This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json) Hash identifier: W+YtcA/ubCodtMKr92YJEuqJIHqJGv45weFRpILVldw= Subject key identifier: D1:DB:3E:E7:B4:92:93:AA:40:9A:56:E6:6B:AF:A9:79:AA:CE:D7:29 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019B3CB4DF7B35D3E7FBDBEC14B7C9959C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 17:00:45 +0000 Manifest this update: Sat 20 Dec 2025 17:00:45 +0000 Manifest next update: Sun 21 Dec 2025 17:00:45 +0000 Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=) 2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=) 3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=) 4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: c5pA2CPyMwOQ7cBU3I69+gl0UaI8tJFt7G4/NgHR/44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:df:7b:35:d3:e7:fb:db:ec:14:b7:c9:95:9c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Dec 20 17:00:45 2025 GMT Not After : Dec 21 17:00:45 2025 GMT Subject: CN=d1db3ee7b49293aa409a56e66bafa979aaced729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:5e:41:03:8f:b3:47:27:1a:4e:c2:22:d7: 0f:00:70:af:91:34:c6:d1:e9:00:c5:8e:e4:c1:20: 5e:3e:52:4e:a9:da:0e:84:d4:91:f3:ab:c2:10:6e: 67:53:bb:19:c5:d3:8e:2b:f5:59:e8:39:2c:ca:11: 66:06:71:b6:22:00:f3:f0:e5:f8:21:19:a3:34:b2: 87:21:d3:b8:dd:d9:3e:54:ae:31:a7:23:3a:d1:f3: bc:b5:56:9d:46:ee:8d:fb:bf:56:c3:af:6b:56:c4: 8e:ff:e0:97:f3:56:9c:76:86:96:e7:4d:51:f7:1a: 60:d4:cb:88:3f:79:7e:17:7d:0a:e0:98:2d:0a:e1: 9f:1d:79:c2:c9:2e:21:66:9a:00:c0:ac:f4:6b:a1: 01:10:5a:92:08:39:18:20:d6:e4:07:95:cd:c9:e0: 8c:ad:bf:5d:bc:17:ef:bf:c7:57:be:6d:91:29:4c: 00:e8:fa:c7:0b:f8:2f:9f:d5:44:6c:fa:58:50:2d: 04:68:e7:79:97:04:3c:81:30:ed:2e:ff:b9:34:fb: 02:f2:1b:5b:26:d9:91:4c:8b:47:44:78:8c:f2:45: 97:1e:55:56:26:61:e8:92:4f:c6:16:3c:ba:41:ba: 76:86:b8:53:75:8a:02:8f:b3:f4:cf:fc:1e:07:38: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:3E:E7:B4:92:93:AA:40:9A:56:E6:6B:AF:A9:79:AA:CE:D7:29 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7b:ab:48:6d:b2:78:ad:f4:61:28:ad:d3:70:e9:b8:a1:2c: 0e:db:69:4f:3e:3f:35:98:0c:e7:12:97:bb:d2:09:bd:16:f2: c3:f0:cd:21:74:b3:62:30:8c:9c:7d:a5:28:cb:d8:d3:8b:2d: 32:68:3d:99:95:03:db:b4:42:5e:84:a8:0f:c5:b5:4c:95:18: 95:2e:6a:4e:dd:c7:f5:52:60:c7:f3:53:d3:54:55:51:af:a3: 8e:9f:e4:19:d9:42:53:ce:c3:8b:64:b5:a7:e4:9f:49:65:8e: 68:5a:11:75:b9:8b:ef:40:a0:ac:c0:9f:c0:6c:2d:45:42:10: 55:dc:7b:44:88:78:dd:19:61:42:cb:78:df:29:8b:9d:b0:3c: 94:83:3b:4b:29:b9:6b:c5:2e:03:61:47:ce:ac:e0:ae:12:e5: 61:92:7c:1c:95:0f:e1:f7:a6:5d:8f:e9:38:40:12:ba:c8:90: 5c:ec:c8:bb:5b:bb:94:7f:6f:37:1b:a5:fd:91:6b:36:a6:2d: 2b:0c:49:a2:47:ad:a6:7a:55:0f:6f:64:2f:68:c5:0e:97:93: f3:dd:f9:3a:7e:59:c3:56:91:f2:23:db:55:5c:1b:55:1c:b6: 22:bd:60:3a:24:79:5b:fb:38:6d:bd:ad:84:c8:b9:f0:26:20: bd:0e:81:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tN97NdPn+9vsFLfJlZyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjUxMjIwMTcwMDQ1WhcNMjUxMjIxMTcwMDQ1WjAzMTEwLwYDVQQD EyhkMWRiM2VlN2I0OTI5M2FhNDA5YTU2ZTY2YmFmYTk3OWFhY2VkNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRheQQOPs0cnGk7CItcPAHCvkTTG 0ekAxY7kwSBePlJOqdoOhNSR86vCEG5nU7sZxdOOK/VZ6DksyhFmBnG2IgDz8OX4 IRmjNLKHIdO43dk+VK4xpyM60fO8tVadRu6N+79Ww69rVsSO/+CX81acdoaW501R 9xpg1MuIP3l+F30K4JgtCuGfHXnCyS4hZpoAwKz0a6EBEFqSCDkYINbkB5XNyeCM rb9dvBfvv8dXvm2RKUwA6PrHC/gvn9VEbPpYUC0EaOd5lwQ8gTDtLv+5NPsC8htb JtmRTItHRHiM8kWXHlVWJmHokk/GFjy6Qbp2hrhTdYoCj7P0z/weBziSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHbPue0kpOqQJpW5muvqXmqztcpMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3urSG2y eK30YSit03DpuKEsDttpTz4/NZgM5xKXu9IJvRbyw/DNIXSzYjCMnH2lKMvY04st Mmg9mZUD27RCXoSoD8W1TJUYlS5qTt3H9VJgx/NT01RVUa+jjp/kGdlCU87Di2S1 p+SfSWWOaFoRdbmL70CgrMCfwGwtRUIQVdx7RIh43RlhQst43ymLnbA8lIM7Sym5 a8UuA2FHzqzgrhLlYZJ8HJUP4femXY/pOEASusiQXOzIu1u7lH9vNxul/ZFrNqYt KwxJoketpnpVD29kL2jFDpeT8935On5Zw1aR8iPbVVwbVRy2Ir1gOiR5W/s4bb2t hMi58CYgvQ6BHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:33:47 2025 by rpki-client