This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json) Hash identifier: ZPzvbpeWDh7poetqEtg+XgLtTAZHQ9eD4vJlIcrdu40= Subject key identifier: 79:5D:20:E5:1C:35:C9:5D:61:11:AC:2E:35:EF:B0:80:43:94:C9:72 Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c Certificate serial: 019B657A2BFF1C5BB7C02C21ABFD7D9466BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 15:01:04 +0000 Manifest this update: Sun 28 Dec 2025 15:01:04 +0000 Manifest next update: Mon 29 Dec 2025 15:01:04 +0000 Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: o3lBfFb6mo7p/P53E/7LqG0NGMDj2AcikRvR92EEZSI=) 2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=) 3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:2b:ff:1c:5b:b7:c0:2c:21:ab:fd:7d:94:66:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c Validity Not Before: Dec 28 15:01:04 2025 GMT Not After : Dec 29 15:01:04 2025 GMT Subject: CN=795d20e51c35c95d6111ac2e35efb0804394c972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0c:64:e1:00:c3:04:97:6e:33:d8:65:ad:81: 7b:e1:aa:37:3a:79:c6:e9:59:e7:2a:ad:74:8c:f0: de:30:f6:85:d7:5a:2f:0a:2e:13:0f:30:c0:b9:a6: 43:1c:2d:00:e9:57:45:0e:29:e9:3d:3a:c0:b6:08: 89:28:0e:8e:96:c9:21:be:e6:43:9a:d4:b5:69:b9: 15:5b:43:52:85:dc:56:58:c5:e2:92:d4:9a:be:7d: 05:d1:f2:ec:b8:4c:01:71:57:f9:21:35:da:b5:b5: 5f:be:64:50:91:90:f9:12:42:3f:2e:41:41:0f:19: 2c:5d:1d:b7:99:06:b4:85:23:bd:1f:8a:11:a1:34: dd:29:cb:d1:d8:3e:4f:41:6c:01:0e:8c:91:a4:36: ae:ac:f8:e8:e6:00:16:44:d4:43:c4:04:55:1e:d2: 07:cf:e1:29:e3:cc:57:66:e8:95:1b:89:01:49:a2: 0e:1a:80:76:a7:76:1b:d8:e7:0d:05:d4:44:8f:be: 29:f0:37:17:d7:4a:ad:5e:28:46:a7:d0:56:2c:94: c7:da:29:6a:5a:7e:ff:65:3f:08:8a:90:7e:b4:61: 1b:82:96:02:d5:62:1e:92:c3:8b:b9:f2:40:d2:76: 6b:be:08:08:3b:ee:99:89:6e:2d:a6:e9:15:2b:f1: 88:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5D:20:E5:1C:35:C9:5D:61:11:AC:2E:35:EF:B0:80:43:94:C9:72 X509v3 Authority Key Identifier: keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:6f:2b:92:a9:9c:b4:19:56:2e:cd:e2:b4:9b:09:e2:94:5e: d4:32:5c:08:1a:c3:1b:44:3f:b4:fa:3f:51:95:26:ae:85:29: 83:1d:3a:89:9a:ad:4f:1f:d0:b2:d9:d1:00:7d:4c:ce:e8:4b: 2e:1a:fc:3c:29:fb:b9:4f:e1:2a:66:9f:dd:5e:6b:e2:b4:d2: e4:76:5d:be:ae:a0:91:67:69:cd:64:f7:af:8b:21:ad:2a:1a: 18:36:95:17:de:75:5a:ac:02:90:42:70:87:21:26:1f:e9:25: 5b:c4:d0:28:b4:9e:32:bf:2a:cb:ad:ae:b7:d5:c8:94:47:79: 5f:6b:4f:02:29:e8:f5:11:d5:52:b6:79:41:22:a5:18:a0:f1: 8e:c6:04:16:75:ed:1f:5d:f6:a1:b7:b7:fb:77:e4:ce:d4:16: 33:14:8b:9e:b6:5a:6a:4e:a0:62:bf:d4:7e:20:3f:b4:13:f1: f8:ab:ee:41:f4:df:1b:2b:b9:e8:60:fb:4b:23:64:75:fe:ff: da:08:4f:fd:ea:9d:b3:53:ad:70:62:4d:d1:a7:90:9a:1b:1e: 93:6a:9c:97:f9:46:13:97:e8:6d:ee:08:55:0c:d0:66:16:2e: 19:0c:87:2e:b6:72:02:62:d0:60:e4:bd:61:94:e7:30:15:34: 45:df:ca:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtleiv/HFu3wCwhq/19lGa/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmYzNTM3MTVhMzRkZGEyODYwNWZkY2Y3YjdhZTgwNmQz MTE1OWMwHhcNMjUxMjI4MTUwMTA0WhcNMjUxMjI5MTUwMTA0WjAzMTEwLwYDVQQD Eyg3OTVkMjBlNTFjMzVjOTVkNjExMWFjMmUzNWVmYjA4MDQzOTRjOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgxk4QDDBJduM9hlrYF74ao3OnnG 6VnnKq10jPDeMPaF11ovCi4TDzDAuaZDHC0A6VdFDinpPTrAtgiJKA6OlskhvuZD mtS1abkVW0NShdxWWMXiktSavn0F0fLsuEwBcVf5ITXatbVfvmRQkZD5EkI/LkFB DxksXR23mQa0hSO9H4oRoTTdKcvR2D5PQWwBDoyRpDaurPjo5gAWRNRDxARVHtIH z+Ep48xXZuiVG4kBSaIOGoB2p3Yb2OcNBdREj74p8DcX10qtXihGp9BWLJTH2ilq Wn7/ZT8IipB+tGEbgpYC1WIeksOLufJA0nZrvggIO+6ZiW4tpukVK/GIAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHldIOUcNcldYRGsLjXvsIBDlMlyMB8GA1UdIwQY MBaAFGe/NTcVo03aKGBf3Pe3roBtMRWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYt NjlkODA5MmI1NGUxLzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83MDE5MzMtODQ1MC00OWNhLWEzZWYtNjlkODA5MmI1NGUx LzEvWjc4MU54V2pUZG9vWUZfYzk3ZXVnRzB4Rlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG8rkqmc tBlWLs3itJsJ4pRe1DJcCBrDG0Q/tPo/UZUmroUpgx06iZqtTx/QstnRAH1MzuhL Lhr8PCn7uU/hKmaf3V5r4rTS5HZdvq6gkWdpzWT3r4shrSoaGDaVF951WqwCkEJw hyEmH+klW8TQKLSeMr8qy62ut9XIlEd5X2tPAino9RHVUrZ5QSKlGKDxjsYEFnXt H132obe3+3fkztQWMxSLnrZaak6gYr/UfiA/tBPx+KvuQfTfGyu56GD7SyNkdf7/ 2ghP/eqds1OtcGJN0aeQmhsek2qcl/lGE5fobe4IVQzQZhYuGQyHLrZyAmLQYOS9 YZTnMBU0Rd/KtQ== -----END CERTIFICATE-----Generated at Sun Dec 28 20:12:55 2025 by rpki-client