This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json) Hash identifier: XVVYiYO/wih4Kl9zi1+UAV7fMXgOUTjoeMD3Md7qVXA= Subject key identifier: FF:5B:5F:0D:54:E3:BD:C1:08:06:CB:68:B8:9B:BB:33:88:2F:0E:E5 Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea Certificate serial: 019AFBB19973A973D6E2C72697BDC17993D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft Manifest number: 1776 Signing time: Mon 08 Dec 2025 02:01:51 +0000 Manifest this update: Mon 08 Dec 2025 02:01:51 +0000 Manifest next update: Tue 09 Dec 2025 02:01:51 +0000 Files and hashes: 1: BLPtpElZC_p2IWrsn0eYA39TSUA.roa (hash: q8YlKe7zrrj4ZoEyny/W1gxonK4RscrAFG9IOAtgKRE=) 2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: UqkA0UTIBoaWHWlvfIMXINyErwDub67juvUeKetlIf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:99:73:a9:73:d6:e2:c7:26:97:bd:c1:79:93:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea Validity Not Before: Dec 8 02:01:51 2025 GMT Not After : Dec 9 02:01:51 2025 GMT Subject: CN=ff5b5f0d54e3bdc10806cb68b89bbb33882f0ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:f5:86:2c:ff:0e:2c:8c:58:da:cc:c6:6f: a1:85:4c:5f:d7:c0:09:b7:0a:85:38:dd:d7:bb:de: b3:7d:d2:36:ea:2a:65:04:6f:27:36:cc:b5:a7:fd: 74:c1:1a:d4:90:a2:b0:6f:94:1b:8c:12:d3:65:ae: 95:3a:2f:99:56:30:45:e0:36:ba:b6:a0:23:7d:b7: 02:9b:64:1f:88:fa:fb:7f:07:8d:e8:ce:47:ee:76: 1d:90:af:55:f3:0f:98:f2:d0:89:63:da:a4:8f:6a: 6c:8f:32:39:15:2b:95:99:88:ff:42:e2:f3:20:f7: a2:0f:07:69:b3:3c:80:38:f2:cc:f2:09:5f:41:b9: 4b:c7:33:c3:78:aa:77:6d:c6:38:58:bb:50:ab:f1: f8:da:3d:e9:04:ac:b5:76:c7:5e:be:d2:1d:87:ef: d7:87:0c:78:93:1d:01:29:5f:cb:6f:fa:20:c1:09: 64:61:90:45:13:e5:3c:b2:7f:28:5d:1e:53:14:ae: 8c:a7:5b:f5:35:d7:ea:24:e7:18:bd:8e:af:2c:aa: ff:73:a8:ab:b3:33:89:fa:dd:8f:3e:d9:71:55:bc: 91:47:60:da:4f:11:c6:72:fa:56:43:4f:b8:c4:55: 30:5f:22:09:fe:58:41:39:28:b1:4f:b3:c2:b8:10: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5B:5F:0D:54:E3:BD:C1:08:06:CB:68:B8:9B:BB:33:88:2F:0E:E5 X509v3 Authority Key Identifier: keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:fc:5b:46:b1:ff:0f:d7:28:24:80:45:81:b6:7a:79:0d:fd: 17:31:ef:64:bd:8b:1e:15:bb:16:ff:24:0e:6c:98:48:25:e5: 75:16:7d:4b:87:7b:5c:4f:ea:cf:0a:11:68:4c:c4:e0:c8:8c: 9a:b7:ac:5a:cd:e1:8b:76:20:11:e6:0b:e7:24:7c:ed:1d:3a: 37:5f:07:de:b7:7f:0d:53:ee:ca:bf:74:ed:a2:ad:a3:a7:d8: 63:4a:78:9d:2c:e7:d5:82:c0:d0:da:18:cd:25:7f:1c:92:a8: d6:c5:a6:81:65:de:28:e1:33:79:90:bd:2f:34:53:6f:63:95: 79:f2:fc:87:4e:56:7d:40:cf:dd:3f:58:8b:1f:fd:d4:36:8b: 4d:47:92:92:b2:06:88:7d:8a:45:25:da:01:8c:6f:b7:40:9d: 6f:a4:ab:c6:90:d1:c2:c7:ed:86:d7:ff:6f:04:2d:f1:10:cc: 13:56:17:2f:23:8e:c3:f5:e0:c7:11:5e:a0:66:a0:82:19:01: 48:91:c4:82:f9:ad:90:0f:04:46:a1:59:d0:9d:54:b7:1b:da: 58:c4:6f:a4:e1:3a:78:1d:0b:45:d0:ad:d1:79:8f:e6:1f:a5: 8d:21:c5:ea:37:48:2c:e6:5c:05:5c:b5:5b:81:08:ee:4a:14: 97:b6:26:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sZlzqXPW4scml73BeZPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzc3YTA4YTQ1NjQ1NDhiNTE4ZWMzODY0YjM0MWUxZmE1 MjI1ZWEwHhcNMjUxMjA4MDIwMTUxWhcNMjUxMjA5MDIwMTUxWjAzMTEwLwYDVQQD EyhmZjViNWYwZDU0ZTNiZGMxMDgwNmNiNjhiODliYmIzMzg4MmYwZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQv1hiz/DiyMWNrMxm+hhUxf18AJ twqFON3Xu96zfdI26iplBG8nNsy1p/10wRrUkKKwb5QbjBLTZa6VOi+ZVjBF4Da6 tqAjfbcCm2QfiPr7fweN6M5H7nYdkK9V8w+Y8tCJY9qkj2psjzI5FSuVmYj/QuLz IPeiDwdpszyAOPLM8glfQblLxzPDeKp3bcY4WLtQq/H42j3pBKy1dsdevtIdh+/X hwx4kx0BKV/Lb/ogwQlkYZBFE+U8sn8oXR5TFK6Mp1v1NdfqJOcYvY6vLKr/c6ir szOJ+t2PPtlxVbyRR2DaTxHGcvpWQ0+4xFUwXyIJ/lhBOSixT7PCuBBqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9bXw1U473BCAbLaLibuzOILw7lMB8GA1UdIwQY MBaAFMx3egikVkVItRjsOGSzQeH6UiXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMt NzY3YjBjYzgwYzA4LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMtNzY3YjBjYzgwYzA4 LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePxbRrH/ D9coJIBFgbZ6eQ39FzHvZL2LHhW7Fv8kDmyYSCXldRZ9S4d7XE/qzwoRaEzE4MiM mresWs3hi3YgEeYL5yR87R06N18H3rd/DVPuyr907aKto6fYY0p4nSzn1YLA0NoY zSV/HJKo1sWmgWXeKOEzeZC9LzRTb2OVefL8h05WfUDP3T9Yix/91DaLTUeSkrIG iH2KRSXaAYxvt0Cdb6SrxpDRwsfthtf/bwQt8RDME1YXLyOOw/XgxxFeoGagghkB SJHEgvmtkA8ERqFZ0J1UtxvaWMRvpOE6eB0LRdCt0XmP5h+ljSHF6jdILOZcBVy1 W4EI7koUl7Ymzg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:38 2025 by rpki-client