This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json) Hash identifier: X0pxjFPz+ezyLkPafuCVlZjPWigWXTaZXMwDGqgNqyE= Subject key identifier: B3:6C:E2:A1:45:2F:75:6C:43:5E:D0:CC:F2:70:FB:3A:85:E5:55:12 Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Certificate serial: 019B2C9D5FD5F93684680BCA8353C62FE2BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 14:01:09 +0000 Manifest this update: Wed 17 Dec 2025 14:01:09 +0000 Manifest next update: Thu 18 Dec 2025 14:01:09 +0000 Files and hashes: 1: Z2S57soliueMTVEyGovf75orajw.crl (hash: /6far1IhZctb8SbK2enWqCOSbUq/sWgI4TQyUj20Ufc=) 2: uWdsuK3hAe7Dl7tiOo0NecGrcUU.roa (hash: qdhSzKYW9JqHooGrxdO5XlVsGBK8AcDq8ZkhxAah40A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:5f:d5:f9:36:84:68:0b:ca:83:53:c6:2f:e2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Validity Not Before: Dec 17 14:01:09 2025 GMT Not After : Dec 18 14:01:09 2025 GMT Subject: CN=b36ce2a1452f756c435ed0ccf270fb3a85e55512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:ad:12:8c:1f:fd:3d:76:e4:25:8e:bc:c5: e0:d1:95:a5:8d:ef:bd:97:f4:64:6b:46:46:f7:54: 65:62:e0:3a:6f:9e:f0:b8:b0:6f:88:be:b1:b6:06: d8:a4:cf:8e:96:bb:3b:6f:c5:6d:cd:9d:0b:71:ef: e3:5e:79:15:16:7c:a3:99:16:87:d8:38:41:58:dc: 7e:ea:56:55:2f:dc:5c:98:d0:90:1a:36:24:71:26: 66:0c:c5:40:d5:ac:6f:d2:26:11:6c:64:98:e2:dd: 76:25:bd:1f:9c:15:fc:60:a3:f6:f6:5f:b6:41:8c: 5d:72:62:5d:9d:2c:25:25:6c:a3:7a:36:c8:0f:a9: a7:8b:68:a7:44:d9:41:17:ed:02:d5:61:e6:9c:de: 20:0c:45:ba:66:1b:4c:66:74:d3:29:16:a0:07:19: 75:c9:0a:ca:5e:67:7a:9c:dd:97:e8:c8:b6:c4:c5: ba:d3:e5:70:f0:32:a0:a2:91:e4:b8:58:9d:fe:4d: fe:0a:bf:96:45:c7:4b:86:fc:65:b5:87:5c:2c:61: ae:97:19:de:17:04:a5:72:79:86:26:a2:53:55:94: c9:52:7d:3d:5e:e4:25:47:67:95:1a:dd:66:52:a9: 2e:c6:20:8a:b6:bb:a2:75:26:0a:43:2e:63:25:3a: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:E2:A1:45:2F:75:6C:43:5E:D0:CC:F2:70:FB:3A:85:E5:55:12 X509v3 Authority Key Identifier: keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cc:6a:fe:29:f0:ec:53:27:8f:e4:b8:bc:09:bd:c1:5c:85: 96:ed:82:71:cb:91:e2:cc:c2:ae:bb:bd:bb:84:57:1a:13:2e: f4:24:ee:d9:16:e9:27:32:3a:f0:1f:d3:50:25:cf:06:9f:5a: e1:b1:28:fb:4c:87:03:c6:ad:a3:c3:07:f9:d2:a3:97:f6:e0: a9:f8:3e:c2:1c:0d:4d:a5:0f:a9:40:d3:27:b1:57:13:e5:9b: 33:f2:c5:60:71:87:02:9f:2c:d9:eb:68:29:d9:54:9d:43:c4: 4b:45:6e:ea:55:ae:6a:59:ca:a4:18:4b:42:fb:c1:dd:41:61: cb:f8:31:01:b3:92:c8:f7:88:29:dc:b9:05:75:2a:30:2b:23: a8:74:d9:54:52:63:4b:a2:98:c0:b1:89:cd:23:6a:a5:b1:f9: 5b:b9:4b:0f:60:25:64:74:8d:57:4e:1b:e9:6c:1a:42:2f:19: a8:28:70:36:17:5a:f9:5a:d7:06:43:ae:2d:bf:b7:0e:3f:89: 8d:f9:52:89:3e:f7:ff:7f:b8:99:09:aa:d3:5e:96:40:d9:5e: 02:dc:26:cd:91:c2:31:44:83:77:1c:4b:d7:37:ca:ae:43:6c: 58:d0:eb:a5:07:9e:b8:39:40:e0:4e:40:0d:c5:ee:83:15:b0: d3:af:08:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnV/V+TaEaAvKg1PGL+K8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy YjZhM2MwHhcNMjUxMjE3MTQwMTA5WhcNMjUxMjE4MTQwMTA5WjAzMTEwLwYDVQQD EyhiMzZjZTJhMTQ1MmY3NTZjNDM1ZWQwY2NmMjcwZmIzYTg1ZTU1NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cytEowf/T125CWOvMXg0ZWlje+9 l/Rka0ZG91RlYuA6b57wuLBviL6xtgbYpM+Olrs7b8VtzZ0Lce/jXnkVFnyjmRaH 2DhBWNx+6lZVL9xcmNCQGjYkcSZmDMVA1axv0iYRbGSY4t12Jb0fnBX8YKP29l+2 QYxdcmJdnSwlJWyjejbID6mni2inRNlBF+0C1WHmnN4gDEW6ZhtMZnTTKRagBxl1 yQrKXmd6nN2X6Mi2xMW60+Vw8DKgopHkuFid/k3+Cr+WRcdLhvxltYdcLGGulxne FwSlcnmGJqJTVZTJUn09XuQlR2eVGt1mUqkuxiCKtruidSYKQy5jJTri4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNs4qFFL3VsQ17QzPJw+zqF5VUSMB8GA1UdIwQY MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt NDI1NmE0NmFmZWVjLzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesxq/inw 7FMnj+S4vAm9wVyFlu2CccuR4szCrru9u4RXGhMu9CTu2RbpJzI68B/TUCXPBp9a 4bEo+0yHA8ato8MH+dKjl/bgqfg+whwNTaUPqUDTJ7FXE+WbM/LFYHGHAp8s2eto KdlUnUPES0Vu6lWualnKpBhLQvvB3UFhy/gxAbOSyPeIKdy5BXUqMCsjqHTZVFJj S6KYwLGJzSNqpbH5W7lLD2AlZHSNV04b6WwaQi8ZqChwNhda+VrXBkOuLb+3Dj+J jflSiT73/3+4mQmq016WQNleAtwmzZHCMUSDdxxL1zfKrkNsWNDrpQeeuDlA4E5A DcXugxWw068IMA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:23 2025 by rpki-client