This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json) Hash identifier: iQz33DQ5Aed1XhEN+QN3d74SGbg54QPq4ZBl2YJ/TkE= Subject key identifier: 54:86:F3:AA:FE:22:19:1E:8F:55:72:87:11:64:ED:05:43:9B:85:C1 Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194 Certificate serial: 019AF1D17F928C6804F054EE8F081085AAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:29 +0000 Manifest this update: Sat 06 Dec 2025 04:00:29 +0000 Manifest next update: Sun 07 Dec 2025 04:00:29 +0000 Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=) 2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=) 3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=) 4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=) 5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=) 6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: c+Fmkkv2zaIOAyioeNedUlMJF5JJNcmwei+McfpGW3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:7f:92:8c:68:04:f0:54:ee:8f:08:10:85:aa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194 Validity Not Before: Dec 6 04:00:29 2025 GMT Not After : Dec 7 04:00:29 2025 GMT Subject: CN=5486f3aafe22191e8f5572871164ed05439b85c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:98:eb:60:dd:b2:2c:12:5d:de:cd:b3:02: ca:db:38:a3:f8:eb:c6:f3:cf:c3:4e:6f:da:1c:2f: aa:11:aa:51:3b:73:48:03:9b:f1:de:6f:20:8b:ff: 4f:a8:81:77:1e:f7:d0:71:8b:9e:c0:41:ec:d0:d4: f2:d7:78:2d:a3:ff:ec:c8:10:7a:81:4f:7c:a9:fa: 30:49:61:2c:8d:b1:58:b9:bb:5d:02:f7:5d:76:c4: 48:c7:e7:eb:5a:10:6b:46:7f:53:5d:07:68:97:4a: 45:d1:61:42:19:68:d4:49:8b:70:b8:f2:47:e1:af: 32:88:3e:00:43:4c:79:3c:32:b8:ba:4a:24:76:a8: 3c:11:bd:82:8f:0f:61:87:4d:ba:13:4e:68:55:e2: f9:04:97:b2:ec:a8:c0:85:08:78:74:15:e8:de:00: 4a:f9:8f:b2:5b:b8:76:eb:bd:34:1f:71:84:c1:41: cf:25:2e:3f:d2:10:c6:5f:bc:ef:10:bf:5f:e4:0e: 41:84:eb:7d:a9:76:be:f3:1e:27:26:8e:03:2b:01: 95:48:c7:a5:b1:37:f5:e9:bb:2d:d6:18:d0:88:7d: b1:90:5c:a6:5c:13:24:07:a8:98:e4:0d:45:95:9d: 7d:52:4d:48:00:66:d2:01:b2:94:9d:43:6d:6b:cb: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:86:F3:AA:FE:22:19:1E:8F:55:72:87:11:64:ED:05:43:9B:85:C1 X509v3 Authority Key Identifier: keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8c:df:eb:e6:3f:08:df:ad:3b:72:c4:cf:be:af:42:a8:81: db:78:92:7a:9a:bb:9a:84:cf:19:f5:93:b2:dd:e0:64:3b:02: 44:86:2d:8c:65:63:51:58:24:cc:a7:d3:9d:ba:d7:d6:01:86: 3a:52:f3:f6:7d:c5:1c:d1:51:5a:aa:02:e6:b0:e9:05:ba:d5: 31:90:0b:b4:58:9b:13:61:33:80:78:1e:38:63:45:36:00:28: 85:da:e0:8a:d1:66:ca:4c:05:6b:20:8a:e0:9f:8d:b8:6f:29: 84:ca:07:eb:af:59:b6:5b:c1:81:d5:99:61:de:df:b7:19:51: dc:0f:31:cc:36:44:12:04:db:90:47:c4:a5:55:52:77:3d:40: 46:c1:5c:2a:11:e2:d0:74:a9:1d:35:2e:59:58:77:32:cb:6d: cb:30:31:10:7f:f8:56:32:05:b7:5f:0b:b5:1e:c9:6b:c4:af: 19:04:81:ab:bc:34:43:b7:a8:67:6f:f9:b3:d7:a1:88:a5:7d: 06:45:c7:0f:6b:02:31:7a:dd:01:a6:f7:4d:9d:b6:cb:e3:22: 8e:7e:b4:5d:c1:2e:3e:58:66:53:d4:04:c9:ec:e6:e3:c0:15: e6:20:68:d6:79:0b:17:23:ec:dd:52:e8:a0:fd:6b:8d:71:a4: a3:58:1f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0X+SjGgE8FTujwgQhaqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi MDAxOTQwHhcNMjUxMjA2MDQwMDI5WhcNMjUxMjA3MDQwMDI5WjAzMTEwLwYDVQQD Eyg1NDg2ZjNhYWZlMjIxOTFlOGY1NTcyODcxMTY0ZWQwNTQzOWI4NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv6Y62DdsiwSXd7NswLK2zij+OvG 88/DTm/aHC+qEapRO3NIA5vx3m8gi/9PqIF3HvfQcYuewEHs0NTy13gto//syBB6 gU98qfowSWEsjbFYubtdAvdddsRIx+frWhBrRn9TXQdol0pF0WFCGWjUSYtwuPJH 4a8yiD4AQ0x5PDK4ukokdqg8Eb2Cjw9hh026E05oVeL5BJey7KjAhQh4dBXo3gBK +Y+yW7h26700H3GEwUHPJS4/0hDGX7zvEL9f5A5BhOt9qXa+8x4nJo4DKwGVSMel sTf16bst1hjQiH2xkFymXBMkB6iY5A1FlZ19Uk1IAGbSAbKUnUNta8v0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSG86r+Ihkej1VyhxFk7QVDm4XBMB8GA1UdIwQY MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaozf6+Y/ CN+tO3LEz76vQqiB23iSepq7moTPGfWTst3gZDsCRIYtjGVjUVgkzKfTnbrX1gGG OlLz9n3FHNFRWqoC5rDpBbrVMZALtFibE2EzgHgeOGNFNgAohdrgitFmykwFayCK 4J+NuG8phMoH669ZtlvBgdWZYd7ftxlR3A8xzDZEEgTbkEfEpVVSdz1ARsFcKhHi 0HSpHTUuWVh3MsttyzAxEH/4VjIFt18LtR7Ja8SvGQSBq7w0Q7eoZ2/5s9ehiKV9 BkXHD2sCMXrdAab3TZ22y+Mijn60XcEuPlhmU9QEyezm48AV5iBo1nkLFyPs3VLo oP1rjXGko1gfmA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:40 2025 by rpki-client