This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json) Hash identifier: 4d0ZyyPanHVCGGtYCEi5VGpIOyyylLMzE+42azeKG2Q= Subject key identifier: 00:ED:93:28:59:F0:2B:47:20:4C:FF:DE:48:13:66:34:55:49:82:8B Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B5606C6110942BA08017571AC5B762B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft Manifest number: 0F0B Signing time: Thu 25 Dec 2025 15:00:42 +0000 Manifest this update: Thu 25 Dec 2025 15:00:42 +0000 Manifest next update: Fri 26 Dec 2025 15:00:42 +0000 Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=) 2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=) 3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: JGOpzBVF7vTNeczC6oxEJv8h7SmMRKQ8n4tzLygxTRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:c6:11:09:42:ba:08:01:75:71:ac:5b:76:2b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Dec 25 15:00:42 2025 GMT Not After : Dec 26 15:00:42 2025 GMT Subject: CN=00ed932859f02b47204cffde481366345549828b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:f3:e6:db:c7:dc:6f:a9:a8:dd:ae:28:54: 8e:d5:38:c3:af:8d:d0:72:88:11:79:99:da:96:8d: 48:6a:7a:df:b4:95:45:c2:68:97:16:22:80:f1:02: 54:d6:03:16:ea:ed:72:df:45:31:6d:1f:c6:5b:ce: 23:40:3d:d3:61:f6:bb:73:4f:7b:39:7c:bd:02:6c: 53:da:a8:1a:01:f0:a5:5b:88:af:6f:41:60:87:3a: 88:26:2b:e8:d6:37:12:0e:92:6a:29:b9:8e:70:96: f0:d9:fb:4d:0a:6c:70:90:5e:ff:58:26:97:6f:bc: af:f4:1e:a4:24:1c:cc:c6:f9:bd:e4:5f:ec:20:f1: 5a:ae:0c:be:90:f8:ae:30:ab:e7:4f:63:c6:20:15: 9e:c4:cd:18:6e:c0:f8:98:a2:0d:ab:f8:84:98:c1: 90:97:97:ff:47:8a:f2:23:91:3c:38:d6:0f:51:a3: aa:4f:ea:81:51:30:d3:b4:26:91:85:9c:04:80:0d: 9a:ff:1c:0f:8a:8d:fe:31:ae:3e:c5:51:c2:9c:3c: f8:a5:37:39:77:aa:25:b4:7b:a8:da:10:8b:28:a8: 7d:2a:57:d3:e9:ff:a6:71:52:ff:26:31:07:81:94: c6:f5:2e:f2:b1:c9:e8:d2:a9:11:a4:b2:fb:b5:7c: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:ED:93:28:59:F0:2B:47:20:4C:FF:DE:48:13:66:34:55:49:82:8B X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9c:0c:72:1c:1c:1a:d6:53:db:e6:aa:cf:c6:22:9d:0c:3f: 06:f4:21:ed:db:73:d3:0e:9d:26:32:6a:7b:7b:9d:53:36:26: 49:04:83:13:82:11:b8:93:e9:30:a5:e5:76:52:bc:33:db:e9: 7d:6e:31:b3:2f:7d:6e:05:31:27:1e:2a:6d:69:a8:d9:60:9e: 8e:9c:bf:b6:55:b5:b3:02:e0:42:5c:71:d6:f5:14:2b:be:7d: 4d:88:cf:74:dd:c3:9b:eb:92:66:38:69:80:b3:99:dc:47:30: 8a:f0:85:04:7d:06:10:b1:33:81:72:36:2c:e8:a5:6f:26:74: 4f:c5:ae:c1:cd:c2:97:11:f3:51:5f:51:6a:08:d0:f6:32:5c: 35:fe:07:03:6d:ea:1e:92:55:06:27:3f:44:ff:62:96:2e:29: af:ef:ca:ab:6f:d7:ff:b6:94:5a:03:7f:00:d7:fa:ad:5a:0a: 81:e6:ef:76:dc:0a:73:7a:e6:20:0a:b6:36:72:34:d6:2b:c1: b9:7e:35:80:36:32:29:9a:c6:f0:ca:18:34:3e:46:37:70:03: d0:7b:c4:d1:65:ac:d0:87:af:49:73:31:24:5b:7a:98:0e:56: 90:40:a5:4d:a2:ab:5d:35:ce:69:13:28:27:76:f1:4b:36:2b: fa:34:a7:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBsYRCUK6CAF1caxbdisfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjUxMjI1MTUwMDQyWhcNMjUxMjI2MTUwMDQyWjAzMTEwLwYDVQQD EygwMGVkOTMyODU5ZjAyYjQ3MjA0Y2ZmZGU0ODEzNjYzNDU1NDk4MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXbz5tvH3G+pqN2uKFSO1TjDr43Q cogReZnalo1IanrftJVFwmiXFiKA8QJU1gMW6u1y30UxbR/GW84jQD3TYfa7c097 OXy9AmxT2qgaAfClW4ivb0FghzqIJivo1jcSDpJqKbmOcJbw2ftNCmxwkF7/WCaX b7yv9B6kJBzMxvm95F/sIPFargy+kPiuMKvnT2PGIBWexM0YbsD4mKINq/iEmMGQ l5f/R4ryI5E8ONYPUaOqT+qBUTDTtCaRhZwEgA2a/xwPio3+Ma4+xVHCnDz4pTc5 d6oltHuo2hCLKKh9KlfT6f+mcVL/JjEHgZTG9S7yscno0qkRpLL7tXzAMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADtkyhZ8CtHIEz/3kgTZjRVSYKLMB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZwMchwc GtZT2+aqz8YinQw/BvQh7dtz0w6dJjJqe3udUzYmSQSDE4IRuJPpMKXldlK8M9vp fW4xsy99bgUxJx4qbWmo2WCejpy/tlW1swLgQlxx1vUUK759TYjPdN3Dm+uSZjhp gLOZ3EcwivCFBH0GELEzgXI2LOilbyZ0T8Wuwc3ClxHzUV9RagjQ9jJcNf4HA23q HpJVBic/RP9ili4pr+/Kq2/X/7aUWgN/ANf6rVoKgebvdtwKc3rmIAq2NnI01ivB uX41gDYyKZrG8MoYND5GN3AD0HvE0WWs0IevSXMxJFt6mA5WkEClTaKrXTXOaRMo J3bxSzYr+jSn4A== -----END CERTIFICATE-----Generated at Thu Dec 25 16:03:43 2025 by rpki-client