This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json) Hash identifier: Bh73JRxSSSS0lFfuNw84R/MnyEs9+66ea0Bx/2f9Oeg= Subject key identifier: C2:F4:CC:F8:C7:D1:76:68:FB:60:C7:9A:56:BB:27:E0:B7:41:07:A3 Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd Certificate serial: 019B386A2DE01EBCB00494006304EB09D7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft Manifest number: 178C Signing time: Fri 19 Dec 2025 21:00:41 +0000 Manifest this update: Fri 19 Dec 2025 21:00:41 +0000 Manifest next update: Sat 20 Dec 2025 21:00:41 +0000 Files and hashes: 1: OiSs6p_pMw-RkTCH8cl25jqlqss.roa (hash: OkhpMtYFSv0mu3dYYZ0ArKlLefWyhEpIfy2Vf7AK76Q=) 2: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: dGLfG96lP2OB7gyyY+KUr31KTN+5sgcX38I64V8SQwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:2d:e0:1e:bc:b0:04:94:00:63:04:eb:09:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd Validity Not Before: Dec 19 21:00:41 2025 GMT Not After : Dec 20 21:00:41 2025 GMT Subject: CN=c2f4ccf8c7d17668fb60c79a56bb27e0b74107a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:28:cb:c8:52:06:ee:63:0f:a5:ce:ee:d0:b1: 74:ac:e1:21:f7:b3:6a:8c:11:c5:10:e0:7c:3b:62: e9:57:ec:b3:09:89:8f:1e:04:f3:ee:a2:7c:4e:7d: d3:ff:8f:f1:f0:1e:cd:97:af:bf:d5:54:1b:b9:df: a1:9e:45:42:ae:c9:82:a7:a6:00:01:53:27:95:61: a5:88:7f:07:0c:c4:d3:fa:4a:a2:4e:08:cc:8d:fa: d1:d1:64:fb:a0:14:ef:ba:e2:c6:39:92:ce:ec:70: 80:bd:a6:e5:e3:6d:ab:f8:77:72:c7:b1:b4:3b:a1: fa:6f:68:26:00:52:c3:85:32:20:38:ad:2a:9e:2d: 00:ba:04:4a:6e:e2:8c:fd:18:d3:ce:e2:46:4d:ed: 04:6f:71:1c:e3:12:9a:f1:42:45:35:1d:52:9c:8c: b3:18:0e:f4:42:21:cd:3f:67:b7:7a:b5:c8:c0:b7: d0:a8:1e:e7:00:3b:44:86:90:a3:ee:a6:c6:e6:87: bc:85:1a:b1:29:45:b4:0c:5f:ca:be:b9:ce:ec:9d: e3:da:64:33:bf:f9:ad:36:a5:0d:7e:c6:42:45:76: d6:da:b6:8b:c3:02:d7:5f:d5:90:67:0c:60:6c:50: 1a:f1:6e:92:e7:11:e6:80:07:53:ab:0e:c0:54:35: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:CC:F8:C7:D1:76:68:FB:60:C7:9A:56:BB:27:E0:B7:41:07:A3 X509v3 Authority Key Identifier: keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7b:7a:99:ac:a1:e5:df:f7:09:d7:a8:ef:bc:66:a5:a3:8a: 70:a3:3f:14:50:1a:dc:b7:f7:77:58:5a:1a:ae:2e:31:ca:dc: 67:9d:07:7d:84:12:32:d7:51:88:36:75:a8:90:c5:b3:d3:f2: cc:a1:4a:3c:8a:cd:ad:53:94:6c:52:56:64:cc:97:37:5c:f4: 6e:a5:5d:25:5f:de:49:76:33:9c:46:6d:4b:dc:6f:7a:c6:d8: 0b:1f:13:9a:50:9b:59:eb:db:f1:0b:0d:cd:46:a3:20:e8:52: 4f:27:d5:a2:b5:78:f4:5c:67:77:8d:54:b2:d2:1a:cd:34:88: bc:b7:7a:fd:fd:70:cf:ca:e3:fd:f0:18:b6:c8:d5:8e:ec:cb: d5:f9:39:3c:10:bf:f2:3f:fc:43:18:e1:ca:d3:c1:6f:3b:a7: 39:18:15:68:bb:99:cb:44:d8:00:dc:08:ee:cb:b8:61:bd:ab: e6:bf:54:fc:5d:6f:04:5f:a0:c2:da:17:cb:06:e0:1e:21:5b: 03:3a:d9:70:db:92:37:12:d9:55:dd:c8:e1:4c:37:cf:cc:fa: c9:d8:20:2f:ca:36:26:7c:af:fd:82:9b:bf:94:b4:bf:aa:47: 7b:8b:41:5d:18:85:41:d6:3a:cd:e5:92:b5:42:64:78:c6:a3: e4:cc:4f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ai3gHrywBJQAYwTrCdenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MGMzMjk5NmFlMTI0NjE4OTcyMjJlMmQ5Y2MwOTM5MzA5 MjdkZGQwHhcNMjUxMjE5MjEwMDQxWhcNMjUxMjIwMjEwMDQxWjAzMTEwLwYDVQQD EyhjMmY0Y2NmOGM3ZDE3NjY4ZmI2MGM3OWE1NmJiMjdlMGI3NDEwN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlijLyFIG7mMPpc7u0LF0rOEh97Nq jBHFEOB8O2LpV+yzCYmPHgTz7qJ8Tn3T/4/x8B7Nl6+/1VQbud+hnkVCrsmCp6YA AVMnlWGliH8HDMTT+kqiTgjMjfrR0WT7oBTvuuLGOZLO7HCAvabl422r+Hdyx7G0 O6H6b2gmAFLDhTIgOK0qni0AugRKbuKM/RjTzuJGTe0Eb3Ec4xKa8UJFNR1SnIyz GA70QiHNP2e3erXIwLfQqB7nADtEhpCj7qbG5oe8hRqxKUW0DF/KvrnO7J3j2mQz v/mtNqUNfsZCRXbW2raLwwLXX9WQZwxgbFAa8W6S5xHmgAdTqw7AVDVZIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML0zPjH0XZo+2DHmla7J+C3QQejMB8GA1UdIwQY MBaAFGYMMplq4SRhiXIi4tnMCTkwkn3dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQt NTVjM2EyOGU2MmMzLzEvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9iOGQ0MDAtZTZlOC00MWVmLWFkMjQtNTVjM2EyOGU2MmMz LzEvWmd3eW1XcmhKR0dKY2lMaTJjd0pPVENTZmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHt6mayh 5d/3Cdeo77xmpaOKcKM/FFAa3Lf3d1haGq4uMcrcZ50HfYQSMtdRiDZ1qJDFs9Py zKFKPIrNrVOUbFJWZMyXN1z0bqVdJV/eSXYznEZtS9xvesbYCx8TmlCbWevb8QsN zUajIOhSTyfVorV49Fxnd41UstIazTSIvLd6/f1wz8rj/fAYtsjVjuzL1fk5PBC/ 8j/8QxjhytPBbzunORgVaLuZy0TYANwI7su4Yb2r5r9U/F1vBF+gwtoXywbgHiFb AzrZcNuSNxLZVd3I4Uw3z8z6ydggL8o2Jnyv/YKbv5S0v6pHe4tBXRiFQdY6zeWS tUJkeMaj5MxPZg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:30 2025 by rpki-client