This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json) Hash identifier: yR4He8iPOlw6k6I3hXCT87wwdq6viAmIw79c7Zd8I2k= Subject key identifier: C8:EE:D5:8B:8F:FB:EB:90:50:C5:F2:AC:04:7F:DD:A2:CA:94:F1:57 Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Certificate serial: 019B3E6CE400901C94C6903FD9AAF9857F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft Manifest number: 02CA Signing time: Sun 21 Dec 2025 01:01:22 +0000 Manifest this update: Sun 21 Dec 2025 01:01:22 +0000 Manifest next update: Mon 22 Dec 2025 01:01:22 +0000 Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=) 2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=) 3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: xqQJbtVEF5ONIG6hnKuyTyjQJuzrdxROECA80MR7pGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e4:00:90:1c:94:c6:90:3f:d9:aa:f9:85:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326 Validity Not Before: Dec 21 01:01:22 2025 GMT Not After : Dec 22 01:01:22 2025 GMT Subject: CN=c8eed58b8ffbeb9050c5f2ac047fdda2ca94f157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:08:b5:46:9d:8b:0e:59:b8:69:f9:26:c6: c2:79:a8:12:4b:f4:e2:58:38:2a:c3:a2:88:85:bf: f2:70:f8:c8:07:5d:f3:a2:b1:57:3c:d2:fb:ae:d1: 6f:2f:95:0b:86:22:3c:52:b4:9a:c3:0c:e8:d2:55: 22:d9:ac:43:65:88:60:a2:5d:55:ac:98:98:95:b2: c8:c9:ed:44:cf:af:51:c6:fa:a1:32:eb:89:a1:f7: 2d:91:1a:9b:34:fd:57:30:20:fe:5b:8f:50:7d:5f: 43:0e:27:85:b3:66:53:a7:4d:b5:86:19:82:89:f3: ce:16:95:61:0d:37:2c:9a:05:6a:48:9b:ee:2e:95: 98:e5:6b:9d:3e:10:b4:c6:cd:45:5f:51:e7:e9:f9: 4c:94:27:12:3d:dd:74:a5:fa:ed:c1:ef:58:a5:12: de:a4:21:05:d8:de:c3:d7:5c:3e:d1:ff:b3:d3:a4: d1:90:eb:d3:8c:11:d2:19:c9:47:f1:14:1e:6f:27: fc:2b:75:4f:dc:38:c2:86:e8:35:4e:9f:0d:f6:64: 24:cf:67:1c:60:3c:a9:55:c8:bc:58:66:2b:9a:56: cb:20:77:4f:3f:1c:7d:c3:40:78:69:00:6f:e1:99: 6f:db:9d:1a:bb:b6:b8:b8:90:0f:7a:8b:ed:9a:56: a0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EE:D5:8B:8F:FB:EB:90:50:C5:F2:AC:04:7F:DD:A2:CA:94:F1:57 X509v3 Authority Key Identifier: keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0f:0a:fc:c7:4f:df:0a:16:62:b0:43:1c:51:96:54:05:a2: ce:be:17:c4:1e:57:e8:e9:65:6d:5c:62:d4:af:d9:8f:f7:d3: ea:55:49:cd:89:6e:64:67:77:81:a5:c0:2f:30:37:fc:f2:86: f8:e3:49:6d:5e:0a:db:11:ca:2e:9d:55:33:20:20:4f:3f:91: a8:a9:5d:6a:da:63:04:d8:ca:9a:44:c8:83:3f:0c:5f:c8:a1: 83:56:a3:ab:32:2e:3f:0e:d1:c3:f5:34:45:3a:b3:9e:32:f0: ce:09:f8:6d:23:fb:e4:73:3c:20:c7:4d:29:26:24:04:30:9b: 0c:a6:9c:a1:ef:17:15:01:88:c8:6c:e8:1d:46:54:ee:ce:d9: fe:41:f5:9a:95:ca:aa:0a:6c:be:e5:05:29:58:4e:9a:d9:98: dd:20:d0:29:7a:18:c1:d1:3d:9f:32:49:0d:8e:a9:9f:48:9f: f0:39:86:9a:51:10:2b:95:0d:42:4d:69:88:12:92:c5:24:e0: 5e:1b:b3:03:e6:5e:0e:73:3f:37:6a:74:51:62:b6:47:bb:b4: bd:4e:c8:1a:ae:e1:d6:a4:1f:5d:4c:1c:2e:d2:c1:fc:2a:a5: 64:87:21:19:0c:cf:d1:0d:a0:3a:46:bc:cf:3f:58:12:80:5d: 9f:ae:18:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOQAkByUxpA/2ar5hX+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz NDEzMjYwHhcNMjUxMjIxMDEwMTIyWhcNMjUxMjIyMDEwMTIyWjAzMTEwLwYDVQQD EyhjOGVlZDU4YjhmZmJlYjkwNTBjNWYyYWMwNDdmZGRhMmNhOTRmMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrAItUadiw5ZuGn5JsbCeagSS/Ti WDgqw6KIhb/ycPjIB13zorFXPNL7rtFvL5ULhiI8UrSawwzo0lUi2axDZYhgol1V rJiYlbLIye1Ez69RxvqhMuuJofctkRqbNP1XMCD+W49QfV9DDieFs2ZTp021hhmC ifPOFpVhDTcsmgVqSJvuLpWY5WudPhC0xs1FX1Hn6flMlCcSPd10pfrtwe9YpRLe pCEF2N7D11w+0f+z06TRkOvTjBHSGclH8RQebyf8K3VP3DjChug1Tp8N9mQkz2cc YDypVci8WGYrmlbLIHdPPxx9w0B4aQBv4Zlv250au7a4uJAPeovtmlagMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMju1YuP++uQUMXyrAR/3aLKlPFXMB8GA1UdIwQY MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQ8K/MdP 3woWYrBDHFGWVAWizr4XxB5X6OllbVxi1K/Zj/fT6lVJzYluZGd3gaXALzA3/PKG +ONJbV4K2xHKLp1VMyAgTz+RqKldatpjBNjKmkTIgz8MX8ihg1ajqzIuPw7Rw/U0 RTqznjLwzgn4bSP75HM8IMdNKSYkBDCbDKacoe8XFQGIyGzoHUZU7s7Z/kH1mpXK qgpsvuUFKVhOmtmY3SDQKXoYwdE9nzJJDY6pn0if8DmGmlEQK5UNQk1piBKSxSTg XhuzA+ZeDnM/N2p0UWK2R7u0vU7IGq7h1qQfXUwcLtLB/CqlZIchGQzP0Q2gOka8 zz9YEoBdn64Y6g== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:35 2025 by rpki-client