This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft File: z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json) Hash identifier: tObcTM4z3DabxrHTBh9HdBti7xeu3D3h1SMUs57C7Js= Subject key identifier: E9:8E:34:51:2B:34:9E:22:54:C1:4F:E6:D0:DD:46:E1:24:31:D2:07 Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 Certificate issuer: /CN=cfa968319d72a98a759400338b70fdc678912de6 Certificate serial: 019B3FB62650B9FB790692F33EA028435503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 07:01:00 +0000 Manifest this update: Sun 21 Dec 2025 07:01:00 +0000 Manifest next update: Mon 22 Dec 2025 07:01:00 +0000 Files and hashes: 1: UNSqpPRk8YQu8Tpokfda-rc2u1Q.roa (hash: 2vlQY/Sz+orv0VXyikwml/jrW51/V1Um8rIw+mJIp+c=) 2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: meKNP1zH0CirOZTZjsyQ1ex3auOMkMTeYSFh6BsQ07I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:26:50:b9:fb:79:06:92:f3:3e:a0:28:43:55:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6 Validity Not Before: Dec 21 07:01:00 2025 GMT Not After : Dec 22 07:01:00 2025 GMT Subject: CN=e98e34512b349e2254c14fe6d0dd46e12431d207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:1b:dd:ec:7c:ac:82:0a:40:2a:5f:09:85: f5:c1:52:08:d4:8e:09:9e:ea:d9:1b:5e:0d:5b:af: 30:4d:7f:d8:80:a0:b4:23:19:a4:92:f7:e1:a8:dd: 92:78:b5:97:4f:93:2b:d6:2f:84:7e:32:8a:86:04: 70:58:17:d4:ff:8c:f0:3f:90:40:92:3c:41:38:88: 59:63:c4:42:ee:63:68:27:9f:41:8a:28:cb:a3:55: 81:6b:2a:8e:b5:bc:53:83:57:ee:e2:a5:61:9c:cd: 7f:2c:b2:39:21:5a:16:a4:71:bd:44:dc:54:d2:fe: 8a:77:8b:6f:ce:01:a9:cf:d7:cd:41:8f:af:90:70: 59:95:d4:6a:8f:44:e2:00:4d:cf:89:57:de:7a:ff: 0c:c7:80:8b:64:01:c5:8a:58:8d:5b:a7:e6:97:51: b9:cd:38:f9:c0:f0:9d:3e:1c:8d:c6:a6:0b:d2:d3: e5:47:25:29:50:47:14:de:82:4c:6a:25:3c:50:5d: bf:4a:7e:fb:24:0a:30:10:34:bb:44:89:ff:af:44: 17:be:fa:1c:a1:fd:86:62:c8:ce:99:b8:10:74:e0: b3:81:32:86:56:bf:39:3c:02:19:5d:6c:c3:1c:60: 0f:a3:dc:04:4c:fe:f9:ed:49:5b:cc:d1:66:cf:ad: c8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:8E:34:51:2B:34:9E:22:54:C1:4F:E6:D0:DD:46:E1:24:31:D2:07 X509v3 Authority Key Identifier: keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:aa:54:db:29:2c:ca:9d:1f:9c:75:2b:7a:0e:ae:2f:9a:57: 9b:3a:c5:16:ab:35:41:3b:ae:b1:c8:04:b2:27:c7:94:8f:ee: d2:df:51:89:60:07:7b:84:ef:ec:25:98:5b:3e:9b:5a:66:08: 92:ac:4e:e4:4b:7b:56:d3:6d:a6:ce:a2:f3:dc:24:b1:c7:ae: 72:20:6e:ac:3e:df:d7:d2:71:57:c4:2d:36:71:13:00:c9:e3: 16:4a:5f:75:69:19:f5:07:ed:58:2e:92:9b:a6:ca:41:8b:68: f6:ee:48:96:34:cd:97:76:1d:28:bc:e6:8f:d1:f0:a9:b3:93: 58:d2:67:2a:e6:2d:db:f7:ab:f5:34:f7:a8:4f:7f:72:6c:3d: 5e:98:61:66:5a:5f:3e:5c:e7:5a:9a:2d:57:12:4a:7c:a6:11: 6f:23:fa:f9:ca:bd:13:01:02:bf:a5:02:e4:da:3a:f6:10:c2: fa:f8:f3:b4:14:de:c3:8b:2d:27:1c:ba:39:03:84:f4:20:b9: aa:5b:fc:3c:22:33:e9:e4:a3:f6:2c:78:09:30:95:56:38:f8: 94:a6:83:16:ab:12:51:7a:d7:bf:d8:9a:37:78:46:41:ea:44: bc:43:10:1c:5f:06:80:8e:b2:03:62:da:68:1c:7c:d8:54:cc: 3a:1c:ec:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tiZQuft5BpLzPqAoQ1UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTk2ODMxOWQ3MmE5OGE3NTk0MDAzMzhiNzBmZGM2Nzg5 MTJkZTYwHhcNMjUxMjIxMDcwMTAwWhcNMjUxMjIyMDcwMTAwWjAzMTEwLwYDVQQD EyhlOThlMzQ1MTJiMzQ5ZTIyNTRjMTRmZTZkMGRkNDZlMTI0MzFkMjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJYb3ex8rIIKQCpfCYX1wVII1I4J nurZG14NW68wTX/YgKC0IxmkkvfhqN2SeLWXT5Mr1i+EfjKKhgRwWBfU/4zwP5BA kjxBOIhZY8RC7mNoJ59BiijLo1WBayqOtbxTg1fu4qVhnM1/LLI5IVoWpHG9RNxU 0v6Kd4tvzgGpz9fNQY+vkHBZldRqj0TiAE3PiVfeev8Mx4CLZAHFiliNW6fml1G5 zTj5wPCdPhyNxqYL0tPlRyUpUEcU3oJMaiU8UF2/Sn77JAowEDS7RIn/r0QXvvoc of2GYsjOmbgQdOCzgTKGVr85PAIZXWzDHGAPo9wETP757UlbzNFmz63I7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOmONFErNJ4iVMFP5tDdRuEkMdIHMB8GA1UdIwQY MBaAFM+paDGdcqmKdZQAM4tw/cZ4kS3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1Mzkt OGNlNTEwMThlMmU2LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kYzYxNmYtZGU5Yi00NzhlLTg1MzktOGNlNTEwMThlMmU2 LzEvejZsb01aMXlxWXAxbEFBemkzRDl4bmlSTGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALapU2yks yp0fnHUreg6uL5pXmzrFFqs1QTuuscgEsifHlI/u0t9RiWAHe4Tv7CWYWz6bWmYI kqxO5Et7VtNtps6i89wksceuciBurD7f19JxV8QtNnETAMnjFkpfdWkZ9QftWC6S m6bKQYto9u5IljTNl3YdKLzmj9HwqbOTWNJnKuYt2/er9TT3qE9/cmw9XphhZlpf PlznWpotVxJKfKYRbyP6+cq9EwECv6UC5No69hDC+vjztBTew4stJxy6OQOE9CC5 qlv8PCIz6eSj9ix4CTCVVjj4lKaDFqsSUXrXv9iaN3hGQepEvEMQHF8GgI6yA2La aBx82FTMOhzsPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:30:18 2025 by rpki-client