This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json) Hash identifier: bGau5MD9rFSsRKyOTbbexKW+dtlM9CWctNP02Ag8tB0= Subject key identifier: 1A:06:F5:2A:A0:46:FD:55:72:99:9F:AD:81:E1:82:3D:FF:D3:D9:8B Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Certificate serial: 019B3E6C35D67EDB35AFE9FEAFE11BF1B914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft Manifest number: 1107 Signing time: Sun 21 Dec 2025 01:00:37 +0000 Manifest this update: Sun 21 Dec 2025 01:00:37 +0000 Manifest next update: Mon 22 Dec 2025 01:00:37 +0000 Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=) 2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: iTufTC0saWuTjpyIpzRoDQF5PsabuZBNKqs4TdbtSFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:35:d6:7e:db:35:af:e9:fe:af:e1:1b:f1:b9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e Validity Not Before: Dec 21 01:00:37 2025 GMT Not After : Dec 22 01:00:37 2025 GMT Subject: CN=1a06f52aa046fd5572999fad81e1823dffd3d98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:6a:45:a8:7b:89:c5:56:ac:ab:5a:82:56: 4d:dd:55:f6:0a:61:96:90:ce:f1:a3:50:26:6d:55: 8b:1d:43:16:59:5b:35:a8:df:dd:16:17:ff:2b:9e: 0b:a6:3e:65:a2:58:3b:3b:34:94:74:6f:59:0a:2a: 6a:be:6d:3f:8e:cf:c6:24:78:37:45:ef:7f:da:ec: fe:03:ab:b7:be:00:99:a8:72:ed:42:1c:cf:23:d7: 2c:58:59:d9:45:8a:d5:10:4c:76:ae:3a:58:79:da: 9f:76:41:3a:17:b5:c7:27:1f:22:7f:9a:e9:a3:21: 78:3f:04:0a:1f:72:38:c9:8b:89:31:35:f5:e3:a1: 72:06:7f:d4:77:11:74:ee:bc:c8:e5:95:ee:1c:e2: 35:c0:0f:ae:09:95:6a:ab:69:e1:19:55:e8:13:2e: 41:2d:2d:1b:1f:b4:6e:7f:e0:01:7b:bc:19:64:29: aa:6a:80:d1:3a:56:89:be:b1:65:0b:bc:e9:aa:e5: 1f:df:21:d9:64:7b:51:bc:c0:41:0d:96:15:2e:e5: 9c:e2:56:0c:3d:8e:68:64:f6:55:06:1d:2b:f7:a8: 35:9d:e5:cb:8e:56:65:3e:60:7c:b2:5d:32:2f:67: 2e:02:bc:4d:bf:e4:76:3b:13:21:e1:9b:3b:56:83: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:06:F5:2A:A0:46:FD:55:72:99:9F:AD:81:E1:82:3D:FF:D3:D9:8B X509v3 Authority Key Identifier: keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:59:d6:89:19:c1:40:5f:35:e5:c2:08:f6:4a:5f:ed:63:aa: a1:fb:5d:2e:4c:dd:57:e1:28:f4:ca:64:3c:08:04:34:15:f8: 72:52:28:a7:7e:b6:d4:eb:ad:7a:5b:1e:6d:35:8e:f4:18:6c: 07:8c:81:78:a6:de:72:5a:fb:e0:15:4c:7c:ea:cb:de:a6:9b: ab:42:d2:a2:45:67:7a:12:75:49:27:e6:d6:51:a9:b3:4d:c0: b2:97:48:b5:3b:af:49:e8:12:d9:e6:4f:70:fb:6d:06:a9:42: 91:18:cc:f9:bc:45:29:e3:63:80:84:9a:49:50:ac:f3:b9:b4: 7d:61:e4:ae:d6:9a:f0:9a:e0:50:b1:7d:8a:88:20:5f:e1:53: ae:84:ab:e0:07:e1:e5:02:ec:a2:7d:40:5f:55:e8:0c:74:10: 42:2b:f2:1f:d3:ab:09:f4:e5:42:3c:20:58:49:ba:7e:4d:45: 92:87:c3:50:b5:4d:36:43:15:51:59:c9:68:83:88:07:1b:c3: 10:ff:ef:87:75:07:5d:1d:51:b5:6b:57:20:08:cf:55:14:68: 83:c1:78:da:2f:6e:d1:f7:25:74:fe:89:25:fa:27:e8:99:5d: 26:87:4e:d5:ff:6e:23:d2:d1:2d:66:4e:76:8e:a6:b1:0f:32: ed:08:07:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bDXWfts1r+n+r+Eb8bkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0 MmZjNmUwHhcNMjUxMjIxMDEwMDM3WhcNMjUxMjIyMDEwMDM3WjAzMTEwLwYDVQQD EygxYTA2ZjUyYWEwNDZmZDU1NzI5OTlmYWQ4MWUxODIzZGZmZDNkOThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HFqRah7icVWrKtaglZN3VX2CmGW kM7xo1AmbVWLHUMWWVs1qN/dFhf/K54Lpj5lolg7OzSUdG9ZCipqvm0/js/GJHg3 Re9/2uz+A6u3vgCZqHLtQhzPI9csWFnZRYrVEEx2rjpYedqfdkE6F7XHJx8if5rp oyF4PwQKH3I4yYuJMTX146FyBn/UdxF07rzI5ZXuHOI1wA+uCZVqq2nhGVXoEy5B LS0bH7Ruf+ABe7wZZCmqaoDROlaJvrFlC7zpquUf3yHZZHtRvMBBDZYVLuWc4lYM PY5oZPZVBh0r96g1neXLjlZlPmB8sl0yL2cuArxNv+R2OxMh4Zs7VoOquQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoG9SqgRv1VcpmfrYHhgj3/09mLMB8GA1UdIwQY MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1nWiRnB QF815cII9kpf7WOqoftdLkzdV+Eo9MpkPAgENBX4clIop3621OutelsebTWO9Bhs B4yBeKbeclr74BVMfOrL3qabq0LSokVnehJ1SSfm1lGps03AspdItTuvSegS2eZP cPttBqlCkRjM+bxFKeNjgISaSVCs87m0fWHkrtaa8JrgULF9ioggX+FTroSr4Afh 5QLson1AX1XoDHQQQivyH9OrCfTlQjwgWEm6fk1FkofDULVNNkMVUVnJaIOIBxvD EP/vh3UHXR1RtWtXIAjPVRRog8F42i9u0fcldP6JJfon6JldJodO1f9uI9LRLWZO do6msQ8y7QgH0A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:53 2025 by rpki-client