This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json) Hash identifier: RSaURe1xgmDCgDb50Pxnk/HrC4Mj6zPrzawCAjMU3Ko= Subject key identifier: 51:0D:AC:F7:D1:DB:55:14:7B:C9:C3:CA:3B:46:DD:3E:00:01:C6:C2 Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019B51F3197EB0DB1339AB84A865FFB284DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 20:00:44 +0000 Manifest this update: Wed 24 Dec 2025 20:00:44 +0000 Manifest next update: Thu 25 Dec 2025 20:00:44 +0000 Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=) 2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=) 3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=) 4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: t8FKvJul6zzCf/rLkp3nVIJ+tzJHoWLL1MVl5gWV8W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:19:7e:b0:db:13:39:ab:84:a8:65:ff:b2:84:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Dec 24 20:00:44 2025 GMT Not After : Dec 25 20:00:44 2025 GMT Subject: CN=510dacf7d1db55147bc9c3ca3b46dd3e0001c6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:84:6d:9c:62:80:42:75:19:e2:7b:66:ed:96: 37:49:e0:2b:11:8c:4a:3f:28:ea:d5:f9:d2:f9:ad: f3:f1:ff:67:e5:6b:eb:d7:d8:32:af:30:d4:00:a6: 20:ab:37:cd:3f:8b:b4:7f:2f:d9:e9:5d:42:73:23: 51:ae:cd:31:d6:7e:5c:ba:1e:52:17:1a:7b:d3:f1: c4:21:51:4d:f4:92:bc:93:19:a2:61:16:01:eb:73: 21:02:5b:b2:1f:77:e7:8f:54:cb:f9:04:0d:7e:df: 8c:45:4e:a0:c6:75:f8:22:33:73:1f:3b:9a:5d:37: f9:5e:81:b0:c5:1d:5a:ed:1e:28:6c:72:cc:59:4d: 6c:38:e0:f3:8d:7a:9d:01:db:f4:d4:0d:ee:66:f4: 3c:8a:d1:58:8d:bb:58:07:b0:72:fa:2f:21:ad:4c: b5:c6:e3:92:4c:b8:da:40:2c:80:d8:e0:d9:10:d8: 19:10:ce:d5:14:36:0d:f7:d6:84:98:e7:26:2d:3a: 69:ad:20:29:58:a8:01:ce:66:68:4c:97:7f:8d:24: 5c:c3:16:5b:79:32:91:90:88:c8:74:46:c3:28:dc: 11:a9:b2:ec:5b:1d:ae:95:69:e6:eb:bd:b8:87:c9: 71:95:8d:6f:a9:85:c2:62:9d:36:60:fc:be:9a:dd: fd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:AC:F7:D1:DB:55:14:7B:C9:C3:CA:3B:46:DD:3E:00:01:C6:C2 X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:ac:ec:42:55:41:35:cf:4b:83:cc:aa:14:f8:da:eb:a2: cd:2a:96:b5:62:1e:75:4b:94:82:24:38:d7:a6:aa:6b:27:58: 27:e6:4d:38:8b:c9:c0:bc:06:75:94:92:18:77:00:a0:4c:6d: 89:fd:a5:df:ae:fa:b7:2c:bf:be:b6:86:0b:e7:ae:f0:38:f7: 3d:aa:1d:c5:0b:d0:a6:59:ca:07:8e:ca:af:79:c3:6d:3c:77: 91:9c:1b:03:63:de:8f:26:df:9e:15:86:53:65:d0:81:d8:a9: ec:98:2a:cd:60:7c:17:ca:8f:65:ae:f6:5a:a4:03:13:fd:db: 21:d9:a1:6a:06:1c:ef:a4:17:a2:e1:f5:ca:6e:99:54:72:88: 19:27:8e:17:11:eb:60:30:17:4a:c6:b4:30:88:ec:50:dd:2d: 33:b9:ab:dc:0c:44:66:ac:70:ca:a7:1c:18:e4:79:f4:ac:66: cc:7c:fe:55:97:0d:e4:27:7b:6a:b0:18:ba:ab:bb:af:3d:1e: 6d:fd:9a:cf:b1:f8:78:c5:47:f0:9f:cf:11:95:7b:32:4b:09: 21:a3:49:47:3f:41:f8:e0:6c:39:dd:e8:1d:ef:37:f6:84:2f: ed:93:b6:6c:28:ba:76:b1:f4:24:21:e6:62:9b:17:88:dd:21: 91:8b:1e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8xl+sNsTOauEqGX/soTaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjUxMjI0MjAwMDQ0WhcNMjUxMjI1MjAwMDQ0WjAzMTEwLwYDVQQD Eyg1MTBkYWNmN2QxZGI1NTE0N2JjOWMzY2EzYjQ2ZGQzZTAwMDFjNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IRtnGKAQnUZ4ntm7ZY3SeArEYxK Pyjq1fnS+a3z8f9n5Wvr19gyrzDUAKYgqzfNP4u0fy/Z6V1CcyNRrs0x1n5cuh5S Fxp70/HEIVFN9JK8kxmiYRYB63MhAluyH3fnj1TL+QQNft+MRU6gxnX4IjNzHzua XTf5XoGwxR1a7R4obHLMWU1sOODzjXqdAdv01A3uZvQ8itFYjbtYB7By+i8hrUy1 xuOSTLjaQCyA2ODZENgZEM7VFDYN99aEmOcmLTpprSApWKgBzmZoTJd/jSRcwxZb eTKRkIjIdEbDKNwRqbLsWx2ulWnm6724h8lxlY1vqYXCYp02YPy+mt39VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFENrPfR21UUe8nDyjtG3T4AAcbCMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnGs7EJV QTXPS4PMqhT42uuizSqWtWIedUuUgiQ416aqaydYJ+ZNOIvJwLwGdZSSGHcAoExt if2l3676tyy/vraGC+eu8Dj3PaodxQvQplnKB47Kr3nDbTx3kZwbA2PejybfnhWG U2XQgdip7JgqzWB8F8qPZa72WqQDE/3bIdmhagYc76QXouH1ym6ZVHKIGSeOFxHr YDAXSsa0MIjsUN0tM7mr3AxEZqxwyqccGOR59KxmzHz+VZcN5Cd7arAYuqu7rz0e bf2az7H4eMVH8J/PEZV7MksJIaNJRz9B+OBsOd3oHe839oQv7ZO2bCi6drH0JCHm YpsXiN0hkYsePg== -----END CERTIFICATE-----Generated at Thu Dec 25 05:15:44 2025 by rpki-client