkMGE3OGY3MTdjYWMyZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78YelhEQtSigs4/+GC3ZgbicUGtT ooNNHEyy8fieKM5PBbVJR5KLnTCdbzaP2PnUTnlLlqll3XONknL2vs8XlVd+Sb1u ZYWHx+bPU/LkMhevCaM1h+CU8kph/tr3gukTei22s0llwqqGL96ZjUd1UFzTQ+sc JbIEiFVmtnwacj/1tjhc26uZKympqT7sxM/iHdApQ6ddYp3T/jy0c6h2VC4Bzc8k mGZ6K8wvcoPCIylAHIaEW9T8PCWvxfrt5g3fbfZFCYEQ2LZi6DjmPBTe8eRF9J2L v9JBg9x3ojZ2uqUwaz9SR/x4AxrD+z4YOfvwtBA/1iwIYOKpYLqL1/Nr3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH8ujs6To0J6mC3+dCnj3F8rC35MB8GA1UdIwQY MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2 LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKoIe5x/ dL8jx+x8g/dRukQ0gaQ3qsJNg6zTXek/KljOpJX3BJg75Z0Cz+FJ/0losQ40aJqr XYA40loInlmkrwt2s5zxMEBgNvRTCJ2QSwI1Eb0oHTVOzYzE+8i1Cc6GSZWSry1F Ex2JqmXKjKNkBDimjO3VIegJXNPXKmUxcOit7azQlB82YtADAf0qv74oCqB7U1JJ nyzdAfqhexEvQeT4IpmRPrSKYbMCktC58n1/qxRVIfgQptx+oQ4/imXuwWjEW0Mu 5g0YpXV6Ydi+K1pJE5Hji2XHltztQja79ewJx4X9KSy5zPoOBTgGtNidgO+1FNPT 1PtIdnufIhN3zQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client