This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json) Hash identifier: Sakc2TrkE2ij5TUjOymDL+Xy5NnlY9ZCUrqt786OHa0= Subject key identifier: ED:47:73:5A:F8:D8:4A:70:15:C5:01:26:98:EA:F3:77:47:E0:A3:37 Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d Certificate serial: 019AF12CF1083CAFE9D2730A094011D6E1FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft Manifest number: 126C Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: 1qAhE6YBs1CiTUx/IVejttA+M07tor55wYbb2mKW3IM=) 2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f1:08:3c:af:e9:d2:73:0a:09:40:11:d6:e1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=ed47735af8d84a7015c5012698eaf37747e0a337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:99:17:e0:cb:2e:3e:b5:87:4a:49:25:b7:17: 76:56:01:e4:90:56:ec:7a:43:0e:dc:f6:f3:ea:5a: 67:5d:59:bc:eb:ea:b1:fe:02:92:94:ae:78:04:f5: f9:73:d1:8a:17:dd:6d:00:62:8e:fc:30:5f:53:2e: af:d8:43:e6:83:97:99:b4:69:b6:95:1f:08:50:9d: b8:78:81:f0:ea:5b:7e:29:b8:90:86:f5:81:c4:e7: 6c:0b:39:7d:31:13:67:5b:4b:cc:77:e9:ae:ff:52: 22:aa:d4:bc:50:5f:76:c2:11:55:94:f1:0e:ca:39: 36:21:f1:46:de:4a:94:a7:b0:19:f6:cb:1d:8b:66: e3:d8:16:a8:bc:76:14:8f:f3:5c:f5:db:e9:57:62: 2b:ce:33:ed:86:8d:86:29:85:06:1f:83:20:d1:31: a4:5b:f4:41:ac:29:ab:61:45:c4:c9:fd:c3:58:ec: c0:12:8e:44:94:81:10:33:ce:a7:e7:f9:cf:5c:68: 25:4b:26:3f:ff:94:aa:f0:81:e7:61:3e:4f:8e:47: bb:64:37:7a:fa:4b:30:6f:9e:5a:d6:06:84:c1:6a: f3:c3:b9:80:3f:54:fa:4d:3f:df:9c:4c:d5:b0:88: 4a:72:f5:e9:34:fc:42:5f:0f:4c:4c:c7:f8:7f:4e: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:47:73:5A:F8:D8:4A:70:15:C5:01:26:98:EA:F3:77:47:E0:A3:37 X509v3 Authority Key Identifier: keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ab:53:c4:dc:43:bf:ed:92:24:93:fb:2e:df:6b:98:d3:dd: 58:8e:63:04:c5:22:dc:5c:5d:2e:ab:04:36:28:6f:1d:85:b4: 5f:e3:91:d1:92:57:09:54:dd:ff:46:77:dc:17:b9:51:e2:70: 0b:3d:66:d2:13:07:f3:70:fd:60:89:df:fb:70:3e:ce:57:eb: e8:0c:29:9f:ee:7b:53:16:1e:92:0a:43:a9:d8:74:70:2d:1c: 23:f9:9f:00:86:9b:b4:11:52:8c:ee:e9:cc:46:af:62:0e:16: 01:67:9d:17:91:a2:83:1e:6b:fb:72:96:77:c6:7e:42:12:89: 88:2e:4e:d2:89:fc:ea:45:74:a7:d4:d6:34:0e:f4:ce:7c:17: 99:62:76:a3:11:0e:6c:37:bf:c0:a6:f0:56:07:9d:d3:bb:4c: 0f:f1:c3:06:06:ed:41:19:9e:7c:b4:61:ba:96:1a:5a:68:b2: cb:1a:78:ff:7a:37:e7:7e:af:e9:c7:ce:17:4c:f9:95:c5:47: 42:ea:37:ed:59:5e:3e:10:25:c7:36:a8:e6:ee:f8:76:77:07: fe:61:11:67:92:f3:e0:6a:44:01:04:80:b0:91:25:c1:3b:20: 23:43:75:45:c4:ea:be:76:cf:0f:32:c5:a8:1e:71:83:26:a5: 30:94:d7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPEIPK/p0nMKCUAR1uH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj YjRjOGQwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhlZDQ3NzM1YWY4ZDg0YTcwMTVjNTAxMjY5OGVhZjM3NzQ3ZTBhMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85kX4MsuPrWHSkkltxd2VgHkkFbs ekMO3Pbz6lpnXVm86+qx/gKSlK54BPX5c9GKF91tAGKO/DBfUy6v2EPmg5eZtGm2 lR8IUJ24eIHw6lt+KbiQhvWBxOdsCzl9MRNnW0vMd+mu/1IiqtS8UF92whFVlPEO yjk2IfFG3kqUp7AZ9ssdi2bj2BaovHYUj/Nc9dvpV2IrzjPtho2GKYUGH4Mg0TGk W/RBrCmrYUXEyf3DWOzAEo5ElIEQM86n5/nPXGglSyY//5Sq8IHnYT5Pjke7ZDd6 +kswb55a1gaEwWrzw7mAP1T6TT/fnEzVsIhKcvXpNPxCXw9MTMf4f04WGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1Hc1r42EpwFcUBJpjq83dH4KM3MB8GA1UdIwQY MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2 LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6tTxNxD v+2SJJP7Lt9rmNPdWI5jBMUi3FxdLqsENihvHYW0X+OR0ZJXCVTd/0Z33Be5UeJw Cz1m0hMH83D9YInf+3A+zlfr6Awpn+57UxYekgpDqdh0cC0cI/mfAIabtBFSjO7p zEavYg4WAWedF5Gigx5r+3KWd8Z+QhKJiC5O0on86kV0p9TWNA70znwXmWJ2oxEO bDe/wKbwVged07tMD/HDBgbtQRmefLRhupYaWmiyyxp4/3o3536v6cfOF0z5lcVH Quo37VlePhAlxzao5u74dncH/mERZ5Lz4GpEAQSAsJElwTsgI0N1RcTqvnbPDzLF qB5xgyalMJTXQg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:47 2025 by rpki-client