This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json) Hash identifier: 3NvDM1wBg/BizujwuFm8ZNj5SSDqfEan9mlBD9lAe5c= Subject key identifier: 56:CB:4E:2A:01:B7:69:EF:AD:16:A0:80:81:4B:40:30:0D:F2:7A:29 Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43 Certificate serial: 019B41DB82B7DEC33A7F0A48DA108F56B911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 17:01:03 +0000 Manifest this update: Sun 21 Dec 2025 17:01:03 +0000 Manifest next update: Mon 22 Dec 2025 17:01:03 +0000 Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=) 2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=) 3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: mLekqf+ywG7yr/92wvuLIj0gU+/jprhyBM6htluyZKQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:82:b7:de:c3:3a:7f:0a:48:da:10:8f:56:b9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43 Validity Not Before: Dec 21 17:01:03 2025 GMT Not After : Dec 22 17:01:03 2025 GMT Subject: CN=56cb4e2a01b769efad16a080814b40300df27a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:af:f2:87:3f:97:6f:d0:f9:a9:36:d9:2c: 4d:14:9b:87:1d:17:8b:29:1d:0f:b6:ff:8a:a5:2a: 85:d8:d2:f8:86:f1:5c:2f:fc:61:b1:32:44:7b:32: a0:85:46:72:ad:f0:ef:fc:90:53:8d:bf:e0:e9:d0: f8:d4:ff:74:36:e0:6f:a7:54:b1:3b:35:2b:2a:48: 19:75:e4:c8:0f:bf:90:e0:d4:79:33:bb:16:b3:b1: de:f5:dc:5b:e5:77:ad:53:5d:66:ab:f3:ae:54:db: 55:53:f6:9e:27:da:6d:a7:a5:2e:f8:19:d6:2f:39: 2a:f8:ad:52:4e:b8:27:6e:8b:ea:d8:a9:c7:16:9a: 7a:e9:e0:65:8e:f0:45:ca:ef:45:ca:74:12:c8:b8: 76:51:98:8d:06:aa:26:c1:42:32:87:3c:cf:8b:0e: de:99:44:4f:14:46:cc:6f:a0:d0:d0:3c:73:9f:9b: 27:1b:15:8a:ea:d8:17:0d:f5:e9:f4:0b:91:0d:3e: a2:75:cd:aa:3b:d0:7b:db:14:43:2c:46:30:d9:f7: 72:65:0c:cd:88:ed:d5:4f:fc:9a:f0:bf:cd:d8:20: 17:6c:5c:9e:62:4f:49:a8:29:18:33:4b:c5:96:0f: 0c:86:4b:eb:e4:d6:d2:59:77:1d:c8:8a:6a:ab:13: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CB:4E:2A:01:B7:69:EF:AD:16:A0:80:81:4B:40:30:0D:F2:7A:29 X509v3 Authority Key Identifier: keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:33:88:ce:a5:2c:bf:3e:ed:3b:c1:4d:ca:73:0f:7f:bd: 48:18:bc:a9:af:08:3c:d7:02:3d:27:a0:d0:ea:fd:03:67:eb: 84:a0:35:05:79:fd:e7:27:7a:dd:71:9f:91:4b:31:42:d3:b7: 59:b4:4a:42:15:de:9e:e7:30:34:9c:a9:f3:90:64:9b:66:44: 8a:5d:af:b8:0b:7a:e6:4c:48:f4:e4:c7:bd:ff:4a:bb:c2:65: cf:97:6f:bf:0c:a6:82:e6:f5:19:2e:e1:1e:6b:b1:3d:49:c5: 1f:01:9d:30:48:49:0c:c8:fd:00:35:90:bb:c3:f8:91:85:82: c5:f1:c0:f4:db:3f:3c:41:49:33:7b:13:0d:c9:a5:76:dd:5b: 05:3d:23:05:dd:6d:10:68:85:89:56:58:4a:a3:80:33:24:e0: 30:e9:6c:a7:4f:53:46:a0:95:f2:95:88:47:f1:94:13:8b:31: 6a:d0:f0:c5:9c:27:ba:b2:50:32:9a:bd:f6:a2:26:af:be:c0: 36:2d:15:91:dd:48:4e:b6:bf:15:2d:ea:e2:92:e9:f6:d7:51: c3:42:d1:82:56:eb:e9:c2:b5:de:13:89:c2:be:c1:ea:8d:a1: f3:04:c9:a9:04:5d:e8:6e:4d:fc:56:ef:7d:52:60:01:8d:e4: 63:f1:1f:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB24K33sM6fwpI2hCPVrkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk MDFiNDMwHhcNMjUxMjIxMTcwMTAzWhcNMjUxMjIyMTcwMTAzWjAzMTEwLwYDVQQD Eyg1NmNiNGUyYTAxYjc2OWVmYWQxNmEwODA4MTRiNDAzMDBkZjI3YTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Ov8oc/l2/Q+ak22SxNFJuHHReL KR0Ptv+KpSqF2NL4hvFcL/xhsTJEezKghUZyrfDv/JBTjb/g6dD41P90NuBvp1Sx OzUrKkgZdeTID7+Q4NR5M7sWs7He9dxb5XetU11mq/OuVNtVU/aeJ9ptp6Uu+BnW Lzkq+K1STrgnbovq2KnHFpp66eBljvBFyu9FynQSyLh2UZiNBqomwUIyhzzPiw7e mURPFEbMb6DQ0Dxzn5snGxWK6tgXDfXp9AuRDT6idc2qO9B72xRDLEYw2fdyZQzN iO3VT/ya8L/N2CAXbFyeYk9JqCkYM0vFlg8Mhkvr5NbSWXcdyIpqqxPxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbLTioBt2nvrRaggIFLQDAN8nopMB8GA1UdIwQY MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0 LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB4ziM6l LL8+7TvBTcpzD3+9SBi8qa8IPNcCPSeg0Or9A2frhKA1BXn95yd63XGfkUsxQtO3 WbRKQhXenucwNJyp85Bkm2ZEil2vuAt65kxI9OTHvf9Ku8Jlz5dvvwymgub1GS7h HmuxPUnFHwGdMEhJDMj9ADWQu8P4kYWCxfHA9Ns/PEFJM3sTDcmldt1bBT0jBd1t EGiFiVZYSqOAMyTgMOlsp09TRqCV8pWIR/GUE4sxatDwxZwnurJQMpq99qImr77A Ni0Vkd1ITra/FS3q4pLp9tdRw0LRglbr6cK13hOJwr7B6o2h8wTJqQRd6G5N/Fbv fVJgAY3kY/EfAw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:51 2025 by rpki-client