This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json) Hash identifier: ot9JqvQLsMF4jKhoqOVRZTo8luGGjdd9UlgmglfLYzE= Subject key identifier: 9B:59:1E:FA:07:E6:BC:B9:8D:97:4C:18:F2:4D:AD:5A:25:41:D4:AA Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Certificate serial: 019B2BC1936D3D4B1CD6F943E77F2EB512DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft Manifest number: 07B7 Signing time: Wed 17 Dec 2025 10:01:04 +0000 Manifest this update: Wed 17 Dec 2025 10:01:04 +0000 Manifest next update: Thu 18 Dec 2025 10:01:04 +0000 Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=) 2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=) 3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: Ffccqh2kxh3wZqMV/SknBhEeR5ZjGdU2YiQ2j057LYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:93:6d:3d:4b:1c:d6:f9:43:e7:7f:2e:b5:12:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3 Validity Not Before: Dec 17 10:01:04 2025 GMT Not After : Dec 18 10:01:04 2025 GMT Subject: CN=9b591efa07e6bcb98d974c18f24dad5a2541d4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:28:0e:c2:e1:9c:09:45:67:6d:9b:32:09: 58:1c:21:fa:a4:ae:d3:52:41:fc:b9:ff:87:eb:08: e8:68:6f:f5:11:77:e4:c1:12:ff:52:dd:63:61:95: 26:2b:06:a0:2d:a9:3d:b1:4e:80:d4:25:22:66:01: d6:2f:4d:9c:27:ca:41:e0:88:d8:97:9c:77:6e:73: 99:c3:48:26:33:41:d7:fc:6c:73:3d:c8:bf:7d:19: 9e:7f:8d:4f:6a:d7:d4:5f:6e:ce:6b:35:98:39:e3: d1:50:7c:b3:55:35:ee:d5:51:13:94:21:c4:7c:bb: a0:92:0b:95:47:94:78:72:cb:f0:72:43:6e:c2:52: 85:a7:a0:22:28:5b:eb:b0:e1:ef:fd:38:a1:1e:a9: 9a:67:bf:d0:9b:9a:76:1f:6d:b8:33:75:18:f4:f0: 55:f0:98:c4:1e:a7:d1:4d:f1:e9:1b:bc:04:7c:7e: 6b:3f:8b:3b:86:a2:f7:d0:86:42:8d:b2:2b:ed:11: 8a:17:b8:fa:20:11:36:3f:7b:32:c6:10:38:c3:a8: a2:1f:64:e0:58:2e:64:70:d0:14:b8:46:a3:32:56: ab:4c:95:db:92:3b:94:10:78:81:a7:4b:f0:71:0a: 98:6b:d1:1d:66:af:57:59:e3:2f:08:ee:c2:e5:97: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:1E:FA:07:E6:BC:B9:8D:97:4C:18:F2:4D:AD:5A:25:41:D4:AA X509v3 Authority Key Identifier: keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cc:a0:5e:ed:e4:71:ad:b9:ea:10:a4:1c:9c:7a:ed:a3:2c: bd:e4:1a:d9:48:b7:3c:30:13:12:40:2b:32:d7:44:94:ad:49: 27:3b:5c:de:ce:e8:5a:e3:37:c9:e1:fb:c8:4d:e1:6d:ea:99: 4a:a4:96:28:39:ac:78:6c:09:92:b8:4b:63:e5:09:03:c7:ac: 42:51:55:39:15:5c:19:ba:78:b1:ae:d3:f1:d7:96:d1:ac:70: 8a:6a:c8:5c:1f:74:e7:ea:26:71:3e:b2:03:1b:a6:0c:f7:9d: e5:d2:fa:0c:e2:dd:9b:fd:4e:e3:dc:8d:43:c8:29:83:88:81: 8f:dd:ef:a0:c4:a8:55:69:4c:1e:81:84:2b:5d:64:dd:66:4a: 12:04:a3:62:9a:0f:fb:29:bb:4d:5f:56:3b:6a:49:fb:e2:e6: 53:e9:59:04:26:92:4f:42:32:7b:c5:d8:47:34:ed:2f:88:f2: 9b:c0:d1:f3:25:04:eb:c2:06:be:a9:e2:4f:92:81:5e:f2:13: cf:53:95:e2:21:27:d5:7e:84:45:f0:97:a0:fc:a8:0f:ca:b7: 3c:75:92:cd:ca:13:be:e9:04:23:d4:06:5c:9e:78:f1:87:71: ec:1b:57:b1:e5:00:73:ef:00:5c:9a:46:d4:a9:b8:75:8b:0b: ef:25:61:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwZNtPUsc1vlD538utRLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZWZmZmMxNWE4M2EzOGJkZGE4Y2ZlMTIwYzMzNTI2N2Rj ZTUwZjMwHhcNMjUxMjE3MTAwMTA0WhcNMjUxMjE4MTAwMTA0WjAzMTEwLwYDVQQD Eyg5YjU5MWVmYTA3ZTZiY2I5OGQ5NzRjMThmMjRkYWQ1YTI1NDFkNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rQoDsLhnAlFZ22bMglYHCH6pK7T UkH8uf+H6wjoaG/1EXfkwRL/Ut1jYZUmKwagLak9sU6A1CUiZgHWL02cJ8pB4IjY l5x3bnOZw0gmM0HX/GxzPci/fRmef41PatfUX27OazWYOePRUHyzVTXu1VETlCHE fLugkguVR5R4csvwckNuwlKFp6AiKFvrsOHv/TihHqmaZ7/Qm5p2H224M3UY9PBV 8JjEHqfRTfHpG7wEfH5rP4s7hqL30IZCjbIr7RGKF7j6IBE2P3syxhA4w6iiH2Tg WC5kcNAUuEajMlarTJXbkjuUEHiBp0vwcQqYa9EdZq9XWeMvCO7C5ZcOkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtZHvoH5ry5jZdMGPJNrVolQdSqMB8GA1UdIwQY MBaAFMzv/8Fag6OL3ajP4SDDNSZ9zlDzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTct NGJlYjVkZmYxNzAxLzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jZmQ0ODgtYTI1ZC00MzlhLWJkMTctNGJlYjVkZmYxNzAx LzEvek9fX3dWcURvNHZkcU1faElNTTFKbjNPVVBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsygXu3k ca256hCkHJx67aMsveQa2Ui3PDATEkArMtdElK1JJztc3s7oWuM3yeH7yE3hbeqZ SqSWKDmseGwJkrhLY+UJA8esQlFVORVcGbp4sa7T8deW0axwimrIXB905+omcT6y AxumDPed5dL6DOLdm/1O49yNQ8gpg4iBj93voMSoVWlMHoGEK11k3WZKEgSjYpoP +ym7TV9WO2pJ++LmU+lZBCaST0Iye8XYRzTtL4jym8DR8yUE68IGvqniT5KBXvIT z1OV4iEn1X6ERfCXoPyoD8q3PHWSzcoTvukEI9QGXJ548Ydx7BtXseUAc+8AXJpG 1Km4dYsL7yVhEQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:41:58 2025 by rpki-client