This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft File: zf9bPNry6tG8MwlBG_lJLNmHr7o.mft (raw, json) Hash identifier: +0LGOemz1aPe5jfazscHU4wYiFR4Rm3rwPCXqu6Bb2s= Subject key identifier: B4:79:76:C3:E4:1B:24:3D:E3:70:92:A4:8A:0C:A7:DC:DF:DD:23:44 Authority key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA Certificate issuer: /CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba Certificate serial: 019B32318E91862EA18F6D3571D78C250BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft Manifest number: 05DD Signing time: Thu 18 Dec 2025 16:01:07 +0000 Manifest this update: Thu 18 Dec 2025 16:01:07 +0000 Manifest next update: Fri 19 Dec 2025 16:01:07 +0000 Files and hashes: 1: k3TRYEDrQBrO6eEJRbpRNKXsKDY.roa (hash: 4LCjfvPAnVknZ+aHhkSXzNTjWeSMT085uGaEj2C566Q=) 2: zf9bPNry6tG8MwlBG_lJLNmHr7o.crl (hash: vo2NJV0ufETGUJ1VTjE/jvWPmDQLK1GE4BZ/CJGlaq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:8e:91:86:2e:a1:8f:6d:35:71:d7:8c:25:0b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba Validity Not Before: Dec 18 16:01:07 2025 GMT Not After : Dec 19 16:01:07 2025 GMT Subject: CN=b47976c3e41b243de37092a48a0ca7dcdfdd2344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:d0:0b:0b:70:e6:ab:ee:0a:ec:46:94:00: 72:69:8c:21:84:11:a9:e0:fd:46:46:83:1d:b8:90: 77:b8:71:3b:ed:56:9f:2e:28:45:b4:59:87:4c:bc: 02:41:b0:e6:d1:2d:79:04:4e:0e:6a:ef:1a:11:51: 73:ca:da:17:0c:50:83:63:5d:d5:d3:1d:4d:da:b7: 04:ef:00:ba:69:d9:36:32:bb:97:4d:7c:c2:44:1e: 27:92:88:f3:eb:0b:fe:85:a3:09:41:0b:8f:83:df: b2:de:a8:dc:d9:50:ff:14:4e:f1:40:78:11:e6:8c: a4:91:18:9c:f8:dd:07:02:b9:14:4b:0f:f1:29:c8: fd:a6:01:9e:7e:54:c4:0f:e1:9f:83:8b:64:7c:41: 39:0f:07:aa:94:48:01:e6:88:53:d4:69:51:ae:d8: bf:2a:46:bf:49:bc:5b:eb:c5:17:71:1d:25:c8:e6: a6:0b:2c:42:ae:ae:cb:f5:1e:7a:ed:1b:eb:c4:5e: 10:75:7a:52:e6:db:ac:5d:8e:73:19:6c:8f:18:80: e8:7e:6a:74:98:b2:f3:82:6c:73:5b:44:c2:af:a9: 8a:30:e2:2b:a6:8a:90:87:b5:31:62:1b:1f:e5:24: bb:c4:37:bb:e3:c6:88:dd:d1:2b:de:dc:fa:db:90: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:79:76:C3:E4:1B:24:3D:E3:70:92:A4:8A:0C:A7:DC:DF:DD:23:44 X509v3 Authority Key Identifier: keyid:CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:5a:f9:24:bb:61:18:9e:ba:3e:ba:f0:cc:37:87:a0:86:d3: eb:5c:52:f3:7f:11:ec:31:6e:36:05:3f:e0:70:74:93:fe:40: 88:19:83:5b:f6:5c:0e:6c:fb:3c:8e:b8:22:97:1d:a1:51:9e: 6d:e3:8a:7f:6f:3f:df:b2:5f:14:90:a4:c8:0f:fa:cc:72:95: 88:5b:5f:05:26:63:de:20:ca:dc:b5:f5:42:70:ad:d7:08:23: 34:89:e1:3c:ca:8a:52:e6:d4:a9:8f:b7:96:fe:eb:37:e6:df: 54:56:8f:77:1b:77:80:06:fe:11:46:26:36:c8:0c:5f:6b:87: d6:34:a3:ae:84:84:0d:f1:9e:74:17:ff:37:6b:b1:81:b3:c0: b3:d0:79:ae:ec:2a:4e:f3:fc:1d:81:40:9a:1e:b3:b9:91:12: bb:4f:15:99:eb:1a:21:74:64:b0:06:da:cf:d1:b3:fe:f2:5d: ff:d4:88:2d:fa:b0:62:e3:73:95:cc:8e:87:27:17:a6:eb:98: 9c:24:01:64:06:41:51:b6:3e:f1:27:7d:4f:0b:8a:f6:6b:0f: 5c:fb:24:3e:e3:e8:24:b7:22:fd:82:bb:2f:92:96:e0:fa:1a: fd:4d:46:d4:cf:f4:57:23:e6:2d:2c:c7:8b:29:77:e3:b5:a6: ec:f4:68:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMY6Rhi6hj201cdeMJQu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZmY1YjNjZGFmMmVhZDFiYzMzMDk0MTFiZjk0OTJjZDk4 N2FmYmEwHhcNMjUxMjE4MTYwMTA3WhcNMjUxMjE5MTYwMTA3WjAzMTEwLwYDVQQD EyhiNDc5NzZjM2U0MWIyNDNkZTM3MDkyYTQ4YTBjYTdkY2RmZGQyMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXHQCwtw5qvuCuxGlAByaYwhhBGp 4P1GRoMduJB3uHE77VafLihFtFmHTLwCQbDm0S15BE4Oau8aEVFzytoXDFCDY13V 0x1N2rcE7wC6adk2MruXTXzCRB4nkojz6wv+haMJQQuPg9+y3qjc2VD/FE7xQHgR 5oykkRic+N0HArkUSw/xKcj9pgGeflTED+Gfg4tkfEE5DweqlEgB5ohT1GlRrti/ Kka/Sbxb68UXcR0lyOamCyxCrq7L9R567RvrxF4QdXpS5tusXY5zGWyPGIDofmp0 mLLzgmxzW0TCr6mKMOIrpoqQh7UxYhsf5SS7xDe748aI3dEr3tz625DtzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR5dsPkGyQ943CSpIoMp9zf3SNEMB8GA1UdIwQY MBaAFM3/Wzza8urRvDMJQRv5SSzZh6+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEt YTg3ODFhZGQyNDIzLzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9iNzZkMzQtNWYwNy00MmQ4LWExMzEtYTg3ODFhZGQyNDIz LzEvemY5YlBOcnk2dEc4TXdsQkdfbEpMTm1IcjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1r5JLth GJ66PrrwzDeHoIbT61xS838R7DFuNgU/4HB0k/5AiBmDW/ZcDmz7PI64IpcdoVGe beOKf28/37JfFJCkyA/6zHKViFtfBSZj3iDK3LX1QnCt1wgjNInhPMqKUubUqY+3 lv7rN+bfVFaPdxt3gAb+EUYmNsgMX2uH1jSjroSEDfGedBf/N2uxgbPAs9B5ruwq TvP8HYFAmh6zuZESu08VmesaIXRksAbaz9Gz/vJd/9SILfqwYuNzlcyOhycXpuuY nCQBZAZBUbY+8Sd9TwuK9msPXPskPuPoJLci/YK7L5KW4Poa/U1G1M/0VyPmLSzH iyl347Wm7PRoQA== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:32 2025 by rpki-client