This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json) Hash identifier: z6CBqQXh5Jp3cwymm/EzTNvKttjkIAo4wbJwyLHA2Wo= Subject key identifier: 8B:8B:6E:1F:EF:05:CB:52:44:74:96:77:C0:D9:94:09:A2:51:0F:65 Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Certificate serial: 019AF12E1E65FE57556FC68F40C040600DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:02 +0000 Manifest this update: Sat 06 Dec 2025 01:02:02 +0000 Manifest next update: Sun 07 Dec 2025 01:02:02 +0000 Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=) 2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: FvfPcH+YOozczo5uZ578eLRVFy3CuYYHycoG0zvEeQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1e:65:fe:57:55:6f:c6:8f:40:c0:40:60:0d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d Validity Not Before: Dec 6 01:02:02 2025 GMT Not After : Dec 7 01:02:02 2025 GMT Subject: CN=8b8b6e1fef05cb5244749677c0d99409a2510f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:49:ca:fb:7c:16:a4:81:32:70:68:bd:78: 7f:c9:67:de:cb:ff:b8:c2:f4:2d:33:29:8a:cc:37: 91:14:b1:b2:3f:e0:b6:85:6a:ec:27:c5:d9:32:a0: 91:72:13:f7:02:48:6e:87:df:f7:8b:d8:f4:86:ef: fa:f9:5b:a7:9c:e9:39:14:ca:c9:e0:4c:d9:58:c1: 27:7b:85:60:d5:db:8f:49:60:08:b8:8e:5d:56:06: 6a:a3:59:fb:79:f6:0f:ab:58:12:8b:ba:bc:e6:af: a6:3c:53:50:2d:ec:62:b9:bd:38:cf:30:48:10:39: 46:b6:28:7e:51:99:9a:6c:9f:6a:7f:a2:b4:d2:40: 5e:39:91:24:4e:cc:da:ea:62:b8:7c:3d:92:50:2a: f3:0c:24:da:b7:39:48:b5:00:62:60:0c:6a:65:ab: 30:84:b2:80:4c:43:d1:5d:70:0a:41:ae:e4:72:68: bb:3d:73:d0:e5:4a:8f:1a:7a:4f:9e:6d:91:d4:2c: 66:26:49:91:9e:24:1e:a5:c8:94:3e:28:de:f9:4a: 92:f9:18:13:97:59:03:91:9b:27:dd:73:8a:3b:2b: 6d:6d:11:f3:5c:74:a9:af:51:44:e7:71:e5:e1:12: 76:6e:4d:03:be:a9:cb:18:91:57:74:fe:db:8f:ab: 12:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:6E:1F:EF:05:CB:52:44:74:96:77:C0:D9:94:09:A2:51:0F:65 X509v3 Authority Key Identifier: keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:08:ac:02:1f:ea:b1:a2:3c:b3:dc:34:29:83:7e:c7:ab:cf: bc:39:5f:7b:d9:7e:d0:b0:c7:5c:1d:2a:2e:7e:ed:d2:24:52: 4c:84:be:5e:fb:3a:6b:1a:78:e5:8d:b2:8b:e0:57:1b:02:3e: a2:be:29:58:30:de:c8:09:de:d7:53:b5:03:74:e0:6e:2b:46: 6f:20:fd:22:eb:58:fc:b8:d3:9f:b0:0a:d0:d9:fc:e3:c6:d3: 09:2a:0b:00:33:39:33:19:4c:ce:8f:d1:e4:b9:1e:0d:ea:44: a2:5b:54:5f:a1:38:d2:86:52:08:33:fb:7a:4d:7b:f8:c8:3b: 59:ab:74:ea:e6:5f:cf:38:97:39:9b:b2:71:21:03:52:62:9b: a4:00:f0:c1:f9:26:a7:fd:68:c8:a3:ec:2c:93:ae:6e:11:35: 44:24:70:14:b3:d0:1c:c3:9e:d9:a0:b9:c5:8d:66:9c:34:3c: 60:03:55:08:91:c5:ab:ac:eb:1b:51:44:db:8c:25:e9:ee:6c: ed:d9:40:4d:fe:5b:97:bc:97:ac:bd:7f:21:4c:5f:27:22:38: 9d:00:91:f0:34:5c:24:24:8c:7e:55:59:18:be:3b:f0:6e:31: 9f:12:30:78:02:ea:b4:c5:59:92:00:80:77:9e:14:be:67:73: bf:96:f2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLh5l/ldVb8aPQMBAYA3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh YWU0NmQwHhcNMjUxMjA2MDEwMjAyWhcNMjUxMjA3MDEwMjAyWjAzMTEwLwYDVQQD Eyg4YjhiNmUxZmVmMDVjYjUyNDQ3NDk2NzdjMGQ5OTQwOWEyNTEwZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d1Jyvt8FqSBMnBovXh/yWfey/+4 wvQtMymKzDeRFLGyP+C2hWrsJ8XZMqCRchP3Akhuh9/3i9j0hu/6+VunnOk5FMrJ 4EzZWMEne4Vg1duPSWAIuI5dVgZqo1n7efYPq1gSi7q85q+mPFNQLexiub04zzBI EDlGtih+UZmabJ9qf6K00kBeOZEkTsza6mK4fD2SUCrzDCTatzlItQBiYAxqZasw hLKATEPRXXAKQa7kcmi7PXPQ5UqPGnpPnm2R1CxmJkmRniQepciUPije+UqS+RgT l1kDkZsn3XOKOyttbRHzXHSpr1FE53Hl4RJ2bk0DvqnLGJFXdP7bj6sSeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuLbh/vBctSRHSWd8DZlAmiUQ9lMB8GA1UdIwQY MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQisAh/q saI8s9w0KYN+x6vPvDlfe9l+0LDHXB0qLn7t0iRSTIS+Xvs6axp45Y2yi+BXGwI+ or4pWDDeyAne11O1A3TgbitGbyD9IutY/LjTn7AK0Nn848bTCSoLADM5MxlMzo/R 5LkeDepEoltUX6E40oZSCDP7ek17+Mg7Wat06uZfzziXOZuycSEDUmKbpADwwfkm p/1oyKPsLJOubhE1RCRwFLPQHMOe2aC5xY1mnDQ8YANVCJHFq6zrG1FE24wl6e5s 7dlATf5bl7yXrL1/IUxfJyI4nQCR8DRcJCSMflVZGL478G4xnxIweALqtMVZkgCA d54Uvmdzv5byiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:41 2025 by rpki-client