This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json) Hash identifier: skL6nPgqFPObQMxNHW4PdBkNuNWEwd/4evLwkBdnYdw= Subject key identifier: C2:F8:F4:B4:1E:36:40:9F:EB:5C:CD:7D:9A:90:67:02:2E:EF:7F:D2 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019B3EA3994BF02420971E4E9F817A26CE2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 02:01:07 +0000 Manifest this update: Sun 21 Dec 2025 02:01:07 +0000 Manifest next update: Mon 22 Dec 2025 02:01:07 +0000 Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=) 2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=) 3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=) 4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: mDNHfunmix9zxXeakRIjq/ruZh8O/RFuwk8otuKDz6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:99:4b:f0:24:20:97:1e:4e:9f:81:7a:26:ce:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Dec 21 02:01:07 2025 GMT Not After : Dec 22 02:01:07 2025 GMT Subject: CN=c2f8f4b41e36409feb5ccd7d9a9067022eef7fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:97:6a:a2:fa:2d:15:aa:28:0e:fa:bc:b5: 26:1f:b6:fb:b6:3f:cd:3a:71:20:fa:19:e2:09:7d: bf:ce:e1:f8:df:a6:3b:a3:65:95:65:e7:3b:5c:75: 1d:b5:aa:3c:8b:9a:8b:aa:63:cb:24:48:c1:09:45: db:b9:6b:5a:c2:14:d7:25:c3:21:de:d3:8d:5b:8b: 4b:d5:f2:e2:19:de:23:d7:05:d1:66:18:63:8f:06: 7c:21:e7:1d:2c:e1:5c:f2:79:e0:15:47:ff:13:cc: cf:38:30:e3:46:66:81:c9:4c:bf:68:a1:ac:ea:c8: 53:13:88:a5:a7:17:8a:16:09:07:ae:b3:8c:c5:cd: ce:e0:fd:e4:d4:34:af:38:d2:38:e1:c6:e1:57:40: 31:f7:b8:3b:8c:2e:15:b5:e8:9c:c6:3d:8a:7f:c6: e6:2d:58:bf:92:7c:69:9d:8a:1b:1c:b4:ff:61:a2: a8:78:bb:4b:06:59:49:de:5f:84:9c:2a:12:62:ba: 2b:fa:3b:d3:b1:bd:98:d6:de:6b:81:76:d0:1e:e9: 8a:05:cb:7d:9f:35:38:99:6e:dd:b8:71:19:5a:b9: a6:11:7d:37:29:46:84:c5:6d:09:8e:02:fc:c9:2b: d7:7a:05:52:40:f6:71:c2:13:2f:8f:b3:ed:89:98: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F8:F4:B4:1E:36:40:9F:EB:5C:CD:7D:9A:90:67:02:2E:EF:7F:D2 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b9:a0:68:e4:9e:44:20:2d:b1:fb:e3:91:c2:43:b7:7a:a4: 95:fe:64:c3:b2:40:5e:86:b1:09:dd:04:91:44:c1:be:15:4c: ad:40:1a:4a:99:af:00:54:73:85:3f:de:69:07:b8:84:15:6c: aa:26:b1:ad:43:f2:df:17:fa:09:7d:e2:39:df:31:88:39:db: 98:2d:55:4e:5e:2e:9d:27:40:ea:5b:41:d1:a0:b7:ef:cf:4d: de:19:3d:b1:d6:92:ef:f8:09:0b:86:15:89:eb:8f:ea:52:a4: 35:c2:28:81:18:7e:71:52:42:42:fe:3c:f8:c2:95:4c:f5:d9: 0e:1d:22:ad:04:63:c4:75:45:b0:22:63:f4:9e:87:0f:d5:4b: 19:63:e1:86:c9:f4:56:c6:05:a7:37:5e:44:c2:19:c0:04:d4: cc:bd:76:a0:24:0a:ff:6e:b4:c3:67:03:97:65:97:b9:3d:59: 34:fd:9a:c8:6b:fc:a0:c2:63:95:7c:5f:9c:71:2b:36:1d:ac: 4c:a9:3c:d8:9c:fc:46:27:17:f5:95:56:19:aa:63:c6:c0:79: 49:57:7e:b6:76:c6:94:66:0e:b4:83:d9:2a:7c:2e:a8:d2:f6: 57:39:2a:5a:41:10:f4:15:7a:e1:99:43:f3:65:6f:60:6a:0f: c6:e8:17:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5lL8CQglx5On4F6Js4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjUxMjIxMDIwMTA3WhcNMjUxMjIyMDIwMTA3WjAzMTEwLwYDVQQD EyhjMmY4ZjRiNDFlMzY0MDlmZWI1Y2NkN2Q5YTkwNjcwMjJlZWY3ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl+XaqL6LRWqKA76vLUmH7b7tj/N OnEg+hniCX2/zuH436Y7o2WVZec7XHUdtao8i5qLqmPLJEjBCUXbuWtawhTXJcMh 3tONW4tL1fLiGd4j1wXRZhhjjwZ8IecdLOFc8nngFUf/E8zPODDjRmaByUy/aKGs 6shTE4ilpxeKFgkHrrOMxc3O4P3k1DSvONI44cbhV0Ax97g7jC4Vteicxj2Kf8bm LVi/knxpnYobHLT/YaKoeLtLBllJ3l+EnCoSYror+jvTsb2Y1t5rgXbQHumKBct9 nzU4mW7duHEZWrmmEX03KUaExW0JjgL8ySvXegVSQPZxwhMvj7PtiZg4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML49LQeNkCf61zNfZqQZwIu73/SMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbmgaOSe RCAtsfvjkcJDt3qklf5kw7JAXoaxCd0EkUTBvhVMrUAaSpmvAFRzhT/eaQe4hBVs qiaxrUPy3xf6CX3iOd8xiDnbmC1VTl4unSdA6ltB0aC3789N3hk9sdaS7/gJC4YV ieuP6lKkNcIogRh+cVJCQv48+MKVTPXZDh0irQRjxHVFsCJj9J6HD9VLGWPhhsn0 VsYFpzdeRMIZwATUzL12oCQK/260w2cDl2WXuT1ZNP2ayGv8oMJjlXxfnHErNh2s TKk82Jz8RicX9ZVWGapjxsB5SVd+tnbGlGYOtIPZKnwuqNL2VzkqWkEQ9BV64ZlD 82VvYGoPxugX9Q== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:01 2025 by rpki-client