This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft File: zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json) Hash identifier: xDjGslSsgddKCrvcwbIPQTr9PnBjqZXgpHPN6wfYo4g= Subject key identifier: FF:39:16:84:4E:BB:9E:43:DF:E6:DD:15:54:B4:21:E0:B8:4F:12:7B Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 Certificate issuer: /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Certificate serial: 019B73354A74C5774BB2ED541B0ECE8AF15D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft Manifest number: 179F Signing time: Wed 31 Dec 2025 07:00:30 +0000 Manifest this update: Wed 31 Dec 2025 07:00:30 +0000 Manifest next update: Thu 01 Jan 2026 07:00:30 +0000 Files and hashes: 1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=) 2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: 8qUBtAUO7cQMDR0XbxJ9DGMzT0SvcSO608IxE9+yDUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:4a:74:c5:77:4b:b2:ed:54:1b:0e:ce:8a:f1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3 Validity Not Before: Dec 31 07:00:30 2025 GMT Not After : Jan 1 07:00:30 2026 GMT Subject: CN=ff3916844ebb9e43dfe6dd1554b421e0b84f127b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:19:a5:0e:2a:a7:ed:d2:89:e5:84:4f:00: 2a:0b:62:01:8d:6b:25:6e:3b:e7:92:5f:2d:ba:18: 1e:70:87:ed:64:24:be:e6:1b:5c:f5:6b:16:dc:cf: 35:9d:91:b8:f4:24:e0:1e:07:2d:06:1f:3e:ad:10: b2:1b:e0:e8:6a:bb:35:da:f8:eb:9c:67:a8:de:a8: aa:3a:6b:37:62:41:f2:e4:a5:0f:96:63:4b:86:20: 81:f8:54:f2:2c:9d:7d:da:81:cc:c9:fd:30:56:ae: 7f:c7:eb:36:0d:6e:b5:cb:96:9a:e5:e2:88:31:d4: ec:06:77:84:6e:c6:0a:17:7c:55:67:d0:74:30:0d: 71:62:09:16:ae:d1:34:42:fa:28:7b:84:f3:ac:9c: 23:b1:20:49:4f:a6:95:3a:cd:04:17:8f:ac:03:22: c5:29:fc:cd:d5:b0:44:89:93:41:a0:12:20:94:3e: e8:34:11:e6:34:88:3e:17:a9:9f:ba:ae:7b:5d:c9: 18:d7:d9:93:8e:c5:f5:ef:ad:87:f4:e7:55:48:c5: 4c:ee:2d:71:dd:30:df:c7:80:05:38:04:94:a9:15: d0:c1:45:4d:b0:5a:36:3f:27:b5:7c:75:c3:83:24: c5:2f:6d:fd:52:27:f9:24:b4:49:0d:79:66:8e:27: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:16:84:4E:BB:9E:43:DF:E6:DD:15:54:B4:21:E0:B8:4F:12:7B X509v3 Authority Key Identifier: keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b3:51:db:6c:1b:3b:7a:7b:5d:05:48:2b:88:f8:04:8d:8e: 36:cd:c8:8d:0c:75:40:f5:41:70:bd:83:d9:63:c2:c3:bb:ef: 94:54:80:8c:21:7b:3d:25:88:15:8d:40:71:66:22:69:f4:4b: f5:ff:60:3c:d8:17:99:06:b1:d7:fa:12:ba:a4:7a:c6:0c:be: 27:b3:30:a1:78:c1:ac:86:60:00:b1:d0:af:f4:db:70:d2:49: be:dd:49:5b:88:89:e7:de:2c:37:79:46:28:3f:a9:df:22:a2: d1:04:7f:7c:a5:7a:6d:bc:ab:b2:8a:05:89:87:12:11:28:4f: b3:b5:09:e9:94:c0:47:e0:0d:26:e6:0d:72:c3:25:db:a7:c3: 3a:28:cf:96:c5:e0:23:89:ec:4a:30:ed:ae:28:76:f7:34:99: df:e5:59:fe:99:07:e5:0d:dc:4c:95:f3:e6:71:76:d4:50:dc: 14:52:99:47:0a:0b:8a:81:61:eb:01:b4:70:a0:20:5d:52:3f: 17:f9:70:33:ce:34:54:10:94:2e:69:c0:c0:85:93:74:ca:25: bc:c2:37:44:8e:1b:68:c8:03:c4:e1:60:ea:a8:f5:1b:09:12: a4:9c:24:95:d7:7f:a2:7f:b2:27:ac:43:a3:39:8b:42:27:96: 97:9e:e9:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNUp0xXdLsu1UGw7OivFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNmNhMDVjNGNiNjFkOWUyMzI5Mjk4ZDM1NGMyYTc2OWJk ZDA1ZDMwHhcNMjUxMjMxMDcwMDMwWhcNMjYwMTAxMDcwMDMwWjAzMTEwLwYDVQQD EyhmZjM5MTY4NDRlYmI5ZTQzZGZlNmRkMTU1NGI0MjFlMGI4NGYxMjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ooZpQ4qp+3SieWETwAqC2IBjWsl bjvnkl8tuhgecIftZCS+5htc9WsW3M81nZG49CTgHgctBh8+rRCyG+Doars12vjr nGeo3qiqOms3YkHy5KUPlmNLhiCB+FTyLJ192oHMyf0wVq5/x+s2DW61y5aa5eKI MdTsBneEbsYKF3xVZ9B0MA1xYgkWrtE0Qvooe4TzrJwjsSBJT6aVOs0EF4+sAyLF KfzN1bBEiZNBoBIglD7oNBHmNIg+F6mfuq57XckY19mTjsX1762H9OdVSMVM7i1x 3TDfx4AFOASUqRXQwUVNsFo2Pye1fHXDgyTFL239Uif5JLRJDXlmjieoWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP85FoROu55D3+bdFVS0IeC4TxJ7MB8GA1UdIwQY MBaAFMxsoFxMth2eIykpjTVMKnab3QXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQt YWZjNjAyNzE0ZTEzLzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8wOTdiMDEtOTQ3MC00OGViLTg1MGQtYWZjNjAyNzE0ZTEz LzEvekd5Z1hFeTJIWjRqS1NtTk5Vd3FkcHZkQmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLNR22wb O3p7XQVIK4j4BI2ONs3IjQx1QPVBcL2D2WPCw7vvlFSAjCF7PSWIFY1AcWYiafRL 9f9gPNgXmQax1/oSuqR6xgy+J7MwoXjBrIZgALHQr/TbcNJJvt1JW4iJ594sN3lG KD+p3yKi0QR/fKV6bbyrsooFiYcSEShPs7UJ6ZTAR+ANJuYNcsMl26fDOijPlsXg I4nsSjDtrih29zSZ3+VZ/pkH5Q3cTJXz5nF21FDcFFKZRwoLioFh6wG0cKAgXVI/ F/lwM840VBCULmnAwIWTdMolvMI3RI4baMgDxOFg6qj1GwkSpJwkldd/on+yJ6xD ozmLQieWl57pBg== -----END CERTIFICATE-----Generated at Wed Dec 31 12:29:45 2025 by rpki-client