This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json) Hash identifier: /IxyZWD1NRiTAd4WKyiMUYnVXO0M3lrHaZT4xBMuqNo= Subject key identifier: 2F:18:F3:94:6F:52:1C:1A:46:7E:ED:B3:40:F4:51:A4:81:04:60:DB Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07 Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607 Certificate serial: 019B34C5BCE7B70605CFD3B18002016E7148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft Manifest number: 0DC1 Signing time: Fri 19 Dec 2025 04:02:12 +0000 Manifest this update: Fri 19 Dec 2025 04:02:12 +0000 Manifest next update: Sat 20 Dec 2025 04:02:12 +0000 Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=) 2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: YNYXBtGjeSYvY/5jdJ6ilG0lISjAnokZPMfPZy9AlZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:bc:e7:b7:06:05:cf:d3:b1:80:02:01:6e:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6798580bb843519c104420e59c0b5c2403414607 Validity Not Before: Dec 19 04:02:12 2025 GMT Not After : Dec 20 04:02:12 2025 GMT Subject: CN=2f18f3946f521c1a467eedb340f451a4810460db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:24:52:3e:0a:62:80:6b:6d:e3:6a:fc:02: 84:6e:20:a5:8f:6a:c2:c5:7d:fa:79:a2:ec:cb:06: 7c:bb:cb:37:cc:91:ea:f9:1c:19:6a:65:cb:b2:f0: 4d:f8:0b:1c:b6:ea:16:49:ed:56:6b:10:59:f6:96: bc:5e:2d:1d:70:4b:96:a4:9f:37:e3:79:7a:35:3f: 3f:e2:50:a6:ea:c4:f1:a4:fb:eb:c9:d2:a8:53:84: 94:71:82:4a:a5:d4:70:53:85:6a:a2:94:9d:fa:d8: 14:97:ad:fb:04:2f:96:45:d2:9f:a5:8d:a6:a3:6e: 4f:4f:3e:75:d0:4c:6b:28:d6:0f:8d:72:f1:01:84: ec:d6:d0:16:c1:0b:f3:88:23:b4:93:23:55:c3:eb: a1:90:db:a7:64:6e:db:5e:12:00:bf:9d:b4:d3:7c: 20:74:1b:b8:a2:00:66:f4:70:53:e2:a0:5f:62:f6: c9:27:36:a0:99:2a:64:ba:f9:a1:8d:c2:51:66:ae: ad:0c:18:21:dd:3d:ba:8a:66:f9:c6:cb:f0:7b:07: d4:74:39:66:f8:1c:4d:f4:73:d5:81:04:c6:b5:c9: 3e:cb:e1:34:af:14:5d:03:8c:39:ae:6a:ba:a4:0f: 72:7c:8c:d0:76:74:74:86:03:5e:0f:0a:1d:ea:e2: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:18:F3:94:6F:52:1C:1A:46:7E:ED:B3:40:F4:51:A4:81:04:60:DB X509v3 Authority Key Identifier: keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:42:93:b8:07:79:05:59:ff:9e:7e:fc:9b:d3:35:f1:1e: b8:42:5a:2f:01:c6:25:c7:23:9d:e8:5b:a1:fc:b1:12:42:c7: e3:5b:54:c7:cd:71:9f:13:f9:d7:9a:93:be:57:b5:8e:5c:3a: e4:be:d8:5a:ed:3f:4c:7d:53:16:dc:84:c6:4a:2a:a9:85:79: 45:de:71:82:00:fa:21:d5:6e:86:4a:d7:98:9b:90:1b:43:a4: ee:28:74:43:2c:c4:f6:e2:be:2c:5a:c3:69:20:22:73:54:22: a5:33:dc:21:ed:66:4e:05:cb:bf:94:8b:a7:71:ca:82:24:33: 84:2a:39:56:cb:be:98:9b:94:c8:83:02:ed:1d:88:5a:88:ef: e1:45:c9:fc:a8:1b:7f:2d:fa:bd:d8:c9:68:f4:38:06:27:57: 21:be:7c:78:5c:16:72:e8:ad:cd:02:68:bb:1d:10:aa:2c:fe: e7:22:9e:f7:4d:ba:6b:c0:7e:4e:19:7f:42:50:a6:8a:a9:52: 94:23:64:56:ea:ae:0d:ea:8e:ae:10:fd:0b:ce:97:0c:61:88: d5:99:e6:7a:c3:18:4e:8b:90:b2:aa:d0:3f:3c:a0:a7:e5:23: eb:fb:85:92:dd:d9:25:a8:69:f3:f2:a1:c1:fe:a1:89:71:88: f8:d6:dc:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xbzntwYFz9OxgAIBbnFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTg1ODBiYjg0MzUxOWMxMDQ0MjBlNTljMGI1YzI0MDM0 MTQ2MDcwHhcNMjUxMjE5MDQwMjEyWhcNMjUxMjIwMDQwMjEyWjAzMTEwLwYDVQQD EygyZjE4ZjM5NDZmNTIxYzFhNDY3ZWVkYjM0MGY0NTFhNDgxMDQ2MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pgkUj4KYoBrbeNq/AKEbiClj2rC xX36eaLsywZ8u8s3zJHq+RwZamXLsvBN+AsctuoWSe1WaxBZ9pa8Xi0dcEuWpJ83 43l6NT8/4lCm6sTxpPvrydKoU4SUcYJKpdRwU4VqopSd+tgUl637BC+WRdKfpY2m o25PTz510ExrKNYPjXLxAYTs1tAWwQvziCO0kyNVw+uhkNunZG7bXhIAv52003wg dBu4ogBm9HBT4qBfYvbJJzagmSpkuvmhjcJRZq6tDBgh3T26imb5xsvwewfUdDlm +BxN9HPVgQTGtck+y+E0rxRdA4w5rmq6pA9yfIzQdnR0hgNeDwod6uLLTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8Y85RvUhwaRn7ts0D0UaSBBGDbMB8GA1UdIwQY MBaAFGeYWAu4Q1GcEEQg5ZwLXCQDQUYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQt MWY2N2Q5NDViOGI5LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQtMWY2N2Q5NDViOGI5 LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqtCk7gH eQVZ/55+/JvTNfEeuEJaLwHGJccjnehbofyxEkLH41tUx81xnxP515qTvle1jlw6 5L7YWu0/TH1TFtyExkoqqYV5Rd5xggD6IdVuhkrXmJuQG0Ok7ih0QyzE9uK+LFrD aSAic1QipTPcIe1mTgXLv5SLp3HKgiQzhCo5Vsu+mJuUyIMC7R2IWojv4UXJ/Kgb fy36vdjJaPQ4BidXIb58eFwWcuitzQJoux0Qqiz+5yKe9026a8B+Thl/QlCmiqlS lCNkVuquDeqOrhD9C86XDGGI1ZnmesMYTouQsqrQPzygp+Uj6/uFkt3ZJahp8/Kh wf6hiXGI+Nbccw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:59:04 2025 by rpki-client