This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft File: zSaUgromG4gAVgjsULe5CdPz_U4.mft (raw, json) Hash identifier: WbOBew44SfI2xKMZeZr4oRE+IAR58ehJn8F8ZXxDOXA= Subject key identifier: 20:39:8A:47:2C:85:60:62:1C:CE:B3:E8:2F:F6:AE:71:32:97:66:F2 Authority key identifier: CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E Certificate issuer: /CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Certificate serial: 019B4581E0A48DA4A3BD8BA91ED3C89C75BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 10:01:38 +0000 Manifest this update: Mon 22 Dec 2025 10:01:38 +0000 Manifest next update: Tue 23 Dec 2025 10:01:38 +0000 Files and hashes: 1: 4bVZoUiCbJaTBG7aA0p9xBgeM94.roa (hash: MzCfFVB6xbhIQC2ta/MEsIETvDrpIdsUhLGtVjRSeig=) 2: zSaUgromG4gAVgjsULe5CdPz_U4.crl (hash: LraXmqLxeEzP42ztJFxMAMuPVWZEq8b2cLiVV2DFHO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:e0:a4:8d:a4:a3:bd:8b:a9:1e:d3:c8:9c:75:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd269482ba261b88005608ec50b7b909d3f3fd4e Validity Not Before: Dec 22 10:01:38 2025 GMT Not After : Dec 23 10:01:38 2025 GMT Subject: CN=20398a472c8560621cceb3e82ff6ae71329766f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:89:e6:73:f4:fd:f8:bf:24:d1:e6:a6:fd: a6:d0:6f:63:48:9d:73:d8:95:43:d6:b5:43:43:80: 0f:d0:20:7b:12:cf:c9:b5:90:17:fb:89:37:69:04: 1a:87:bc:5d:32:5c:2a:26:e1:58:51:40:41:54:e3: db:b7:7c:48:12:fc:c5:45:04:dd:18:53:ae:54:0e: 5d:94:93:dd:41:6f:51:b5:e5:51:4f:82:0e:69:5f: d6:b8:91:0f:5f:ef:ac:69:91:fd:d5:25:b5:b8:7a: 85:d2:ce:f7:81:14:85:9e:94:65:43:1c:0e:30:6d: c2:06:11:60:8d:a8:19:fd:9a:dd:cf:20:66:26:e8: db:7c:f1:bc:aa:ff:dc:91:7f:c1:41:6e:77:cd:f6: 8f:80:0e:ad:4a:c9:6d:dd:b8:67:dd:35:b1:0e:c6: 47:e3:dc:85:b5:43:6d:49:77:51:88:23:7b:48:cc: 1b:3d:e6:5d:d4:c3:45:4b:de:60:fd:b6:77:08:86: 72:36:4f:77:73:93:8c:36:fd:8c:8b:93:50:8c:23: 2e:d8:5b:95:99:6e:2e:51:3b:83:d8:26:5d:57:fd: 99:89:62:79:e5:c0:20:2a:75:ad:ab:ae:58:32:d1: 16:e1:e6:6d:00:8c:62:8a:34:c1:77:1b:c4:e8:ae: bb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:8A:47:2C:85:60:62:1C:CE:B3:E8:2F:F6:AE:71:32:97:66:F2 X509v3 Authority Key Identifier: keyid:CD:26:94:82:BA:26:1B:88:00:56:08:EC:50:B7:B9:09:D3:F3:FD:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSaUgromG4gAVgjsULe5CdPz_U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1d19ad-73f6-450b-b97c-2be25f9d5ed2/1/zSaUgromG4gAVgjsULe5CdPz_U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:9c:28:0d:82:51:bf:51:7d:60:bb:63:38:ff:09:34:8d:d6: de:18:d2:b7:01:a8:36:b3:02:8c:6c:14:80:43:2c:0f:c9:bf: 1b:2b:89:95:9f:32:fd:28:8b:f8:54:75:f2:98:85:06:9f:c5: 53:84:44:56:a5:24:7b:dd:57:fb:2e:53:e6:60:fb:0f:52:6d: 64:10:50:93:3b:64:9c:41:b8:e1:34:b0:8c:0d:e6:ee:5c:b0: a6:4c:6f:87:16:8d:21:e3:97:fc:ae:af:54:04:69:11:90:ad: 52:3e:92:fd:8e:95:fa:99:3f:e3:15:e4:bc:39:84:98:4a:ef: 09:93:38:8f:5f:6f:1a:77:c7:39:e1:56:cb:ed:b9:5d:ac:bb: 48:56:81:9f:7c:9d:17:76:46:c4:dc:07:b7:f4:49:a7:74:85: 45:e3:5a:c1:6a:36:b8:9c:a7:5f:f1:eb:fd:5f:f5:68:df:bc: a3:7f:01:c6:26:c3:98:bf:9f:38:8e:90:ee:50:83:5d:13:b8: e9:6f:08:a3:54:8f:9b:e0:74:88:6d:97:94:67:b4:d9:20:27: d0:ac:53:3f:5a:cb:2f:02:f7:94:4f:50:3e:b8:17:f2:71:e2: b4:77:b4:ee:10:54:1f:97:02:37:bc:71:7f:83:8e:6d:db:5b: 18:a2:07:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgeCkjaSjvYupHtPInHW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjY5NDgyYmEyNjFiODgwMDU2MDhlYzUwYjdiOTA5ZDNm M2ZkNGUwHhcNMjUxMjIyMTAwMTM4WhcNMjUxMjIzMTAwMTM4WjAzMTEwLwYDVQQD EygyMDM5OGE0NzJjODU2MDYyMWNjZWIzZTgyZmY2YWU3MTMyOTc2NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U+J5nP0/fi/JNHmpv2m0G9jSJ1z 2JVD1rVDQ4AP0CB7Es/JtZAX+4k3aQQah7xdMlwqJuFYUUBBVOPbt3xIEvzFRQTd GFOuVA5dlJPdQW9RteVRT4IOaV/WuJEPX++saZH91SW1uHqF0s73gRSFnpRlQxwO MG3CBhFgjagZ/ZrdzyBmJujbfPG8qv/ckX/BQW53zfaPgA6tSslt3bhn3TWxDsZH 49yFtUNtSXdRiCN7SMwbPeZd1MNFS95g/bZ3CIZyNk93c5OMNv2Mi5NQjCMu2FuV mW4uUTuD2CZdV/2ZiWJ55cAgKnWtq65YMtEW4eZtAIxiijTBdxvE6K67dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA5ikcshWBiHM6z6C/2rnEyl2byMB8GA1UdIwQY MBaAFM0mlIK6JhuIAFYI7FC3uQnT8/1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2Mt MmJlMjVmOWQ1ZWQyLzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8xZDE5YWQtNzNmNi00NTBiLWI5N2MtMmJlMjVmOWQ1ZWQy LzEvelNhVWdyb21HNGdBVmdqc1VMZTVDZFB6X1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5woDYJR v1F9YLtjOP8JNI3W3hjStwGoNrMCjGwUgEMsD8m/GyuJlZ8y/SiL+FR18piFBp/F U4REVqUke91X+y5T5mD7D1JtZBBQkztknEG44TSwjA3m7lywpkxvhxaNIeOX/K6v VARpEZCtUj6S/Y6V+pk/4xXkvDmEmErvCZM4j19vGnfHOeFWy+25Xay7SFaBn3yd F3ZGxNwHt/RJp3SFReNawWo2uJynX/Hr/V/1aN+8o38BxibDmL+fOI6Q7lCDXRO4 6W8Io1SPm+B0iG2XlGe02SAn0KxTP1rLLwL3lE9QPrgX8nHitHe07hBUH5cCN7xx f4OObdtbGKIHfw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:27 2025 by rpki-client