This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json) Hash identifier: dHHOHsXSDkPBHBwPSKoHsaqFEaXRv7XnDTrppqY6htg= Subject key identifier: 04:3A:39:BA:3E:59:49:BE:EB:E9:D0:DE:80:DC:BD:F7:47:54:C1:84 Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d Certificate serial: 019B424AEEF75F4E907AA55A5382C9636B82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft Manifest number: 1296 Signing time: Sun 21 Dec 2025 19:02:45 +0000 Manifest this update: Sun 21 Dec 2025 19:02:45 +0000 Manifest next update: Mon 22 Dec 2025 19:02:45 +0000 Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: cQZUESoGmjeEBJH4Luiczb3J43AiKPmanu4i/uCyqR0=) 2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ee:f7:5f:4e:90:7a:a5:5a:53:82:c9:63:6b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d Validity Not Before: Dec 21 19:02:45 2025 GMT Not After : Dec 22 19:02:45 2025 GMT Subject: CN=043a39ba3e5949beebe9d0de80dcbdf74754c184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:80:0a:5b:e2:f0:73:37:af:05:7a:79:54: 7f:ff:00:34:1b:66:ee:4b:34:ab:f9:3f:4a:09:bd: 84:e4:7d:4d:51:ab:b3:b7:15:3b:7f:97:b1:06:f9: b8:2b:4a:18:ee:80:36:63:3e:af:72:30:56:d5:cb: ba:12:7a:da:b5:42:76:a0:cd:2a:0d:0b:92:e0:83: 2c:72:b4:f4:97:af:e6:e8:2f:7e:3e:13:cc:cd:66: 6d:8a:7c:20:d3:2c:d2:ac:bd:5c:a9:d2:25:49:cd: 74:f2:22:24:c6:82:e7:53:b7:c3:05:58:23:b2:87: 6b:22:94:44:db:42:c8:05:c3:e5:06:53:43:d7:aa: 69:19:a3:5f:cf:d8:dd:bd:44:aa:61:e6:4a:17:f6: f9:25:87:6f:01:e4:8f:84:34:2c:5a:97:67:46:58: 1b:66:d1:a1:15:da:e9:65:cf:f1:82:0b:95:6f:62: 59:e0:d9:32:76:7b:b5:b7:0a:b3:dc:30:83:ee:7d: 15:dd:03:9f:30:3c:ce:d3:f4:9f:13:c9:b0:6f:21: 1a:e3:5d:7a:89:ae:cd:66:f2:b8:3b:f4:d1:d9:19: 52:73:b6:b7:e8:89:82:58:45:77:39:4a:ab:2d:87: 1e:94:f2:74:e7:f2:31:69:fc:ff:ed:b7:7b:c5:64: 94:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3A:39:BA:3E:59:49:BE:EB:E9:D0:DE:80:DC:BD:F7:47:54:C1:84 X509v3 Authority Key Identifier: keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7a:b5:29:38:8c:83:18:ec:1a:3a:fa:9b:78:01:ea:fb:85: a5:34:4e:d6:48:c6:a9:64:2b:cd:f4:77:72:c1:25:55:02:28: a9:37:68:82:f1:42:80:bb:cb:94:41:4b:af:66:44:b5:d4:2d: 6d:8f:87:d8:e3:6b:66:8f:1d:9b:bb:f6:df:52:42:70:67:ab: 41:bd:9d:8f:44:ea:a8:2e:07:c3:96:fe:a0:45:ff:1e:47:8c: fb:f7:0e:3b:f7:88:55:88:8f:03:ee:6b:2d:f2:42:31:e8:e4: 06:51:b8:15:71:9d:0a:8c:ac:1e:d4:56:67:e1:d5:5c:e7:ca: 31:57:19:2f:d1:1a:5b:bf:af:b5:67:45:ca:97:9f:d9:57:68: 02:e0:74:ce:e5:df:61:2c:05:51:38:1f:66:d0:f5:e6:7c:1d: 3a:41:f9:73:2d:9d:58:6c:bd:51:27:66:ff:21:39:cc:bd:64: 09:87:94:ff:f9:2b:f7:1b:8d:16:d2:20:2e:98:97:54:0e:f5: 98:c3:b8:ec:55:51:2d:94:55:83:92:a4:7a:69:f0:31:40:3f: 42:44:5e:9a:11:a8:3c:14:75:43:cb:a7:7d:cd:84:c7:fb:d0: a9:76:72:74:f0:1a:bc:db:e3:2c:c5:f2:04:65:91:4b:84:c9: 66:0f:8d:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSu73X06QeqVaU4LJY2uCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj YjRjOGQwHhcNMjUxMjIxMTkwMjQ1WhcNMjUxMjIyMTkwMjQ1WjAzMTEwLwYDVQQD EygwNDNhMzliYTNlNTk0OWJlZWJlOWQwZGU4MGRjYmRmNzQ3NTRjMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rmAClvi8HM3rwV6eVR//wA0G2bu SzSr+T9KCb2E5H1NUauztxU7f5exBvm4K0oY7oA2Yz6vcjBW1cu6EnratUJ2oM0q DQuS4IMscrT0l6/m6C9+PhPMzWZtinwg0yzSrL1cqdIlSc108iIkxoLnU7fDBVgj sodrIpRE20LIBcPlBlND16ppGaNfz9jdvUSqYeZKF/b5JYdvAeSPhDQsWpdnRlgb ZtGhFdrpZc/xgguVb2JZ4Nkydnu1twqz3DCD7n0V3QOfMDzO0/SfE8mwbyEa4116 ia7NZvK4O/TR2RlSc7a36ImCWEV3OUqrLYcelPJ05/Ixafz/7bd7xWSUcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQ6Obo+WUm+6+nQ3oDcvfdHVMGEMB8GA1UdIwQY MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2 LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3q1KTiM gxjsGjr6m3gB6vuFpTRO1kjGqWQrzfR3csElVQIoqTdogvFCgLvLlEFLr2ZEtdQt bY+H2ONrZo8dm7v231JCcGerQb2dj0TqqC4Hw5b+oEX/HkeM+/cOO/eIVYiPA+5r LfJCMejkBlG4FXGdCoysHtRWZ+HVXOfKMVcZL9EaW7+vtWdFypef2VdoAuB0zuXf YSwFUTgfZtD15nwdOkH5cy2dWGy9USdm/yE5zL1kCYeU//kr9xuNFtIgLpiXVA71 mMO47FVRLZRVg5KkemnwMUA/QkRemhGoPBR1Q8unfc2Ex/vQqXZydPAavNvjLMXy BGWRS4TJZg+NWg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:33 2025 by rpki-client