This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json) Hash identifier: NwR2RGO1pGDRGsOa8inGN1NN2uow+cvjOEwsS5k/mhg= Subject key identifier: DC:F5:EF:85:79:C7:5C:28:51:F8:37:55:29:51:22:CF:95:35:BF:5A Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Certificate serial: 019AF3524271614D20136ED1A74CFB38BA4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=) 2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=) 3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=) 4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: WPSNsXMmwf4oOxcH1OoYsQDfJcAiAa9J7TX1Nt6ueu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:42:71:61:4d:20:13:6e:d1:a7:4c:fb:38:ba:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=dcf5ef8579c75c2851f83755295122cf9535bf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:c8:2f:eb:8c:e7:0e:30:da:72:4e:e2:7f: 1b:2d:1e:e7:ba:f9:f7:08:09:30:32:11:74:bf:9a: f2:70:ab:7c:ff:b7:8a:88:6b:db:3d:eb:26:22:25: cc:2a:a1:7a:a5:e5:a1:d8:7f:b4:4a:0d:3e:4c:c0: 56:51:16:92:04:29:52:27:62:2b:a1:6b:53:0a:b9: e4:7b:c1:c3:f2:4f:a5:b4:45:11:6b:c1:f0:bd:ef: d9:5c:af:78:37:62:a2:bf:9e:d9:2b:d9:4f:97:34: db:27:10:b7:40:00:0c:df:d3:b7:89:9f:5e:53:97: 07:35:d0:57:ba:90:a4:03:aa:4d:3f:13:96:f7:06: 40:71:c5:30:00:62:6d:66:a2:1b:9e:5e:08:bb:0e: 0c:75:2a:2b:fe:ec:2d:6f:a8:37:13:03:44:94:d0: e4:85:f6:14:24:ad:bb:cd:57:6f:8c:d7:f6:2e:bd: 45:f6:97:b3:88:28:4f:c0:0f:ea:b9:ab:7a:6f:ec: 3c:ed:34:5f:bb:3b:f7:4b:6d:9b:ec:4a:9d:70:73: 4a:dd:0c:f6:5e:07:48:ba:65:36:86:30:f5:0e:02: ca:63:37:c4:07:e7:67:69:a1:83:a3:c3:e4:f8:36: 1b:ba:11:96:a6:54:f8:2d:bb:32:7f:4c:78:c8:d2: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F5:EF:85:79:C7:5C:28:51:F8:37:55:29:51:22:CF:95:35:BF:5A X509v3 Authority Key Identifier: keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:23:a8:da:23:fc:9b:a0:3a:af:9c:04:3b:d3:57:57:3d:2c: af:9a:44:98:d3:ed:d3:ac:21:90:a6:73:66:a8:0a:a9:a9:57: b3:64:13:ae:93:4b:a7:d6:e7:a5:cb:13:e7:c1:9d:fc:58:99: 56:bc:3f:67:f4:c7:cb:42:98:da:bd:61:f1:bf:f4:e1:91:46: 65:13:f7:83:a3:a4:b7:54:b3:c3:5c:08:1f:6a:27:fe:8c:77: e2:82:77:c4:ff:71:e6:27:ab:06:ea:f6:8c:34:d6:96:39:8f: 93:25:13:b3:5e:cd:00:c2:a4:72:4e:7a:5e:20:3b:82:0a:a2: c1:5f:eb:1a:dc:59:93:9c:c4:80:cb:92:62:3b:6f:0e:1f:68: 0e:d2:0c:e0:ff:76:ad:03:7a:7c:49:bb:94:ed:c7:b1:a7:6f: 0e:85:33:85:e8:07:e2:aa:92:fe:ae:94:b7:ee:d4:e0:7e:49: aa:1a:9e:7c:78:df:d5:48:c1:93:dd:f8:74:06:1b:22:89:56: 4c:e0:88:6b:1c:fc:d1:46:c2:a6:3c:3d:fa:a5:52:dc:ab:31: fe:59:93:d1:8f:ca:92:dc:ca:c8:da:a8:5f:56:7a:a7:84:85: 75:3a:43:c0:59:e7:c2:02:ee:7e:62:ce:76:77:5f:3c:bd:2f: dd:67:c2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkJxYU0gE27Rp0z7OLpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4 ZGQ1NzQwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhkY2Y1ZWY4NTc5Yzc1YzI4NTFmODM3NTUyOTUxMjJjZjk1MzViZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylzIL+uM5w4w2nJO4n8bLR7nuvn3 CAkwMhF0v5rycKt8/7eKiGvbPesmIiXMKqF6peWh2H+0Sg0+TMBWURaSBClSJ2Ir oWtTCrnke8HD8k+ltEURa8Hwve/ZXK94N2Kiv57ZK9lPlzTbJxC3QAAM39O3iZ9e U5cHNdBXupCkA6pNPxOW9wZAccUwAGJtZqIbnl4Iuw4MdSor/uwtb6g3EwNElNDk hfYUJK27zVdvjNf2Lr1F9peziChPwA/quat6b+w87TRfuzv3S22b7EqdcHNK3Qz2 XgdIumU2hjD1DgLKYzfEB+dnaaGDo8Pk+DYbuhGWplT4Lbsyf0x4yNIjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNz174V5x1woUfg3VSlRIs+VNb9aMB8GA1UdIwQY MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSOo2iP8 m6A6r5wEO9NXVz0sr5pEmNPt06whkKZzZqgKqalXs2QTrpNLp9bnpcsT58Gd/FiZ Vrw/Z/THy0KY2r1h8b/04ZFGZRP3g6Okt1Szw1wIH2on/ox34oJ3xP9x5ierBur2 jDTWljmPkyUTs17NAMKkck56XiA7ggqiwV/rGtxZk5zEgMuSYjtvDh9oDtIM4P92 rQN6fEm7lO3HsadvDoUzhegH4qqS/q6Ut+7U4H5JqhqefHjf1UjBk934dAYbIolW TOCIaxz80UbCpjw9+qVS3Ksx/lmT0Y/KktzKyNqoX1Z6p4SFdTpDwFnnwgLufmLO dndfPL0v3WfClw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:33 2025 by rpki-client