This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json) Hash identifier: mZf5t5YcwsfGhK3G4u+nAcRHc4eQiDefya5BBuLEhaw= Subject key identifier: E1:DE:EB:21:CC:80:34:3E:C2:76:07:F6:3C:D1:5E:AD:74:72:5E:D2 Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Certificate serial: 019B31C361DA7F88FC1663042F3121B5FD75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft Manifest number: 11FA Signing time: Thu 18 Dec 2025 14:00:46 +0000 Manifest this update: Thu 18 Dec 2025 14:00:46 +0000 Manifest next update: Fri 19 Dec 2025 14:00:46 +0000 Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=) 2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=) 3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: axO1EHIRy8M7jdtQHDxCeoqzHpBKEEgeTMlJiCOM7D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:61:da:7f:88:fc:16:63:04:2f:31:21:b5:fd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f Validity Not Before: Dec 18 14:00:46 2025 GMT Not After : Dec 19 14:00:46 2025 GMT Subject: CN=e1deeb21cc80343ec27607f63cd15ead74725ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:08:5c:1a:09:9b:2e:d2:e3:0a:ef:3c:4a: b0:89:04:fe:3e:42:91:57:e4:8c:19:8f:30:3b:93: a1:2d:87:b9:a6:75:29:ca:97:31:01:db:e5:c1:97: 39:23:f0:7d:fe:d8:3a:27:bf:02:94:10:64:31:e8: 7a:64:72:bb:89:b0:7d:fe:3c:3f:2c:cb:6c:9c:c4: dc:a3:b1:eb:27:fc:b3:8b:21:3e:9b:c2:8d:78:7f: 3e:53:d0:a8:ca:4a:b6:51:ec:67:1a:b2:4c:b3:cc: d5:6f:43:bb:38:03:0d:82:86:02:f9:e2:f8:a1:10: a4:4e:07:32:c0:19:c5:e1:25:6a:57:a7:d4:8a:86: 07:07:2f:69:98:0f:0e:57:3a:d2:03:60:2c:6f:08: b1:d9:70:9c:99:8d:2c:cc:10:0c:4e:e2:22:d8:cc: 23:81:84:f9:44:b5:b8:cf:c6:b0:75:62:99:fa:78: ca:77:55:3d:9b:1e:df:af:37:28:34:50:da:f9:55: 69:5f:97:86:c5:ca:43:cd:69:8e:25:64:39:5e:a7: ad:48:d9:ea:10:0a:4b:95:95:89:29:28:40:bb:38: cf:d0:e6:57:68:3c:6b:91:f7:79:ac:4b:9d:84:45: e4:a5:2d:79:c6:20:bc:45:bf:33:34:15:b3:a4:93: 26:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DE:EB:21:CC:80:34:3E:C2:76:07:F6:3C:D1:5E:AD:74:72:5E:D2 X509v3 Authority Key Identifier: keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:11:1f:f8:fa:31:3d:96:0f:83:5c:d2:21:a8:87:26:eb:8a: 6d:1c:74:d8:92:ac:0b:a4:58:33:4a:4b:90:71:dc:81:2f:5a: 3e:87:52:4f:74:35:d1:97:19:1f:7e:aa:8d:23:d4:91:9e:01: 3f:34:fb:79:7d:26:39:92:a0:85:9b:24:10:b9:e8:8f:bf:eb: ed:08:5d:00:df:ec:82:1f:37:0b:26:d8:83:9d:a4:56:cd:c2: 68:23:89:ac:1a:63:1d:23:91:d8:eb:76:c1:b5:72:d1:10:7e: b1:18:36:ad:54:cc:b2:0d:a8:8a:92:b8:93:1a:11:33:40:ee: f1:2c:3e:86:09:aa:52:42:7c:67:2b:47:27:b0:34:1f:ef:ca: 6a:3a:59:1e:a3:2a:8d:23:fd:f4:6e:73:a3:a3:6c:02:ff:f4: c8:06:dd:bb:0d:94:45:6a:40:b9:ee:b0:b6:0e:51:a2:b6:13: d0:13:8f:06:36:a6:38:c6:d7:33:72:05:1c:0b:7f:64:16:49: d9:55:0d:17:7e:ef:13:80:98:9d:ad:e1:88:f4:17:6c:7c:da: d0:54:d6:37:e7:ce:15:30:0f:e5:41:28:43:a4:56:06:98:f3: ec:dd:4b:38:a0:05:92:e4:4e:65:92:60:f7:dc:28:22:ca:8d: 63:b5:66:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw2Haf4j8FmMELzEhtf11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz NmQxM2YwHhcNMjUxMjE4MTQwMDQ2WhcNMjUxMjE5MTQwMDQ2WjAzMTEwLwYDVQQD EyhlMWRlZWIyMWNjODAzNDNlYzI3NjA3ZjYzY2QxNWVhZDc0NzI1ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCgIXBoJmy7S4wrvPEqwiQT+PkKR V+SMGY8wO5OhLYe5pnUpypcxAdvlwZc5I/B9/tg6J78ClBBkMeh6ZHK7ibB9/jw/ LMtsnMTco7HrJ/yziyE+m8KNeH8+U9Coykq2UexnGrJMs8zVb0O7OAMNgoYC+eL4 oRCkTgcywBnF4SVqV6fUioYHBy9pmA8OVzrSA2Asbwix2XCcmY0szBAMTuIi2Mwj gYT5RLW4z8awdWKZ+njKd1U9mx7frzcoNFDa+VVpX5eGxcpDzWmOJWQ5XqetSNnq EApLlZWJKShAuzjP0OZXaDxrkfd5rEudhEXkpS15xiC8Rb8zNBWzpJMmCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHe6yHMgDQ+wnYH9jzRXq10cl7SMB8GA1UdIwQY MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgREf+Pox PZYPg1zSIaiHJuuKbRx02JKsC6RYM0pLkHHcgS9aPodST3Q10ZcZH36qjSPUkZ4B PzT7eX0mOZKghZskELnoj7/r7QhdAN/sgh83CybYg52kVs3CaCOJrBpjHSOR2Ot2 wbVy0RB+sRg2rVTMsg2oipK4kxoRM0Du8Sw+hgmqUkJ8ZytHJ7A0H+/KajpZHqMq jSP99G5zo6NsAv/0yAbduw2URWpAue6wtg5RorYT0BOPBjamOMbXM3IFHAt/ZBZJ 2VUNF37vE4CYna3hiPQXbHza0FTWN+fOFTAP5UEoQ6RWBpjz7N1LOKAFkuROZZJg 99woIsqNY7VmqA== -----END CERTIFICATE-----Generated at Thu Dec 18 16:16:33 2025 by rpki-client