This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json) Hash identifier: ZqWeRqHaXDbUZRFQw9WSvvEWl8UasoD/eeNFIBY2C50= Subject key identifier: A5:A6:59:A5:7E:93:E6:E1:93:77:49:6E:D6:4C:02:0E:3E:18:F1:B5 Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Certificate serial: 019B3DFED032858D2744E27D0EF5A9F3AF62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft Manifest number: 179C Signing time: Sat 20 Dec 2025 23:01:07 +0000 Manifest this update: Sat 20 Dec 2025 23:01:07 +0000 Manifest next update: Sun 21 Dec 2025 23:01:07 +0000 Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 7KpTWPVDStYlxWAiY4K359BAOYjvRYOtUsZL7gWyAJM=) 2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d0:32:85:8d:27:44:e2:7d:0e:f5:a9:f3:af:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d Validity Not Before: Dec 20 23:01:07 2025 GMT Not After : Dec 21 23:01:07 2025 GMT Subject: CN=a5a659a57e93e6e19377496ed64c020e3e18f1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:4d:90:56:bc:9a:20:80:4d:0a:01:bb:cf: 38:92:94:6e:84:be:02:eb:c8:30:8f:7a:7c:b7:cc: 81:55:2d:22:4c:b4:62:4d:bc:f4:7c:55:c6:0a:74: 48:a9:06:5b:53:b1:35:04:88:2e:17:b6:b4:ed:b1: 66:00:7a:1f:27:fc:e9:41:01:33:61:e7:a1:fa:51: fa:a6:37:ac:51:99:86:fe:c6:1f:02:c6:43:60:1f: 3a:b8:13:86:6f:ad:ca:d9:f2:96:e9:a4:71:0f:1f: 78:97:19:e2:98:ec:29:5d:d2:62:17:23:34:23:53: af:16:5f:e0:14:40:62:91:c7:fe:5d:86:c8:55:a7: 61:05:36:04:bf:c1:09:65:10:40:a2:84:18:a6:99: 06:8f:03:cc:19:f7:eb:f4:64:f8:f5:b5:ad:09:ed: 46:2f:cf:9e:05:1b:9e:76:62:8a:b6:01:01:1f:ca: bb:a9:d1:17:4a:02:0d:68:33:8e:6b:3c:4f:4b:c3: ec:46:34:8f:b6:b3:ff:57:8a:94:b0:35:32:cb:b0: a6:7d:08:30:39:49:29:12:c7:82:94:08:bc:35:0c: 1a:6e:80:f7:04:8b:22:49:a8:db:e2:c4:f3:7d:f6: 6c:c4:36:26:7b:c6:6e:a9:cf:d4:84:3c:2b:c3:77: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:59:A5:7E:93:E6:E1:93:77:49:6E:D6:4C:02:0E:3E:18:F1:B5 X509v3 Authority Key Identifier: keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:5f:c5:51:a7:17:a1:b5:c2:74:e2:fd:61:b7:6c:36:b9:39: be:a5:29:53:51:4a:6b:59:13:d7:21:34:0f:07:ac:19:3d:66: dd:89:92:4f:ab:ea:4e:a2:5f:de:37:f4:3b:57:53:04:a4:26: 27:78:28:9e:f0:c3:37:ef:4e:82:32:d5:13:05:48:72:9b:69: 2d:09:e5:92:b1:d3:45:33:ac:62:d6:35:ba:18:7d:fb:10:ff: 59:9d:6b:2e:9f:a4:71:05:8c:69:4d:0f:06:64:32:76:2c:1d: cd:8a:e8:c9:c8:88:bf:c1:a6:2d:13:e4:d0:94:1f:c6:d5:cc: e7:a2:31:b4:ce:1a:a5:d8:18:a6:22:8e:61:66:03:d0:a3:c3: a4:2e:66:15:56:c0:5d:12:b2:b7:bc:50:1a:b4:25:21:6f:3b: 2c:75:1b:59:11:2e:c2:c4:00:06:61:32:22:95:78:be:c1:fb: cb:c3:d3:64:aa:53:de:47:9f:b2:4c:9d:cf:2d:14:06:07:f2: c3:1d:9f:a3:19:71:13:06:5b:86:02:50:83:91:dc:c0:3e:2c: 9d:49:67:0c:80:f1:99:69:1d:e6:ab:2a:60:92:55:4e:70:15: be:d2:ae:0c:a6:6f:e4:25:59:89:40:40:30:3a:ae:55:62:3a: e6:c3:b4:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tAyhY0nROJ9DvWp869iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh NjcwNGQwHhcNMjUxMjIwMjMwMTA3WhcNMjUxMjIxMjMwMTA3WjAzMTEwLwYDVQQD EyhhNWE2NTlhNTdlOTNlNmUxOTM3NzQ5NmVkNjRjMDIwZTNlMThmMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn11NkFa8miCATQoBu884kpRuhL4C 68gwj3p8t8yBVS0iTLRiTbz0fFXGCnRIqQZbU7E1BIguF7a07bFmAHofJ/zpQQEz Yeeh+lH6pjesUZmG/sYfAsZDYB86uBOGb63K2fKW6aRxDx94lxnimOwpXdJiFyM0 I1OvFl/gFEBikcf+XYbIVadhBTYEv8EJZRBAooQYppkGjwPMGffr9GT49bWtCe1G L8+eBRuedmKKtgEBH8q7qdEXSgINaDOOazxPS8PsRjSPtrP/V4qUsDUyy7CmfQgw OUkpEseClAi8NQwaboD3BIsiSajb4sTzffZsxDYme8Zuqc/UhDwrw3dKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWmWaV+k+bhk3dJbtZMAg4+GPG1MB8GA1UdIwQY MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEF/FUacX obXCdOL9YbdsNrk5vqUpU1FKa1kT1yE0DwesGT1m3YmST6vqTqJf3jf0O1dTBKQm J3gonvDDN+9OgjLVEwVIcptpLQnlkrHTRTOsYtY1uhh9+xD/WZ1rLp+kcQWMaU0P BmQydiwdzYroyciIv8GmLRPk0JQfxtXM56IxtM4apdgYpiKOYWYD0KPDpC5mFVbA XRKyt7xQGrQlIW87LHUbWREuwsQABmEyIpV4vsH7y8PTZKpT3kefskydzy0UBgfy wx2foxlxEwZbhgJQg5HcwD4snUlnDIDxmWkd5qsqYJJVTnAVvtKuDKZv5CVZiUBA MDquVWI65sO03A== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:32 2025 by rpki-client