This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json) Hash identifier: vZghSOXH/tByqhE7NlfmEBfwoN+snUx3Eeo8K/ePGA0= Subject key identifier: CD:A1:82:87:B8:B2:9B:30:A0:86:BB:FD:B9:C7:F3:12:6A:88:21:1A Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601 Certificate serial: 019B3E6D69FE45576016F942EFD8B219C17F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft Manifest number: 0C4B Signing time: Sun 21 Dec 2025 01:01:56 +0000 Manifest this update: Sun 21 Dec 2025 01:01:56 +0000 Manifest next update: Mon 22 Dec 2025 01:01:56 +0000 Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=) 2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=) 3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=) 4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: reOAmKUN5oR35nHr8hqZ2mjF5LapdToi9TNXriXkBBk=) 5: _foadMbZdx4Kyy6kAY35bfy57Ew.asa (hash: f8gD+BKnO4V+AgW6MN335RkWYKE7LS8tKEs9AypX4GM=) 6: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=) 7: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=) 8: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=) 9: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=) 10: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:69:fe:45:57:60:16:f9:42:ef:d8:b2:19:c1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601 Validity Not Before: Dec 21 01:01:56 2025 GMT Not After : Dec 22 01:01:56 2025 GMT Subject: CN=cda18287b8b29b30a086bbfdb9c7f3126a88211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:d1:94:67:5d:c1:b2:b5:25:16:af:b3:75: ff:79:65:ac:72:57:a4:0e:f2:9a:80:b6:57:82:29: d7:4c:98:e5:e4:66:8b:61:b7:61:34:22:34:ff:22: 2a:8b:79:46:a4:71:6b:90:9c:a2:55:2f:46:83:cf: 53:8e:fd:6c:ba:24:b3:77:94:5d:b2:54:d8:b8:8a: 85:40:a0:16:fd:2b:ef:8f:ad:21:a2:6b:a5:f3:90: 8d:a4:90:bf:2f:b7:1b:cd:66:fa:78:6c:78:a7:89: 75:5f:be:39:68:71:e9:3d:26:ac:c5:2e:f6:33:35: 47:42:cc:a5:5e:c5:a1:7b:6b:b4:22:66:1c:89:06: 6d:ae:c4:ba:81:1b:22:80:e4:56:6b:95:8f:32:94: b3:25:d4:d2:58:fa:a8:88:62:01:66:0d:00:1c:91: b6:d0:7c:fd:ac:b7:ad:35:b0:e5:82:b4:0e:e8:30: 99:23:82:84:12:61:56:5a:27:52:c0:6f:8d:c8:06: 1a:8e:92:f3:d3:c5:b0:6e:96:a2:c9:3c:d2:af:e3: a7:b9:d5:7b:6f:f1:40:29:9f:82:4b:6c:b0:eb:98: 31:c9:85:79:8b:45:4b:6c:a7:8d:a7:c4:92:db:f1: f2:90:36:22:4c:b1:92:05:12:78:8c:31:4b:30:fd: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A1:82:87:B8:B2:9B:30:A0:86:BB:FD:B9:C7:F3:12:6A:88:21:1A X509v3 Authority Key Identifier: keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4d:be:dc:c7:61:4a:2f:5f:51:37:58:20:bb:74:66:94:57: 2e:23:e9:22:36:32:70:bb:24:ac:ca:55:cb:19:9d:a0:75:98: 36:98:b0:88:0e:1f:60:c8:f8:de:e4:82:10:b5:ee:e6:63:84: 21:07:3e:58:53:01:5f:62:71:cd:78:36:bf:20:0d:8a:25:12: ea:6e:73:0e:c8:38:78:23:14:9c:e8:c5:c1:8b:16:0c:3c:06: 0a:ca:b5:8b:42:e8:aa:42:c0:21:83:01:33:6f:32:90:01:b0: 69:cc:42:0e:a5:7b:ee:3a:cf:94:db:81:eb:78:66:1e:f0:91: c4:08:a6:80:0b:d0:6a:10:3a:39:33:7c:3b:63:ca:d7:ec:ed: ef:47:b9:28:c6:d2:d6:e4:f4:5a:fe:bd:2a:ca:9a:46:27:0c: 4f:47:8a:5a:d4:90:da:9c:a0:7d:b3:f0:45:86:de:f4:27:f2: 83:79:ed:1c:5e:68:07:b2:d1:e1:7c:b8:33:f4:7f:07:d6:e0: bd:e0:bf:85:fb:f2:21:9a:bd:fd:d9:fb:95:98:29:fd:11:f4: 14:01:6a:12:db:6a:93:64:40:45:ab:b3:1d:b3:be:2c:2a:7f: 08:1c:78:21:f9:33:1e:c1:87:4d:c1:e2:d2:45:3c:a8:0f:b8: 33:28:97:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bWn+RVdgFvlC79iyGcF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2UxNzljYmUxM2RkYjE0MDEyOTg1YTA2NzEwMGVmOThh NTU2MDEwHhcNMjUxMjIxMDEwMTU2WhcNMjUxMjIyMDEwMTU2WjAzMTEwLwYDVQQD EyhjZGExODI4N2I4YjI5YjMwYTA4NmJiZmRiOWM3ZjMxMjZhODgyMTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOrRlGddwbK1JRavs3X/eWWsclek DvKagLZXginXTJjl5GaLYbdhNCI0/yIqi3lGpHFrkJyiVS9Gg89Tjv1suiSzd5Rd slTYuIqFQKAW/Svvj60homul85CNpJC/L7cbzWb6eGx4p4l1X745aHHpPSasxS72 MzVHQsylXsWhe2u0ImYciQZtrsS6gRsigORWa5WPMpSzJdTSWPqoiGIBZg0AHJG2 0Hz9rLetNbDlgrQO6DCZI4KEEmFWWidSwG+NyAYajpLz08WwbpaiyTzSr+OnudV7 b/FAKZ+CS2yw65gxyYV5i0VLbKeNp8SS2/HykDYiTLGSBRJ4jDFLMP2hzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2hgoe4spswoIa7/bnH8xJqiCEaMB8GA1UdIwQY MBaAFGfOF5y+E92xQBKYWgZxAO+YpVYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEt NjJjMDFkYzY5Y2NhLzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81ZDcxOTItYTcxOS00Y2Q3LTk5NGEtNjJjMDFkYzY5Y2Nh LzEvWjg0WG5MNFQzYkZBRXBoYUJuRUE3NWlsVmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk2+3Mdh Si9fUTdYILt0ZpRXLiPpIjYycLskrMpVyxmdoHWYNpiwiA4fYMj43uSCELXu5mOE IQc+WFMBX2JxzXg2vyANiiUS6m5zDsg4eCMUnOjFwYsWDDwGCsq1i0LoqkLAIYMB M28ykAGwacxCDqV77jrPlNuB63hmHvCRxAimgAvQahA6OTN8O2PK1+zt70e5KMbS 1uT0Wv69KsqaRicMT0eKWtSQ2pygfbPwRYbe9Cfyg3ntHF5oB7LR4Xy4M/R/B9bg veC/hfvyIZq9/dn7lZgp/RH0FAFqEttqk2RARauzHbO+LCp/CBx4IfkzHsGHTcHi 0kU8qA+4MyiXYw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:07:30 2025 by rpki-client