This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json) Hash identifier: xKn7MaHJbCaufXYuSpxjUQqmEMGJC/1Dszge/c7kVTA= Subject key identifier: 11:5E:DB:91:F4:7A:76:A6:50:3A:DE:D6:E5:31:C6:B4:1F:DC:EB:19 Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Certificate serial: 019B38A300108A4412AA1554294BDF53889B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft Manifest number: 06F4 Signing time: Fri 19 Dec 2025 22:02:44 +0000 Manifest this update: Fri 19 Dec 2025 22:02:44 +0000 Manifest next update: Sat 20 Dec 2025 22:02:44 +0000 Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=) 2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: jGjUeEHpyqKESF0ac9Dt96BMtap+zB3HCsvox646JJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a3:00:10:8a:44:12:aa:15:54:29:4b:df:53:88:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Validity Not Before: Dec 19 22:02:44 2025 GMT Not After : Dec 20 22:02:44 2025 GMT Subject: CN=115edb91f47a76a6503aded6e531c6b41fdceb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:c3:01:c3:06:0f:93:c2:32:83:62:78:2b: 91:00:43:0c:b8:fe:1d:3e:fa:a9:39:bd:5a:10:7a: 0e:9a:e0:72:b1:a0:2f:e4:f7:4a:57:c7:87:bd:39: b7:a6:09:8d:fe:fc:b5:4c:00:b0:e3:76:1b:52:36: db:ff:a0:a3:75:83:a6:fb:da:88:f8:59:4e:e4:b3: 5a:5d:c4:a9:25:2b:cc:f0:60:b2:60:da:16:2b:7a: 7e:14:41:37:7a:11:e8:5a:ab:34:79:d1:c6:4d:0a: c8:a8:02:fd:80:37:63:ad:46:40:f3:d6:cd:43:51: cb:d3:b6:0f:fc:fa:37:8c:8c:9b:a0:6b:6c:db:37: 82:b3:f7:f0:38:53:63:23:ca:be:c2:67:c2:ac:71: 67:ae:d4:60:74:61:9d:60:98:3e:66:7c:48:cd:cc: 77:f0:0b:dd:4a:4c:65:2d:ab:41:04:e9:44:d2:a6: fc:f1:8f:ca:05:58:e1:41:48:49:7a:07:de:86:39: 22:a7:a0:3a:ae:58:a9:0b:f1:0e:ae:f7:23:d9:1c: f8:3c:bb:e7:54:0d:b9:64:ae:53:71:09:36:62:94: 2e:42:e7:a6:cf:e9:05:d7:b7:fd:38:b3:88:46:1c: 0e:3c:4d:ee:c7:3f:3e:33:d4:bf:f8:28:b1:8b:6c: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5E:DB:91:F4:7A:76:A6:50:3A:DE:D6:E5:31:C6:B4:1F:DC:EB:19 X509v3 Authority Key Identifier: keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9f:b7:c7:98:fc:f7:97:68:df:b1:ad:2b:44:30:4d:5f:c3: 3a:33:4e:45:c1:22:28:f5:aa:f0:c5:e2:d6:bb:12:e4:af:45: 70:c0:01:70:5e:75:4d:62:e8:0e:02:c7:7e:0d:a1:1a:87:62: 8e:0e:de:9a:10:cf:58:19:db:d0:67:f7:1b:dc:d5:29:5c:fc: be:d7:0a:07:6f:a2:5a:87:18:4c:93:0b:b0:b4:10:97:53:ce: ae:0c:3b:91:54:71:e9:3c:14:5d:fe:e8:bf:ed:ca:69:69:a6: d6:17:e0:38:86:31:d6:57:4d:8d:9f:4a:15:b6:bb:66:41:8f: c4:eb:44:72:57:7a:93:df:29:00:a4:a6:0e:02:6f:b2:d7:22: 88:74:3b:fd:80:1f:99:c8:59:69:e8:54:26:e4:96:09:33:b7: 88:3f:47:ee:13:03:ce:00:f1:61:0c:9e:3c:0f:d0:0d:1c:bf: cd:60:87:6c:79:88:0b:2a:b7:95:a7:b4:37:7b:98:b1:ae:66: f1:03:00:50:55:63:2f:1c:be:56:ab:b5:51:b1:7f:58:92:6f: 4e:96:0d:93:17:1e:9d:c0:21:03:8b:eb:be:63:a8:6a:82:35: b3:f4:21:39:69:d5:bd:e0:5a:91:b2:08:47:1f:40:17:78:64: 6a:ab:9b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4owAQikQSqhVUKUvfU4ibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky YjkyMGIwHhcNMjUxMjE5MjIwMjQ0WhcNMjUxMjIwMjIwMjQ0WjAzMTEwLwYDVQQD EygxMTVlZGI5MWY0N2E3NmE2NTAzYWRlZDZlNTMxYzZiNDFmZGNlYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CfDAcMGD5PCMoNieCuRAEMMuP4d PvqpOb1aEHoOmuBysaAv5PdKV8eHvTm3pgmN/vy1TACw43YbUjbb/6CjdYOm+9qI +FlO5LNaXcSpJSvM8GCyYNoWK3p+FEE3ehHoWqs0edHGTQrIqAL9gDdjrUZA89bN Q1HL07YP/Po3jIyboGts2zeCs/fwOFNjI8q+wmfCrHFnrtRgdGGdYJg+ZnxIzcx3 8AvdSkxlLatBBOlE0qb88Y/KBVjhQUhJegfehjkip6A6rlipC/EOrvcj2Rz4PLvn VA25ZK5TcQk2YpQuQuemz+kF17f9OLOIRhwOPE3uxz8+M9S/+Cixi2ziGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFe25H0enamUDre1uUxxrQf3OsZMB8GA1UdIwQY MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1 LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZ+3x5j8 95do37GtK0QwTV/DOjNORcEiKPWq8MXi1rsS5K9FcMABcF51TWLoDgLHfg2hGodi jg7emhDPWBnb0Gf3G9zVKVz8vtcKB2+iWocYTJMLsLQQl1POrgw7kVRx6TwUXf7o v+3KaWmm1hfgOIYx1ldNjZ9KFba7ZkGPxOtEcld6k98pAKSmDgJvstciiHQ7/YAf mchZaehUJuSWCTO3iD9H7hMDzgDxYQyePA/QDRy/zWCHbHmICyq3lae0N3uYsa5m 8QMAUFVjLxy+Vqu1UbF/WJJvTpYNkxcencAhA4vrvmOoaoI1s/QhOWnVveBakbII Rx9AF3hkaqubow== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:38 2025 by rpki-client