This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json) Hash identifier: aMr3nV7QMSqcy2Vt5VbwzCE8aMTJrzNI1yZhbr+hOM8= Subject key identifier: A1:87:77:A6:EC:95:15:1C:B6:26:D7:22:14:AF:D9:40:6A:01:C1:FF Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Certificate serial: 019B307999D79233DBED637CC004254A959D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft Manifest number: 1788 Signing time: Thu 18 Dec 2025 08:00:33 +0000 Manifest this update: Thu 18 Dec 2025 08:00:33 +0000 Manifest next update: Fri 19 Dec 2025 08:00:33 +0000 Files and hashes: 1: Z2S57soliueMTVEyGovf75orajw.crl (hash: IMnDr0xFZ8LGBOZ0AzyRyTtfUnpYEMNp2DCWV9/eR7E=) 2: uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa (hash: qdhSzKYW9JqHooGrxdO5XlVsGBK8AcDq8ZkhxAah40A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:99:d7:92:33:db:ed:63:7c:c0:04:25:4a:95:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Validity Not Before: Dec 18 08:00:33 2025 GMT Not After : Dec 19 08:00:33 2025 GMT Subject: CN=a18777a6ec95151cb626d72214afd9406a01c1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:2c:a0:73:11:4d:47:42:cc:01:78:25:8d: 41:10:71:f5:de:f7:f5:aa:09:ba:89:ff:bf:7d:60: 9e:35:c5:0e:46:48:85:25:c5:1a:ef:db:7c:8c:83: ef:49:b6:a2:b1:29:33:27:7a:f1:2e:07:4d:c4:24: 12:38:b6:d6:51:9e:7e:57:87:d5:50:ca:db:dc:c7: f5:b2:f0:ca:b6:2a:2e:19:ec:77:89:97:50:f4:1e: df:8c:5f:b5:80:4a:5d:e3:92:3b:51:28:59:ca:46: 75:58:78:48:cb:1c:08:db:b7:cd:8f:73:07:82:9e: 12:74:d8:d9:c7:2d:e4:fa:60:ee:d1:c6:29:bc:ba: e2:b9:61:6c:63:e9:0b:47:46:ff:be:f2:e6:c2:a9: 82:b2:68:70:fc:f7:f7:b9:90:ba:c7:89:08:30:16: 7d:3f:fe:c4:ed:6d:a6:89:45:3c:0b:1d:7a:be:41: d2:68:68:34:25:c1:e1:1a:16:4b:7d:1e:c3:0b:08: 14:ed:31:45:63:63:50:14:b9:78:a4:94:38:52:fe: 47:6a:11:d0:6e:ba:b3:fb:98:b7:fa:aa:e3:a1:d6: 3d:1a:40:27:2c:17:3b:c6:e0:3a:58:30:f1:fa:b5: 93:24:0f:df:15:1a:e2:f5:8a:fa:7f:f4:dd:ea:a5: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:77:A6:EC:95:15:1C:B6:26:D7:22:14:AF:D9:40:6A:01:C1:FF X509v3 Authority Key Identifier: keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:da:f6:69:0f:9f:e5:c1:1f:5b:bd:6c:db:05:3f:68:95:77: 37:e7:ed:1b:3c:d0:de:5d:4e:51:20:e9:f9:18:9b:cd:d3:89: 87:59:13:c5:71:1b:62:e3:30:59:8a:d9:be:c2:b1:de:3a:3b: f8:f7:31:8f:a2:d1:11:be:9f:db:76:81:e7:40:b3:90:e9:55: 4e:33:60:56:68:b1:77:fb:67:6f:64:84:71:ab:b9:c9:db:77: 60:71:90:f9:7a:01:44:cd:51:b5:2f:9d:97:9c:66:96:0f:5b: 60:00:f7:f7:9c:66:a2:b0:f8:41:f7:6a:15:f9:24:ca:13:10: 2e:68:df:74:dc:61:b0:45:53:a7:15:1b:a7:49:c0:37:a3:bc: ff:35:ff:ff:cf:a1:03:cd:a0:d6:4c:c0:47:a4:12:ef:42:a8: 1b:ff:64:52:71:47:be:0c:c2:c2:57:ee:70:44:14:1b:aa:59: f8:b7:31:29:84:e9:bb:f9:68:0b:f1:0f:70:7c:e1:4b:36:fc: ee:04:5a:86:23:72:db:df:49:9b:3e:e4:af:78:81:8e:f0:2e: 0b:5a:18:97:12:3b:60:5d:dd:82:5c:ce:99:48:38:16:da:c1: 28:a9:89:59:44:5a:a2:86:46:99:99:e1:61:da:a4:d5:95:0a: ba:8e:04:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweZnXkjPb7WN8wAQlSpWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy YjZhM2MwHhcNMjUxMjE4MDgwMDMzWhcNMjUxMjE5MDgwMDMzWjAzMTEwLwYDVQQD EyhhMTg3NzdhNmVjOTUxNTFjYjYyNmQ3MjIxNGFmZDk0MDZhMDFjMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gsoHMRTUdCzAF4JY1BEHH13vf1 qgm6if+/fWCeNcUORkiFJcUa79t8jIPvSbaisSkzJ3rxLgdNxCQSOLbWUZ5+V4fV UMrb3Mf1svDKtiouGex3iZdQ9B7fjF+1gEpd45I7UShZykZ1WHhIyxwI27fNj3MH gp4SdNjZxy3k+mDu0cYpvLriuWFsY+kLR0b/vvLmwqmCsmhw/Pf3uZC6x4kIMBZ9 P/7E7W2miUU8Cx16vkHSaGg0JcHhGhZLfR7DCwgU7TFFY2NQFLl4pJQ4Uv5HahHQ brqz+5i3+qrjodY9GkAnLBc7xuA6WDDx+rWTJA/fFRri9Yr6f/Td6qUwqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGHd6bslRUctibXIhSv2UBqAcH/MB8GA1UdIwQY MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt NDI1NmE0NmFmZWVjLzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdr2aQ+f 5cEfW71s2wU/aJV3N+ftGzzQ3l1OUSDp+RibzdOJh1kTxXEbYuMwWYrZvsKx3jo7 +Pcxj6LREb6f23aB50CzkOlVTjNgVmixd/tnb2SEcau5ydt3YHGQ+XoBRM1RtS+d l5xmlg9bYAD395xmorD4QfdqFfkkyhMQLmjfdNxhsEVTpxUbp0nAN6O8/zX//8+h A82g1kzAR6QS70KoG/9kUnFHvgzCwlfucEQUG6pZ+LcxKYTpu/loC/EPcHzhSzb8 7gRahiNy299Jmz7kr3iBjvAuC1oYlxI7YF3dglzOmUg4FtrBKKmJWURaooZGmZnh Ydqk1ZUKuo4EhA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:28:28 2025 by rpki-client