This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json) Hash identifier: OuNTUGDC/jL4wAyDoIMveXArZaQm4bTT6NwT4Dft6OU= Subject key identifier: 29:04:52:B6:42:2E:C4:83:5C:DE:10:9D:8B:9E:45:96:F1:5B:56:7F Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611 Certificate serial: 019B4325541CA4FB0F56544F27947716624A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 23:01:18 +0000 Manifest this update: Sun 21 Dec 2025 23:01:18 +0000 Manifest next update: Mon 22 Dec 2025 23:01:18 +0000 Files and hashes: 1: hPBXvKQdaqlVU4nQ-2Te7vaa8Bo.roa (hash: c9xr2QPdOJHBS76dYaN+BTyMMmlA60SbcteFKaCmJMA=) 2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: p/tBJp6W9bg5ZF2yUgXUvmcBXeOU4tdb+P+ZhuQ2Prg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:54:1c:a4:fb:0f:56:54:4f:27:94:77:16:62:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611 Validity Not Before: Dec 21 23:01:18 2025 GMT Not After : Dec 22 23:01:18 2025 GMT Subject: CN=290452b6422ec4835cde109d8b9e4596f15b567f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:5d:4a:90:ed:cd:4f:d5:05:51:33:39:b8: c1:49:50:38:0d:5c:19:ec:e8:04:87:02:17:63:d2: 73:e4:97:f0:0d:a3:a5:c6:32:8b:d7:49:59:21:16: 32:a2:a7:d6:bb:f6:4a:2f:c7:c0:d8:0d:28:25:7e: cf:c6:e5:b8:fe:b6:31:a8:c3:30:76:be:60:e0:a9: 32:7c:95:c6:1e:40:b4:3b:80:5d:37:db:92:84:ad: 4d:0d:d2:31:55:92:c8:1f:ef:f8:68:90:97:2c:c1: 64:20:bf:12:85:4e:4f:d1:da:d2:91:3d:8e:0e:af: cd:de:62:f4:0d:fb:40:66:30:bc:15:7c:f2:53:81: 06:f4:26:14:1f:cd:e3:ec:6b:1d:23:2f:28:e6:a3: e1:c5:58:87:fc:f5:94:30:27:46:52:6d:6d:80:88: 4c:3b:b8:66:33:20:f7:01:96:59:8d:b7:8c:d0:c4: 09:d8:52:52:20:02:7d:ba:db:e1:95:7f:ff:de:db: ce:3a:76:ff:da:30:06:bb:b0:3d:4e:e4:e1:15:b1: ac:df:6c:67:36:ee:6e:01:3b:11:7f:68:20:2e:37: 2d:1a:02:53:f9:d3:a8:02:63:12:48:dd:88:c7:56: c6:3a:65:68:37:c7:9a:2c:fa:b8:d0:7a:dc:ce:3a: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:52:B6:42:2E:C4:83:5C:DE:10:9D:8B:9E:45:96:F1:5B:56:7F X509v3 Authority Key Identifier: keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:3e:58:59:f7:8c:3e:8a:ee:71:06:38:b0:85:36:38:ff: 90:54:70:f0:51:e0:04:37:be:b8:ce:1a:62:15:ad:12:f3:9b: 61:db:4a:56:c8:aa:aa:03:e8:c0:b8:dc:3d:90:b0:47:47:28: 3b:92:af:eb:de:5b:18:b9:91:69:a5:79:9d:6f:80:15:6b:c4: 3f:00:b1:87:a6:10:d8:7d:4c:b8:23:48:cc:e6:46:77:08:c7: a9:0b:b0:17:c8:84:fd:7f:4c:a8:98:7d:e5:25:aa:d8:23:4c: b4:23:be:57:ce:ec:2e:db:b8:7b:d4:79:bd:d6:8c:d4:2d:f8: f2:3b:73:b5:96:cf:9f:71:37:22:7c:f5:85:8d:66:88:db:29: fd:b1:6c:8e:1a:20:57:53:c9:5d:21:22:e4:c3:f5:de:68:59: 97:36:41:15:a9:07:69:6c:4c:b5:e9:91:9f:8d:d9:b5:e4:26: 32:3f:2f:7e:d3:cd:eb:c4:71:f2:56:22:a7:81:0a:ae:3f:0e: 44:48:56:bb:27:a6:38:7d:5a:58:7c:62:10:44:4a:1e:86:db: b3:36:aa:c0:d9:1f:97:ab:21:c7:4d:9b:7b:0b:d5:c2:9c:81: 1b:e4:9c:80:3b:1c:2f:a5:83:04:ec:21:d5:b1:a1:8a:98:c4: 40:47:32:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVQcpPsPVlRPJ5R3FmJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNjYyMjRiY2ZiOGI4MmRlYWFiYWM4YzRjYTI1MDM3MWI5 NzQ2MTEwHhcNMjUxMjIxMjMwMTE4WhcNMjUxMjIyMjMwMTE4WjAzMTEwLwYDVQQD EygyOTA0NTJiNjQyMmVjNDgzNWNkZTEwOWQ4YjllNDU5NmYxNWI1NjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RpdSpDtzU/VBVEzObjBSVA4DVwZ 7OgEhwIXY9Jz5JfwDaOlxjKL10lZIRYyoqfWu/ZKL8fA2A0oJX7PxuW4/rYxqMMw dr5g4KkyfJXGHkC0O4BdN9uShK1NDdIxVZLIH+/4aJCXLMFkIL8ShU5P0drSkT2O Dq/N3mL0DftAZjC8FXzyU4EG9CYUH83j7GsdIy8o5qPhxViH/PWUMCdGUm1tgIhM O7hmMyD3AZZZjbeM0MQJ2FJSIAJ9utvhlX//3tvOOnb/2jAGu7A9TuThFbGs32xn Nu5uATsRf2ggLjctGgJT+dOoAmMSSN2Ix1bGOmVoN8eaLPq40HrczjoKnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkEUrZCLsSDXN4QnYueRZbxW1Z/MB8GA1UdIwQY MBaAFM9mIkvPuLgt6qusjEyiUDcbl0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjIt Yjk1NGM1MGZkYmIwLzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjItYjk1NGM1MGZkYmIw LzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANk0+WFn3 jD6K7nEGOLCFNjj/kFRw8FHgBDe+uM4aYhWtEvObYdtKVsiqqgPowLjcPZCwR0co O5Kv695bGLmRaaV5nW+AFWvEPwCxh6YQ2H1MuCNIzOZGdwjHqQuwF8iE/X9MqJh9 5SWq2CNMtCO+V87sLtu4e9R5vdaM1C348jtztZbPn3E3Inz1hY1miNsp/bFsjhog V1PJXSEi5MP13mhZlzZBFakHaWxMtemRn43ZteQmMj8vftPN68Rx8lYip4EKrj8O REhWuyemOH1aWHxiEERKHobbszaqwNkfl6shx02bewvVwpyBG+ScgDscL6WDBOwh 1bGhipjEQEcymQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:30 2025 by rpki-client