This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json) Hash identifier: g75U6BQFSyWE9a9OVuloyiNtJE8vBaeuEv3nWxsVg4U= Subject key identifier: 4A:64:BA:57:DF:C1:F1:AF:66:F9:06:2F:ED:31:24:BF:28:4C:B8:F5 Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Certificate serial: 019B3D5A51ABAEC58290611CF8C65EDD4A41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft Manifest number: 0366 Signing time: Sat 20 Dec 2025 20:01:27 +0000 Manifest this update: Sat 20 Dec 2025 20:01:27 +0000 Manifest next update: Sun 21 Dec 2025 20:01:27 +0000 Files and hashes: 1: 8UP-HnXT6ZiBdaOYlDB66hT_Z2k.roa (hash: cDjhHlc7QRM8+yZv2BHSK6rJJPG1sbZBDn/UhAV5syE=) 2: Po91py2fhJdQGVHgdk7idjtwShI.roa (hash: M3TCrvio3ZBNRYCLggK7+XJO5M1JFEoCLSO3VbGAey0=) 3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: OGAlAgXpjB17rruORoy8QvRpdxKOw61CyecAoFQ9Byw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:51:ab:ae:c5:82:90:61:1c:f8:c6:5e:dd:4a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578 Validity Not Before: Dec 20 20:01:27 2025 GMT Not After : Dec 21 20:01:27 2025 GMT Subject: CN=4a64ba57dfc1f1af66f9062fed3124bf284cb8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:28:f8:71:b3:d8:1a:08:6b:63:6f:12:86: 49:96:a8:17:20:9c:06:57:d5:02:94:41:3c:6f:2a: 11:d0:d8:e7:85:7d:bf:9d:6f:00:d8:c7:7a:f8:9e: 26:12:13:d3:bc:0a:ee:91:c6:cb:9f:cf:bb:3d:53: 97:8a:52:40:31:b5:60:70:ca:a3:51:23:40:ad:0a: d8:64:fb:e3:c1:16:be:05:0a:8a:dc:59:87:28:f1: 05:6b:98:82:c7:1d:c6:35:6a:b0:1b:1e:6b:4b:5f: fa:c5:9e:ac:84:27:05:98:2c:e0:ed:9c:0f:3c:79: 5f:44:7c:92:b6:c5:9a:d3:49:b1:94:9a:b2:df:73: 5d:af:2a:07:91:aa:25:23:b9:ae:b8:df:c5:e1:41: a7:c4:07:1f:53:15:fa:2b:ff:cf:56:3a:d0:f2:59: a0:9c:af:1a:a4:4e:cc:46:2e:a1:a0:26:24:d2:a8: 10:36:83:54:d5:4d:e7:e1:dd:23:cc:4e:a5:a0:1e: bb:63:12:5c:2b:de:b5:38:86:04:53:bc:07:3a:67: 6c:31:88:52:e1:50:06:b2:3d:89:5f:16:f2:a3:ae: 6b:b3:3b:d4:1b:ee:00:c2:29:d1:cd:36:fc:3d:78: 3d:f6:24:fb:3c:9a:3a:d6:f5:df:14:d4:eb:7f:54: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:64:BA:57:DF:C1:F1:AF:66:F9:06:2F:ED:31:24:BF:28:4C:B8:F5 X509v3 Authority Key Identifier: keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:0e:27:3a:be:92:5e:a5:5b:67:d0:21:d2:95:77:7d:46:f9: 37:89:32:84:52:c2:c5:3d:19:bc:b2:2e:6d:f1:a4:70:e3:8a: c2:61:1c:16:67:46:14:27:05:1e:69:70:ec:3f:b8:f1:eb:10: 05:f6:57:a4:26:bb:ee:ae:cf:a8:9f:c0:75:42:19:77:cd:c9: ca:ce:17:6c:8d:8d:48:f5:10:47:ea:cd:3a:54:32:42:46:9e: 77:b5:4d:a7:ad:34:91:14:cd:f3:4b:1c:07:49:79:fc:a1:e7: 2c:62:4e:4f:53:16:71:2e:4a:7e:1c:47:51:19:16:5d:f5:57: 60:49:44:cf:71:9f:2b:9f:3b:14:56:90:30:37:9d:9e:09:d7: ef:5f:01:9b:14:8e:46:6a:65:9f:be:7c:2e:94:87:16:bc:cf: 69:a7:cd:47:4e:e9:9a:04:95:a8:71:c7:ba:23:c6:5e:cd:50: e3:fe:4a:bc:c6:3a:29:4a:87:21:3e:16:d6:32:8b:29:73:5d: d6:23:e3:25:5f:1a:c8:6e:88:e8:bf:17:c9:0f:c0:03:56:e7: 0e:39:89:bf:c9:7e:86:fe:19:ca:4e:72:6a:63:4d:08:3d:84: 6e:7c:00:da:2f:24:3a:5d:05:60:7e:10:58:a6:64:8f:46:be: 42:95:f1:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WlGrrsWCkGEc+MZe3UpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOWY2ZmJmZTAwYTA4NTkyYjdiYjBlZGZkYzIwMDJiZmM3 MmI1NzgwHhcNMjUxMjIwMjAwMTI3WhcNMjUxMjIxMjAwMTI3WjAzMTEwLwYDVQQD Eyg0YTY0YmE1N2RmYzFmMWFmNjZmOTA2MmZlZDMxMjRiZjI4NGNiOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvIo+HGz2BoIa2NvEoZJlqgXIJwG V9UClEE8byoR0NjnhX2/nW8A2Md6+J4mEhPTvArukcbLn8+7PVOXilJAMbVgcMqj USNArQrYZPvjwRa+BQqK3FmHKPEFa5iCxx3GNWqwGx5rS1/6xZ6shCcFmCzg7ZwP PHlfRHyStsWa00mxlJqy33NdryoHkaolI7muuN/F4UGnxAcfUxX6K//PVjrQ8lmg nK8apE7MRi6hoCYk0qgQNoNU1U3n4d0jzE6loB67YxJcK961OIYEU7wHOmdsMYhS 4VAGsj2JXxbyo65rszvUG+4AwinRzTb8PXg99iT7PJo61vXfFNTrf1TntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpkulffwfGvZvkGL+0xJL8oTLj1MB8GA1UdIwQY MBaAFM+fb7/gCghZK3uw7f3CACv8crV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUt MzQyYTllZTczZDg1LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS83MzM5ODktZjEzMS00NWU5LTliNzUtMzQyYTllZTczZDg1 LzEvejU5dnYtQUtDRmtyZTdEdF9jSUFLX3h5dFhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA4nOr6S XqVbZ9Ah0pV3fUb5N4kyhFLCxT0ZvLIubfGkcOOKwmEcFmdGFCcFHmlw7D+48esQ BfZXpCa77q7PqJ/AdUIZd83Jys4XbI2NSPUQR+rNOlQyQkaed7VNp600kRTN80sc B0l5/KHnLGJOT1MWcS5KfhxHURkWXfVXYElEz3GfK587FFaQMDedngnX718BmxSO Rmpln758LpSHFrzPaafNR07pmgSVqHHHuiPGXs1Q4/5KvMY6KUqHIT4W1jKLKXNd 1iPjJV8ayG6I6L8XyQ/AA1bnDjmJv8l+hv4Zyk5yamNNCD2EbnwA2i8kOl0FYH4Q WKZkj0a+QpXxGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:28:44 2025 by rpki-client