This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json) Hash identifier: g0JTuKcrWK4VPbV1mcGC9jaLSCix5gsoaN84hQ3vTqU= Subject key identifier: 19:86:76:45:FC:8A:99:A1:49:66:BD:5F:4D:C5:41:C3:97:B3:D4:F1 Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Certificate serial: 019B35A01B54DFD659DF56DEDBD993CC6C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 08:00:43 +0000 Manifest this update: Fri 19 Dec 2025 08:00:43 +0000 Manifest next update: Sat 20 Dec 2025 08:00:43 +0000 Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=) 2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=) 3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: 8eky1BJjizNT4Ov15JlWFGv+iXeitKRcS57A8al643k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:1b:54:df:d6:59:df:56:de:db:d9:93:cc:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Validity Not Before: Dec 19 08:00:43 2025 GMT Not After : Dec 20 08:00:43 2025 GMT Subject: CN=19867645fc8a99a14966bd5f4dc541c397b3d4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:a4:f6:51:d3:1d:58:e8:f2:41:a2:21:9d: 3e:89:0d:cf:c1:82:2b:e2:40:8d:cb:5c:cb:3b:59: e5:ee:96:fd:d8:48:51:c9:a5:74:a3:6b:9f:02:84: 21:f6:ee:72:23:c1:98:54:a9:6a:fa:3d:73:71:84: 80:49:09:23:bc:39:0e:6e:61:78:57:7e:d4:f8:46: 01:a1:45:64:af:69:7a:40:ec:00:e3:e0:da:30:06: a3:48:c0:4f:41:53:3b:b7:80:c2:90:8c:ea:54:20: 7b:68:b2:01:5e:ef:72:6b:9a:3a:44:22:e3:6a:19: 18:4c:87:48:0d:2d:69:cd:10:08:04:e7:00:77:9c: d4:43:8d:92:0c:3d:9b:a4:bd:ac:33:b7:29:60:26: f4:06:d3:12:9a:97:0f:e8:33:99:3b:9c:5d:27:a0: 26:78:dc:6d:ec:66:62:64:30:4a:6e:7c:1c:9d:7a: 8c:4c:26:0a:ae:75:cd:d2:02:6b:01:03:34:65:16: 4e:cc:01:36:9f:ac:9e:5f:fa:76:71:0c:cc:47:a4: 45:7c:16:30:32:df:a6:24:e4:9a:6a:ff:e7:fb:5f: 4b:6e:f0:34:85:cb:10:9d:d2:2d:90:43:4f:be:6a: 95:9b:e5:e3:52:4d:bb:da:37:2a:68:1e:91:83:1f: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:76:45:FC:8A:99:A1:49:66:BD:5F:4D:C5:41:C3:97:B3:D4:F1 X509v3 Authority Key Identifier: keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f8:4d:1f:c7:66:f2:1b:4f:f9:7d:dc:fc:df:96:7c:ee:9d: e0:2e:05:76:ce:cb:d5:ae:00:5f:2c:c9:1f:db:36:ce:2a:80: 1d:17:cd:1c:40:48:cd:af:be:d8:e2:45:7d:1e:70:a9:64:af: c1:bc:07:bc:60:0f:1b:e8:d7:4b:b8:6c:02:1c:16:31:5e:95: 7f:4d:c7:6c:a4:09:5a:ee:ea:0c:23:3e:d1:ea:18:7b:06:22: f3:0f:31:f1:9a:3e:02:6f:16:2b:74:b3:6c:02:f2:f4:84:7c: 27:58:4b:98:8b:37:b3:cb:9e:05:64:18:b5:40:9e:e7:90:9c: 54:18:1f:13:b3:10:18:aa:31:91:d4:6b:be:96:de:40:31:26: ae:6a:f2:fd:16:b5:33:06:bf:e2:d2:63:27:e0:97:af:9c:5b: 36:e4:3f:f9:ce:a9:33:75:1a:e4:86:52:60:7b:f4:56:1d:21: ea:bd:4a:a6:be:8d:a7:3c:76:e4:44:ac:27:f9:75:6b:5e:80: 81:29:33:e1:5d:a8:1e:c5:de:e8:dc:1e:71:82:fb:d0:d4:95: 01:ec:f4:3d:1f:b2:4c:d0:ff:25:f1:eb:3b:fe:07:e6:1a:5e: d4:b9:e8:07:6d:e3:07:e6:f8:94:05:b1:e8:92:12:4a:de:b4: 73:72:63:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oBtU39ZZ31be29mTzGx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2 NDU3NjgwHhcNMjUxMjE5MDgwMDQzWhcNMjUxMjIwMDgwMDQzWjAzMTEwLwYDVQQD EygxOTg2NzY0NWZjOGE5OWExNDk2NmJkNWY0ZGM1NDFjMzk3YjNkNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEmk9lHTHVjo8kGiIZ0+iQ3PwYIr 4kCNy1zLO1nl7pb92EhRyaV0o2ufAoQh9u5yI8GYVKlq+j1zcYSASQkjvDkObmF4 V37U+EYBoUVkr2l6QOwA4+DaMAajSMBPQVM7t4DCkIzqVCB7aLIBXu9ya5o6RCLj ahkYTIdIDS1pzRAIBOcAd5zUQ42SDD2bpL2sM7cpYCb0BtMSmpcP6DOZO5xdJ6Am eNxt7GZiZDBKbnwcnXqMTCYKrnXN0gJrAQM0ZRZOzAE2n6yeX/p2cQzMR6RFfBYw Mt+mJOSaav/n+19LbvA0hcsQndItkENPvmqVm+XjUk272jcqaB6Rgx/T7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmGdkX8ipmhSWa9X03FQcOXs9TxMB8GA1UdIwQY MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofhNH8dm 8htP+X3c/N+WfO6d4C4Fds7L1a4AXyzJH9s2ziqAHRfNHEBIza++2OJFfR5wqWSv wbwHvGAPG+jXS7hsAhwWMV6Vf03HbKQJWu7qDCM+0eoYewYi8w8x8Zo+Am8WK3Sz bALy9IR8J1hLmIs3s8ueBWQYtUCe55CcVBgfE7MQGKoxkdRrvpbeQDEmrmry/Ra1 Mwa/4tJjJ+CXr5xbNuQ/+c6pM3Ua5IZSYHv0Vh0h6r1Kpr6Npzx25ESsJ/l1a16A gSkz4V2oHsXe6NwecYL70NSVAez0PR+yTND/JfHrO/4H5hpe1LnoB23jB+b4lAWx 6JISSt60c3JjcA== -----END CERTIFICATE-----Generated at Fri Dec 19 16:20:15 2025 by rpki-client