This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json) Hash identifier: EZj3zpDNvYEhep7R9nTYE6gS4VJC++V/MVXryFh6dR4= Subject key identifier: A6:3A:AE:25:8C:D2:73:F3:A7:77:58:F9:47:83:33:5F:4F:39:8A:5B Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B3EDA01B4F95344D2002024CE6FBBF0D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft Manifest number: 0EFF Signing time: Sun 21 Dec 2025 03:00:33 +0000 Manifest this update: Sun 21 Dec 2025 03:00:33 +0000 Manifest next update: Mon 22 Dec 2025 03:00:33 +0000 Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=) 2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=) 3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: PnePA549rUniBpEct+3+dwnflJx00M+M+2W315pR6nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:01:b4:f9:53:44:d2:00:20:24:ce:6f:bb:f0:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Dec 21 03:00:33 2025 GMT Not After : Dec 22 03:00:33 2025 GMT Subject: CN=a63aae258cd273f3a77758f94783335f4f398a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:2e:68:31:54:87:64:5e:4e:bb:d1:bb:36: 94:de:9c:4e:84:f6:48:39:19:cb:98:83:08:f3:a0: 95:c0:77:87:97:c2:78:67:1f:46:b3:1f:22:a4:60: d5:ef:23:15:2a:13:ca:58:81:0f:55:b4:1e:cf:a2: e4:16:cf:6e:80:e2:81:08:2b:02:d2:27:6e:9b:f2: c8:aa:f7:f1:a5:46:41:1d:d2:b6:c8:3b:f8:8b:b5: 38:77:6a:e1:3d:01:b4:5f:62:e7:90:75:62:97:97: e8:23:d7:9d:9c:ba:18:5d:f1:c4:6d:0e:d8:01:5b: 4f:94:a4:5c:8a:34:dc:44:dc:28:2a:f4:f4:77:24: c4:47:32:d7:52:62:82:ce:4f:c8:c3:34:60:d4:eb: f9:ed:26:ab:32:c5:85:0e:80:89:b8:b2:ca:49:70: ec:3b:9c:fd:c0:36:8e:db:11:fa:f3:fc:7f:44:48: 53:f0:af:ee:48:9c:6c:2f:2f:8b:df:54:62:0c:86: 18:f8:40:85:be:c0:f1:61:da:bb:1f:ac:07:dd:64: 68:78:63:b5:57:00:e8:07:5f:ae:52:84:50:99:fc: ea:a1:46:25:b3:2a:2d:4a:45:bb:ed:f5:57:8b:3e: 27:36:7a:cd:fe:2a:ea:48:3d:50:dc:ba:d0:3f:28: c4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3A:AE:25:8C:D2:73:F3:A7:77:58:F9:47:83:33:5F:4F:39:8A:5B X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:93:70:86:3b:cf:c2:30:11:1d:fa:d6:d2:27:e6:cb:c2:86: b8:c3:0b:f1:fa:77:35:69:03:af:5f:9b:1d:ac:6b:cb:16:84: 1f:2c:7c:7a:77:66:2b:48:15:d7:34:ef:d4:58:4f:b8:a1:24: 87:e8:7e:24:a8:2f:5b:d1:19:c2:87:43:97:cf:cd:e3:ba:22: 8b:32:ac:74:b8:17:0a:53:29:c8:98:ed:ed:4f:b1:e8:09:fe: ff:b4:50:36:37:dc:5c:24:cd:43:4f:12:48:49:1d:68:82:fe: 7a:74:f2:de:5d:c0:e7:29:9c:8e:10:69:55:32:71:ac:1d:03: a3:fc:9d:89:65:30:2a:a0:f0:ba:79:35:1c:ec:e5:1c:75:e6: 35:bb:93:0f:a7:ea:7d:60:47:11:10:13:c1:b5:bf:04:48:2a: 9c:9d:ca:fb:97:3b:3f:ba:a8:5b:10:29:be:1f:8f:c2:3e:e1: 2a:c2:28:1a:f8:dd:af:12:b9:ae:57:0c:17:50:29:3f:85:a2: c6:5d:42:20:4f:d1:f4:8a:46:78:b3:62:03:ea:29:7d:c8:68: 7e:e6:f6:8c:6b:99:c9:70:b7:99:2d:31:16:ef:5b:e3:99:6a: 63:aa:71:fc:f0:76:9a:a4:c9:eb:cb:39:19:4a:01:8c:f8:e9: 5d:e7:70:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gG0+VNE0gAgJM5vu/DXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjUxMjIxMDMwMDMzWhcNMjUxMjIyMDMwMDMzWjAzMTEwLwYDVQQD EyhhNjNhYWUyNThjZDI3M2YzYTc3NzU4Zjk0NzgzMzM1ZjRmMzk4YTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYuaDFUh2ReTrvRuzaU3pxOhPZI ORnLmIMI86CVwHeHl8J4Zx9Gsx8ipGDV7yMVKhPKWIEPVbQez6LkFs9ugOKBCCsC 0idum/LIqvfxpUZBHdK2yDv4i7U4d2rhPQG0X2LnkHVil5foI9ednLoYXfHEbQ7Y AVtPlKRcijTcRNwoKvT0dyTERzLXUmKCzk/IwzRg1Ov57SarMsWFDoCJuLLKSXDs O5z9wDaO2xH68/x/REhT8K/uSJxsLy+L31RiDIYY+ECFvsDxYdq7H6wH3WRoeGO1 VwDoB1+uUoRQmfzqoUYlsyotSkW77fVXiz4nNnrN/irqSD1Q3LrQPyjEOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY6riWM0nPzp3dY+UeDM19POYpbMB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZNwhjvP wjARHfrW0ifmy8KGuMML8fp3NWkDr1+bHaxryxaEHyx8endmK0gV1zTv1FhPuKEk h+h+JKgvW9EZwodDl8/N47oiizKsdLgXClMpyJjt7U+x6An+/7RQNjfcXCTNQ08S SEkdaIL+enTy3l3A5ymcjhBpVTJxrB0Do/ydiWUwKqDwunk1HOzlHHXmNbuTD6fq fWBHERATwbW/BEgqnJ3K+5c7P7qoWxApvh+Pwj7hKsIoGvjdrxK5rlcMF1ApP4Wi xl1CIE/R9IpGeLNiA+opfchofub2jGuZyXC3mS0xFu9b45lqY6px/PB2mqTJ68s5 GUoBjPjpXedwCg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:16:35 2025 by rpki-client