This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json) Hash identifier: zy6mKWd+cPUHO08g3+slL0U+vegXgEzTddntT/ibn/o= Subject key identifier: AB:58:8A:AC:A6:B8:4A:52:DC:B8:F3:C6:1B:38:EC:56:A8:60:19:98 Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Certificate serial: 019B4438839269AB1003422A8BF83C89B255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft Manifest number: 06FA Signing time: Mon 22 Dec 2025 04:01:52 +0000 Manifest this update: Mon 22 Dec 2025 04:01:52 +0000 Manifest next update: Tue 23 Dec 2025 04:01:52 +0000 Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=) 2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: J+m0uKIKfhnvASKP7qAaH0u+VAZxWkaIKrpLUwxf33s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:83:92:69:ab:10:03:42:2a:8b:f8:3c:89:b2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Validity Not Before: Dec 22 04:01:52 2025 GMT Not After : Dec 23 04:01:52 2025 GMT Subject: CN=ab588aaca6b84a52dcb8f3c61b38ec56a8601998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:5f:39:41:96:c6:38:31:3d:d9:06:a2:46: 62:2a:84:07:63:aa:d5:22:1d:45:d2:2c:3b:bb:7e: 4a:12:77:cd:b2:9e:0f:33:a1:b4:05:ae:77:e5:aa: 53:a9:68:fd:9c:8c:ac:93:2f:1f:8e:cc:3e:74:28: 6d:ee:b3:d2:5a:25:78:fa:99:8c:6a:cf:aa:e9:ca: 9d:75:6f:ac:0f:0b:6c:3e:cf:02:5b:18:7c:e7:07: 88:e1:02:97:ef:6e:a0:2e:12:c7:09:e0:fe:8c:dc: c1:fa:f4:a7:b6:f0:f3:7a:64:3d:c4:c6:26:76:19: 7c:5c:0e:e2:05:4c:2a:b2:b3:ce:3e:7e:67:57:f9: c2:17:c2:ce:71:be:0b:f3:03:e1:36:22:93:66:47: 02:8b:85:17:32:ec:ce:5f:13:a2:bb:fa:ac:90:02: e0:f6:f6:37:74:1e:2b:34:d2:f7:e8:57:a1:35:09: bd:3b:3e:f8:a0:de:ce:6f:db:a9:32:f2:75:8b:d4: 8e:1a:05:d0:28:e9:c2:77:86:1f:d4:ee:1d:a9:e2: d2:d7:b6:00:b1:bf:95:18:5b:fe:40:a7:4b:a7:47: 71:d5:ff:dd:f3:7c:9e:78:a7:a0:1c:68:72:bb:1b: a8:8b:4b:ea:ed:5a:57:0e:e6:1a:b7:5a:43:98:00: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:58:8A:AC:A6:B8:4A:52:DC:B8:F3:C6:1B:38:EC:56:A8:60:19:98 X509v3 Authority Key Identifier: keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:e2:fd:17:0d:cc:82:45:c7:62:2b:ee:6a:32:3c:b7:ad:50: c3:39:02:38:25:bc:dc:ae:57:05:21:8f:75:9d:48:a6:70:5f: d7:f0:70:97:0c:18:b5:42:73:23:49:df:1c:2a:eb:b4:09:c1: 44:92:f8:6c:4d:5f:77:ab:8c:d4:33:11:8c:4f:5a:d2:77:ef: 3e:04:0d:54:3e:13:94:01:82:ff:14:2f:86:41:6f:73:2d:35: b0:2f:6f:c9:bd:b7:3d:35:91:f3:fc:73:d0:5d:36:42:67:33: ae:fd:29:bb:15:e2:62:1b:f5:5b:59:b6:a9:da:01:b2:2f:2f: 4b:90:4c:39:91:95:7b:f5:01:59:08:33:33:84:c7:fe:96:f8: 8c:b1:a4:72:62:ff:d7:3a:6b:ae:41:01:bd:79:f9:24:cf:00: ee:5a:cd:ed:96:8b:06:82:44:e4:93:59:b1:4d:4e:1a:3c:b5: d3:0c:61:3a:2d:30:c4:95:2a:c3:2c:dd:7d:5e:f6:8e:8a:a9: ba:7b:23:b9:e3:3e:f8:68:22:4a:63:e0:69:d8:66:e0:06:1e: 92:ce:d0:73:35:9e:8a:5c:58:b9:7d:ee:30:ce:b4:13:ca:43: 46:58:94:48:d6:43:ea:a3:c5:e0:25:24:8f:dd:56:a8:ac:28: 37:e4:87:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOIOSaasQA0Iqi/g8ibJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky YjkyMGIwHhcNMjUxMjIyMDQwMTUyWhcNMjUxMjIzMDQwMTUyWjAzMTEwLwYDVQQD EyhhYjU4OGFhY2E2Yjg0YTUyZGNiOGYzYzYxYjM4ZWM1NmE4NjAxOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRfOUGWxjgxPdkGokZiKoQHY6rV Ih1F0iw7u35KEnfNsp4PM6G0Ba535apTqWj9nIysky8fjsw+dCht7rPSWiV4+pmM as+q6cqddW+sDwtsPs8CWxh85weI4QKX726gLhLHCeD+jNzB+vSntvDzemQ9xMYm dhl8XA7iBUwqsrPOPn5nV/nCF8LOcb4L8wPhNiKTZkcCi4UXMuzOXxOiu/qskALg 9vY3dB4rNNL36FehNQm9Oz74oN7Ob9upMvJ1i9SOGgXQKOnCd4Yf1O4dqeLS17YA sb+VGFv+QKdLp0dx1f/d83yeeKegHGhyuxuoi0vq7VpXDuYat1pDmADdtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtYiqymuEpS3Ljzxhs47FaoYBmYMB8GA1UdIwQY MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1 LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+L9Fw3M gkXHYivuajI8t61QwzkCOCW83K5XBSGPdZ1IpnBf1/BwlwwYtUJzI0nfHCrrtAnB RJL4bE1fd6uM1DMRjE9a0nfvPgQNVD4TlAGC/xQvhkFvcy01sC9vyb23PTWR8/xz 0F02Qmczrv0puxXiYhv1W1m2qdoBsi8vS5BMOZGVe/UBWQgzM4TH/pb4jLGkcmL/ 1zprrkEBvXn5JM8A7lrN7ZaLBoJE5JNZsU1OGjy10wxhOi0wxJUqwyzdfV72joqp unsjueM++GgiSmPgadhm4AYeks7QczWeilxYuX3uMM60E8pDRliUSNZD6qPF4CUk j91WqKwoN+SHfw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:49:19 2025 by rpki-client