This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
File: z81z-CwmDahzhtz3vibVxURVJvo.mft (raw, json)
Hash identifier: vsRcZ6J1YN5HocConnpxcvI//C99i0d0saB/H+vQoCI=
Subject key identifier: 04:81:3E:1C:F3:49:55:C7:CF:C1:35:F8:88:24:0E:24:1B:36:B6:05
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 019B3BD90320526F27B2844BE94E0249B585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
Manifest number: 1799
Signing time: Sat 20 Dec 2025 13:00:36 +0000
Manifest this update: Sat 20 Dec 2025 13:00:36 +0000
Manifest next update: Sun 21 Dec 2025 13:00:36 +0000
Files and hashes: 1: 5J7FT5T4iCPWgHROhsbqdNaMT9o.roa (hash: jBmkmJYpsApJkLfRXsG4ALVIn6TGuuaI6YuyIgvxPnE=)
2: 7gNupTiKvsD-L5JkcDiFIyXAYJ8.roa (hash: RijcUGVaqbGizL+PJrBNxXCQgXj+yEg1FEmyC/akSl4=)
3: C3eiydvfu8zDQyZJ5caLapaTTPQ.roa (hash: Laj6Npa1ifE/Zjf7ICEhvgeUyo4o6/IxywpuMaNuLhw=)
4: MWd_zJCCtky5uU44fppjHNR26hg.roa (hash: Oyiv4lI5Gy71tNRNOQYH2bTYTyT8/iMpyrW+5LZJMbI=)
5: PGYZuEV_2mLi_zJNOb_Qi3tgmFQ.roa (hash: L9jMb4xMearWx1pMpG1UZIzS3btc6sPfJWcVjCfkqnQ=)
6: QNUdrvwe6lyFAsywdVJfIRLAKlY.roa (hash: r5d8TXirwEC36NvrWyANl8uE9Nb8babrGApX6K62/5s=)
7: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (hash: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=)
8: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (hash: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=)
9: iX79BvpLXjPp1zRHv-56Jb28iUo.roa (hash: 5izyKa6j1NS60f2KCWMjeYm2w4JWGdeNSlmJ4IkN45o=)
10: lGUduVHMOMEEfO0VmTWGADXGhsY.roa (hash: o52mHIdh9TMUYnXj8h5SquGS+xd0wQlMb66ZJI9PQD4=)
11: mxTVUqpOL4wnWbrVTklVfLePHRs.roa (hash: +cuq9xTWysBMQ3/uZNCA0qqbD2i04SKRPZsJzG6pUDo=)
12: rskHkUFkX_O48BSko3Gfim1HaXo.roa (hash: We6jCxDZgW3oUj7xCVPUCK7y2C7d3rboO/5pXyLAzz4=)
13: z81z-CwmDahzhtz3vibVxURVJvo.crl (hash: 2j++vCoh3z0capub5zCjJxR2l/pD7ETv6fiyCqYgEUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:d9:03:20:52:6f:27:b2:84:4b:e9:4e:02:49:b5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Dec 20 13:00:36 2025 GMT
Not After : Dec 21 13:00:36 2025 GMT
Subject: CN=04813e1cf34955c7cfc135f888240e241b36b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:a0:a3:b4:46:33:85:88:4c:24:00:9e:da:
c3:45:ec:2f:6a:c0:85:5e:cf:6e:80:99:65:48:f2:
e7:4b:5b:ce:26:45:7d:28:b6:cb:6e:86:e6:5f:5b:
88:d6:af:d8:cd:66:cf:74:06:1d:61:a7:fd:23:52:
b3:3a:13:cb:c8:61:27:0d:e5:18:ad:3e:83:2e:62:
7b:33:99:2f:fe:3f:86:73:21:e3:cf:50:c5:ac:93:
49:6c:f0:7e:61:98:41:e8:6f:3f:5f:0e:1e:c1:eb:
42:13:d6:92:59:4e:93:c3:0e:75:fb:8a:7a:d8:06:
1f:3d:3e:74:f8:4a:13:80:87:aa:e2:5d:0c:e6:a8:
85:cd:fc:5d:8f:8d:68:cb:36:5b:3e:de:1d:7e:7e:
27:ad:f0:99:a8:d3:14:ae:e2:15:bf:42:db:1e:bc:
d0:10:f5:1c:33:bb:cc:70:db:13:29:c8:7d:47:6b:
05:58:b4:9a:58:76:27:7d:1b:2e:1b:7c:50:0f:a2:
0e:83:c9:a1:2b:7b:1c:ce:fe:48:e6:03:cc:fc:20:
60:b4:f7:09:30:fb:86:ea:4f:47:3a:d4:b2:e3:37:
6f:a3:a9:8b:67:46:67:f0:91:75:42:12:73:b0:14:
92:54:74:84:b9:14:4a:c9:78:f3:20:f7:53:e2:17:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:3E:1C:F3:49:55:C7:CF:C1:35:F8:88:24:0E:24:1B:36:B6:05
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:36:59:40:e9:ba:a1:0c:49:39:25:de:00:47:51:29:41:
be:c6:5a:cc:b7:c5:e5:b4:79:a0:2a:3d:a0:68:49:b9:f3:ec:
34:14:8b:64:dc:7e:65:89:9b:53:04:b0:b4:ee:7f:3f:be:ed:
21:5c:6b:00:cf:5e:02:9c:d8:17:5d:6e:54:22:04:cc:04:4e:
b1:a3:12:c8:e1:79:c1:10:10:20:39:42:02:a6:31:b0:b8:93:
8c:e5:f0:ef:5a:e8:b5:0a:21:3d:fd:e4:e1:dd:db:19:e3:95:
21:cc:22:ed:f1:9c:16:da:fd:21:9f:42:60:78:5b:6e:7b:0a:
e8:f4:f8:12:4d:65:1f:76:0e:de:53:8b:b8:8d:95:b5:d7:8a:
00:7d:d7:4c:b9:7f:00:e1:f3:1e:24:62:4e:40:98:7e:58:88:
55:ac:2d:34:85:8c:ef:56:54:db:31:38:31:77:fa:7c:3f:b6:
15:a8:69:74:9e:76:aa:8c:ec:e9:28:31:25:4e:a2:4f:b3:28:
68:57:dd:32:27:00:cd:c3:67:e4:da:fa:ae:19:d3:b9:6a:53:
48:59:80:af:39:6c:e4:c7:b6:10:72:5b:d6:11:06:d6:40:5b:
f7:09:dd:8c:33:b3:35:7f:8a:01:59:11:dc:76:94:59:e9:34:
cb:16:d8:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs72QMgUm8nsoRL6U4CSbWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2Q3M2Y4MmMyNjBkYTg3Mzg2ZGNmN2JlMjZkNWM1NDQ1
NTI2ZmEwHhcNMjUxMjIwMTMwMDM2WhcNMjUxMjIxMTMwMDM2WjAzMTEwLwYDVQQD
EygwNDgxM2UxY2YzNDk1NWM3Y2ZjMTM1Zjg4ODI0MGUyNDFiMzZiNjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03mgo7RGM4WITCQAntrDRewvasCF
Xs9ugJllSPLnS1vOJkV9KLbLbobmX1uI1q/YzWbPdAYdYaf9I1KzOhPLyGEnDeUY
rT6DLmJ7M5kv/j+GcyHjz1DFrJNJbPB+YZhB6G8/Xw4ewetCE9aSWU6Tww51+4p6
2AYfPT50+EoTgIeq4l0M5qiFzfxdj41oyzZbPt4dfn4nrfCZqNMUruIVv0LbHrzQ
EPUcM7vMcNsTKch9R2sFWLSaWHYnfRsuG3xQD6IOg8mhK3sczv5I5gPM/CBgtPcJ
MPuG6k9HOtSy4zdvo6mLZ0Zn8JF1QhJzsBSSVHSEuRRKyXjzIPdT4hcxYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASBPhzzSVXHz8E1+IgkDiQbNrYFMB8GA1UdIwQY
MBaAFM/Nc/gsJg2oc4bc974m1cVEVSb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTct
NmVkYzFiMjI1NjI1LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MGFkZTAtOThkYS00YWE1LWI4MTctNmVkYzFiMjI1NjI1
LzEvejgxei1Dd21EYWh6aHR6M3ZpYlZ4VVJWSnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeM2WUDp
uqEMSTkl3gBHUSlBvsZazLfF5bR5oCo9oGhJufPsNBSLZNx+ZYmbUwSwtO5/P77t
IVxrAM9eApzYF11uVCIEzAROsaMSyOF5wRAQIDlCAqYxsLiTjOXw71rotQohPf3k
4d3bGeOVIcwi7fGcFtr9IZ9CYHhbbnsK6PT4Ek1lH3YO3lOLuI2VtdeKAH3XTLl/
AOHzHiRiTkCYfliIVawtNIWM71ZU2zE4MXf6fD+2FahpdJ52qozs6SgxJU6iT7Mo
aFfdMicAzcNn5Nr6rhnTuWpTSFmArzls5Me2EHJb1hEG1kBb9wndjDOzNX+KAVkR
3HaUWek0yxbYRA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 17:14:49 2025 by rpki-client