This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json) Hash identifier: n5wlCxgQf1cxA6dSUIOEiVlnnsrpXvNPYZfdfR+3lY4= Subject key identifier: 56:F1:83:B6:38:33:D0:DB:EF:65:F9:87:B9:67:C2:73:B1:FA:16:96 Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Certificate serial: 019B61309B9E07408AA0465E489680036B49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft Manifest number: 1119 Signing time: Sat 27 Dec 2025 19:02:13 +0000 Manifest this update: Sat 27 Dec 2025 19:02:13 +0000 Manifest next update: Sun 28 Dec 2025 19:02:13 +0000 Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=) 2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 0gY6xoFRchhLvCt2LIiX0vOJr3k3HjtgUvb82R97BbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:30:9b:9e:07:40:8a:a0:46:5e:48:96:80:03:6b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Validity Not Before: Dec 27 19:02:13 2025 GMT Not After : Dec 28 19:02:13 2025 GMT Subject: CN=56f183b63833d0dbef65f987b967c273b1fa1696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:a5:94:36:b4:8e:fe:4f:99:dc:66:8a:8e: a8:a2:4a:62:3e:27:04:af:fc:53:55:f8:3f:b0:5a: 13:71:dc:26:ee:84:f7:da:8e:e1:01:09:9e:83:62: 30:9b:af:b7:1d:90:39:90:eb:da:4a:ac:a6:eb:33: 43:c3:4c:a5:41:f6:9f:d9:42:98:a7:8b:08:b2:82: 44:ec:d5:55:37:a2:c8:68:a7:de:86:26:7b:15:ce: f3:1a:55:ed:1f:e7:2a:90:f6:80:5e:3d:15:2b:26: 08:98:48:1a:02:da:31:46:cd:66:00:b9:db:81:a0: 19:75:a0:06:99:77:42:72:32:df:a6:03:1e:fe:e9: ef:c3:b2:97:3a:b4:76:0d:65:a7:5f:14:64:e0:5f: 47:af:8d:43:fb:f9:52:c9:dd:ec:7b:19:d4:b8:2e: 30:62:fb:f7:20:6a:96:be:9b:e3:51:73:53:61:6f: 09:ea:d8:8f:c0:a3:15:ab:88:ed:b6:ec:81:6a:ee: 8d:10:2a:da:a2:23:88:5a:4c:94:81:3d:4a:ec:0d: 21:70:d0:8a:92:24:66:f5:7c:9f:98:3c:6c:15:ea: 12:ca:76:3a:a6:05:44:06:ad:e0:be:97:4c:b8:53: ff:df:82:d2:1f:b1:b4:60:d4:9c:01:0f:f5:1c:f5: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:83:B6:38:33:D0:DB:EF:65:F9:87:B9:67:C2:73:B1:FA:16:96 X509v3 Authority Key Identifier: keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9d:e8:1b:0f:b2:b3:82:74:1e:32:2c:c0:71:8b:9d:c1:b6: b2:98:f6:fb:fb:59:7b:83:5b:2c:4c:52:b0:a4:e7:4e:e1:28: 37:83:34:9b:50:a5:54:2c:9e:1f:34:0f:e3:61:46:a5:7b:75: 07:8f:b8:e0:b5:23:b7:bb:c4:ef:1b:64:6c:04:75:cc:d1:6c: e9:6a:18:47:4d:66:42:f2:a2:3f:eb:38:49:7e:68:47:b4:28: 2f:8e:19:0d:2d:69:ba:33:fb:0f:dc:f6:62:47:17:a7:0f:cd: 5e:ee:08:90:0a:18:d7:c3:93:91:33:72:e6:8e:56:43:cf:d4: f8:e5:2c:5d:20:1d:aa:e3:2a:44:f0:1b:68:07:32:d6:bb:1e: 54:55:da:92:d1:67:2d:a3:a5:4f:58:b5:b1:ea:f8:d8:a6:66: d6:71:c3:62:45:4a:59:10:56:42:52:27:80:0b:ec:0e:bb:72: eb:bf:ff:59:e5:f1:ae:57:76:00:31:13:cf:97:6b:04:20:3b: 2c:65:09:80:b6:64:65:d8:b6:71:69:f5:98:75:73:67:e0:71: 9b:56:cd:58:74:a3:eb:41:35:45:8b:51:37:fd:bf:06:62:8e: 7c:54:6c:ae:35:02:67:20:87:11:df:e6:99:01:00:22:e2:1f: 7a:ca:b9:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthMJueB0CKoEZeSJaAA2tJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0 MmZjNmUwHhcNMjUxMjI3MTkwMjEzWhcNMjUxMjI4MTkwMjEzWjAzMTEwLwYDVQQD Eyg1NmYxODNiNjM4MzNkMGRiZWY2NWY5ODdiOTY3YzI3M2IxZmExNjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/SllDa0jv5Pmdxmio6ookpiPicE r/xTVfg/sFoTcdwm7oT32o7hAQmeg2Iwm6+3HZA5kOvaSqym6zNDw0ylQfaf2UKY p4sIsoJE7NVVN6LIaKfehiZ7Fc7zGlXtH+cqkPaAXj0VKyYImEgaAtoxRs1mALnb gaAZdaAGmXdCcjLfpgMe/unvw7KXOrR2DWWnXxRk4F9Hr41D+/lSyd3sexnUuC4w Yvv3IGqWvpvjUXNTYW8J6tiPwKMVq4jttuyBau6NECraoiOIWkyUgT1K7A0hcNCK kiRm9XyfmDxsFeoSynY6pgVEBq3gvpdMuFP/34LSH7G0YNScAQ/1HPUSbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbxg7Y4M9Db72X5h7lnwnOx+haWMB8GA1UdIwQY MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQp3oGw+y s4J0HjIswHGLncG2spj2+/tZe4NbLExSsKTnTuEoN4M0m1ClVCyeHzQP42FGpXt1 B4+44LUjt7vE7xtkbAR1zNFs6WoYR01mQvKiP+s4SX5oR7QoL44ZDS1pujP7D9z2 YkcXpw/NXu4IkAoY18OTkTNy5o5WQ8/U+OUsXSAdquMqRPAbaAcy1rseVFXaktFn LaOlT1i1ser42KZm1nHDYkVKWRBWQlIngAvsDrty67//WeXxrld2ADETz5drBCA7 LGUJgLZkZdi2cWn1mHVzZ+Bxm1bNWHSj60E1RYtRN/2/BmKOfFRsrjUCZyCHEd/m mQEAIuIfesq5IA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:21:25 2025 by rpki-client