This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json) Hash identifier: ylY7mSsprZnWxUOFQMZohORLFZX+4bl9yfKsptMffB4= Subject key identifier: 02:F5:21:31:F4:E9:18:7A:89:58:44:05:4B:D3:CE:06:4C:26:DF:E8 Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Certificate serial: 019B397D8F12F3E7101AEF49A099D63F7A2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 02:01:28 +0000 Manifest this update: Sat 20 Dec 2025 02:01:28 +0000 Manifest next update: Sun 21 Dec 2025 02:01:28 +0000 Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=) 2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: MgWQIo8XyuXlDwaSDFapGoRQSa0Y2OpXP/eW8nSXsf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:8f:12:f3:e7:10:1a:ef:49:a0:99:d6:3f:7a:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Validity Not Before: Dec 20 02:01:28 2025 GMT Not After : Dec 21 02:01:28 2025 GMT Subject: CN=02f52131f4e9187a895844054bd3ce064c26dfe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:84:22:c4:3d:14:12:6c:5a:82:fe:62:9c:1e: c2:71:c7:a9:6c:31:c1:45:16:f1:10:eb:2e:a3:4f: 2b:9d:18:d0:61:57:85:54:4c:eb:9c:d8:40:d7:4e: e4:62:72:50:1f:2c:21:e4:b9:2c:d4:76:90:b5:8e: c1:a9:99:2e:73:ac:32:d5:bc:39:7f:f0:e5:2b:4f: af:80:f9:18:09:ea:cb:95:29:1b:bb:3c:67:94:a8: d3:fa:4a:aa:7b:1c:c1:fd:8e:09:9e:b1:13:7c:3b: 7e:14:87:22:00:b2:2b:88:f0:73:58:63:72:a5:e0: 38:b8:f2:94:18:15:18:00:7c:cf:c8:75:41:d5:d1: b9:23:6a:83:0f:2e:8e:df:14:21:e2:7a:31:84:a8: 4b:31:2b:c9:6b:00:7b:b9:c5:bb:5d:46:de:07:60: 13:6e:b7:b3:8d:13:5c:a9:90:d4:82:c2:9b:97:71: 79:61:c2:95:06:52:b6:44:8f:b3:ee:47:eb:d5:2a: c2:cc:f7:3b:3f:ff:19:95:82:96:6a:94:da:6f:61: 03:d0:ac:82:cc:32:db:cf:d5:5f:f8:22:f2:3a:d4: 2f:4d:23:30:03:c0:21:b6:63:e5:4e:dc:1c:b2:b1: c6:e3:e0:e4:92:dc:93:c4:14:8b:1e:c5:18:db:2c: cf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:21:31:F4:E9:18:7A:89:58:44:05:4B:D3:CE:06:4C:26:DF:E8 X509v3 Authority Key Identifier: keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c4:e1:45:6d:cb:c1:33:6b:ca:52:13:f4:03:b8:8c:d7:6a: a4:8a:e7:65:d3:4e:25:cf:69:77:be:cc:49:b7:cc:a8:f1:fd: 60:ba:3d:65:37:24:50:37:c4:ef:0f:ea:87:f6:9c:42:ce:e2: 12:70:c0:9d:bd:7e:78:de:9c:42:8d:a5:b6:a4:1f:44:34:b9: ba:86:61:f3:4e:7d:ea:1d:80:7e:bf:32:cf:b7:6a:5f:08:ce: 9e:e0:c0:00:6d:8c:b6:3e:9c:d2:54:cd:e1:b9:0e:e3:73:44: 2c:b0:e9:3a:13:d6:20:4f:cd:7a:62:77:25:3a:c7:f3:f2:41: 5f:2e:38:af:16:64:6d:82:bd:5d:27:fb:61:da:5c:ff:30:e5: 79:cf:68:f0:78:ae:a4:7b:66:48:4b:f9:5d:6b:6a:61:67:be: 85:df:fd:99:38:af:3e:06:97:c8:de:e9:15:84:c4:bf:c7:7c: 0d:4e:12:bc:aa:23:53:e0:24:de:ba:df:cf:86:57:f5:d0:31: 94:36:88:1d:d8:8b:ec:5d:c2:87:7a:cc:ec:38:16:97:49:30: a1:d9:c1:1b:97:68:d2:88:f0:ef:04:79:ec:54:9f:9c:b8:18: 51:c9:c3:52:fe:1a:bb:c1:df:ea:91:ec:8e:3d:7c:a2:5b:3d: a5:5d:41:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fY8S8+cQGu9JoJnWP3osMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk YWNhMGEwHhcNMjUxMjIwMDIwMTI4WhcNMjUxMjIxMDIwMTI4WjAzMTEwLwYDVQQD EygwMmY1MjEzMWY0ZTkxODdhODk1ODQ0MDU0YmQzY2UwNjRjMjZkZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIQixD0UEmxagv5inB7CccepbDHB RRbxEOsuo08rnRjQYVeFVEzrnNhA107kYnJQHywh5Lks1HaQtY7BqZkuc6wy1bw5 f/DlK0+vgPkYCerLlSkbuzxnlKjT+kqqexzB/Y4JnrETfDt+FIciALIriPBzWGNy peA4uPKUGBUYAHzPyHVB1dG5I2qDDy6O3xQh4noxhKhLMSvJawB7ucW7XUbeB2AT brezjRNcqZDUgsKbl3F5YcKVBlK2RI+z7kfr1SrCzPc7P/8ZlYKWapTab2ED0KyC zDLbz9Vf+CLyOtQvTSMwA8AhtmPlTtwcsrHG4+DkktyTxBSLHsUY2yzPkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL1ITH06Rh6iVhEBUvTzgZMJt/oMB8GA1UdIwQY MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt OWY1YjJlYjQ5MmEwLzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8ThRW3L wTNrylIT9AO4jNdqpIrnZdNOJc9pd77MSbfMqPH9YLo9ZTckUDfE7w/qh/acQs7i EnDAnb1+eN6cQo2ltqQfRDS5uoZh80596h2Afr8yz7dqXwjOnuDAAG2Mtj6c0lTN 4bkO43NELLDpOhPWIE/NemJ3JTrH8/JBXy44rxZkbYK9XSf7Ydpc/zDlec9o8Hiu pHtmSEv5XWtqYWe+hd/9mTivPgaXyN7pFYTEv8d8DU4SvKojU+Ak3rrfz4ZX9dAx lDaIHdiL7F3Ch3rM7DgWl0kwodnBG5do0ojw7wR57FSfnLgYUcnDUv4au8Hf6pHs jj18ols9pV1Bag== -----END CERTIFICATE-----Generated at Sat Dec 20 06:54:01 2025 by rpki-client