This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json) Hash identifier: KgGr2EnWPl2BMahFUX+4umdk3BMPeMnG0b/w23wMlzE= Subject key identifier: A3:F8:A1:76:85:B1:CB:6D:AD:72:84:70:33:6B:5A:FC:5B:20:FD:47 Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21 Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821 Certificate serial: 019B435BA5C58093ABDD1E994FFECCE0AF4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 00:00:38 +0000 Manifest this update: Mon 22 Dec 2025 00:00:38 +0000 Manifest next update: Tue 23 Dec 2025 00:00:38 +0000 Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=) 2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: 4qti1LScI1vatCRmJfjgc1jone+nkqOjN7rHUCLJXuk=) 3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:a5:c5:80:93:ab:dd:1e:99:4f:fe:cc:e0:af:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821 Validity Not Before: Dec 22 00:00:38 2025 GMT Not After : Dec 23 00:00:38 2025 GMT Subject: CN=a3f8a17685b1cb6dad728470336b5afc5b20fd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:5e:3c:ad:3d:52:b3:78:ef:95:fd:97:ea: 88:8c:69:ad:1b:52:ca:0d:40:8d:86:8d:87:e1:8d: ca:99:f2:76:83:3a:e3:44:c1:2c:a2:a1:da:8a:35: dd:2f:cb:bd:e5:3e:54:b5:d7:1a:b4:0e:c3:cb:df: b2:bc:de:17:44:50:03:89:e0:1d:b0:a4:a8:c5:d6: 47:01:17:78:c0:d1:46:3a:d5:6f:07:ca:91:fe:cc: d9:86:25:4e:95:ac:ef:88:a7:8b:d5:1f:92:0c:cf: 6f:35:7d:c8:e3:2c:de:fc:aa:4e:ec:df:70:7c:90: d2:5c:1c:d4:6f:82:26:d8:e4:a0:78:ec:a1:ae:07: 2e:0b:2e:6b:30:7b:ae:5d:74:59:e6:79:c3:e8:e1: 66:52:43:42:c2:ac:93:f9:bf:f8:c5:fa:21:35:e9: 5b:11:4a:56:59:bd:c1:c5:82:70:a3:06:a8:42:b5: e7:aa:4c:75:53:61:20:ed:4e:96:c8:61:8c:b9:6b: 4d:47:44:bc:aa:62:0e:d5:c8:3e:30:3c:3f:e0:6b: be:7e:bc:02:69:f5:9d:08:ff:18:b9:db:bd:76:e1: 04:c2:a2:ad:b4:c0:2d:cb:b5:81:10:00:4b:2e:70: 1f:ab:7d:d6:93:c2:9e:db:da:69:ee:bf:e3:d2:32: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:A1:76:85:B1:CB:6D:AD:72:84:70:33:6B:5A:FC:5B:20:FD:47 X509v3 Authority Key Identifier: keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9e:0d:ea:66:40:64:86:dc:88:1b:30:cc:eb:f2:20:7f:ac: 92:99:47:2d:d4:24:ec:71:7a:01:46:37:b8:e7:34:4f:56:07: 6a:38:fb:fd:93:1b:2f:4b:90:98:e7:c2:ad:00:1d:90:45:24: d7:71:98:3b:76:cc:eb:ef:ad:89:e6:32:89:12:54:1f:31:53: 95:45:34:36:97:50:8c:8c:0e:84:19:b4:7f:2c:c2:9f:42:1b: 66:fa:1a:f9:48:a2:11:88:41:8a:a8:4e:75:28:ab:a6:b6:67: a2:cd:d5:c3:29:47:13:ec:c5:0d:b6:b6:43:17:57:5d:8d:7a: 5c:b8:9c:63:77:57:a0:b9:07:c0:5e:c4:da:0b:d3:19:5e:a2: d3:ff:81:8f:70:92:00:5e:a4:d9:83:85:aa:44:fb:57:df:39: ca:1a:41:f6:58:0f:21:4d:0f:94:67:5d:ac:fb:6f:87:4c:33: 88:d9:a2:a3:00:5a:e9:ec:7b:72:4f:8f:31:38:e7:e2:99:09: 09:c3:63:e3:3d:da:52:e7:99:08:c5:a5:5e:62:4c:8e:39:9b: 14:4e:d2:b7:c3:da:86:c2:ca:13:e0:28:46:b6:10:a8:00:5a: e2:9b:39:24:75:91:e5:f6:53:1a:35:64:40:53:8a:67:3e:c6: 87:1b:5b:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW6XFgJOr3R6ZT/7M4K9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NGE2MWE4YTljOTdjMDNjZGViZTA1ZjgyNTU4ZTUxZGJm OTA4MjEwHhcNMjUxMjIyMDAwMDM4WhcNMjUxMjIzMDAwMDM4WjAzMTEwLwYDVQQD EyhhM2Y4YTE3Njg1YjFjYjZkYWQ3Mjg0NzAzMzZiNWFmYzViMjBmZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybdePK09UrN475X9l+qIjGmtG1LK DUCNho2H4Y3KmfJ2gzrjRMEsoqHaijXdL8u95T5UtdcatA7Dy9+yvN4XRFADieAd sKSoxdZHARd4wNFGOtVvB8qR/szZhiVOlazviKeL1R+SDM9vNX3I4yze/KpO7N9w fJDSXBzUb4Im2OSgeOyhrgcuCy5rMHuuXXRZ5nnD6OFmUkNCwqyT+b/4xfohNelb EUpWWb3BxYJwowaoQrXnqkx1U2Eg7U6WyGGMuWtNR0S8qmIO1cg+MDw/4Gu+frwC afWdCP8Yudu9duEEwqKttMAty7WBEABLLnAfq33Wk8Ke29pp7r/j0jKCEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKP4oXaFscttrXKEcDNrWvxbIP1HMB8GA1UdIwQY MBaAFGdKYaipyXwDzevgX4JVjlHb+QghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmIt NGM4NmNiZTAzNjEwLzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmItNGM4NmNiZTAzNjEw LzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZ4N6mZA ZIbciBswzOvyIH+skplHLdQk7HF6AUY3uOc0T1YHajj7/ZMbL0uQmOfCrQAdkEUk 13GYO3bM6++tieYyiRJUHzFTlUU0NpdQjIwOhBm0fyzCn0IbZvoa+UiiEYhBiqhO dSirprZnos3VwylHE+zFDba2QxdXXY16XLicY3dXoLkHwF7E2gvTGV6i0/+Bj3CS AF6k2YOFqkT7V985yhpB9lgPIU0PlGddrPtvh0wziNmiowBa6ex7ck+PMTjn4pkJ CcNj4z3aUueZCMWlXmJMjjmbFE7St8PahsLKE+AoRrYQqABa4ps5JHWR5fZTGjVk QFOKZz7GhxtbIQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:29:20 2025 by rpki-client