This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json) Hash identifier: hsXiT36onKhJQqL9yUQEgJ2NcvBhHmP1rf3TnOe2clM= Subject key identifier: B6:44:AA:5B:4E:A7:FE:0A:74:B5:10:12:38:0C:CF:50:8F:43:4D:35 Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173 Certificate serial: 019AF12E7F0FC07F5B535BF60F6D343C9649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft Manifest number: 1421 Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=) 2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: d9UZWJThzu1bw/iiGAMstgrs4EGGmUUSdDmApbbUltg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7f:0f:c0:7f:5b:53:5b:f6:0f:6d:34:3c:96:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce235c504019c504021e0662f70133b7ee733173 Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=b644aa5b4ea7fe0a74b51012380ccf508f434d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:46:81:84:e2:0f:e9:15:09:6f:05:95:68:0c: 0b:e1:5f:61:cb:a4:64:4d:cd:ca:7c:48:3e:76:f3: 67:c5:52:7d:07:63:58:e8:41:5e:55:50:f8:c3:18: 65:be:6d:d1:0c:e6:2d:c2:19:71:ef:e7:e0:bc:3e: 4f:8f:b5:91:8c:16:63:01:e3:f1:3b:c2:01:e1:c8: a7:5b:76:cc:1b:ab:4b:76:16:55:ff:a4:b5:ce:1e: 2f:af:3b:8e:5c:d3:cc:94:72:44:db:17:b5:63:84: d8:41:0c:ca:8c:80:65:a9:5f:09:fa:c7:cf:41:ae: 3f:22:5f:01:21:e7:7b:06:63:d9:dd:1e:02:42:72: a7:5a:f6:86:c6:8e:34:f1:9b:9b:fc:b8:f2:e9:25: ca:71:17:1e:31:36:8f:46:ec:fe:c1:31:44:be:95: 6a:72:14:a9:b3:81:b7:b7:d8:03:5e:93:26:5f:48: d5:02:c0:4c:2a:64:a9:2a:50:7d:c1:70:cb:d2:b9: 87:eb:1e:49:05:0a:c7:c2:22:19:10:10:e0:48:64: 0b:76:7b:74:1c:fa:ee:67:6c:78:94:34:98:83:30: 7f:4e:51:04:66:5c:17:d3:66:c8:7a:5b:44:b3:ba: e7:81:81:44:34:ba:12:91:d3:7a:e7:b9:c8:7e:6d: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:44:AA:5B:4E:A7:FE:0A:74:B5:10:12:38:0C:CF:50:8F:43:4D:35 X509v3 Authority Key Identifier: keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b9:ec:43:32:92:3d:e9:21:d5:45:9b:3b:11:b4:ec:f0:6f: b8:24:0f:2c:91:83:e1:e3:b7:51:87:69:90:03:90:bb:82:9d: 66:63:1e:9d:a0:83:3f:c6:40:00:b8:db:93:1b:af:e0:ee:f4: c5:4a:cd:22:84:01:ca:01:e6:52:fc:dc:f7:1e:54:27:03:b2: a3:cd:ca:7f:50:0c:14:95:de:ad:02:88:d7:cf:d6:52:0e:59: 82:9a:1b:06:99:80:3d:bb:dd:86:f3:de:75:5c:c5:3f:b2:df: f6:ec:7d:2a:cb:4f:1c:d2:a7:a4:a9:e6:10:a6:c7:59:7c:62: 82:22:f0:94:07:8a:ce:b3:2e:a7:9a:26:1d:8a:ec:2c:a4:2f: 34:1b:b2:2a:de:84:e5:f9:6b:bb:d0:52:bd:ca:5a:0e:94:f8: 0e:cb:46:37:bf:47:66:8f:03:ce:93:91:bc:fe:04:dc:7f:25: dc:bb:ba:f0:2f:6c:ef:99:ed:b1:08:9d:5a:e0:7e:be:76:46: ab:d6:58:f0:df:2f:24:da:a9:25:5b:91:10:69:12:d5:97:6c: f1:77:7c:7a:78:05:a0:07:9d:e8:66:69:dc:58:4e:97:b6:45: 4d:40:b6:11:e9:76:9f:d8:d1:c7:e6:6e:ae:e8:f6:00:f2:64: 6e:4d:81:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn8PwH9bU1v2D200PJZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjM1YzUwNDAxOWM1MDQwMjFlMDY2MmY3MDEzM2I3ZWU3 MzMxNzMwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD EyhiNjQ0YWE1YjRlYTdmZTBhNzRiNTEwMTIzODBjY2Y1MDhmNDM0ZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60aBhOIP6RUJbwWVaAwL4V9hy6Rk Tc3KfEg+dvNnxVJ9B2NY6EFeVVD4wxhlvm3RDOYtwhlx7+fgvD5Pj7WRjBZjAePx O8IB4cinW3bMG6tLdhZV/6S1zh4vrzuOXNPMlHJE2xe1Y4TYQQzKjIBlqV8J+sfP Qa4/Il8BIed7BmPZ3R4CQnKnWvaGxo408Zub/Ljy6SXKcRceMTaPRuz+wTFEvpVq chSps4G3t9gDXpMmX0jVAsBMKmSpKlB9wXDL0rmH6x5JBQrHwiIZEBDgSGQLdnt0 HPruZ2x4lDSYgzB/TlEEZlwX02bIeltEs7rngYFENLoSkdN657nIfm0eOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZEqltOp/4KdLUQEjgMz1CPQ001MB8GA1UdIwQY MBaAFM4jXFBAGcUEAh4GYvcBM7fuczFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYt ZmNjNmQyN2Y0NDRmLzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYtZmNjNmQyN2Y0NDRm LzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7nsQzKS Pekh1UWbOxG07PBvuCQPLJGD4eO3UYdpkAOQu4KdZmMenaCDP8ZAALjbkxuv4O70 xUrNIoQBygHmUvzc9x5UJwOyo83Kf1AMFJXerQKI18/WUg5ZgpobBpmAPbvdhvPe dVzFP7Lf9ux9KstPHNKnpKnmEKbHWXxigiLwlAeKzrMup5omHYrsLKQvNBuyKt6E 5flru9BSvcpaDpT4DstGN79HZo8DzpORvP4E3H8l3Lu68C9s75ntsQidWuB+vnZG q9ZY8N8vJNqpJVuREGkS1Zds8Xd8engFoAed6GZp3FhOl7ZFTUC2Eel2n9jRx+Zu ruj2APJkbk2Bqw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:13 2025 by rpki-client