This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json) Hash identifier: p2gmrjh5POr57VHCLjheIaZPoKMPrIDSZz1euw2AHeQ= Subject key identifier: 78:A0:59:CD:58:B6:0A:8D:C6:2F:B8:0A:A3:AE:1B:BF:D8:AC:69:C3 Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026 Certificate serial: 019AF0BF8B1FD47E04E4F83FFB6E05814B05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft Manifest number: 117F Signing time: Fri 05 Dec 2025 23:01:16 +0000 Manifest this update: Fri 05 Dec 2025 23:01:16 +0000 Manifest next update: Sat 06 Dec 2025 23:01:16 +0000 Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=) 2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: m32Hgv9qbvgDPyeRT7VsC6lQqAWuBFadKP0Vj5qKYSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:8b:1f:d4:7e:04:e4:f8:3f:fb:6e:05:81:4b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026 Validity Not Before: Dec 5 23:01:16 2025 GMT Not After : Dec 6 23:01:16 2025 GMT Subject: CN=78a059cd58b60a8dc62fb80aa3ae1bbfd8ac69c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:19:fb:1d:b3:d1:cc:1a:be:81:ed:49:00: 46:ec:2e:93:b4:e7:4d:61:ab:5a:2e:c1:93:20:88: ec:a3:88:28:35:7c:00:96:c1:cc:2f:72:ed:b2:98: 5d:ee:52:40:2e:a3:a6:a3:9d:e0:04:a2:89:8d:25: 29:2d:83:2c:c1:43:5e:45:9f:42:68:c9:08:63:6a: ac:4d:5d:34:f9:7c:b2:17:f4:86:17:1d:7e:b0:9a: c5:e2:7d:cc:e5:da:04:ef:05:ff:0c:d7:ba:76:99: f8:19:0f:11:9e:5e:e7:21:c6:da:47:72:7a:4a:64: ed:c3:1e:bf:74:3a:1c:fd:d8:c6:7d:1d:5e:69:02: 99:1e:8d:54:06:00:ed:6e:e4:ab:ab:72:44:60:33: ab:4c:39:e9:4f:ed:7c:6e:d9:1b:b6:51:7c:77:f0: a2:c3:0a:b0:2c:83:af:a0:7f:35:8f:a2:46:b2:8d: bf:c9:a9:61:b3:e4:cc:9d:22:a8:b0:05:79:87:1d: 51:a7:99:1b:db:00:c1:bf:bc:3e:1a:7a:b6:28:59: 48:4d:b7:f3:14:31:4c:2b:7a:0a:cf:b4:ed:74:7f: 79:f8:83:b2:82:1f:4d:19:2d:96:7a:f5:ff:03:c5: 46:45:f1:bd:9f:b1:9d:b9:ef:ff:ff:11:2c:c0:0b: 3a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A0:59:CD:58:B6:0A:8D:C6:2F:B8:0A:A3:AE:1B:BF:D8:AC:69:C3 X509v3 Authority Key Identifier: keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d9:eb:71:e6:d8:ba:1f:45:31:b3:17:e0:6b:c4:a0:a7:e6: 6b:5d:34:14:49:dd:c9:bc:33:a9:88:4e:7c:86:7b:5a:b0:55: a9:1b:6f:7c:1c:03:90:15:98:cd:bc:2d:71:3c:0e:fd:d4:8d: 4f:0e:9b:8f:82:7d:d3:f5:19:2b:ee:28:cd:0a:32:8d:7f:09: 0a:d4:ba:ae:73:10:4a:c0:75:60:25:a8:80:54:b9:4d:a4:1c: 0e:26:84:68:b5:18:ad:c3:b9:bb:ea:fe:c6:bd:be:31:75:10: ee:37:ca:40:93:6f:28:e9:41:a1:14:44:2f:10:2d:ab:de:3d: a2:31:0f:0d:b9:78:72:a3:30:c4:e9:22:4a:10:43:f1:8c:19: 14:88:c3:c6:68:91:b2:22:f1:e7:99:ae:7c:c3:90:0b:ae:b2: 93:94:03:de:6c:c1:e0:10:bd:4a:36:25:c7:37:e9:df:31:87: e0:05:61:26:4b:f7:86:d9:2e:7a:9b:e3:c9:81:97:ad:65:24: 22:84:bd:f7:bc:f5:99:41:fb:84:86:91:23:1f:df:59:30:f7: 9c:ae:ec:ab:09:5d:65:96:18:7b:99:f9:b8:4c:c8:8d:04:a9: 9e:30:c6:55:e6:1d:cf:c9:04:d7:6e:ad:98:07:32:55:d5:d8: db:44:10:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4sf1H4E5Pg/+24FgUsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj NTYwMjYwHhcNMjUxMjA1MjMwMTE2WhcNMjUxMjA2MjMwMTE2WjAzMTEwLwYDVQQD Eyg3OGEwNTljZDU4YjYwYThkYzYyZmI4MGFhM2FlMWJiZmQ4YWM2OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW8Z+x2z0cwavoHtSQBG7C6TtOdN YataLsGTIIjso4goNXwAlsHML3Ltsphd7lJALqOmo53gBKKJjSUpLYMswUNeRZ9C aMkIY2qsTV00+XyyF/SGFx1+sJrF4n3M5doE7wX/DNe6dpn4GQ8Rnl7nIcbaR3J6 SmTtwx6/dDoc/djGfR1eaQKZHo1UBgDtbuSrq3JEYDOrTDnpT+18btkbtlF8d/Ci wwqwLIOvoH81j6JGso2/yalhs+TMnSKosAV5hx1Rp5kb2wDBv7w+Gnq2KFlITbfz FDFMK3oKz7TtdH95+IOygh9NGS2WevX/A8VGRfG9n7Gdue///xEswAs6UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHigWc1YtgqNxi+4CqOuG7/YrGnDMB8GA1UdIwQY MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtnrcebY uh9FMbMX4GvEoKfma100FEndybwzqYhOfIZ7WrBVqRtvfBwDkBWYzbwtcTwO/dSN Tw6bj4J90/UZK+4ozQoyjX8JCtS6rnMQSsB1YCWogFS5TaQcDiaEaLUYrcO5u+r+ xr2+MXUQ7jfKQJNvKOlBoRRELxAtq949ojEPDbl4cqMwxOkiShBD8YwZFIjDxmiR siLx55mufMOQC66yk5QD3mzB4BC9SjYlxzfp3zGH4AVhJkv3htkuepvjyYGXrWUk IoS997z1mUH7hIaRIx/fWTD3nK7sqwldZZYYe5n5uEzIjQSpnjDGVeYdz8kE126t mAcyVdXY20QQxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:12 2025 by rpki-client