This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json) Hash identifier: xmH9R3Jf9hbU9vcAXzQBZrO6k2u7xcXq6tbOtU4vlqs= Subject key identifier: 05:92:5D:A8:20:2B:BE:3C:68:5F:3B:C7:B9:6F:ED:72:EF:D2:FF:47 Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B390F1695BAB7A1E1555969EE3C99BC21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft Manifest number: 0EFC Signing time: Sat 20 Dec 2025 00:00:48 +0000 Manifest this update: Sat 20 Dec 2025 00:00:48 +0000 Manifest next update: Sun 21 Dec 2025 00:00:48 +0000 Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=) 2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=) 3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: Ow+jm4q6IoI4eD4SlnJP/zFqoEkMpnNoqOPJRcBWuk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:16:95:ba:b7:a1:e1:55:59:69:ee:3c:99:bc:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Dec 20 00:00:48 2025 GMT Not After : Dec 21 00:00:48 2025 GMT Subject: CN=05925da8202bbe3c685f3bc7b96fed72efd2ff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:15:30:60:0d:e9:d9:58:b6:83:c3:67:10: dd:a2:dc:8d:d7:08:06:09:e2:63:1a:19:fe:34:a3: 48:dd:65:81:51:09:4e:07:bd:6e:7b:43:cb:77:3a: 1e:6d:93:16:b3:19:02:7d:cc:9e:49:90:64:c3:9e: ba:15:d2:62:eb:6f:87:ee:88:d8:b4:aa:1c:51:06: 80:5e:22:91:43:72:2f:3f:55:ab:93:90:0d:21:9f: 42:63:a2:47:d6:2d:25:64:82:f2:a9:a2:53:d5:f8: 80:1f:c4:76:22:84:dd:d3:c7:0a:3a:94:61:78:1c: 5f:29:18:e1:d0:ac:fd:e9:60:e6:d6:e5:cf:5a:55: 35:7e:69:5d:27:23:70:a7:cb:c6:1c:47:96:11:b3: 7f:59:61:d2:ce:76:21:b8:65:92:1a:70:77:67:5f: 75:71:65:f5:3d:52:7b:6c:da:80:49:2a:85:df:3c: b0:cb:4f:c7:5f:95:da:e2:f5:cb:62:64:bd:82:a1: 6c:41:55:42:47:c5:0c:2b:5d:03:c2:ca:36:a8:b5: 86:5e:35:5c:9c:1d:95:dd:c2:5d:0a:1e:b4:f1:f9: 2f:8e:bb:d3:82:0e:ff:d4:9c:57:63:f7:32:98:79: 37:a6:65:b4:da:00:1a:12:ef:36:60:c0:38:1b:da: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:92:5D:A8:20:2B:BE:3C:68:5F:3B:C7:B9:6F:ED:72:EF:D2:FF:47 X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:07:f0:e0:d2:df:9a:fe:83:ca:d1:51:9e:6f:49:1a:fb: 40:44:ee:26:b9:65:0d:a8:7d:da:b1:6e:4e:f7:9f:57:34:0e: 84:3f:30:00:5c:ee:df:7e:60:36:03:b0:f0:a3:0c:10:ce:f4: 4c:c1:ce:fe:dd:71:70:41:21:9a:c5:40:c7:6b:b6:17:96:08: 54:ec:be:38:bd:67:be:8c:7f:fb:f3:91:86:42:f1:ab:33:af: 1d:b4:9f:e6:4c:2b:29:75:64:90:a6:f6:53:07:ca:45:92:38: 27:d3:85:ab:d4:3b:d3:ea:e6:a4:7d:cc:39:12:b1:08:4e:1e: 94:d4:a5:cd:f5:1c:ce:77:f1:34:49:3a:b1:a9:c2:67:70:15: 76:5b:7c:aa:84:ef:15:ec:bd:1f:08:8a:17:6e:84:08:c4:27: 54:1e:8f:96:37:d9:10:68:9c:dd:c6:5a:5c:2c:c3:94:86:87: c3:1c:86:7e:65:f3:e1:2e:1d:e0:1e:00:81:f1:dc:c6:a4:bb: e9:8d:19:63:ad:24:06:38:0a:94:ea:dd:13:65:c9:f5:6f:27: 82:bd:15:cc:24:af:c0:bf:b0:98:0c:ab:08:e1:fb:f9:8b:74: 99:b0:e6:7c:72:a0:ff:0e:a9:2e:16:98:ae:2f:bb:63:8e:19: 3c:c4:92:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DxaVureh4VVZae48mbwhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjUxMjIwMDAwMDQ4WhcNMjUxMjIxMDAwMDQ4WjAzMTEwLwYDVQQD EygwNTkyNWRhODIwMmJiZTNjNjg1ZjNiYzdiOTZmZWQ3MmVmZDJmZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFcVMGAN6dlYtoPDZxDdotyN1wgG CeJjGhn+NKNI3WWBUQlOB71ue0PLdzoebZMWsxkCfcyeSZBkw566FdJi62+H7ojY tKocUQaAXiKRQ3IvP1Wrk5ANIZ9CY6JH1i0lZILyqaJT1fiAH8R2IoTd08cKOpRh eBxfKRjh0Kz96WDm1uXPWlU1fmldJyNwp8vGHEeWEbN/WWHSznYhuGWSGnB3Z191 cWX1PVJ7bNqASSqF3zywy0/HX5Xa4vXLYmS9gqFsQVVCR8UMK10Dwso2qLWGXjVc nB2V3cJdCh608fkvjrvTgg7/1JxXY/cymHk3pmW02gAaEu82YMA4G9p3lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWSXaggK748aF87x7lv7XLv0v9HMB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpUH8ODS 35r+g8rRUZ5vSRr7QETuJrllDah92rFuTvefVzQOhD8wAFzu335gNgOw8KMMEM70 TMHO/t1xcEEhmsVAx2u2F5YIVOy+OL1nvox/+/ORhkLxqzOvHbSf5kwrKXVkkKb2 UwfKRZI4J9OFq9Q70+rmpH3MORKxCE4elNSlzfUcznfxNEk6sanCZ3AVdlt8qoTv Fey9HwiKF26ECMQnVB6PljfZEGic3cZaXCzDlIaHwxyGfmXz4S4d4B4AgfHcxqS7 6Y0ZY60kBjgKlOrdE2XJ9W8ngr0VzCSvwL+wmAyrCOH7+Yt0mbDmfHKg/w6pLhaY ri+7Y44ZPMSShA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:10:22 2025 by rpki-client