This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json) Hash identifier: mB0vZeARi0R1uFo2naPkDLkuTP9GNIaCDiR8qWgR44c= Subject key identifier: 76:EA:BF:92:61:3D:68:D2:25:9D:E8:66:EE:CE:CB:6D:3F:C5:40:26 Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Certificate serial: 019B1014697D6DECBD07787AD5407F3EC6C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft Manifest number: 06DF Signing time: Fri 12 Dec 2025 01:02:11 +0000 Manifest this update: Fri 12 Dec 2025 01:02:11 +0000 Manifest next update: Sat 13 Dec 2025 01:02:11 +0000 Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=) 2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: olpHOW/LomZS3dajGAeN5yQ5+3QtEcq9kRL5Vz7ZgDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:69:7d:6d:ec:bd:07:78:7a:d5:40:7f:3e:c6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Validity Not Before: Dec 12 01:02:11 2025 GMT Not After : Dec 13 01:02:11 2025 GMT Subject: CN=76eabf92613d68d2259de866eececb6d3fc54026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:8c:97:f1:8d:51:9e:97:8e:e9:3d:ad:72: 3f:24:f9:56:aa:aa:d0:8c:fe:de:05:27:5b:d8:9a: 4f:a9:fd:e8:a6:d5:91:f3:98:0e:7e:e1:28:6f:43: c9:0b:4c:22:01:03:34:b3:37:89:e0:04:bf:26:c8: a0:ae:ba:92:ed:00:10:38:76:dd:33:98:a8:cd:29: 61:63:3c:0e:aa:fb:c9:30:c1:fb:c5:2c:0c:6b:fc: 50:bb:17:c9:22:a1:02:95:4f:1b:ce:e2:8d:6e:fc: d3:2b:31:6a:68:63:4f:ff:f0:a5:f0:14:73:47:f9: 50:a0:26:91:91:d1:1e:b3:f1:5b:f9:31:cb:76:6d: d4:9c:8a:b4:e3:4a:fc:d7:bc:5d:03:d0:8e:ce:fc: ba:bb:7e:df:10:df:26:e6:74:d4:f9:08:fd:e1:38: a0:ad:bd:fc:be:a2:bf:74:f0:1c:70:f1:a3:42:8f: 70:e6:e1:33:06:55:60:a1:13:43:40:7c:22:0d:fc: 1a:b4:2f:fc:a4:57:c2:59:d1:b1:8b:e9:f0:fc:b5: 32:8b:1f:1b:49:a0:9d:12:aa:3b:af:d9:25:95:67: c6:dd:2b:9c:d3:b3:64:86:3a:4b:0b:27:c5:3a:64: 8a:aa:a3:27:59:d7:6a:19:1c:15:05:e2:ef:5b:f9: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EA:BF:92:61:3D:68:D2:25:9D:E8:66:EE:CE:CB:6D:3F:C5:40:26 X509v3 Authority Key Identifier: keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:65:0f:5d:fe:18:1a:b7:9c:27:59:a2:10:d5:53:0e:91: 2e:32:09:6e:3c:df:8f:28:8a:23:e2:c4:db:80:8a:68:c0:fe: fd:6d:f3:cd:7b:6a:2d:74:98:b7:f1:75:cc:63:14:4b:c7:c1: 3c:ff:c9:5b:4d:14:40:07:76:e0:c7:19:80:df:05:d8:4a:70: f4:75:08:08:27:77:e2:f1:66:4b:84:f2:f9:e1:2e:12:a8:10: 41:5f:1a:13:af:dd:ff:86:12:e2:5a:25:d8:e2:7e:db:5d:06: 35:2c:c8:e4:41:ce:80:0e:1e:c9:13:8a:99:dc:d0:39:1a:5e: 38:92:d4:8b:b9:5b:87:c5:0e:d0:b5:37:13:d4:6c:21:fe:c3: b5:65:57:12:0e:9d:e3:b8:3e:13:db:f2:06:07:d8:83:32:ae: 7f:a0:91:77:62:76:b5:b0:68:41:48:e4:00:2b:12:7c:86:9d: a8:0a:0e:74:3b:86:8f:65:90:e0:93:02:2d:4a:58:c1:1b:27: 75:ca:28:e2:bf:c4:2f:27:05:e4:54:02:71:80:7e:b2:23:2f: 35:b9:c2:b1:18:10:56:52:8f:5f:f8:b6:cf:fc:31:0e:a9:86: 1a:76:af:e3:fe:07:22:68:b4:1a:86:11:b1:83:0e:01:60:a1: b8:3a:60:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFGl9bey9B3h61UB/PsbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky YjkyMGIwHhcNMjUxMjEyMDEwMjExWhcNMjUxMjEzMDEwMjExWjAzMTEwLwYDVQQD Eyg3NmVhYmY5MjYxM2Q2OGQyMjU5ZGU4NjZlZWNlY2I2ZDNmYzU0MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUWMl/GNUZ6Xjuk9rXI/JPlWqqrQ jP7eBSdb2JpPqf3optWR85gOfuEob0PJC0wiAQM0szeJ4AS/JsigrrqS7QAQOHbd M5iozSlhYzwOqvvJMMH7xSwMa/xQuxfJIqEClU8bzuKNbvzTKzFqaGNP//Cl8BRz R/lQoCaRkdEes/Fb+THLdm3UnIq040r817xdA9COzvy6u37fEN8m5nTU+Qj94Tig rb38vqK/dPAccPGjQo9w5uEzBlVgoRNDQHwiDfwatC/8pFfCWdGxi+nw/LUyix8b SaCdEqo7r9kllWfG3Suc07NkhjpLCyfFOmSKqqMnWddqGRwVBeLvW/kEBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbqv5JhPWjSJZ3oZu7Oy20/xUAmMB8GA1UdIwQY MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1 LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+llD13+ GBq3nCdZohDVUw6RLjIJbjzfjyiKI+LE24CKaMD+/W3zzXtqLXSYt/F1zGMUS8fB PP/JW00UQAd24McZgN8F2Epw9HUICCd34vFmS4Ty+eEuEqgQQV8aE6/d/4YS4lol 2OJ+210GNSzI5EHOgA4eyROKmdzQORpeOJLUi7lbh8UO0LU3E9RsIf7DtWVXEg6d 47g+E9vyBgfYgzKuf6CRd2J2tbBoQUjkACsSfIadqAoOdDuGj2WQ4JMCLUpYwRsn dcoo4r/ELycF5FQCcYB+siMvNbnCsRgQVlKPX/i2z/wxDqmGGnav4/4HImi0GoYR sYMOAWChuDpgfQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:19:58 2025 by rpki-client