This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json) Hash identifier: 7fgHXbu0W8q0y1gWZk+PeWtpZ3RAr0fTqnxiYhUy7WA= Subject key identifier: 7B:4D:13:D1:DC:F6:6E:E1:71:B2:B2:A8:7D:DC:1A:75:D9:9D:89:82 Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Certificate serial: 019B54190726B6ED48A80D642900E8248E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft Manifest number: 0694 Signing time: Thu 25 Dec 2025 06:01:24 +0000 Manifest this update: Thu 25 Dec 2025 06:01:24 +0000 Manifest next update: Fri 26 Dec 2025 06:01:24 +0000 Files and hashes: 1: BAg_Ypk_PlO9OmQW9r_dUEQ6g5o.asa (hash: +ryzpmFM32+zN+fQmTR5d7h8PbiYBUthX6q2UqNCB3s=) 2: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=) 3: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: O95Q3km70FzqL5zvG2+WUN4VDQU/A0Avczzmg3m0POk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:19:07:26:b6:ed:48:a8:0d:64:29:00:e8:24:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77 Validity Not Before: Dec 25 06:01:24 2025 GMT Not After : Dec 26 06:01:24 2025 GMT Subject: CN=7b4d13d1dcf66ee171b2b2a87ddc1a75d99d8982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b2:a0:94:fa:a8:a3:23:9e:b9:b2:5e:fb:ff: ca:8b:02:d0:a2:d3:41:19:5f:41:ee:54:ef:61:ee: eb:fd:12:5d:d3:a9:8c:64:39:c6:75:7e:f3:86:bc: 48:20:39:a3:68:1f:93:e8:91:f5:97:17:98:b9:17: be:7b:b8:ac:95:cf:c7:20:82:3c:df:2a:cb:c5:93: f1:db:91:0a:b6:87:32:2b:c3:bf:2e:d6:35:8d:27: 36:69:74:72:7b:38:b0:5d:ca:28:bb:69:9c:b4:e2: 35:a4:e5:4d:dc:76:fd:84:d8:25:97:52:52:d3:f0: 9c:d1:b4:22:6a:d8:80:dc:f5:e9:e0:7d:ae:0b:e7: f6:c5:82:e5:29:38:0e:f2:ed:8f:d4:f1:33:05:12: 5f:ec:70:0a:b2:53:90:15:a9:7e:d7:51:a1:9e:6b: 36:fd:20:6e:af:67:d9:9e:07:ca:00:4e:2c:5c:08: cf:b5:c0:32:d4:e3:54:cd:19:e4:39:55:33:59:f6: ab:1e:4d:f2:a3:ac:ba:b3:89:4b:47:b2:c8:a0:38: 14:54:e0:01:cb:b0:56:78:f3:76:c1:c2:78:a5:11: 9b:7a:80:37:80:e3:f0:45:b0:3f:91:b8:f5:68:8d: 9a:0b:52:42:40:e8:9e:53:a5:c1:66:95:9c:9f:41: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4D:13:D1:DC:F6:6E:E1:71:B2:B2:A8:7D:DC:1A:75:D9:9D:89:82 X509v3 Authority Key Identifier: keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d2:03:15:ac:ec:21:01:cc:db:2b:25:2f:a2:79:20:61:d5: 0b:c6:a5:4e:9e:23:47:1a:85:76:b5:48:ed:c1:27:85:d7:f1: ee:20:5c:3b:7e:8e:e3:fa:ed:f7:fc:dc:91:a0:59:df:74:6a: ab:bb:82:5b:8e:ae:c7:48:55:5e:f8:a4:6a:35:e7:4f:64:eb: 02:c8:f3:0e:2d:fc:e1:81:9f:47:0f:ad:2e:a9:d5:5c:31:68: e8:52:d5:9b:a3:e2:79:f6:50:00:33:78:fa:15:21:7d:2c:25: e2:20:5a:4d:02:e2:6d:5e:86:4a:31:96:5e:8f:69:33:01:04: 19:ef:8e:95:70:67:45:61:85:d5:de:f8:06:43:c4:a1:fa:50: 44:53:18:cb:13:2d:04:25:7b:f3:ac:7d:95:bc:37:79:e7:bd: 03:61:14:00:78:a4:78:1b:86:81:64:7d:c8:10:a4:22:89:cc: b2:15:f0:46:26:fe:28:95:23:7a:22:9a:eb:d9:ec:43:c1:ea: a4:90:dd:8b:4c:14:2d:dd:80:39:da:fc:9a:f0:07:5f:e6:10: df:be:4d:77:64:8f:e2:95:91:d2:3b:3f:10:ba:02:d8:80:e1: c8:89:47:b4:49:e0:3c:f2:87:20:71:f9:fe:a1:2e:c4:12:32: 7b:21:a5:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGQcmtu1IqA1kKQDoJI5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm MmRjNzcwHhcNMjUxMjI1MDYwMTI0WhcNMjUxMjI2MDYwMTI0WjAzMTEwLwYDVQQD Eyg3YjRkMTNkMWRjZjY2ZWUxNzFiMmIyYTg3ZGRjMWE3NWQ5OWQ4OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLKglPqooyOeubJe+//KiwLQotNB GV9B7lTvYe7r/RJd06mMZDnGdX7zhrxIIDmjaB+T6JH1lxeYuRe+e7islc/HIII8 3yrLxZPx25EKtocyK8O/LtY1jSc2aXRyeziwXcoou2mctOI1pOVN3Hb9hNgll1JS 0/Cc0bQiatiA3PXp4H2uC+f2xYLlKTgO8u2P1PEzBRJf7HAKslOQFal+11Ghnms2 /SBur2fZngfKAE4sXAjPtcAy1ONUzRnkOVUzWfarHk3yo6y6s4lLR7LIoDgUVOAB y7BWePN2wcJ4pRGbeoA3gOPwRbA/kbj1aI2aC1JCQOieU6XBZpWcn0FoDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtNE9Hc9m7hcbKyqH3cGnXZnYmCMB8GA1UdIwQY MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut ZDJkYjczZmYzMWJjLzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9IDFazs IQHM2yslL6J5IGHVC8alTp4jRxqFdrVI7cEnhdfx7iBcO36O4/rt9/zckaBZ33Rq q7uCW46ux0hVXvikajXnT2TrAsjzDi384YGfRw+tLqnVXDFo6FLVm6PiefZQADN4 +hUhfSwl4iBaTQLibV6GSjGWXo9pMwEEGe+OlXBnRWGF1d74BkPEofpQRFMYyxMt BCV786x9lbw3eee9A2EUAHikeBuGgWR9yBCkIonMshXwRib+KJUjeiKa69nsQ8Hq pJDdi0wULd2AOdr8mvAHX+YQ375Nd2SP4pWR0js/ELoC2IDhyIlHtEngPPKHIHH5 /qEuxBIyeyGlqQ== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:36 2025 by rpki-client