This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json) Hash identifier: AoFSSwMNZJCsMJEhEG8Z7Z1o8hbHHyd7QufWXHx31b8= Subject key identifier: 77:59:C6:5D:A0:65:15:6A:57:1A:28:BF:41:6F:F2:48:2D:33:8B:29 Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Certificate serial: 019B67683847DECB51A0AB47AFD51F647421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft Manifest number: 0F14 Signing time: Mon 29 Dec 2025 00:00:41 +0000 Manifest this update: Mon 29 Dec 2025 00:00:41 +0000 Manifest next update: Tue 30 Dec 2025 00:00:41 +0000 Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=) 2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=) 3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: VeypDKI7xg1pbjgnxNAQA3UcZq7uf7iiXgzaeh6cNFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:38:47:de:cb:51:a0:ab:47:af:d5:1f:64:74:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec Validity Not Before: Dec 29 00:00:41 2025 GMT Not After : Dec 30 00:00:41 2025 GMT Subject: CN=7759c65da065156a571a28bf416ff2482d338b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:1c:8b:79:db:12:8b:68:55:ab:a5:61:f4: 0f:9d:92:07:58:28:08:57:09:92:36:04:9c:c2:4a: e5:f3:3b:23:da:ae:2f:b1:cd:f1:23:49:61:65:65: 02:ce:ef:d3:ac:f1:5c:e6:a8:18:06:33:d0:57:72: e1:61:e8:e2:cb:d6:7b:7c:dc:50:d4:9a:a5:05:2b: ea:07:8f:5e:73:01:f1:8b:6a:4a:07:7e:ed:f0:4e: 4a:2b:27:aa:6d:21:d1:27:62:8d:38:81:62:2b:ba: 91:c6:a5:af:f5:0e:f2:df:cd:17:29:a5:5b:52:c3: e2:07:de:0e:c7:f3:38:f6:38:f0:16:80:a8:32:48: 70:57:9b:0b:09:4f:e7:c1:7f:5d:68:e1:92:27:49: 68:99:69:8b:3c:09:df:c9:4d:d0:79:47:47:97:bb: 82:78:28:b7:ad:05:ce:41:45:39:22:4e:91:35:10: b1:85:32:dd:17:6d:85:9c:d9:b9:18:fe:e1:6a:68: 3e:f3:c8:f0:1d:76:da:7a:a7:c9:c1:0c:ad:31:1e: 0a:2b:22:92:ab:ea:eb:e6:cd:12:d2:f0:ac:64:3c: 3b:44:5e:58:17:c0:df:98:5f:0a:f8:52:75:92:7a: f5:a9:73:81:3e:61:ab:a7:f4:01:3b:40:20:12:b8: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:59:C6:5D:A0:65:15:6A:57:1A:28:BF:41:6F:F2:48:2D:33:8B:29 X509v3 Authority Key Identifier: keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:45:90:6b:41:71:69:37:93:a1:9a:90:d7:08:82:ef:44:4e: 33:c4:81:bb:7c:76:d6:cb:0b:72:6a:37:e5:40:8c:fd:bf:8a: 42:0a:30:85:d0:1f:da:03:f3:79:4c:5c:b4:23:a0:68:7c:dc: 27:db:1e:21:27:f3:d8:8f:80:f3:81:e6:a1:95:e4:d2:e6:2f: 02:1a:37:c7:a2:e0:97:c3:9b:c8:4a:55:a9:45:e6:c4:90:d0: 45:48:fc:d5:5d:59:ee:7f:98:3e:d0:4b:aa:3d:5f:9e:83:ae: b7:37:c9:13:4a:90:b9:36:10:c6:38:80:d2:09:b8:74:2c:20: b8:f9:90:fc:47:f2:c1:ce:58:25:e7:eb:29:e9:01:70:da:bf: 2f:46:3e:d8:12:ae:61:94:e6:2f:91:0c:f3:79:bf:5e:58:1f: 8f:ae:97:b6:d8:8a:99:6c:14:48:fe:bd:4e:50:10:d3:d9:d7: 22:b1:c5:b0:9d:76:e4:bd:55:1e:c5:05:72:a0:24:91:bc:7c: db:89:1f:be:4f:0e:61:ea:a1:65:55:44:61:de:cc:46:b9:db: 3e:d9:ea:af:e6:4a:6a:92:1e:b6:3d:98:a3:7e:4e:05:1a:2a: 27:dc:a1:16:8d:ce:a9:8d:da:cd:10:de:86:e3:12:46:45:87: f6:0a:da:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaDhH3stRoKtHr9UfZHQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh ZGVhZWMwHhcNMjUxMjI5MDAwMDQxWhcNMjUxMjMwMDAwMDQxWjAzMTEwLwYDVQQD Eyg3NzU5YzY1ZGEwNjUxNTZhNTcxYTI4YmY0MTZmZjI0ODJkMzM4YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Ici3nbEotoVaulYfQPnZIHWCgI VwmSNgScwkrl8zsj2q4vsc3xI0lhZWUCzu/TrPFc5qgYBjPQV3LhYejiy9Z7fNxQ 1JqlBSvqB49ecwHxi2pKB37t8E5KKyeqbSHRJ2KNOIFiK7qRxqWv9Q7y380XKaVb UsPiB94Ox/M49jjwFoCoMkhwV5sLCU/nwX9daOGSJ0lomWmLPAnfyU3QeUdHl7uC eCi3rQXOQUU5Ik6RNRCxhTLdF22FnNm5GP7hamg+88jwHXbaeqfJwQytMR4KKyKS q+rr5s0S0vCsZDw7RF5YF8DfmF8K+FJ1knr1qXOBPmGrp/QBO0AgErj+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdZxl2gZRVqVxoov0Fv8kgtM4spMB8GA1UdIwQY MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0WQa0Fx aTeToZqQ1wiC70ROM8SBu3x21ssLcmo35UCM/b+KQgowhdAf2gPzeUxctCOgaHzc J9seISfz2I+A84HmoZXk0uYvAho3x6Lgl8ObyEpVqUXmxJDQRUj81V1Z7n+YPtBL qj1fnoOutzfJE0qQuTYQxjiA0gm4dCwguPmQ/Efywc5YJefrKekBcNq/L0Y+2BKu YZTmL5EM83m/Xlgfj66XttiKmWwUSP69TlAQ09nXIrHFsJ125L1VHsUFcqAkkbx8 24kfvk8OYeqhZVVEYd7MRrnbPtnqr+ZKapIetj2Yo35OBRoqJ9yhFo3OqY3azRDe huMSRkWH9graKw== -----END CERTIFICATE-----Generated at Mon Dec 29 08:30:08 2025 by rpki-client