This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json) Hash identifier: ZDHdpnSLKCSHJk83ufCrY+waq/FVB6KtX7B9Ifc3u1U= Subject key identifier: 12:D5:28:34:EB:6D:E2:87:B2:A2:0A:F4:BC:68:13:3B:B9:5E:D7:45 Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019AF19B2C3C62FB7A9B48FFD53E91368D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft Manifest number: 1408 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=) 2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=) 3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=) 4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: WCXYH5oFXDw2soC0B9khc/DaB2qCjpnmmDvrxMCmYIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2c:3c:62:fb:7a:9b:48:ff:d5:3e:91:36:8d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=12d52834eb6de287b2a20af4bc68133bb95ed745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:28:7d:68:ef:03:09:a9:1f:c1:60:74:a4:73: 2c:3f:31:31:58:95:0a:2a:a7:f7:59:4e:c2:79:66: af:c1:9c:ec:f0:af:44:79:6a:2c:e0:a7:50:3c:f5: 81:c4:56:74:81:3a:12:34:24:d7:8a:d8:39:39:54: 24:3b:ec:82:91:cb:4b:65:1f:8f:1e:46:0b:03:be: 2f:17:42:d8:c0:bd:39:0f:d2:22:a9:a0:04:cc:2b: 98:1d:01:f5:aa:7d:35:c4:b7:66:13:b4:f2:92:96: b2:db:9d:cc:57:b3:e0:61:96:ee:29:6c:03:c9:14: 83:d5:d6:dd:f6:14:cb:79:4e:b8:34:24:4f:07:e8: 32:51:f7:c6:be:42:16:6b:5b:cf:02:34:63:05:04: f5:73:00:ab:34:f7:53:a0:a8:c5:65:4e:46:f8:fc: e6:6b:a6:fc:c4:3c:23:82:b9:9d:e2:15:d4:15:08: d9:9b:c9:37:67:cc:63:c5:49:41:46:c9:c4:9c:6e: 2c:c1:12:ee:08:94:99:77:40:9a:e1:bc:fe:2e:9b: 69:e3:53:bf:e2:55:f6:90:0a:24:20:f7:a3:c5:e0: c8:c4:ef:78:58:75:80:0b:4d:c3:81:e3:5d:70:b8: 98:0b:1d:9f:8e:a2:22:62:4e:d1:4c:8a:12:84:04: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D5:28:34:EB:6D:E2:87:B2:A2:0A:F4:BC:68:13:3B:B9:5E:D7:45 X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8b:97:dc:02:9b:90:b9:f5:13:a3:45:3c:1b:04:59:ab:13: ee:e3:ce:fc:95:52:e2:18:67:60:6b:ca:51:c2:0d:9c:36:ec: c1:61:19:3c:3f:6a:96:53:64:a7:5d:2f:6e:71:04:4d:bc:19: 1d:f8:63:25:f1:b4:26:4b:8c:36:aa:e7:17:26:52:6a:63:35: 53:f7:ba:94:eb:80:7f:a3:28:ad:58:1c:12:79:b0:b2:dc:26: c4:7d:b5:9b:a8:ab:6a:76:a0:61:cf:cc:3c:93:3d:d2:b6:f0: 9c:3d:d4:10:65:09:83:68:c5:ee:32:d6:f4:79:32:8a:33:f1: 1b:35:82:d0:62:34:e1:f2:75:c3:40:8a:e3:41:e9:bb:f7:62: b9:76:aa:26:cc:86:db:9f:8b:1e:24:50:f9:43:16:ed:2f:5d: bb:32:b5:db:5a:2d:70:aa:87:f9:6d:fb:e1:71:db:fd:99:4d: c1:df:7f:c9:d2:e9:bf:d0:01:18:2e:bf:02:0a:4a:9c:c3:75: 6c:1d:b0:99:64:18:6e:16:17:e6:72:e0:19:00:6f:ea:11:68: bd:78:fc:59:0b:c2:d4:9d:ff:7b:ae:c1:67:ed:67:32:08:48: 44:a6:df:d3:96:e3:b2:fe:2a:3a:3d:e8:88:63:7d:d2:18:ce: 57:69:4a:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyw8Yvt6m0j/1T6RNo1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EygxMmQ1MjgzNGViNmRlMjg3YjJhMjBhZjRiYzY4MTMzYmI5NWVkNzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Sh9aO8DCakfwWB0pHMsPzExWJUK Kqf3WU7CeWavwZzs8K9EeWos4KdQPPWBxFZ0gToSNCTXitg5OVQkO+yCkctLZR+P HkYLA74vF0LYwL05D9IiqaAEzCuYHQH1qn01xLdmE7Tykpay253MV7PgYZbuKWwD yRSD1dbd9hTLeU64NCRPB+gyUffGvkIWa1vPAjRjBQT1cwCrNPdToKjFZU5G+Pzm a6b8xDwjgrmd4hXUFQjZm8k3Z8xjxUlBRsnEnG4swRLuCJSZd0Ca4bz+Lptp41O/ 4lX2kAokIPejxeDIxO94WHWAC03DgeNdcLiYCx2fjqIiYk7RTIoShASJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLVKDTrbeKHsqIK9LxoEzu5XtdFMB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4uX3AKb kLn1E6NFPBsEWasT7uPO/JVS4hhnYGvKUcINnDbswWEZPD9qllNkp10vbnEETbwZ HfhjJfG0JkuMNqrnFyZSamM1U/e6lOuAf6MorVgcEnmwstwmxH21m6iranagYc/M PJM90rbwnD3UEGUJg2jF7jLW9HkyijPxGzWC0GI04fJ1w0CK40Hpu/diuXaqJsyG 25+LHiRQ+UMW7S9duzK121otcKqH+W374XHb/ZlNwd9/ydLpv9ABGC6/AgpKnMN1 bB2wmWQYbhYX5nLgGQBv6hFovXj8WQvC1J3/e67BZ+1nMghIRKbf05bjsv4qOj3o iGN90hjOV2lKzw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:51 2025 by rpki-client