This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json) Hash identifier: fknqeIjpcOC8qGTLSZPDxOKBD6irVVM4RAg3FhEaoXg= Subject key identifier: 0B:6A:C2:26:0C:17:EA:7C:72:61:42:79:C4:71:2A:C2:E0:3A:4C:4B Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Certificate serial: 019B3B6B974407FF415E18F4186F41C6DEF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 11:01:05 +0000 Manifest this update: Sat 20 Dec 2025 11:01:05 +0000 Manifest next update: Sun 21 Dec 2025 11:01:05 +0000 Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=) 2: a3gHziW8P1fHttGC9Ex68BgcGK4.roa (hash: 5EwUldHPQ4hQYwe5t3ER6qcsrkPeWX9lX5322mclP1s=) 3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: mwYFiDLabRkW8yK7ztssvM6HDoTe7ctwv3CaVkpNCRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:97:44:07:ff:41:5e:18:f4:18:6f:41:c6:de:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Validity Not Before: Dec 20 11:01:05 2025 GMT Not After : Dec 21 11:01:05 2025 GMT Subject: CN=0b6ac2260c17ea7c72614279c4712ac2e03a4c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:db:58:54:8e:8c:0b:a8:8a:74:d1:1f:2b: 34:84:cb:d3:2c:67:17:b1:b3:35:23:81:94:9a:6d: 87:ff:e2:4e:18:38:34:db:07:45:01:3c:4e:95:e5: ab:d4:64:8e:d9:70:b9:e9:f7:c3:0a:9e:a1:9d:b2: 5e:78:3f:27:ea:81:62:21:6a:99:3c:54:12:05:cc: b7:12:a1:bd:f9:0c:f8:44:5a:28:89:5e:fb:3f:bd: 8c:77:62:d2:ef:e0:4f:19:1d:95:1e:00:9c:c6:51: 54:3f:c9:86:e1:f5:86:10:99:98:2c:3d:91:e5:dc: 04:fd:fa:ff:06:af:17:c1:d6:a7:1b:7b:16:c6:c8: f3:1a:8f:d6:57:40:90:61:46:ef:e4:28:8b:37:bc: ad:0c:38:38:d5:14:bc:10:ad:cb:60:07:55:93:a9: a4:3a:ab:30:8a:22:7d:fd:8d:b2:69:22:41:0e:a5: ec:9f:1b:fb:90:b0:35:e6:1e:c5:14:b1:9a:2e:c5: 3a:2f:71:a9:2d:71:33:e4:35:86:ea:53:92:8c:11: 72:25:ae:1d:4b:ee:d2:af:00:1a:76:ce:05:a8:e9: f9:d8:9b:e9:2c:15:d6:c0:55:8a:13:a0:4e:27:1c: b0:f6:5f:67:61:7f:c4:0c:01:7c:70:61:00:a0:a7: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6A:C2:26:0C:17:EA:7C:72:61:42:79:C4:71:2A:C2:E0:3A:4C:4B X509v3 Authority Key Identifier: keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4f:92:31:b2:a2:1a:e9:1b:1e:3a:e6:43:5b:2f:a9:86:96: 6c:8f:e9:b1:91:77:45:3a:fd:bf:ea:5c:c2:fc:bf:ee:76:c8: 9f:02:20:73:32:64:ae:b0:db:bc:f9:23:27:94:4f:52:8b:63: f0:bc:36:cd:21:f6:fa:57:af:6b:5e:fd:13:05:5f:05:07:54: ad:0d:94:00:bb:66:c5:19:4e:10:55:59:8b:79:f5:52:c9:02: cf:c3:89:2f:ae:c5:6c:af:4b:b8:a2:ba:a4:c4:19:29:bc:1c: 01:d2:d3:bb:a8:3b:49:e9:d1:b5:d5:5c:44:67:a6:b7:c6:61: 1f:f4:10:ef:5f:7f:72:bf:ee:c0:94:b8:21:25:ee:ec:31:b5: 5c:e8:cb:9a:54:5d:f7:2b:55:0a:f6:4b:69:84:89:a8:46:8d: 4d:01:bd:ec:1f:01:92:20:d0:73:87:a4:ed:ca:47:cf:a5:4e: 6e:1c:02:41:cf:9e:54:6e:aa:a2:e9:b1:e9:88:51:b0:17:70: a9:8f:79:03:29:eb:95:b3:a6:df:54:70:20:d8:92:24:c1:84: 93:94:18:47:8c:cd:68:db:2d:a8:a4:99:eb:e1:29:ca:db:65: 0b:42:8f:04:5d:08:da:79:bf:84:00:89:2d:4b:73:fe:01:39: c4:57:14:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5dEB/9BXhj0GG9Bxt70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2 NDU3NjgwHhcNMjUxMjIwMTEwMTA1WhcNMjUxMjIxMTEwMTA1WjAzMTEwLwYDVQQD EygwYjZhYzIyNjBjMTdlYTdjNzI2MTQyNzljNDcxMmFjMmUwM2E0YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCLbWFSOjAuoinTRHys0hMvTLGcX sbM1I4GUmm2H/+JOGDg02wdFATxOleWr1GSO2XC56ffDCp6hnbJeeD8n6oFiIWqZ PFQSBcy3EqG9+Qz4RFooiV77P72Md2LS7+BPGR2VHgCcxlFUP8mG4fWGEJmYLD2R 5dwE/fr/Bq8XwdanG3sWxsjzGo/WV0CQYUbv5CiLN7ytDDg41RS8EK3LYAdVk6mk OqswiiJ9/Y2yaSJBDqXsnxv7kLA15h7FFLGaLsU6L3GpLXEz5DWG6lOSjBFyJa4d S+7SrwAads4FqOn52JvpLBXWwFWKE6BOJxyw9l9nYX/EDAF8cGEAoKdaDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtqwiYMF+p8cmFCecRxKsLgOkxLMB8GA1UdIwQY MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk+SMbKi GukbHjrmQ1svqYaWbI/psZF3RTr9v+pcwvy/7nbInwIgczJkrrDbvPkjJ5RPUotj 8Lw2zSH2+leva179EwVfBQdUrQ2UALtmxRlOEFVZi3n1UskCz8OJL67FbK9LuKK6 pMQZKbwcAdLTu6g7SenRtdVcRGemt8ZhH/QQ719/cr/uwJS4ISXu7DG1XOjLmlRd 9ytVCvZLaYSJqEaNTQG97B8BkiDQc4ek7cpHz6VObhwCQc+eVG6qoumx6YhRsBdw qY95AynrlbOm31RwINiSJMGEk5QYR4zNaNstqKSZ6+EpyttlC0KPBF0I2nm/hACJ LUtz/gE5xFcUNA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:37 2025 by rpki-client