This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: Y6XaI4+YaMETb/1Jj0tVCMhKnasHKqfs5sbPm7wI8qg= Subject key identifier: C5:70:F1:C5:95:0D:15:D4:2B:47:7B:C7:82:EA:37:2D:4B:51:6E:7A Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B21768C9A79269A28ABB895FC0D828B76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0C3C Signing time: Mon 15 Dec 2025 10:02:55 +0000 Manifest this update: Mon 15 Dec 2025 10:02:55 +0000 Manifest next update: Tue 16 Dec 2025 10:02:55 +0000 Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=) 2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=) 3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=) 4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: L60wBAYA8b7oPNvX1fYsfVPSMx4yaSH1I8VZzb6/rKI=) 5: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 6: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=) 7: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=) 8: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=) 9: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=) 10: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:8c:9a:79:26:9a:28:ab:b8:95:fc:0d:82:8b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Dec 15 10:02:55 2025 GMT Not After : Dec 16 10:02:55 2025 GMT Subject: CN=c570f1c5950d15d42b477bc782ea372d4b516e7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:22:71:39:84:33:e6:8b:42:c6:88:10:95:13: 1e:29:f6:05:e8:50:1d:74:94:2e:ee:05:5f:a7:31: e9:fa:45:6d:de:95:8e:f9:90:fe:4e:b0:42:c0:44: 83:d2:6e:ca:ea:4f:c0:9c:db:1f:78:8e:14:f4:c7: 2d:67:7b:ff:63:37:b1:cb:da:22:35:95:f9:8e:2b: ce:1a:1f:45:9d:67:fe:34:a2:70:eb:3f:c4:30:ad: 3e:73:28:75:58:da:83:07:e8:43:b5:0b:b4:c7:fd: 84:2d:80:cb:3c:d8:70:79:b9:94:4c:10:a1:1f:5f: f1:d8:6f:67:15:f5:8f:5a:13:6b:fa:67:ea:60:f8: ce:70:dc:0d:7a:3e:28:ff:70:a0:23:21:59:01:66: 1d:f3:de:c0:fe:03:56:07:cd:45:33:c4:4f:f2:b0: a6:8a:d6:32:84:4f:7c:95:c5:7d:24:70:12:a5:a5: 8e:79:7a:25:7e:b2:35:9f:67:d5:b6:b7:a5:f5:5c: 72:50:f1:4a:af:e4:6d:cd:af:d1:d6:6a:29:ed:74: 80:9e:aa:64:32:f1:e1:74:5f:5c:3b:e5:c7:df:84: 2a:e8:10:ed:60:f5:78:91:19:d8:8d:fd:3e:dc:e9: af:54:0c:58:02:de:79:4e:82:6e:f2:a8:49:b9:50: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:F1:C5:95:0D:15:D4:2B:47:7B:C7:82:EA:37:2D:4B:51:6E:7A X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:59:b2:6c:eb:57:5f:fc:5a:82:86:17:5d:82:f4:5a:a8:98: 57:a0:b0:99:59:7a:ca:61:fa:37:13:3b:12:73:2e:8b:e6:f6: de:c2:ca:7e:a4:d3:84:5a:82:8c:b1:2d:cd:7f:b0:fd:75:8a: 94:e0:c8:fb:34:b3:c5:11:c3:47:cd:3a:69:6f:be:56:76:10: e8:59:a0:db:c3:ed:62:02:31:4d:70:3a:d5:74:9e:db:e4:3d: 7e:d0:98:76:bc:34:85:aa:29:a2:4c:63:e2:c0:f6:e5:46:e7: 8e:22:b1:d9:06:c8:09:a0:78:97:db:e1:f6:9b:06:8f:e3:61: e0:18:41:f0:83:c6:13:3d:c1:1d:2c:26:f8:fc:62:8b:47:3b: 79:d3:ad:60:1c:b2:dc:f0:1a:65:d9:d9:c9:3b:76:ad:35:39: 62:8d:ae:d6:28:7a:f1:86:ec:54:28:02:d3:79:f3:ce:7c:5b: f1:2c:8c:3b:aa:48:6f:d1:69:93:4c:70:21:00:11:7a:e6:46: d8:17:1a:cd:b7:2a:32:da:cd:1a:20:36:e6:a0:e5:99:c0:d1: 42:7d:ad:b5:4e:2a:9c:f2:3c:2d:0c:b1:fd:6d:05:6a:5c:8f: 98:bc:ad:4c:98:ad:07:6c:e2:24:a3:ae:15:6f:2f:de:d2:85: 79:19:86:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdoyaeSaaKKu4lfwNgot2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjUxMjE1MTAwMjU1WhcNMjUxMjE2MTAwMjU1WjAzMTEwLwYDVQQD EyhjNTcwZjFjNTk1MGQxNWQ0MmI0NzdiYzc4MmVhMzcyZDRiNTE2ZTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCJxOYQz5otCxogQlRMeKfYF6FAd dJQu7gVfpzHp+kVt3pWO+ZD+TrBCwESD0m7K6k/AnNsfeI4U9MctZ3v/Yzexy9oi NZX5jivOGh9FnWf+NKJw6z/EMK0+cyh1WNqDB+hDtQu0x/2ELYDLPNhwebmUTBCh H1/x2G9nFfWPWhNr+mfqYPjOcNwNej4o/3CgIyFZAWYd897A/gNWB81FM8RP8rCm itYyhE98lcV9JHASpaWOeXolfrI1n2fVtrel9VxyUPFKr+Rtza/R1mop7XSAnqpk MvHhdF9cO+XH34Qq6BDtYPV4kRnYjf0+3OmvVAxYAt55ToJu8qhJuVCwKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVw8cWVDRXUK0d7x4LqNy1LUW56MB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFmybOtX X/xagoYXXYL0WqiYV6CwmVl6ymH6NxM7EnMui+b23sLKfqTThFqCjLEtzX+w/XWK lODI+zSzxRHDR806aW++VnYQ6Fmg28PtYgIxTXA61XSe2+Q9ftCYdrw0haopokxj 4sD25UbnjiKx2QbICaB4l9vh9psGj+Nh4BhB8IPGEz3BHSwm+Pxii0c7edOtYByy 3PAaZdnZyTt2rTU5Yo2u1ih68YbsVCgC03nzznxb8SyMO6pIb9Fpk0xwIQAReuZG 2BcazbcqMtrNGiA25qDlmcDRQn2ttU4qnPI8LQyx/W0FalyPmLytTJitB2ziJKOu FW8v3tKFeRmGKw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:57:06 2025 by rpki-client