This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json) Hash identifier: ZdgZJalOaB79ioJVWArcL7IoS0G9w+trDUdYX7/UL3M= Subject key identifier: 4F:DB:BE:C1:53:1F:48:C3:5C:C2:13:35:EF:E8:D2:1A:BA:7A:33:33 Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d Certificate serial: 019B44394B459646FD564B191ECFD8CB0340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft Manifest number: 1297 Signing time: Mon 22 Dec 2025 04:02:44 +0000 Manifest this update: Mon 22 Dec 2025 04:02:44 +0000 Manifest next update: Tue 23 Dec 2025 04:02:44 +0000 Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: h3DTnz0TjbseFgd3vsbbPHHST89DEsRo1H+0+F3p63k=) 2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:4b:45:96:46:fd:56:4b:19:1e:cf:d8:cb:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d Validity Not Before: Dec 22 04:02:44 2025 GMT Not After : Dec 23 04:02:44 2025 GMT Subject: CN=4fdbbec1531f48c35cc21335efe8d21aba7a3333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:95:0c:53:54:20:2b:97:08:2a:73:13:c6: bf:8a:42:48:a9:b1:7d:27:97:cd:89:45:26:7b:84: 8a:f3:17:ce:6b:96:43:65:2e:11:44:ac:07:05:fc: e5:36:e3:1d:aa:af:2e:6c:0a:6a:08:b3:b5:1b:7b: 36:54:8e:9a:1c:bd:a5:a9:8b:ef:d6:3d:f4:af:ba: 25:c7:e5:9c:5d:a7:21:80:e0:29:ec:b6:50:05:e9: 89:e4:be:40:48:2e:a2:c8:2d:0c:40:86:bc:44:2b: 16:b7:df:42:a5:db:ac:fb:d4:8d:f2:fe:ab:99:80: 08:51:10:8c:ab:aa:80:0e:0d:c0:18:f5:5a:c8:1c: 03:c9:89:20:b0:06:ef:cc:21:97:ec:ea:c5:e1:b6: b0:9f:51:2c:99:2f:5c:be:0c:6d:a7:b2:79:e7:32: 23:5d:16:9b:e0:28:9e:85:90:20:31:2c:45:2e:9b: 59:50:f7:25:06:89:b7:e3:fe:d2:a8:aa:14:71:6c: 3b:cf:44:3e:77:57:c3:dd:53:e6:96:d2:b0:99:47: ae:da:bc:3e:a1:6b:26:4f:69:c9:f2:65:17:85:21: ba:d9:6b:4a:be:5b:5f:ba:38:76:f1:0a:c6:b9:17: bf:b4:77:bb:00:52:cc:e8:30:ab:12:b9:f2:43:54: 89:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:BE:C1:53:1F:48:C3:5C:C2:13:35:EF:E8:D2:1A:BA:7A:33:33 X509v3 Authority Key Identifier: keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:30:6a:da:1f:d7:66:43:13:62:5f:ea:52:4f:51:c3:8f:16: d9:1f:97:d1:54:bf:dd:84:12:b8:5c:8d:44:e4:57:9b:be:67: 20:fd:31:ea:f4:a8:c7:9c:99:d4:e2:f7:f6:4e:3b:07:40:1a: 67:17:32:43:a4:66:02:9e:4c:01:b8:a3:02:e8:17:7e:6b:a2: a8:66:4c:71:ed:14:7a:d4:d2:be:7c:3d:4e:99:3e:a5:1a:fa: da:8a:92:f2:0e:8f:f2:b4:3d:19:47:c4:ed:7c:ae:20:86:9b: 2d:8c:68:95:1d:de:0a:25:79:85:f0:14:12:90:3f:4e:09:1b: ab:b4:0a:83:e2:20:e8:09:b9:89:0a:4a:06:5c:e8:75:42:42: a6:81:68:40:5f:57:5b:c0:af:49:4a:f6:da:04:16:07:7c:b0: 42:05:10:e1:f5:21:b1:5d:43:68:80:16:d1:1a:bd:d5:bf:92: a2:c9:27:01:03:e8:c0:bd:89:c7:2b:32:18:8d:e9:53:c3:b3: f4:64:75:c4:0c:f0:d0:33:a6:3c:6a:d5:03:00:6e:03:f9:66: ed:e9:ef:32:63:67:80:92:13:a1:b0:de:37:41:ac:37:56:2b: af:81:4d:e4:64:fd:fd:55:96:c6:d9:a4:26:48:f2:37:06:3b: 8c:7c:34:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOUtFlkb9VksZHs/YywNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj YjRjOGQwHhcNMjUxMjIyMDQwMjQ0WhcNMjUxMjIzMDQwMjQ0WjAzMTEwLwYDVQQD Eyg0ZmRiYmVjMTUzMWY0OGMzNWNjMjEzMzVlZmU4ZDIxYWJhN2EzMzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgyVDFNUICuXCCpzE8a/ikJIqbF9 J5fNiUUme4SK8xfOa5ZDZS4RRKwHBfzlNuMdqq8ubApqCLO1G3s2VI6aHL2lqYvv 1j30r7olx+WcXachgOAp7LZQBemJ5L5ASC6iyC0MQIa8RCsWt99Cpdus+9SN8v6r mYAIURCMq6qADg3AGPVayBwDyYkgsAbvzCGX7OrF4bawn1EsmS9cvgxtp7J55zIj XRab4CiehZAgMSxFLptZUPclBom34/7SqKoUcWw7z0Q+d1fD3VPmltKwmUeu2rw+ oWsmT2nJ8mUXhSG62WtKvltfujh28QrGuRe/tHe7AFLM6DCrErnyQ1SJeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/bvsFTH0jDXMITNe/o0hq6ejMzMB8GA1UdIwQY MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2 LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjBq2h/X ZkMTYl/qUk9Rw48W2R+X0VS/3YQSuFyNRORXm75nIP0x6vSox5yZ1OL39k47B0Aa ZxcyQ6RmAp5MAbijAugXfmuiqGZMce0UetTSvnw9Tpk+pRr62oqS8g6P8rQ9GUfE 7XyuIIabLYxolR3eCiV5hfAUEpA/Tgkbq7QKg+Ig6Am5iQpKBlzodUJCpoFoQF9X W8CvSUr22gQWB3ywQgUQ4fUhsV1DaIAW0Rq91b+SosknAQPowL2JxysyGI3pU8Oz 9GR1xAzw0DOmPGrVAwBuA/lm7envMmNngJITobDeN0GsN1Yrr4FN5GT9/VWWxtmk JkjyNwY7jHw0Rw== -----END CERTIFICATE-----Generated at Mon Dec 22 10:41:17 2025 by rpki-client