This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json) Hash identifier: hqh5Hxf3doTQ4iNLzlfjQuWywhitfZukazZlQBgNcg8= Subject key identifier: CE:B7:31:4F:C7:85:6A:23:FF:37:24:D1:B5:72:70:73:29:85:F6:7D Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Certificate serial: 019B3CECA3E4AD4555972BDB61A5FDC5E787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft Manifest number: 142F Signing time: Sat 20 Dec 2025 18:01:39 +0000 Manifest this update: Sat 20 Dec 2025 18:01:39 +0000 Manifest next update: Sun 21 Dec 2025 18:01:39 +0000 Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=) 2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=) 3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=) 4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: c5zmBWkLDhlK0G6uXDS+XNkQLMsJ/9y4d6R6P/XKKCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a3:e4:ad:45:55:97:2b:db:61:a5:fd:c5:e7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c Validity Not Before: Dec 20 18:01:39 2025 GMT Not After : Dec 21 18:01:39 2025 GMT Subject: CN=ceb7314fc7856a23ff3724d1b57270732985f67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:97:65:8c:f4:73:f7:3a:a1:0d:bd:fd:72:b8: 1b:60:ae:8d:bf:6d:7b:31:ba:6c:10:71:77:b6:32: da:99:89:3d:bf:ab:fd:6f:23:b2:cf:50:74:70:08: 63:a6:90:6b:cd:97:4a:76:da:fa:a4:c0:44:e0:91: 7a:70:d6:8f:34:5c:f9:75:dc:ad:93:10:ab:b7:bc: a1:c4:76:65:22:21:94:89:5f:8b:b1:60:4b:b0:72: 43:4b:25:5e:c0:73:e5:9e:2a:74:e7:d4:23:d7:90: be:72:57:03:d4:b4:f1:59:31:f0:01:1b:bd:04:ba: ee:79:b0:30:6c:c3:d0:e0:7b:f6:cb:30:b3:e9:ec: 1e:98:d4:a0:37:c7:f1:16:22:d6:ff:49:19:34:10: 6f:c9:a2:8c:a4:20:85:8c:d9:a5:da:2a:73:15:07: 58:a0:3b:f5:3b:e1:92:a7:16:cb:d3:58:3e:b5:a2: 0d:0d:8c:3b:6b:64:b6:d5:7f:7b:21:e2:5a:51:26: 21:81:4e:2b:cf:1c:93:a1:80:b4:56:6e:a1:c7:b8: 12:27:52:6e:aa:11:0a:20:03:2d:c3:d7:18:aa:17: 7a:38:27:a6:ff:7d:ce:ac:34:2c:60:02:47:0a:0d: 6a:c2:b8:ee:cb:73:f0:65:94:46:79:09:cc:fc:58: 01:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B7:31:4F:C7:85:6A:23:FF:37:24:D1:B5:72:70:73:29:85:F6:7D X509v3 Authority Key Identifier: keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:e6:55:2d:01:75:e0:f3:03:c2:6a:62:07:29:43:b9:d6: 81:2d:8d:27:0f:a1:40:55:6c:67:a8:89:2d:56:bc:21:57:53: d9:7f:e3:69:fc:4a:af:12:91:d4:4b:74:5e:dd:c5:d3:fe:0b: aa:f2:11:f8:07:8c:d3:24:94:6f:7f:db:44:15:27:1c:a7:31: f8:01:d4:b1:f5:e4:bc:d9:88:92:a1:29:f4:32:7f:41:23:a5: 2a:36:53:88:96:cf:25:cf:0d:72:84:1f:c1:e7:0c:e7:7f:fa: a6:4a:9a:d4:ee:4d:e9:69:7c:9a:a5:f0:f2:58:49:62:4d:62: 59:26:75:fe:df:c6:ef:bc:fc:ab:2e:c9:23:90:76:fc:a1:7b: 3f:ca:d0:47:92:9e:0a:34:51:a5:d5:ee:cd:e1:20:da:79:82: 5d:b1:d8:8f:4c:4f:61:0c:30:99:27:2d:f1:2d:8b:3d:24:ae: 77:60:a2:bd:eb:cf:d9:e6:a6:31:e5:1c:2c:16:42:e6:d4:b6: ac:80:5c:a8:6a:df:a4:8f:8b:c5:6b:2a:46:8f:10:19:ba:a9: e7:75:74:37:1b:42:83:5e:4c:e0:2b:d7:78:6f:28:49:e8:35: 11:20:68:45:6c:05:fc:3a:e6:af:64:56:01:ab:56:ca:ba:a9: b4:5b:d8:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KPkrUVVlyvbYaX9xeeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzE4MGM0YmFkM2NmNDI1YTUwNjcyZTFjYjdhOWQyYWM3 OGUyMGMwHhcNMjUxMjIwMTgwMTM5WhcNMjUxMjIxMTgwMTM5WjAzMTEwLwYDVQQD EyhjZWI3MzE0ZmM3ODU2YTIzZmYzNzI0ZDFiNTcyNzA3MzI5ODVmNjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJdljPRz9zqhDb39crgbYK6Nv217 MbpsEHF3tjLamYk9v6v9byOyz1B0cAhjppBrzZdKdtr6pMBE4JF6cNaPNFz5ddyt kxCrt7yhxHZlIiGUiV+LsWBLsHJDSyVewHPlnip059Qj15C+clcD1LTxWTHwARu9 BLruebAwbMPQ4Hv2yzCz6ewemNSgN8fxFiLW/0kZNBBvyaKMpCCFjNml2ipzFQdY oDv1O+GSpxbL01g+taINDYw7a2S21X97IeJaUSYhgU4rzxyToYC0Vm6hx7gSJ1Ju qhEKIAMtw9cYqhd6OCem/33OrDQsYAJHCg1qwrjuy3PwZZRGeQnM/FgBhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM63MU/HhWoj/zck0bVycHMphfZ9MB8GA1UdIwQY MBaAFM5xgMS6089CWlBnLhy3qdKseOIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQt MDQ2ZDJlMmFkY2Q1LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9kN2Q1Y2QtNzlhOS00YzgyLThmYzQtMDQ2ZDJlMmFkY2Q1 LzEvem5HQXhMclR6MEphVUdjdUhMZXAwcXg0NGd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuXmVS0B deDzA8JqYgcpQ7nWgS2NJw+hQFVsZ6iJLVa8IVdT2X/jafxKrxKR1Et0Xt3F0/4L qvIR+AeM0ySUb3/bRBUnHKcx+AHUsfXkvNmIkqEp9DJ/QSOlKjZTiJbPJc8NcoQf wecM53/6pkqa1O5N6Wl8mqXw8lhJYk1iWSZ1/t/G77z8qy7JI5B2/KF7P8rQR5Ke CjRRpdXuzeEg2nmCXbHYj0xPYQwwmSct8S2LPSSud2CivevP2eamMeUcLBZC5tS2 rIBcqGrfpI+LxWsqRo8QGbqp53V0NxtCg15M4CvXeG8oSeg1ESBoRWwF/Drmr2RW AatWyrqptFvYyg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:38 2025 by rpki-client