This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json) Hash identifier: 17AzaexODivie9+CmFa+A2gys61zykWiuPVzzNp7nMc= Subject key identifier: 33:F7:01:EC:E3:B3:F9:39:75:91:1D:75:85:0D:61:76:7E:46:AA:92 Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Certificate serial: 019AF27659433B59AF8FB59C9D16CE9FDC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft Manifest number: 146F Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=) 2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: ZFB0nqk7qIKjYxrLFhC+Q7kghOzKuH4eYmtpd7+t7oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:59:43:3b:59:af:8f:b5:9c:9d:16:ce:9f:dc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=33f701ece3b3f93975911d75850d61767e46aa92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1c:5e:c5:cf:77:af:88:f0:cf:09:8d:b2:ba: 34:0e:d7:22:0c:50:04:fd:29:97:db:02:57:55:dd: 8d:15:86:da:8c:92:4a:6a:b5:31:22:79:6b:80:52: cd:1c:35:7e:1e:62:76:8b:46:5e:42:3c:70:b8:6c: 8b:8e:ce:82:d2:19:14:f1:8c:25:d3:59:78:11:a9: b8:d5:83:66:7f:d7:d6:16:7c:a4:59:e2:77:58:74: 2e:a6:3f:f2:e6:10:b9:82:d6:83:de:f2:33:59:73: 1f:86:a9:42:80:30:5e:88:d8:33:15:a3:b9:e8:04: 74:96:ae:12:58:86:0b:2b:10:c2:8b:3d:1e:c1:df: 43:60:b4:52:13:44:f5:96:42:30:c0:b6:f4:d3:d1: 6b:5c:19:3c:b7:69:f9:24:35:b2:85:c7:8d:27:dc: fa:51:b4:3f:be:12:06:30:6b:1e:43:19:d7:7b:2c: c0:25:65:3d:f3:dd:4b:f2:4b:86:fe:2b:67:55:fd: ad:3c:26:7b:d4:8f:16:4b:bb:f5:51:66:e3:f9:1d: 8c:21:7b:cf:99:f3:ce:76:bd:b0:96:46:88:5b:23: 4c:c0:92:05:69:2c:1b:55:0b:6f:d1:e3:d4:d0:e7: 81:29:41:4f:eb:41:12:23:20:45:3a:12:63:2e:2d: e6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:01:EC:E3:B3:F9:39:75:91:1D:75:85:0D:61:76:7E:46:AA:92 X509v3 Authority Key Identifier: keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1b:48:5a:d2:37:9b:16:0e:74:37:d8:90:75:ad:3d:bc:55: 59:d5:06:8c:74:2c:80:65:39:57:f1:42:9b:0a:7f:b1:01:95: 59:8f:e6:5b:39:ae:c6:b2:d9:5a:22:36:85:de:d4:31:ab:78: 73:6c:a1:d7:04:49:78:79:1c:6e:0d:a1:3f:28:80:c2:fa:dd: b1:2a:4d:93:90:6a:26:02:86:8f:bc:02:9a:cc:2c:ce:59:6d: 74:db:8e:7f:01:90:3f:e8:c3:d7:45:9b:f6:f0:2a:a9:5d:bb: df:f2:c5:38:86:5e:ce:bd:89:24:f7:2f:ff:e9:52:fb:e0:b4: 63:73:c7:57:02:9f:fb:7e:8d:c0:20:a7:c4:35:59:a5:0d:e7: 9c:bc:18:e1:f7:29:b5:67:e8:95:cf:89:0b:8b:1f:43:5c:18: 09:16:be:c3:b3:62:6b:69:76:81:76:6d:94:3c:ee:f1:3b:d4: b7:88:15:2c:fc:af:9f:56:e1:5c:71:a1:68:75:e1:df:18:cc: 82:06:44:ae:71:d2:7f:79:2e:2f:6e:99:55:8d:f9:9e:82:7c: a4:22:70:a0:74:29:2b:ab:2f:e5:4c:ca:bc:98:7a:10:8a:c5: 56:97:36:db:f1:a7:32:9a:f5:8f:9c:57:dc:4b:98:97:ed:c8: 07:4a:a8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydllDO1mvj7WcnRbOn9yDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk OGIxOTEwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EygzM2Y3MDFlY2UzYjNmOTM5NzU5MTFkNzU4NTBkNjE3NjdlNDZhYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rxexc93r4jwzwmNsro0DtciDFAE /SmX2wJXVd2NFYbajJJKarUxInlrgFLNHDV+HmJ2i0ZeQjxwuGyLjs6C0hkU8Ywl 01l4Eam41YNmf9fWFnykWeJ3WHQupj/y5hC5gtaD3vIzWXMfhqlCgDBeiNgzFaO5 6AR0lq4SWIYLKxDCiz0ewd9DYLRSE0T1lkIwwLb009FrXBk8t2n5JDWyhceNJ9z6 UbQ/vhIGMGseQxnXeyzAJWU9891L8kuG/itnVf2tPCZ71I8WS7v1UWbj+R2MIXvP mfPOdr2wlkaIWyNMwJIFaSwbVQtv0ePU0OeBKUFP60ESIyBFOhJjLi3mEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDP3Aezjs/k5dZEddYUNYXZ+RqqSMB8GA1UdIwQY MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRtIWtI3 mxYOdDfYkHWtPbxVWdUGjHQsgGU5V/FCmwp/sQGVWY/mWzmuxrLZWiI2hd7UMat4 c2yh1wRJeHkcbg2hPyiAwvrdsSpNk5BqJgKGj7wCmswszlltdNuOfwGQP+jD10Wb 9vAqqV273/LFOIZezr2JJPcv/+lS++C0Y3PHVwKf+36NwCCnxDVZpQ3nnLwY4fcp tWfolc+JC4sfQ1wYCRa+w7Nia2l2gXZtlDzu8TvUt4gVLPyvn1bhXHGhaHXh3xjM ggZErnHSf3kuL26ZVY35noJ8pCJwoHQpK6sv5UzKvJh6EIrFVpc22/GnMpr1j5xX 3EuYl+3IB0qo6w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:27 2025 by rpki-client