This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json) Hash identifier: AwtTF6AzakpmLVEAV9VXKZebzgsy1RkLU3FWlAmby2c= Subject key identifier: 35:C8:1C:0C:95:00:35:CA:6B:53:A6:CB:6E:03:16:F9:1B:FF:A3:F6 Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Certificate serial: 019B620B85EE02DC1AFEC6A52CEA990E9967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft Manifest number: 0379 Signing time: Sat 27 Dec 2025 23:01:20 +0000 Manifest this update: Sat 27 Dec 2025 23:01:20 +0000 Manifest next update: Sun 28 Dec 2025 23:01:20 +0000 Files and hashes: 1: 8UP-HnXT6ZiBdaOYlDB66hT_Z2k.roa (hash: cDjhHlc7QRM8+yZv2BHSK6rJJPG1sbZBDn/UhAV5syE=) 2: Po91py2fhJdQGVHgdk7idjtwShI.roa (hash: M3TCrvio3ZBNRYCLggK7+XJO5M1JFEoCLSO3VbGAey0=) 3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: 7deiUSUju/+dyU5F8cwR+sK5eTLO9qGRc6X7s2XH1Ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:85:ee:02:dc:1a:fe:c6:a5:2c:ea:99:0e:99:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Validity Not Before: Dec 27 23:01:20 2025 GMT Not After : Dec 28 23:01:20 2025 GMT Subject: CN=35c81c0c950035ca6b53a6cb6e0316f91bffa3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:37:9d:5b:10:28:5c:0c:9d:ca:a0:2a:80: 38:f1:6a:03:46:72:5d:e0:cd:b4:15:d5:6f:31:d8: b6:7a:73:18:a5:f7:30:96:22:b1:7a:37:ad:37:55: 57:b2:14:60:20:ac:4a:28:0d:4c:cd:ff:14:c4:90: df:05:13:43:e6:dd:2d:48:0c:be:5c:85:13:62:69: e2:f5:9c:ff:a4:24:47:f4:11:33:63:57:fb:71:6a: 0f:e9:89:69:b8:53:05:a5:a5:21:c0:fa:65:2c:cf: e8:85:53:19:c0:4d:ff:ac:08:03:fd:7d:65:8d:32: f4:f9:97:64:71:ea:c8:be:c2:e2:5e:61:3c:6f:7d: 87:fc:54:eb:46:ae:9a:df:81:c5:02:7d:fc:f6:1f: 83:34:8e:ee:d8:03:59:32:ee:b2:34:7a:3d:fb:2b: cf:0a:9b:f3:30:bd:f3:44:66:e8:77:8b:41:96:8b: 2b:a4:b9:fa:33:af:f6:6d:6a:bd:10:e5:18:ef:28: d2:a0:7d:ef:7b:3a:fe:51:21:d0:eb:4f:1b:46:12: fa:76:9d:de:a7:9d:91:e4:8a:97:87:30:eb:ef:0e: c0:4e:d0:39:5c:78:88:e7:ca:d3:e1:b1:b8:4b:cd: a3:81:76:91:35:03:ce:e2:6b:b9:eb:0b:21:7d:84: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:1C:0C:95:00:35:CA:6B:53:A6:CB:6E:03:16:F9:1B:FF:A3:F6 X509v3 Authority Key Identifier: keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:45:63:32:f8:fd:67:b1:ec:92:c1:b6:b5:25:3a:69:a3:5d: 4b:7e:52:b0:e9:7e:51:7d:36:09:e7:e2:59:a8:f4:08:87:9a: 37:f0:a4:09:af:5c:5f:c6:92:53:fd:6f:c6:ce:c2:39:cf:94: 9d:7e:5f:39:6f:5c:0e:31:08:b8:f0:ad:2f:34:f0:f6:19:94: de:98:b7:bd:8a:94:17:d0:68:47:40:55:89:53:c5:cc:bd:ce: 8b:a0:e3:b1:b9:47:ef:d8:5c:1e:81:b0:39:ff:2e:7f:21:32: 84:42:19:5f:55:81:5f:76:6c:6e:e6:71:74:68:39:cf:92:31: 26:19:7f:17:eb:08:90:52:84:e4:fd:1f:73:75:22:0a:c0:f2: 5d:26:7f:82:d7:84:3e:03:c6:e6:81:9e:7c:42:26:2c:89:b6: f6:ba:84:ef:dc:e2:48:23:38:dd:30:6c:d4:76:e1:ca:c6:ef: fb:0b:5b:f9:67:d4:b5:b4:04:40:df:9d:4f:ae:98:1f:1e:64: f6:03:67:1a:a0:09:91:b8:51:3d:13:5d:32:4f:b6:f4:9f:ef: 26:6f:f1:22:db:66:73:5f:17:0b:60:30:b4:36:6e:ee:f6:a8: fa:da:1e:32:d8:6c:24:5b:a0:a9:2e:13:89:56:9f:4f:1b:4b: fb:3a:a3:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC4XuAtwa/salLOqZDplnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3 MmI1NzgwHhcNMjUxMjI3MjMwMTIwWhcNMjUxMjI4MjMwMTIwWjAzMTEwLwYDVQQD EygzNWM4MWMwYzk1MDAzNWNhNmI1M2E2Y2I2ZTAzMTZmOTFiZmZhM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uw3nVsQKFwMncqgKoA48WoDRnJd 4M20FdVvMdi2enMYpfcwliKxejetN1VXshRgIKxKKA1Mzf8UxJDfBRND5t0tSAy+ XIUTYmni9Zz/pCRH9BEzY1f7cWoP6YlpuFMFpaUhwPplLM/ohVMZwE3/rAgD/X1l jTL0+ZdkcerIvsLiXmE8b32H/FTrRq6a34HFAn389h+DNI7u2ANZMu6yNHo9+yvP CpvzML3zRGbod4tBlosrpLn6M6/2bWq9EOUY7yjSoH3vezr+USHQ608bRhL6dp3e p52R5IqXhzDr7w7ATtA5XHiI58rT4bG4S82jgXaRNQPO4mu56wshfYS9rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXIHAyVADXKa1Omy24DFvkb/6P2MB8GA1UdIwQY MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1 LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkVjMvj9 Z7HsksG2tSU6aaNdS35SsOl+UX02CefiWaj0CIeaN/CkCa9cX8aSU/1vxs7COc+U nX5fOW9cDjEIuPCtLzTw9hmU3pi3vYqUF9BoR0BViVPFzL3Oi6DjsblH79hcHoGw Of8ufyEyhEIZX1WBX3ZsbuZxdGg5z5IxJhl/F+sIkFKE5P0fc3UiCsDyXSZ/gteE PgPG5oGefEImLIm29rqE79ziSCM43TBs1Hbhysbv+wtb+WfUtbQEQN+dT66YHx5k 9gNnGqAJkbhRPRNdMk+29J/vJm/xIttmc18XC2AwtDZu7vao+toeMthsJFugqS4T iVafTxtL+zqjtw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:27:45 2025 by rpki-client