This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json) Hash identifier: 8ErYcaBhUnGvKcPIzlTn3SglNSdvi9G8l6MmMwlS64k= Subject key identifier: 26:56:90:3A:C3:86:A6:DF:35:A3:74:86:43:94:C4:B6:EE:B3:84:C6 Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Certificate serial: 019B31FA4F95D36D52B83907AE3F195B20ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft Manifest number: 171D Signing time: Thu 18 Dec 2025 15:00:46 +0000 Manifest this update: Thu 18 Dec 2025 15:00:46 +0000 Manifest next update: Fri 19 Dec 2025 15:00:46 +0000 Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=) 2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: 6hq4ZpKn4G9XjSb580o9HVCoC4GYc5bF+VX7824DPpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:4f:95:d3:6d:52:b8:39:07:ae:3f:19:5b:20:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Validity Not Before: Dec 18 15:00:46 2025 GMT Not After : Dec 19 15:00:46 2025 GMT Subject: CN=2656903ac386a6df35a374864394c4b6eeb384c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:5f:b6:a6:89:97:77:14:14:23:4a:da:6a: 25:3b:f8:4e:d0:ea:43:57:d5:af:9d:aa:4d:89:21: f3:9a:47:4c:f1:c9:6e:84:99:97:4f:a7:18:65:41: 71:75:6e:f0:05:1c:20:52:8f:7d:57:11:f6:c1:81: 23:20:1d:57:92:81:2e:d4:e9:da:b2:57:7f:18:60: 69:d6:87:95:1f:ad:0f:3e:0e:72:0c:da:5e:15:c2: 40:22:23:ed:20:8c:6a:6a:ce:88:ad:3b:0d:8c:c2: 56:a5:9f:d9:e5:81:fd:9e:aa:eb:7e:e7:e7:67:7e: 08:12:b5:af:d9:40:d6:1e:19:5b:6a:e7:2a:24:03: 6e:49:23:15:2a:cb:59:74:63:67:b9:a1:44:cd:1f: bc:6c:b7:44:a9:b4:09:3a:5c:a9:fb:89:c0:95:2a: 08:1b:d8:54:3b:d3:ed:42:3f:1c:ba:61:6d:fe:a6: 11:a8:00:9e:24:94:71:f3:54:2d:f8:64:9f:7f:84: 39:e9:95:2d:a6:99:6a:ed:8e:79:5a:55:ca:ce:5a: d1:49:4b:76:dd:64:0b:0e:de:60:05:24:db:b7:98: 78:20:a4:bf:ee:d9:2e:bc:d9:20:72:3a:95:5f:f8: e5:4d:16:5c:48:13:e9:fb:a0:72:a4:08:84:34:8f: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:56:90:3A:C3:86:A6:DF:35:A3:74:86:43:94:C4:B6:EE:B3:84:C6 X509v3 Authority Key Identifier: keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:13:90:1e:a7:6c:15:ef:36:24:f7:77:c8:9d:5e:37:69: 1a:05:8c:ed:3c:54:90:c3:6e:f8:96:9f:ce:6d:8b:69:67:d5: 0c:23:81:78:81:cb:e4:7e:cd:62:ff:76:17:7b:ad:60:25:44: ab:d9:63:98:5c:24:31:6d:e0:3d:89:42:a9:65:0e:90:0c:1d: 33:8e:9e:8f:61:f5:c7:96:13:6b:12:87:77:c9:39:e2:5e:2c: 59:cc:ac:22:82:3d:b1:c6:54:33:ca:ec:6c:09:6c:45:a8:9f: 3b:83:85:fb:0e:12:7d:50:1a:6e:d4:c3:42:b2:3e:a0:4b:ee: a7:8d:a6:50:af:6a:55:0b:e5:96:40:92:2a:c8:41:0d:ee:24: d1:28:7c:e1:7a:32:08:4e:b9:9d:01:ca:cc:c8:81:d3:7c:b1: 15:95:d5:cf:b2:c6:39:97:12:56:b0:e8:bb:08:83:30:31:ce: 84:b0:80:a6:3f:a9:4f:11:3a:ca:3f:b1:93:18:c3:51:51:d9: 7f:10:c5:3a:a1:41:71:28:be:e7:14:8e:d9:01:79:e7:a4:1f: 93:0a:2a:75:78:25:d4:1c:dd:14:c7:26:0e:97:9e:8a:bd:93: 95:3c:20:dd:ce:cd:11:64:a4:d4:36:41:8b:b9:a7:c0:d7:ee: b5:96:57:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+k+V021SuDkHrj8ZWyDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh ZWQyMzgwHhcNMjUxMjE4MTUwMDQ2WhcNMjUxMjE5MTUwMDQ2WjAzMTEwLwYDVQQD EygyNjU2OTAzYWMzODZhNmRmMzVhMzc0ODY0Mzk0YzRiNmVlYjM4NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusNftqaJl3cUFCNK2molO/hO0OpD V9WvnapNiSHzmkdM8cluhJmXT6cYZUFxdW7wBRwgUo99VxH2wYEjIB1XkoEu1Ona sld/GGBp1oeVH60PPg5yDNpeFcJAIiPtIIxqas6IrTsNjMJWpZ/Z5YH9nqrrfufn Z34IErWv2UDWHhlbaucqJANuSSMVKstZdGNnuaFEzR+8bLdEqbQJOlyp+4nAlSoI G9hUO9PtQj8cumFt/qYRqACeJJRx81Qt+GSff4Q56ZUtpplq7Y55WlXKzlrRSUt2 3WQLDt5gBSTbt5h4IKS/7tkuvNkgcjqVX/jlTRZcSBPp+6BypAiENI/UpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZWkDrDhqbfNaN0hkOUxLbus4TGMB8GA1UdIwQY MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzkTkB6n bBXvNiT3d8idXjdpGgWM7TxUkMNu+Jafzm2LaWfVDCOBeIHL5H7NYv92F3utYCVE q9ljmFwkMW3gPYlCqWUOkAwdM46ej2H1x5YTaxKHd8k54l4sWcysIoI9scZUM8rs bAlsRaifO4OF+w4SfVAabtTDQrI+oEvup42mUK9qVQvllkCSKshBDe4k0Sh84Xoy CE65nQHKzMiB03yxFZXVz7LGOZcSVrDouwiDMDHOhLCApj+pTxE6yj+xkxjDUVHZ fxDFOqFBcSi+5xSO2QF556QfkwoqdXgl1BzdFMcmDpeeir2TlTwg3c7NEWSk1DZB i7mnwNfutZZXhQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:01:25 2025 by rpki-client