This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json) Hash identifier: i5R44JURXcQcFkQ0re4wek6njlrCspyiER6Lc6hW0AU= Subject key identifier: E4:E9:1A:07:EA:33:45:3C:1F:C9:9C:55:13:C1:07:8F:C7:21:BE:A2 Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Certificate serial: 019B6AD6EC258A63022553D0B677F8FD159E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft Manifest number: 17A3 Signing time: Mon 29 Dec 2025 16:00:28 +0000 Manifest this update: Mon 29 Dec 2025 16:00:28 +0000 Manifest next update: Tue 30 Dec 2025 16:00:28 +0000 Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=) 2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: dt1iT9ExDZ595kyCBBoUGfkmmOrxr5KWPFlA++Sl9lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d6:ec:25:8a:63:02:25:53:d0:b6:77:f8:fd:15:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da Validity Not Before: Dec 29 16:00:28 2025 GMT Not After : Dec 30 16:00:28 2025 GMT Subject: CN=e4e91a07ea33453c1fc99c5513c1078fc721bea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:1e:28:03:06:b0:71:57:b6:12:23:1a:7a: ea:35:4e:59:6a:f2:2a:67:99:f7:9c:32:13:97:b0: 0b:08:c1:13:34:8b:c7:cd:34:41:db:a4:2d:7f:f8: 26:23:64:f9:64:7e:21:62:1b:95:fa:4c:68:d9:4a: 0f:ca:66:46:a0:01:57:0b:31:c5:d8:04:bb:2c:34: cb:0b:e4:0e:f2:e6:80:ad:68:c6:c1:86:ca:02:b3: 95:55:b8:4c:35:d0:6d:60:4e:31:46:35:3c:f4:e0: fe:be:93:33:c0:f2:89:89:c0:23:38:4f:f2:e5:2b: 54:89:62:0c:bd:cc:4e:f3:61:50:b8:65:7b:1f:b8: 94:0a:2d:8a:01:85:02:d4:ef:13:d2:cd:f8:ba:a3: 6c:eb:ec:23:e9:f2:1b:d8:a6:d2:f9:58:da:da:c2: f3:e2:32:e1:1e:0c:bb:40:dd:ed:f0:54:87:ab:f2: 58:94:12:11:32:4d:0a:71:cf:dd:c7:40:2f:09:d2: 6f:02:3c:b9:6b:34:40:3b:b5:73:90:26:5b:f2:3c: 3e:cc:64:f7:e2:a9:da:42:00:16:9c:91:7e:6e:a9: 9c:eb:06:c2:bf:eb:f7:7e:32:14:b6:7f:04:53:e7: 7b:db:ca:0b:74:c4:af:b1:da:c3:39:e5:5a:a5:9b: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:1A:07:EA:33:45:3C:1F:C9:9C:55:13:C1:07:8F:C7:21:BE:A2 X509v3 Authority Key Identifier: keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2d:bb:44:7f:84:94:82:1f:69:f1:81:2d:82:70:16:b1:65: d3:2a:1f:04:ba:eb:74:3b:8e:fa:9b:b2:f3:13:36:13:9d:f0: 8c:97:8e:39:61:ae:7f:f3:93:57:53:c3:3a:94:e0:f0:78:f5: 58:76:aa:43:1b:4c:68:a8:97:2b:af:19:64:13:f7:25:92:f1: 15:2a:11:27:55:17:12:35:5a:85:a8:fa:96:5d:1c:33:e2:86: c1:cf:0f:7a:8f:af:d2:45:74:bb:44:99:59:bb:70:1d:30:93: 5c:98:e5:e4:3e:49:55:39:ae:38:dc:f3:9b:e8:ec:b1:5e:28: 7f:06:10:a9:b0:74:d7:79:d3:b7:59:b1:4c:36:f6:e0:43:24: cf:e1:96:65:b6:e6:30:c2:2c:36:69:bd:8d:28:f6:e9:57:71: 5f:5a:3f:27:76:41:db:b9:0c:8b:25:84:6a:66:12:01:57:a9: d7:0e:b8:9a:bf:53:60:70:d4:d3:4c:64:8c:47:b2:8c:7c:16: 42:8e:d4:af:6f:aa:a8:21:18:1a:ca:18:34:3f:2e:2b:ae:d8: 51:e6:3e:aa:e2:da:7c:cc:04:3c:1f:81:93:e8:71:f1:b5:35: dd:ff:a4:91:78:19:53:75:a7:0d:f9:dc:cf:99:7c:61:f0:b4: a0:d3:19:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1uwlimMCJVPQtnf4/RWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjUxYTI1ZDJmMzkyMjUyNGE2YTY5YjFkN2Q2MWNkM2Nj MmE4ZGEwHhcNMjUxMjI5MTYwMDI4WhcNMjUxMjMwMTYwMDI4WjAzMTEwLwYDVQQD EyhlNGU5MWEwN2VhMzM0NTNjMWZjOTljNTUxM2MxMDc4ZmM3MjFiZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9YeKAMGsHFXthIjGnrqNU5ZavIq Z5n3nDITl7ALCMETNIvHzTRB26Qtf/gmI2T5ZH4hYhuV+kxo2UoPymZGoAFXCzHF 2AS7LDTLC+QO8uaArWjGwYbKArOVVbhMNdBtYE4xRjU89OD+vpMzwPKJicAjOE/y 5StUiWIMvcxO82FQuGV7H7iUCi2KAYUC1O8T0s34uqNs6+wj6fIb2KbS+Vja2sLz 4jLhHgy7QN3t8FSHq/JYlBIRMk0Kcc/dx0AvCdJvAjy5azRAO7VzkCZb8jw+zGT3 4qnaQgAWnJF+bqmc6wbCv+v3fjIUtn8EU+d728oLdMSvsdrDOeVapZvfewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTpGgfqM0U8H8mcVRPBB4/HIb6iMB8GA1UdIwQY MBaAFGf1GiXS85IlJKammx19Yc08wqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYt NTYyNmI1NGQxYTIxLzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYtNTYyNmI1NGQxYTIx LzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC27RH+E lIIfafGBLYJwFrFl0yofBLrrdDuO+puy8xM2E53wjJeOOWGuf/OTV1PDOpTg8Hj1 WHaqQxtMaKiXK68ZZBP3JZLxFSoRJ1UXEjVahaj6ll0cM+KGwc8Peo+v0kV0u0SZ WbtwHTCTXJjl5D5JVTmuONzzm+jssV4ofwYQqbB013nTt1mxTDb24EMkz+GWZbbm MMIsNmm9jSj26VdxX1o/J3ZB27kMiyWEamYSAVep1w64mr9TYHDU00xkjEeyjHwW Qo7Ur2+qqCEYGsoYND8uK67YUeY+quLafMwEPB+Bk+hx8bU13f+kkXgZU3WnDfnc z5l8YfC0oNMZBQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:49:13 2025 by rpki-client